ACK - RDS

export SERVICE=rds export EKS_CLUSTER_NAME=<CLUSTER_NAME> export AWS_REGION=ap-northeast-2

export RELEASE_VERSION=$(curl -sL https://api.github.com/repos/aws-controllers-k8s/$SERVICE-controller/releases/latest | grep '"tag_name":' | cut -d'"' -f4 | cut -c 2-) helm pull oci://public.ecr.aws/aws-controllers-k8s/$SERVICE-chart --version=$RELEASE_VERSION tar xzvf $SERVICE-chart-$RELEASE_VERSION.tgz

helm install -n ack-system ack-$SERVICE-controller --set aws.region="$AWS_REGION" ~/$SERVICE-chart

helm list --namespace ack-system kubectl -n ack-system get pods -l "app.kubernetes.io/instance=ack-$SERVICE-controller" kubectl get crd | grep $SERVICE

eksctl create iamserviceaccount \ --name ack-$SERVICE-controller \ --region=ap-northeast-2 \ --namespace ack-system \ --cluster $EKS_CLUSTER_NAME \ --attach-policy-arn arn:aws:iam::aws:policy/AmazonRDSFullAccess \ --override-existing-serviceaccounts \ --approve

eksctl get iamserviceaccount --cluster $EKS_CLUSTER_NAME

kubectl get sa -n ack-system kubectl describe sa ack-$SERVICE-controller -n ack-system

kubectl -n ack-system rollout restart deploy ack-$SERVICE-controller-$SERVICE-chart

kubectl describe pod -n ack-system -l k8s-app=$SERVICE-chart

export RDS_INSTANCE_NAME=skills-rds export RDS_INSTANCE_PASSWORD=cloudadmin kubectl create secret generic "${RDS_INSTANCE_NAME}-password" --from-literal=password="${RDS_INSTANCE_PASSWORD}" kubectl get secret $RDS_INSTANCE_NAME-password

watch -d "kubectl describe dbinstance "${RDS_INSTANCE_NAME}" | grep 'Db Instance Status'"

SUBNET_ID_1=$(aws ec2 describe-subnets --filters "Name=tag:Name,Values=skills-potected-subnet-a" --query "Subnets[0].SubnetId" --output text) SUBNET_ID_2=$(aws ec2 describe-subnets --filters "Name=tag:Name,Values=skills-potected-subnet-b" --query "Subnets[0].SubnetId" --output text)

cat << EOF > subnet-group.yaml apiVersion: rds.services.k8s.aws/v1alpha1 kind: DBSubnetGroup metadata: name: skills-rds-subnet-group spec: name: skills-rds-subnet-group description: "Subnet group for RDS instance" subnetIDs: - $SUBNET_ID_1 - $SUBNET_ID_2 EOF kubectl apply -f subnet-group.yaml

cat << EOF > rds-mariadb.yaml apiVersion: rds.services.k8s.aws/v1alpha1 kind: DBInstance metadata: name: "${RDS_INSTANCE_NAME}" spec: allocatedStorage: 20 dbInstanceClass: db.t4g.micro dbInstanceIdentifier: "${RDS_INSTANCE_NAME}" engine: mariadb engineVersion: "10.11" masterUsername: "admin" masterUserPassword: namespace: default name: "${RDS_INSTANCE_NAME}-password" key: password dbSubnetGroupName: skills-rds-subnet-group EOF kubectl apply -f rds-mariadb.yaml

kubectl get dbinstances ${RDS_INSTANCE_NAME} kubectl describe dbinstance "${RDS_INSTANCE_NAME}" aws rds describe-db-instances --db-instance-identifier $RDS_INSTANCE_NAME | jq

kubectl describe dbinstance "${RDS_INSTANCE_NAME}" | grep 'Db Instance Status'

kubectl wait dbinstances ${RDS_INSTANCE_NAME} --for=condition=ACK.ResourceSynced --timeout=15m

cat << EOF > rds-field-exports.yaml --- apiVersion: v1 kind: ConfigMap metadata: name: ${RDS_INSTANCE_CONN_CM} data: {} --- apiVersion: services.k8s.aws/v1alpha1 kind: FieldExport metadata: name: ${RDS_INSTANCE_NAME}-host spec: to: name: ${RDS_INSTANCE_CONN_CM} kind: configmap from: path: ".status.endpoint.address" resource: group: rds.services.k8s.aws kind: DBInstance name: ${RDS_INSTANCE_NAME} --- apiVersion: services.k8s.aws/v1alpha1 kind: FieldExport metadata: name: ${RDS_INSTANCE_NAME}-port spec: to: name: ${RDS_INSTANCE_CONN_CM} kind: configmap from: path: ".status.endpoint.port" resource: group: rds.services.k8s.aws kind: DBInstance name: ${RDS_INSTANCE_NAME} --- apiVersion: services.k8s.aws/v1alpha1 kind: FieldExport metadata: name: ${RDS_INSTANCE_NAME}-user spec: to: name: ${RDS_INSTANCE_CONN_CM} kind: configmap from: path: ".spec.masterUsername" resource: group: rds.services.k8s.aws kind: DBInstance name: ${RDS_INSTANCE_NAME} EOF kubectl apply -f rds-field-exports.yaml

kubectl get dbinstances skills-rds -o jsonpath={.status.endpoint} | jq

kubectl get dbinstances skills-rds -o jsonpath={.spec.masterUsername} ; echo

kubectl get cm skills-rds-conn-cm -o yaml

kubectl get crd | grep fieldexport kubectl get fieldexport

APP_NAMESPACE=default cat << EOF > rds-pods.yaml apiVersion: v1 kind: Pod metadata: name: app namespace: ${APP_NAMESPACE} spec: containers: - image: busybox name: myapp command: - sleep - "3600" imagePullPolicy: IfNotPresent env: - name: DBHOST valueFrom: configMapKeyRef: name: ${RDS_INSTANCE_CONN_CM} key: "${APP_NAMESPACE}.${RDS_INSTANCE_NAME}-host" - name: DBPORT valueFrom: configMapKeyRef: name: ${RDS_INSTANCE_CONN_CM} key: "${APP_NAMESPACE}.${RDS_INSTANCE_NAME}-port" - name: DBUSER valueFrom: configMapKeyRef: name: ${RDS_INSTANCE_CONN_CM} key: "${APP_NAMESPACE}.${RDS_INSTANCE_NAME}-user" - name: DBPASSWORD valueFrom: secretKeyRef: name: "${RDS_INSTANCE_NAME}-password" key: password EOF kubectl apply -f rds-pods.yaml

kubectl get pod app

kubectl exec -it app -- env | grep DB

aws rds modify-db-instance --db-instance-identifier $RDS_INSTANCE_NAME --new-db-instance-identifier studyend --apply-immediately

kubectl patch dbinstance skills-rds --type=merge -p '{"spec":{"dbInstanceIdentifier":"studyend"}}'

kubectl get dbinstances skills-rds -o jsonpath={.status.endpoint} | jq kubectl exec -it app -- env | grep DB

kubectl delete pod app && kubectl apply -f rds-pods.yaml kubectl exec -it app -- env | grep DB

kubectl get dbinstances skills-rds -o jsonpath={.status.endpoint} | jq

kubectl get dbinstances skills-rds -o jsonpath={.spec.masterUsername} ; echo