diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..0f04682
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,4 @@
+# More info: https://docs.docker.com/engine/reference/builder/#dockerignore-file
+# Ignore build and test binaries.
+bin/
+testbin/
diff --git a/.github/ISSUE_TEMPLATE/bug.md b/.github/ISSUE_TEMPLATE/bug.md
new file mode 100644
index 0000000..36272df
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/bug.md
@@ -0,0 +1,38 @@
+---
+name: Bug
+about: Create a bug report to help us improve
+title: "[Bug] "
+labels: bug
+assignees: mmontes11
+
+---
+
+<!--
+Bugs should be filed for issues encountered whilst operating mariadb-operator/agent.
+Please provide as much detail as possible. 
+-->
+
+**Describe the bug**
+<!--
+A clear and concise description of what the bug is. 
+Tip: you can use 
+```
+<code here>
+```
+for code blocks of your kubectl output or YAML files.
+-->
+
+**Expected behaviour**
+<!--A concise description of what you expected to happen.-->
+
+**Steps to reproduce the bug**
+<!--Steps to reproduce the bug should be clear and easily reproducible to help people
+gain an understanding of the problem.-->
+
+**Additional context**
+<!--Add any other context  here.-->
+
+**Environment details**:
+- Kubernetes version:
+- mariadb-operator version: 
+- agent version: 
diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md
new file mode 100644
index 0000000..a466b23
--- /dev/null
+++ b/.github/ISSUE_TEMPLATE/feature_request.md
@@ -0,0 +1,25 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: "[Feature]"
+labels: feature
+assignees: mmontes11
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+<!--A clear and concise description of what the problem is-->
+
+**Describe the solution you'd like**
+<!--A clear and concise description of what you want to happen.-->
+
+**Describe alternatives you've considered**
+<!--A clear and concise description of any alternative solutions or features you've considered.-->
+
+**Additional context**
+<!--Add any other context  here.-->
+
+**Environment details**:
+- Kubernetes version:
+- mariadb-operator version:
+- agent version:
\ No newline at end of file
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
new file mode 100644
index 0000000..2154eaf
--- /dev/null
+++ b/.github/workflows/ci.yml
@@ -0,0 +1,85 @@
+name: CI
+
+on:
+  push:
+    branches:
+      - main
+  pull_request: {}
+
+env:
+  GOLANGCI_VERSION: "v1.52.2"
+
+jobs:
+  detect-noop:
+    runs-on: ubuntu-latest
+    outputs:
+      noop: ${{ steps.noop.outputs.should_skip }}
+    steps:
+      - name: Detect no-op changes
+        id: noop
+        uses: fkirc/skip-duplicate-actions@v5.3.0
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          paths_ignore: '["**.md"]'
+          concurrent_skipping: false
+
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    needs: detect-noop
+    if: ${{ needs.detect-noop.outputs.noop != 'true' }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Setup Go
+        uses: actions/setup-go@v3
+        with:
+          go-version-file: "go.mod"
+          cache: true
+
+      - name: GolangCI Lint
+        uses: golangci/golangci-lint-action@v3
+        with:
+          version: ${{ env.GOLANGCI_VERSION }}
+
+  build:
+    name: Build
+    runs-on: ubuntu-latest
+    needs: detect-noop
+    if: ${{ needs.detect-noop.outputs.noop != 'true' }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Setup Go
+        uses: actions/setup-go@v3
+        with:
+          go-version-file: "go.mod"
+          cache: true
+
+      - name: Build
+        run: make build
+
+      - name: Build Docker
+        run: make docker-build
+        env:
+          PLATFORM: linux/amd64
+
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    needs: detect-noop
+    if: ${{ needs.detect-noop.outputs.noop != 'true' }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2
+
+      - name: Setup Go
+        uses: actions/setup-go@v3
+        with:
+          go-version-file: "go.mod"
+          cache: true
+
+      - name: Test
+        run: make test
\ No newline at end of file
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
new file mode 100644
index 0000000..d4164b4
--- /dev/null
+++ b/.github/workflows/release.yml
@@ -0,0 +1,77 @@
+name: Release
+
+on:
+  push:
+    tags:
+      - "v*"
+
+env:
+  GORELEASER_VERSION: "v1.18.2"
+
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
+
+      - name: Fetch tags
+        run: git fetch --force --tags
+
+      - name: Setup QEMU
+        uses: docker/setup-qemu-action@v2
+
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@v2
+        id: buildx
+
+      - name: Login to container Registry
+        uses: docker/login-action@v2
+        with:
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+          registry: ghcr.io
+
+      - name: Prepare
+        id: prep
+        run: |
+          VERSION=sha-${GITHUB_SHA::8}
+          if [[ $GITHUB_REF == refs/tags/* ]]; then
+            VERSION=${GITHUB_REF/refs\/tags\//}
+          fi
+          echo ::set-output name=BUILD_DATE::$(date -u +'%Y-%m-%dT%H:%M:%SZ')
+          echo ::set-output name=VERSION::${VERSION}
+
+      - name: Publish multi-arch Docker image
+        uses: docker/build-push-action@v2
+        with:
+          push: true
+          builder: ${{ steps.buildx.outputs.name }}
+          context: .
+          file: ./Dockerfile
+          platforms: linux/arm64,linux/amd64
+          tags: |
+            ghcr.io/${{ github.repository_owner }}/agent:${{ steps.prep.outputs.VERSION }}
+            ghcr.io/${{ github.repository_owner }}/agent:latest
+          labels: |
+            org.opencontainers.image.title=${{ github.event.repository.name }}
+            org.opencontainers.image.description=${{ github.event.repository.description }}
+            org.opencontainers.image.source=${{ github.event.repository.html_url }}
+            org.opencontainers.image.url=${{ github.event.repository.html_url }}
+            org.opencontainers.image.revision=${{ github.sha }}
+            org.opencontainers.image.version=${{ steps.prep.outputs.VERSION }}
+            org.opencontainers.image.created=${{ steps.prep.outputs.BUILD_DATE }}
+
+      - name: Set GORELEASER_PREVIOUS_TAG
+        run: echo "GORELEASER_PREVIOUS_TAG=$(git tag -l "v*" --sort=-version:refname | head -n 2 | tail -n 1)" >> $GITHUB_ENV
+
+      - name: GoReleaser
+        uses: goreleaser/goreleaser-action@v4
+        with:
+          version: ${{ env.GORELEASER_VERSION }}
+          args: release
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.gitignore b/.gitignore
index 3b735ec..4f36dcd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,6 +1,3 @@
-# If you prefer the allow list template instead of the deny list, see community template:
-# https://github.com/github/gitignore/blob/main/community/Golang/Go.AllowList.gitignore
-#
 # Binaries for programs and plugins
 *.exe
 *.exe~
@@ -13,9 +10,16 @@
 
 # Output of the go coverage tool, specifically when used with LiteIDE
 *.out
+*.html
 
 # Dependency directories (remove the comment below to include it)
-# vendor/
+vendor/
 
-# Go workspace file
-go.work
+# Binaries
+bin/
+
+# Packaged Helm charts
+*.tgz
+
+# Directory to keep MariaDB files used for development
+mariadb/
\ No newline at end of file
diff --git a/.golangci.yml b/.golangci.yml
new file mode 100644
index 0000000..0755e2d
--- /dev/null
+++ b/.golangci.yml
@@ -0,0 +1,31 @@
+linters-settings:
+  gocyclo:
+    min-complexity: 20
+  lll:
+    line-length: 140
+  misspell:
+    locale: US
+
+linters:
+  disable-all: true
+  enable:
+    - unused
+    - errcheck
+    - gocyclo
+    - gofmt
+    - goimports
+    - gosimple
+    - govet
+    - ineffassign
+    - lll
+    - misspell
+    - nestif
+    - staticcheck
+    - typecheck
+    - unused
+    - bodyclose
+    - noctx
+
+run:
+  timeout: 5m
+  go: "1.20"
diff --git a/.goreleaser.yml b/.goreleaser.yml
new file mode 100644
index 0000000..e4aa044
--- /dev/null
+++ b/.goreleaser.yml
@@ -0,0 +1,14 @@
+changelog:
+  use: github-native
+builds:
+  - id: agent
+    main: main.go
+    binary: "agent_{{ .Version }}_{{ .Arch }}"
+    env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+      - darwin
+    goarch:
+      - amd64
+      - arm64
diff --git a/.vscode/launch.json b/.vscode/launch.json
new file mode 100644
index 0000000..e6885dd
--- /dev/null
+++ b/.vscode/launch.json
@@ -0,0 +1,15 @@
+{
+  // Use IntelliSense to learn about possible attributes.
+  // Hover to view descriptions of existing attributes.
+  // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Launch Package",
+      "type": "go",
+      "request": "launch",
+      "mode": "auto",
+      "program": "main.go"
+    }
+  ]
+}
\ No newline at end of file
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..abf1438
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,21 @@
+FROM golang:1.20.4-alpine3.18 AS builder
+
+ARG TARGETOS
+ARG TARGETARCH
+ENV CGO_ENABLED=0 GOOS=${TARGETOS} GOARCH=${TARGETARCH}
+
+WORKDIR /app
+
+COPY go.mod go.sum /app/
+RUN go mod download
+
+COPY . /app
+RUN go build -o agent main.go
+
+FROM gcr.io/distroless/static AS app
+
+WORKDIR /
+COPY --from=builder /app/agent /bin/agent 
+USER 65532:65532
+
+ENTRYPOINT ["/bin/agent"]
diff --git a/Makefile b/Makefile
new file mode 100644
index 0000000..479ebc3
--- /dev/null
+++ b/Makefile
@@ -0,0 +1,22 @@
+# Get the currently used golang install path (in GOPATH/bin, unless GOBIN is set)
+ifeq (,$(shell go env GOBIN))
+GOBIN=$(shell go env GOPATH)/bin
+else
+GOBIN=$(shell go env GOBIN)
+endif
+
+SHELL = /usr/bin/env bash -o pipefail
+.SHELLFLAGS = -ec
+
+.PHONY: all
+all: help
+
+##@ General
+
+.PHONY: help
+help: ## Display this help.
+	@awk 'BEGIN {FS = ":.*##"; printf "\nUsage:\n  make \033[36m<target>\033[0m\n"} /^[a-zA-Z_0-9-]+:.*?##/ { printf "  \033[36m%-15s\033[0m %s\n", $$1, $$2 } /^##@/ { printf "\n\033[1m%s\033[0m\n", substr($$0, 5) } ' $(MAKEFILE_LIST)
+
+include make/deploy.mk
+include make/dev.mk
+include make/tooling.mk
\ No newline at end of file
diff --git a/cmd/agent/root.go b/cmd/agent/root.go
new file mode 100644
index 0000000..05c32b8
--- /dev/null
+++ b/cmd/agent/root.go
@@ -0,0 +1,130 @@
+package agent
+
+import (
+	"context"
+	"log"
+	"os"
+	"time"
+
+	"github.com/mariadb-operator/agent/pkg/filemanager"
+	"github.com/mariadb-operator/agent/pkg/handler"
+	"github.com/mariadb-operator/agent/pkg/handler/bootstrap"
+	"github.com/mariadb-operator/agent/pkg/handler/recovery"
+	"github.com/mariadb-operator/agent/pkg/logger"
+	"github.com/mariadb-operator/agent/pkg/mariadbd"
+	"github.com/mariadb-operator/agent/pkg/router"
+	"github.com/mariadb-operator/agent/pkg/server"
+	"github.com/spf13/cobra"
+)
+
+var (
+	addr      string
+	configDir string
+	stateDir  string
+
+	compressLevel     int
+	rateLimitRequests int
+	rateLimitDuration time.Duration
+
+	logLevel       string
+	logTimeEncoder string
+	logDev         bool
+
+	bootstrapMariadbdReloadRetries   int
+	bootstrapMariadbdReloadRetryWait time.Duration
+
+	recoveryMariadbdReloadRetries   int
+	recoveryMariadbdReloadRetryWait time.Duration
+	recoveryRetries                 int
+	recoveryRetryWait               time.Duration
+)
+
+var rootCmd = &cobra.Command{
+	Use:   "agent",
+	Short: "Agent",
+	Long:  `🤖 Sidecar agent for MariaDB that co-operates with mariadb-operator`,
+	Args:  cobra.NoArgs,
+	Run: func(cmd *cobra.Command, args []string) {
+		logger, err := logger.NewLogger(
+			logger.WithLogLevel(logLevel),
+			logger.WithTimeEncoder(logTimeEncoder),
+			logger.WithDevelopment(logDev),
+		)
+		if err != nil {
+			log.Fatalf("error creating logger: %v", err)
+		}
+
+		fileManager, err := filemanager.NewFileManager(configDir, stateDir)
+		if err != nil {
+			logger.Error(err, "error creating file manager")
+			os.Exit(1)
+		}
+
+		handlerLogger := logger.WithName("handler")
+		handler := handler.NewHandler(fileManager, &handlerLogger,
+			handler.WithBootstrapOptions(
+				bootstrap.WithMariadbdReload(&mariadbd.ReloadOptions{
+					Retries:   bootstrapMariadbdReloadRetries,
+					WaitRetry: bootstrapMariadbdReloadRetryWait,
+				}),
+			),
+			handler.WithRecoveryOptions(
+				recovery.WithMariadbdReload(&mariadbd.ReloadOptions{
+					Retries:   recoveryMariadbdReloadRetries,
+					WaitRetry: recoveryMariadbdReloadRetryWait,
+				}),
+				recovery.WithRecovery(&recovery.RecoveryOptions{
+					Retries:   recoveryRetries,
+					WaitRetry: recoveryRetryWait,
+				}),
+			),
+		)
+
+		router := router.NewRouter(
+			handler,
+			router.WithCompressLevel(compressLevel),
+			router.WithRateLimit(rateLimitRequests, rateLimitDuration),
+		)
+
+		serverLogger := logger.WithName("server")
+		server := server.NewServer(addr, router, &serverLogger)
+		if err := server.Start(context.Background()); err != nil {
+			logger.Error(err, "error starting server")
+			os.Exit(1)
+		}
+	},
+}
+
+func Execute() {
+	cobra.CheckErr(rootCmd.Execute())
+}
+
+func init() {
+	rootCmd.Flags().StringVar(&addr, "addr", ":5555", "The address that the HTTP server binds to")
+	rootCmd.Flags().StringVar(&configDir, "config-dir", "/etc/mysql/mariadb.conf.d", "The directory that contains MariaDB configuration files")
+	rootCmd.Flags().StringVar(&stateDir, "state-dir", "/var/lib/mysql", "The directory that contains MariaDB state files")
+
+	rootCmd.Flags().IntVar(&compressLevel, "compress-level", 5, "HTTP compression level")
+	rootCmd.Flags().IntVar(&rateLimitRequests, "rate-limit-requests", 100, "Number of requests to be used as rate limit")
+	rootCmd.Flags().DurationVar(&rateLimitDuration, "rate-limit-duration", 1*time.Minute, "Duration to be used as rate limit")
+
+	rootCmd.Flags().StringVar(&logLevel, "log-level", "info", "Log level to use, one of: "+
+		"debug, info, warn, error, dpanic, panic, fatal.")
+	rootCmd.Flags().StringVar(&logTimeEncoder, "log-time-encoder", "epoch", "Log time encoder to use, one of: "+
+		"epoch, millis, nano, iso8601, rfc3339 or rfc3339nano")
+	rootCmd.Flags().BoolVar(&logDev, "log-dev", false, "Enable development logs.")
+
+	rootCmd.Flags().IntVar(&bootstrapMariadbdReloadRetries, "bootstrap-mariadbd-reload-retries", 10, "Maximum number of attempts "+
+		"to reload MariaDB process when bootstraping a new Galera cluster")
+	rootCmd.Flags().DurationVar(&bootstrapMariadbdReloadRetryWait, "bootstrap-mariadbd-reload-retry-wait", 1*time.Second,
+		"Time to wait between MariaDB process reload attempts when bootstrapping a new Galera cluster")
+
+	rootCmd.Flags().IntVar(&recoveryMariadbdReloadRetries, "recovery-mariadbd-reload-retries", 3, "Maximum number of attempts "+
+		"to reload MariaDB process when recovering the Galera cluster")
+	rootCmd.Flags().DurationVar(&recoveryMariadbdReloadRetryWait, "recovery-mariadbd-reload-retry-wait", 1*time.Second,
+		"Time to wait between MariaDB process reload attempts when recovering the Galera cluster")
+	rootCmd.Flags().IntVar(&recoveryRetries, "recovery-retries", 10, "Maximum number of attempts "+
+		"to recover the Galera cluster")
+	rootCmd.Flags().DurationVar(&recoveryRetryWait, "recovery-retry-wait", 3*time.Second, "Time to wait between "+
+		"Galera cluster recover attempts ")
+}
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..7e716af
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,28 @@
+version: "3.3"
+
+services:
+  mariadb:
+    container_name: mariadb
+    image: mariadb:10.11.3
+    pid: host
+    command:
+      - bash
+      - -c
+      - /scripts/galera.sh
+    restart: unless-stopped
+    environment:
+      - HOSTNAME=mariadb-0
+      - MYSQL_TCP_PORT=3306
+      - MARIADB_ROOT_PASSWORD=mariadb
+      - MARIADB_DATABASE=mariadb
+      - MARIADB_USER=mariadb
+      - MARIADB_PASSWORD=mariadb
+    ports:
+      - "3306"
+      - "4444"
+      - "4567"
+      - "4568"
+    volumes:
+      - ./hack/galera.sh:/scripts/galera.sh
+      - ./mariadb/config/docker:/etc/mysql/mariadb.conf.d
+      - ./mariadb/state/docker:/var/lib/mysql
\ No newline at end of file
diff --git a/examples/1-bootstrap.cnf b/examples/1-bootstrap.cnf
new file mode 100644
index 0000000..e6db0a6
--- /dev/null
+++ b/examples/1-bootstrap.cnf
@@ -0,0 +1,2 @@
+[galera]
+wsrep_new_cluster="ON"
diff --git a/examples/2-recovery.cnf b/examples/2-recovery.cnf
new file mode 100644
index 0000000..d342c9c
--- /dev/null
+++ b/examples/2-recovery.cnf
@@ -0,0 +1,3 @@
+[galera]
+log_error=mariadb.err
+wsrep_recover="ON"
diff --git a/examples/grastate-recovery.dat b/examples/grastate-recovery.dat
new file mode 100644
index 0000000..348b3b0
--- /dev/null
+++ b/examples/grastate-recovery.dat
@@ -0,0 +1,4 @@
+version: 2.1
+uuid: 220dcdcb-1629-11e4-add3-aec059ad3734
+seqno: -1
+safe_to_bootstrap: 0
\ No newline at end of file
diff --git a/examples/grastate-safe-bootstrap.dat b/examples/grastate-safe-bootstrap.dat
new file mode 100644
index 0000000..77b603e
--- /dev/null
+++ b/examples/grastate-safe-bootstrap.dat
@@ -0,0 +1,4 @@
+version: 2.1
+uuid: 220dcdcb-1629-11e4-add3-aec059ad3734
+seqno: -1
+safe_to_bootstrap: 1
\ No newline at end of file
diff --git a/examples/grastate-seqno.dat b/examples/grastate-seqno.dat
new file mode 100644
index 0000000..201cae7
--- /dev/null
+++ b/examples/grastate-seqno.dat
@@ -0,0 +1,4 @@
+version: 2.1
+uuid: 220dcdcb-1629-11e4-add3-aec059ad3734
+seqno: 1122
+safe_to_bootstrap: 0
\ No newline at end of file
diff --git a/go.mod b/go.mod
new file mode 100644
index 0000000..32eae71
--- /dev/null
+++ b/go.mod
@@ -0,0 +1,37 @@
+module github.com/mariadb-operator/agent
+
+go 1.20
+
+require (
+	github.com/go-chi/chi/v5 v5.0.8
+	github.com/go-chi/httprate v0.7.4
+	github.com/go-logr/logr v1.2.4
+	github.com/mitchellh/go-ps v1.0.0
+	github.com/spf13/cobra v1.7.0
+	go.uber.org/zap v1.24.0
+	sigs.k8s.io/controller-runtime v0.15.0
+	github.com/google/uuid v1.3.0
+)
+
+require (
+	github.com/cespare/xxhash/v2 v2.2.0 // indirect
+	github.com/go-logr/zapr v1.2.4 // indirect
+	github.com/gogo/protobuf v1.3.2 // indirect
+	github.com/google/gofuzz v1.1.0 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
+	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
+	github.com/modern-go/reflect2 v1.0.2 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	go.uber.org/atomic v1.7.0 // indirect
+	go.uber.org/multierr v1.6.0 // indirect
+	golang.org/x/net v0.10.0 // indirect
+	golang.org/x/text v0.9.0 // indirect
+	gopkg.in/inf.v0 v0.9.1 // indirect
+	gopkg.in/yaml.v2 v2.4.0 // indirect
+	k8s.io/apimachinery v0.27.2 // indirect
+	k8s.io/klog/v2 v2.90.1 // indirect
+	k8s.io/utils v0.0.0-20230209194617-a36077c30491 // indirect
+	sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd // indirect
+	sigs.k8s.io/structured-merge-diff/v4 v4.2.3 // indirect
+)
diff --git a/go.sum b/go.sum
new file mode 100644
index 0000000..13809ab
--- /dev/null
+++ b/go.sum
@@ -0,0 +1,123 @@
+github.com/benbjohnson/clock v1.1.0/go.mod h1:J11/hYXuz8f4ySSvYwY0FKfm+ezbsZBKZxNJlLklBHA=
+github.com/cespare/xxhash/v2 v2.2.0 h1:DC2CZ1Ep5Y4k3ZQ899DldepgrayRUGE6BBZ/cd9Cj44=
+github.com/cespare/xxhash/v2 v2.2.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs=
+github.com/cpuguy83/go-md2man/v2 v2.0.2/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/go-chi/chi/v5 v5.0.8 h1:lD+NLqFcAi1ovnVZpsnObHGW4xb4J8lNmoYVfECH1Y0=
+github.com/go-chi/chi/v5 v5.0.8/go.mod h1:DslCQbL2OYiznFReuXYUmQ2hGd1aDpCnlMNITLSKoi8=
+github.com/go-chi/httprate v0.7.4 h1:a2GIjv8he9LRf3712zxxnRdckQCm7I8y8yQhkJ84V6M=
+github.com/go-chi/httprate v0.7.4/go.mod h1:6GOYBSwnpra4CQfAKXu8sQZg+nZ0M1g9QnyFvxrAB8A=
+github.com/go-logr/logr v1.2.0/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/logr v1.2.4 h1:g01GSCwiDw2xSZfjJ2/T9M+S6pFdcNtFYsp+Y43HYDQ=
+github.com/go-logr/logr v1.2.4/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A=
+github.com/go-logr/zapr v1.2.4 h1:QHVo+6stLbfJmYGkQ7uGHUCu5hnAFAj6mDe6Ea0SeOo=
+github.com/go-logr/zapr v1.2.4/go.mod h1:FyHWQIzQORZ0QVE1BtVHv3cKtNLuXsbNLtpuhNapBOA=
+github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q=
+github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
+github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/gofuzz v1.1.0 h1:Hsa8mG0dQ46ij8Sl2AYJDUv1oA9/d6Vk+3LG99Oe02g=
+github.com/google/gofuzz v1.1.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
+github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I=
+github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
+github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
+github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
+github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
+github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
+github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
+github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo=
+github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
+github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/mitchellh/go-ps v1.0.0 h1:i6ampVEEF4wQFF+bkYfwYgY+F/uYJDktmvLPf7qIgjc=
+github.com/mitchellh/go-ps v1.0.0/go.mod h1:J4lOc8z8yJs6vUwklHw2XEIiT4z4C40KtWVN3nvg8Pg=
+github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
+github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
+github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM=
+github.com/spf13/cobra v1.7.0 h1:hyqWnYt1ZQShIddO5kBpj3vu05/++x6tJ6dg8EC572I=
+github.com/spf13/cobra v1.7.0/go.mod h1:uLxZILRyS/50WlhOIKD7W6V5bgeIt+4sICxh6uRMrb0=
+github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA=
+github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
+github.com/yuin/goldmark v1.1.27/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.2.1/go.mod h1:3hX8gzYuyVAZsxl0MRgGTJEmQBFcNTphYh9decYSb74=
+github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1Zlc8k=
+go.uber.org/atomic v1.7.0 h1:ADUqmZGgLDDfbSL9ZmPxKTybcoEYHgpYfELNoN+7hsw=
+go.uber.org/atomic v1.7.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
+go.uber.org/goleak v1.1.11/go.mod h1:cwTWslyiVhfpKIDGSZEM2HlOvcqm+tG4zioyIeLoqMQ=
+go.uber.org/multierr v1.6.0 h1:y6IPFStTAIT5Ytl7/XYmHvzXQ7S3g/IeZW9hyZ5thw4=
+go.uber.org/multierr v1.6.0/go.mod h1:cdWPpRnG4AhwMwsgIHip0KRBQjJy5kYEpYjJxpXp9iU=
+go.uber.org/zap v1.24.0 h1:FiJd5l1UOLj0wCgbSE0rwwXHzEdAZS6hiiSnxJN/D60=
+go.uber.org/zap v1.24.0/go.mod h1:2kMP+WWQ8aoFoedH3T2sq6iJ2yDWpHbP0f6MQbS9Gkg=
+golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
+golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
+golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto=
+golang.org/x/lint v0.0.0-20190930215403-16217165b5de/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
+golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.3.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
+golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20200226121028-0de0cce0169b/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
+golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM=
+golang.org/x/net v0.10.0 h1:X2//UzNDwYmtCLn7To6G58Wr6f5ahEAQgKNzv9Y951M=
+golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
+golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20190911185100-cd5d95a43a6e/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20201020160332-67f06af15bc9/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
+golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
+golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
+golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
+golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
+golang.org/x/text v0.9.0 h1:2sjJmO8cDvYveuX97RDLsxlyUxLl+GHoLxBiRdHllBE=
+golang.org/x/text v0.9.0/go.mod h1:e1OnstbJyHTd6l/uOt8jFFHp6TRDWZR/bV3emEE/zU8=
+golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
+golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs=
+golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
+golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk=
+golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
+gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
+gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY=
+gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ=
+gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+k8s.io/apimachinery v0.27.2 h1:vBjGaKKieaIreI+oQwELalVG4d8f3YAMNpWLzDXkxeg=
+k8s.io/apimachinery v0.27.2/go.mod h1:XNfZ6xklnMCOGGFNqXG7bUrQCoR04dh/E7FprV6pb+E=
+k8s.io/klog/v2 v2.90.1 h1:m4bYOKall2MmOiRaR1J+We67Do7vm9KiQVlT96lnHUw=
+k8s.io/klog/v2 v2.90.1/go.mod h1:y1WjHnz7Dj687irZUWR/WLkLc5N1YHtjLdmgWjndZn0=
+k8s.io/utils v0.0.0-20230209194617-a36077c30491 h1:r0BAOLElQnnFhE/ApUsg3iHdVYYPBjNSSOMowRZxxsY=
+k8s.io/utils v0.0.0-20230209194617-a36077c30491/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
+sigs.k8s.io/controller-runtime v0.15.0 h1:ML+5Adt3qZnMSYxZ7gAverBLNPSMQEibtzAgp0UPojU=
+sigs.k8s.io/controller-runtime v0.15.0/go.mod h1:7ngYvp1MLT+9GeZ+6lH3LOlcHkp/+tzA/fmHa4iq9kk=
+sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd h1:EDPBXCAspyGV4jQlpZSudPeMmr1bNJefnuqLsRAsHZo=
+sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd/go.mod h1:B8JuhiUyNFVKdsE8h686QcCxMaH6HrOAZj4vswFpcB0=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.3 h1:PRbqxJClWWYMNV1dhaG4NsibJbArud9kFxnAMREiWFE=
+sigs.k8s.io/structured-merge-diff/v4 v4.2.3/go.mod h1:qjx8mGObPmV2aSZepjQjbmb2ihdVs8cGKBraizNC69E=
diff --git a/hack/galera.sh b/hack/galera.sh
new file mode 100755
index 0000000..0fd8320
--- /dev/null
+++ b/hack/galera.sh
@@ -0,0 +1,35 @@
+#!/bin/bash
+
+set -e
+
+if [ -z "$HOSTNAME" ]; then
+  echo "HOSTNAME environment variable not set"
+  exit 1
+fi
+
+if [ -z "$ENTRYPOINT" ]; then
+    ENTRYPOINT="/usr/local/bin/docker-entrypoint.sh"
+fi
+
+cat <<EOF | tee /etc/mysql/mariadb.conf.d/0-galera.cnf
+[mysqld]
+bind-address=0.0.0.0
+default_storage_engine=InnoDB
+binlog_format=row
+innodb_autoinc_lock_mode=2
+
+[galera]
+wsrep_on=ON
+wsrep_provider=/usr/lib/galera/libgalera_smm.so
+wsrep_cluster_address="gcomm://mariadb"
+wsrep_cluster_name="mariadb-galera-cluster"
+wsrep_sst_method=rsync
+wsrep_node_address="${HOSTNAME}"
+wsrep_node_name="${HOSTNAME}"
+EOF
+
+if [ ! -n "$(ls -A /var/lib/mysql)" ]; then 
+    bash -c "$ENTRYPOINT mariadbd --wsrep-new-cluster"
+else
+    bash -c "$ENTRYPOINT mariadbd"
+fi
\ No newline at end of file
diff --git a/main.go b/main.go
new file mode 100644
index 0000000..07e3d2a
--- /dev/null
+++ b/main.go
@@ -0,0 +1,7 @@
+package main
+
+import "github.com/mariadb-operator/agent/cmd/agent"
+
+func main() {
+	agent.Execute()
+}
diff --git a/make/deploy.mk b/make/deploy.mk
new file mode 100644
index 0000000..a14bfd9
--- /dev/null
+++ b/make/deploy.mk
@@ -0,0 +1,45 @@
+##@ Docker
+
+PLATFORM ?= linux/amd64,linux/arm64
+IMG ?= ghcr.io/mariadb-operator/agent:latest
+BUILDX ?= docker buildx build --platform $(PLATFORM) -t $(IMG) 
+BUILDER ?= agent
+
+.PHONY: docker-builder
+docker-builder: ## Configure docker builder.
+	docker buildx create --name $(BUILDER) --use --platform $(PLATFORM)
+
+.PHONY: docker-build
+docker-build: ## Build docker image.
+	docker build -t $(IMG) .  
+
+.PHONY: docker-buildx
+docker-buildx: ## Build multi-arch docker image.
+	$(BUILDX) .
+
+.PHONY: docker-push
+docker-push: ## Build multi-arch docker image and push it to the registry.
+	$(BUILDX) --push .
+
+.PHONY: docker-inspect
+docker-inspect: ## Inspect docker image.
+	docker buildx imagetools inspect $(IMG)
+
+##@ MariaDB
+
+.PHONY: mariadb
+mariadb: ## Create a MariaDB galera cluster using docker compose.
+	docker compose up -d
+
+.PHONY: mariadb-rm
+mariadb-rm: ## Remove the MariaDB galera cluster.
+	docker compose rm --stop --force
+	sudo rm -rf mariadb
+
+.PHONY: mariadb-logs
+mariadb-logs: ## Check the MariaDB galera cluster logs.
+	docker compose logs --follow
+
+.PHONY: mariadb-ps
+mariadb-ps: ## Check the MariaDB processes.
+	ps -ef | grep mariadbd
\ No newline at end of file
diff --git a/make/dev.mk b/make/dev.mk
new file mode 100644
index 0000000..3f8c26d
--- /dev/null
+++ b/make/dev.mk
@@ -0,0 +1,48 @@
+##@ Dev
+
+.PHONY: lint
+lint: golangci-lint ## Lint.
+	$(GOLANGCI_LINT) run
+
+.PHONY: build
+build: ## Build binary.
+	go build -o bin/agent main.go
+
+.PHONY: test
+test: ## Run tests.
+	go test ./... -coverprofile cover.out
+
+.PHONY: cover
+cover: test ## Run tests and generate coverage.
+	go tool cover -html=cover.out -o=cover.html
+
+.PHONY: release
+release: goreleaser ## Test release locally.
+	$(GORELEASER) release --snapshot --rm-dist
+
+CONFIG_DIR ?= mariadb/config/local
+CONFIG_FILE ?= 1-bootstrap.cnf
+.PHONY: config
+config: ## Copies a example config file for development purposes.
+	@mkdir -p $(CONFIG_DIR)
+	cp "examples/$(CONFIG_FILE)" $(CONFIG_DIR)
+
+STATE_DIR ?= mariadb/state/local
+STATE_FILE ?= grastate-recovery.dat
+.PHONY: state
+state: ## Copies a example state file for development purposes.
+	@mkdir -p $(STATE_DIR)
+	cp "examples/$(STATE_FILE)" "$(STATE_DIR)/grastate.dat"
+
+BASE_RUN_FLAGS ?= --log-level=debug --log-dev
+
+RUN_FLAGS ?= $(BASE_RUN_FLAGS) --config-dir=$(CONFIG_DIR) --state-dir=$(STATE_DIR)
+.PHONY: run
+run: config state ## Run agent from your host.
+	go run main.go $(RUN_FLAGS)
+
+AGENT ?= $(LOCALBIN)/agent
+SU_RUN_FLAGS ?= $(BASE_RUN_FLAGS) --config-dir=mariadb/config/docker --state-dir=mariadb/state/docker 
+.PHONY: su-run
+su-run: build ## Run agent from your host as root to be able to access mariadb volumes and process.
+	sudo $(AGENT) $(SU_RUN_FLAGS)
\ No newline at end of file
diff --git a/make/tooling.mk b/make/tooling.mk
new file mode 100644
index 0000000..5c3886d
--- /dev/null
+++ b/make/tooling.mk
@@ -0,0 +1,24 @@
+##@ Tooling
+
+## Location to install dependencies to
+LOCALBIN ?= $(shell pwd)/bin
+$(LOCALBIN):
+	mkdir -p $(LOCALBIN)
+
+## Tool Binaries
+GOLANGCI_LINT ?= $(LOCALBIN)/golangci-lint
+GORELEASER ?= $(LOCALBIN)/goreleaser
+
+## Tool Versions
+GOLANGCI_LINT_VERSION ?= v1.52.2
+GORELEASER_VERSION ?= v1.18.2
+
+.PHONY: golangci-lint
+golangci-lint: $(GOLANGCI_LINT) ## Download golangci-lint locally if necessary.
+$(GOLANGCI_LINT): $(LOCALBIN)
+	GOBIN=$(LOCALBIN) go install github.com/golangci/golangci-lint/cmd/golangci-lint@$(GOLANGCI_LINT_VERSION)
+
+.PHONY: goreleaser
+goreleaser: $(GORELEASER) ## Download goreleaser locally if necessary.
+$(GORELEASER): $(LOCALBIN)
+	GOBIN=$(LOCALBIN) go install github.com/goreleaser/goreleaser@$(GORELEASER_VERSION)
\ No newline at end of file
diff --git a/pkg/errors/errors.go b/pkg/errors/errors.go
new file mode 100644
index 0000000..0f036a9
--- /dev/null
+++ b/pkg/errors/errors.go
@@ -0,0 +1,23 @@
+package errors
+
+import "fmt"
+
+type APIError struct {
+	Message string `json:"message"`
+}
+
+func (e *APIError) Error() string {
+	return e.Message
+}
+
+func NewAPIError(message string) *APIError {
+	return &APIError{
+		Message: message,
+	}
+}
+
+func NewAPIErrorf(format string, a ...any) *APIError {
+	return &APIError{
+		Message: fmt.Sprintf(format, a...),
+	}
+}
diff --git a/pkg/filemanager/filemanager.go b/pkg/filemanager/filemanager.go
new file mode 100644
index 0000000..4745c0b
--- /dev/null
+++ b/pkg/filemanager/filemanager.go
@@ -0,0 +1,50 @@
+package filemanager
+
+import (
+	"fmt"
+	"io/fs"
+	"os"
+	"path/filepath"
+)
+
+var (
+	writeFileMode = fs.FileMode(0777)
+)
+
+type FileManager struct {
+	configDir string
+	stateDir  string
+}
+
+func NewFileManager(configDir, stateDir string) (*FileManager, error) {
+	if _, err := os.Stat(configDir); err != nil {
+		return nil, fmt.Errorf("error reading config directory: %v", err)
+	}
+	if _, err := os.Stat(stateDir); err != nil {
+		return nil, fmt.Errorf("error reading state directory: %v", err)
+	}
+	return &FileManager{
+		configDir: configDir,
+		stateDir:  stateDir,
+	}, nil
+}
+
+func (f *FileManager) WriteStateFile(name string, bytes []byte) error {
+	return os.WriteFile(filepath.Join(f.stateDir, name), bytes, writeFileMode)
+}
+
+func (f *FileManager) ReadStateFile(name string) ([]byte, error) {
+	return os.ReadFile(filepath.Join(f.stateDir, name))
+}
+
+func (f *FileManager) DeleteStateFile(name string) error {
+	return os.Remove(filepath.Join(f.stateDir, name))
+}
+
+func (f *FileManager) WriteConfigFile(name string, bytes []byte) error {
+	return os.WriteFile(filepath.Join(f.configDir, name), bytes, writeFileMode)
+}
+
+func (f *FileManager) DeleteConfigFile(name string) error {
+	return os.Remove(filepath.Join(f.configDir, name))
+}
diff --git a/pkg/galera/galera.go b/pkg/galera/galera.go
new file mode 100644
index 0000000..e6adcad
--- /dev/null
+++ b/pkg/galera/galera.go
@@ -0,0 +1,182 @@
+package galera
+
+import (
+	"bufio"
+	"bytes"
+	"fmt"
+	"html/template"
+	"strconv"
+	"strings"
+
+	guuid "github.com/google/uuid"
+)
+
+var (
+	GaleraStateFileName = "grastate.dat"
+	BootstrapFileName   = "1-bootstrap.cnf"
+	BootstrapFile       = `[galera]
+wsrep_new_cluster="ON"`
+	RecoveryFileName    = "2-recovery.cnf"
+	RecoveryLogFileName = "mariadb.err"
+	RecoveryFile        = fmt.Sprintf(`[galera]
+log_error=%s
+wsrep_recover="ON"`, RecoveryLogFileName)
+)
+
+type GaleraState struct {
+	Version         string `json:"version"`
+	UUID            string `json:"uuid"`
+	Seqno           int    `json:"seqno"`
+	SafeToBootstrap bool   `json:"safeToBootstrap"`
+}
+
+func (g *GaleraState) Marshal() ([]byte, error) {
+	if _, err := guuid.Parse(g.UUID); err != nil {
+		return nil, fmt.Errorf("invalid uuid: %v", err)
+	}
+	type tplOpts struct {
+		Version         string
+		UUID            string
+		Seqno           int
+		SafeToBootstrap int
+	}
+	tpl := createTpl("grastate.dat", `version: {{ .Version }}
+uuid: {{ .UUID }}
+seqno: {{ .Seqno }}
+safe_to_bootstrap: {{ .SafeToBootstrap }}`)
+	buf := new(bytes.Buffer)
+	err := tpl.Execute(buf, tplOpts{
+		Version: g.Version,
+		UUID:    g.UUID,
+		Seqno:   g.Seqno,
+		SafeToBootstrap: func() int {
+			if g.SafeToBootstrap {
+				return 1
+			}
+			return 0
+		}(),
+	})
+	if err != nil {
+		return nil, fmt.Errorf("error rendering template: %v", err)
+	}
+	return buf.Bytes(), nil
+}
+
+func (g *GaleraState) Unmarshal(text []byte) error {
+	fileScanner := bufio.NewScanner(bytes.NewReader(text))
+	fileScanner.Split(bufio.ScanLines)
+
+	var version *string
+	var uuid *string
+	var seqno *int
+	var safeToBootstrap *bool
+
+	for fileScanner.Scan() {
+		parts := strings.Split(fileScanner.Text(), ":")
+		if len(parts) != 2 {
+			continue
+		}
+
+		key := strings.TrimSpace(parts[0])
+		value := strings.TrimSpace(parts[1])
+		switch key {
+		case "version":
+			version = &value
+		case "uuid":
+			if _, err := guuid.Parse(value); err != nil {
+				return fmt.Errorf("error parsing uuid: %v", err)
+			}
+			uuid = &value
+		case "seqno":
+			i, err := strconv.Atoi(value)
+			if err != nil {
+				return fmt.Errorf("error parsing seqno: %v", err)
+			}
+			seqno = &i
+		case "safe_to_bootstrap":
+			b, err := parseBool(value)
+			if err != nil {
+				return fmt.Errorf("error parsing safe_to_bootstrap: %v", err)
+			}
+			safeToBootstrap = &b
+		}
+	}
+
+	if version == nil || uuid == nil || seqno == nil || safeToBootstrap == nil {
+		return fmt.Errorf(
+			"invalid galera state file: version=%v uuid=%v seqno=%v safeToBootstrap=%v",
+			version, uuid, seqno, safeToBootstrap,
+		)
+	}
+	g.Version = *version
+	g.UUID = *uuid
+	g.Seqno = *seqno
+	g.SafeToBootstrap = *safeToBootstrap
+	return nil
+}
+
+type Bootstrap struct {
+	UUID  string `json:"uuid"`
+	Seqno int    `json:"seqno"`
+}
+
+func (b *Bootstrap) Validate() error {
+	if _, err := guuid.Parse(b.UUID); err != nil {
+		return fmt.Errorf("invalid uuid: %v", err)
+	}
+	return nil
+}
+
+func (r *Bootstrap) Unmarshal(text []byte) error {
+	fileScanner := bufio.NewScanner(bytes.NewReader(text))
+	fileScanner.Split(bufio.ScanLines)
+
+	var uuid *string
+	var seqno *int
+
+	for fileScanner.Scan() {
+		parts := strings.Split(fileScanner.Text(), "WSREP: Recovered position: ")
+		if len(parts) != 2 {
+			continue
+		}
+		parts = strings.Split(parts[1], ":")
+		if len(parts) != 2 {
+			continue
+		}
+
+		currentUUID := strings.TrimSpace(parts[0])
+		if _, err := guuid.Parse(currentUUID); err != nil {
+			return fmt.Errorf("error parsing uuid: %v", err)
+		}
+		currentSeqno, err := strconv.Atoi(strings.TrimSpace(parts[1]))
+		if err != nil {
+			return fmt.Errorf("error parsing seqno: %v", err)
+		}
+		uuid = &currentUUID
+		seqno = &currentSeqno
+	}
+	if uuid == nil || seqno == nil {
+		return fmt.Errorf(
+			"unable to find uuid and seqno: uuid=%v seqno=%v",
+			uuid, seqno,
+		)
+	}
+	r.UUID = *uuid
+	r.Seqno = *seqno
+	return nil
+}
+
+func createTpl(name, t string) *template.Template {
+	return template.Must(template.New(name).Parse(t))
+}
+
+func parseBool(s string) (bool, error) {
+	i, err := strconv.Atoi(s)
+	if err != nil {
+		return false, fmt.Errorf("error parsing integer bool: %v", err)
+	}
+	if i != 0 && i != 1 {
+		return false, fmt.Errorf("invalid integer bool: %d", i)
+	}
+	return i == 1, nil
+}
diff --git a/pkg/galera/galera_test.go b/pkg/galera/galera_test.go
new file mode 100644
index 0000000..14ac335
--- /dev/null
+++ b/pkg/galera/galera_test.go
@@ -0,0 +1,440 @@
+package galera
+
+import (
+	"reflect"
+	"testing"
+)
+
+func TestGaleraStateMarshal(t *testing.T) {
+	tests := []struct {
+		name        string
+		galeraState *GaleraState
+		want        string
+		wantErr     bool
+	}{
+		{
+			name: "invalid uuid",
+			galeraState: &GaleraState{
+				Version:         "2.1",
+				UUID:            "foo",
+				Seqno:           1,
+				SafeToBootstrap: false,
+			},
+			want:    "",
+			wantErr: true,
+		},
+		{
+			name: "safe_to_bootstrap false",
+			galeraState: &GaleraState{
+				Version:         "2.1",
+				UUID:            "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno:           1,
+				SafeToBootstrap: false,
+			},
+			want: `version: 2.1
+uuid: 05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno: 1
+safe_to_bootstrap: 0`,
+			wantErr: false,
+		},
+		{
+			name: "safe_to_bootstrap true",
+			galeraState: &GaleraState{
+				Version:         "2.1",
+				UUID:            "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno:           1,
+				SafeToBootstrap: true,
+			},
+			want: `version: 2.1
+uuid: 05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno: 1
+safe_to_bootstrap: 1`,
+			wantErr: false,
+		},
+		{
+			name: "negative seqno",
+			galeraState: &GaleraState{
+				Version:         "2.1",
+				UUID:            "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno:           -1,
+				SafeToBootstrap: false,
+			},
+			want: `version: 2.1
+uuid: 05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno: -1
+safe_to_bootstrap: 0`,
+			wantErr: false,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			bytes, err := tt.galeraState.Marshal()
+			if tt.wantErr && err == nil {
+				t.Fatal("error expected, got nil")
+			}
+			if !tt.wantErr && err != nil {
+				t.Fatalf("error unexpected, got %v", err)
+			}
+			if tt.want != string(bytes) {
+				t.Fatalf("unexpected result:\nexpected:\n%s\ngot:\n%s\n", tt.want, string(bytes))
+			}
+		})
+	}
+}
+
+func TestGaleraStateUnmarshal(t *testing.T) {
+	tests := []struct {
+		name    string
+		bytes   []byte
+		want    GaleraState
+		wantErr bool
+	}{
+		{
+			name: "empty",
+			bytes: []byte(`
+`),
+			want:    GaleraState{},
+			wantErr: true,
+		},
+		{
+			name: "comment",
+			bytes: []byte(`# GALERA saved state
+version: 2.1
+uuid:    05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno:   1
+safe_to_bootstrap: 1`),
+			want: GaleraState{
+				Version:         "2.1",
+				UUID:            "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno:           1,
+				SafeToBootstrap: true,
+			},
+			wantErr: false,
+		},
+		{
+			name: "indentation",
+			bytes: []byte(`# GALERA saved state
+version: 												2.1
+uuid:  05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno:   																				1
+safe_to_bootstrap: 			1`),
+			want: GaleraState{
+				Version:         "2.1",
+				UUID:            "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno:           1,
+				SafeToBootstrap: true,
+			},
+			wantErr: false,
+		},
+		{
+			name: "invalid uuid",
+			bytes: []byte(`# GALERA saved state
+version: 2.1
+uuid:    foo
+seqno:   -1
+safe_to_bootstrap: 1`),
+			want:    GaleraState{},
+			wantErr: true,
+		},
+		{
+			name: "invalid seqno",
+			bytes: []byte(`# GALERA saved state
+version: 2.1
+uuid:    05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno:   foo
+safe_to_bootstrap: 1`),
+			want:    GaleraState{},
+			wantErr: true,
+		},
+		{
+			name: "invalid safe_to_bootstrap",
+			bytes: []byte(`# GALERA saved state
+version: 2.1
+uuid:    05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno:   1
+safe_to_bootstrap: true`),
+			want:    GaleraState{},
+			wantErr: true,
+		},
+		{
+			name: "safe_to_bootstrap true",
+			bytes: []byte(`version: 2.1
+uuid: 05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno: 1
+safe_to_bootstrap: 1`),
+			want: GaleraState{
+				Version:         "2.1",
+				UUID:            "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno:           1,
+				SafeToBootstrap: true,
+			},
+			wantErr: false,
+		},
+		{
+			name: "safe_to_bootstrap false",
+			bytes: []byte(`version: 2.1
+uuid: 05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno: 1
+safe_to_bootstrap: 0`),
+			want: GaleraState{
+				Version:         "2.1",
+				UUID:            "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno:           1,
+				SafeToBootstrap: false,
+			},
+			wantErr: false,
+		},
+		{
+			name: "negative seqno",
+			bytes: []byte(`version: 2.1
+uuid: 05f061bd-02a3-11ee-857c-aa370ff6666b
+seqno: -1
+safe_to_bootstrap: 0`),
+			want: GaleraState{
+				Version:         "2.1",
+				UUID:            "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno:           -1,
+				SafeToBootstrap: false,
+			},
+			wantErr: false,
+		},
+		{
+			name: "missing safe_to_bootstrap",
+			bytes: []byte(`version: 2.1
+uuid: 05f061bd-02a3-11ee-857c-aa370ff6666b
+safe_to_bootstrap: 0`),
+			want:    GaleraState{},
+			wantErr: true,
+		},
+		{
+			name: "missing seqno",
+			bytes: []byte(`version: 2.1
+uuid: 05f061bd-02a3-11ee-857c-aa370ff6666b
+safe_to_bootstrap: 0`),
+			want:    GaleraState{},
+			wantErr: true,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			var galeraState GaleraState
+			err := galeraState.Unmarshal(tt.bytes)
+			if tt.wantErr && err == nil {
+				t.Fatal("error expected, got nil")
+			}
+			if !tt.wantErr && err != nil {
+				t.Fatalf("error unexpected, got %v", err)
+			}
+			if !reflect.DeepEqual(tt.want, galeraState) {
+				t.Fatalf("unexpected result:\nexpected:\n%v\ngot:\n%v\n", tt.want, galeraState)
+			}
+		})
+	}
+}
+
+func TestBootstrapValidate(t *testing.T) {
+	tests := []struct {
+		name      string
+		bootstrap Bootstrap
+		wantErr   bool
+	}{
+		{
+			name: "invalid uuid",
+			bootstrap: Bootstrap{
+				UUID:  "foo",
+				Seqno: 1,
+			},
+			wantErr: true,
+		},
+		{
+			name: "seqno",
+			bootstrap: Bootstrap{
+				UUID:  "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno: 1,
+			},
+			wantErr: false,
+		},
+		{
+			name: "negative seqno",
+			bootstrap: Bootstrap{
+				UUID:  "05f061bd-02a3-11ee-857c-aa370ff6666b",
+				Seqno: -1,
+			},
+			wantErr: false,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			err := tt.bootstrap.Validate()
+			if tt.wantErr && err == nil {
+				t.Fatal("error expected, got nil")
+			}
+			if !tt.wantErr && err != nil {
+				t.Fatalf("error unexpected, got %v", err)
+			}
+		})
+	}
+}
+
+func TestBootstrapUnmarshal(t *testing.T) {
+	tests := []struct {
+		name    string
+		bytes   []byte
+		want    Bootstrap
+		wantErr bool
+	}{
+		{
+			name: "empty",
+			bytes: []byte(`
+`),
+			want:    Bootstrap{},
+			wantErr: true,
+		},
+		{
+			name: "missig position",
+			//nolint
+			bytes: []byte(`2023-06-04  8:24:23 0 [Note] Starting MariaDB 10.11.3-MariaDB-1:10.11.3+maria~ubu2204 source revision 0bb31039f54bd6a0dc8f0fc7d40e6b58a51998b0 as process 86033
+2023-06-04  8:24:23 0 [Note] InnoDB: Compressed tables use zlib 1.2.11
+2023-06-04  8:24:23 0 [Note] InnoDB: Number of transaction pools: 1
+2023-06-04  8:24:23 0 [Note] InnoDB: Using crc32 + pclmulqdq instructions
+2023-06-04  8:24:23 0 [Note] mariadbd: O_TMPFILE is not supported on /tmp (disabling future attempts)
+2023-06-04  8:24:23 0 [Note] InnoDB: Using liburing
+2023-06-04  8:24:23 0 [Note] InnoDB: Initializing buffer pool, total size = 128.000MiB, chunk size = 2.000MiB
+2023-06-04  8:24:23 0 [Note] InnoDB: Completed initialization of buffer pool
+2023-06-04  8:24:23 0 [Note] InnoDB: File system buffers for log disabled (block size=512 bytes)
+2023-06-04  8:24:23 0 [Note] InnoDB: 128 rollback segments are active.
+`),
+			want:    Bootstrap{},
+			wantErr: true,
+		},
+		{
+			name:    "invalid uuid",
+			bytes:   []byte(`2023-06-04  8:24:23 0 [Note] WSREP: Recovered position: foo:1`),
+			want:    Bootstrap{},
+			wantErr: true,
+		},
+		{
+			name:    "invalid seqno",
+			bytes:   []byte(`2023-06-04  8:24:23 0 [Note] WSREP: Recovered position: 15d9a0ef-02b1-11ee-9499-decd8e34642e:bar`),
+			want:    Bootstrap{},
+			wantErr: true,
+		},
+		{
+			name: "single position",
+			//nolint
+			bytes: []byte(`2023-06-04  8:24:23 0 [Note] Starting MariaDB 10.11.3-MariaDB-1:10.11.3+maria~ubu2204 source revision 0bb31039f54bd6a0dc8f0fc7d40e6b58a51998b0 as process 86033
+2023-06-04  8:24:23 0 [Note] InnoDB: Compressed tables use zlib 1.2.11
+2023-06-04  8:24:23 0 [Note] InnoDB: Number of transaction pools: 1
+2023-06-04  8:24:23 0 [Note] InnoDB: Using crc32 + pclmulqdq instructions
+2023-06-04  8:24:23 0 [Note] mariadbd: O_TMPFILE is not supported on /tmp (disabling future attempts)
+2023-06-04  8:24:23 0 [Note] InnoDB: Using liburing
+2023-06-04  8:24:23 0 [Note] InnoDB: Initializing buffer pool, total size = 128.000MiB, chunk size = 2.000MiB
+2023-06-04  8:24:23 0 [Note] InnoDB: Completed initialization of buffer pool
+2023-06-04  8:24:23 0 [Note] InnoDB: File system buffers for log disabled (block size=512 bytes)
+2023-06-04  8:24:23 0 [Note] InnoDB: 128 rollback segments are active.
+2023-06-04  8:24:23 0 [Note] InnoDB: Setting file './ibtmp1' size to 12.000MiB. Physically writing the file full; Please wait ...
+2023-06-04  8:24:23 0 [Note] InnoDB: File './ibtmp1' size is now 12.000MiB.
+2023-06-04  8:24:23 0 [Note] InnoDB: log sequence number 54530; transaction id 30
+2023-06-04  8:24:23 0 [Warning] InnoDB: Skipping buffer pool dump/restore during wsrep recovery.
+2023-06-04  8:24:23 0 [Note] Plugin 'FEEDBACK' is disabled.
+2023-06-04  8:24:23 0 [Note] Server socket created on IP: '0.0.0.0'.
+2023-06-04  8:24:23 0 [Note] WSREP: Recovered position: 15d9a0ef-02b1-11ee-9499-decd8e34642e:1
+Warning: Memory not freed: 280
+`),
+			want: Bootstrap{
+				UUID:  "15d9a0ef-02b1-11ee-9499-decd8e34642e",
+				Seqno: 1,
+			},
+			wantErr: false,
+		},
+		{
+			name: "multiple positions",
+			//nolint
+			bytes: []byte(`2023-06-04  8:24:16 0 [Note] Starting MariaDB 10.11.3-MariaDB-1:10.11.3+maria~ubu2204 source revision 0bb31039f54bd6a0dc8f0fc7d40e6b58a51998b0 as process 84826
+2023-06-04  8:24:16 0 [Note] InnoDB: Compressed tables use zlib 1.2.11
+2023-06-04  8:24:16 0 [Note] InnoDB: Number of transaction pools: 1
+2023-06-04  8:24:16 0 [Note] InnoDB: Using crc32 + pclmulqdq instructions
+2023-06-04  8:24:16 0 [Note] mariadbd: O_TMPFILE is not supported on /tmp (disabling future attempts)
+2023-06-04  8:24:16 0 [Note] InnoDB: Using liburing
+2023-06-04  8:24:16 0 [Note] InnoDB: Initializing buffer pool, total size = 128.000MiB, chunk size = 2.000MiB
+2023-06-04  8:24:16 0 [Note] InnoDB: Completed initialization of buffer pool
+2023-06-04  8:24:16 0 [Note] InnoDB: File system buffers for log disabled (block size=512 bytes)
+2023-06-04  8:24:16 0 [Note] InnoDB: Starting crash recovery from checkpoint LSN=46590
+2023-06-04  8:24:16 0 [Note] InnoDB: Starting final batch to recover 15 pages from redo log.
+2023-06-04  8:24:16 0 [Note] InnoDB: 128 rollback segments are active.
+2023-06-04  8:24:16 0 [Note] InnoDB: Removed temporary tablespace data file: "./ibtmp1"
+2023-06-04  8:24:16 0 [Note] InnoDB: Setting file './ibtmp1' size to 12.000MiB. Physically writing the file full; Please wait ...
+2023-06-04  8:24:16 0 [Note] InnoDB: File './ibtmp1' size is now 12.000MiB.
+2023-06-04  8:24:16 0 [Note] InnoDB: log sequence number 54202; transaction id 30
+2023-06-04  8:24:16 0 [Warning] InnoDB: Skipping buffer pool dump/restore during wsrep recovery.
+2023-06-04  8:24:16 0 [Note] Plugin 'FEEDBACK' is disabled.
+2023-06-04  8:24:16 0 [Note] Recovering after a crash using tc.log
+2023-06-04  8:24:16 0 [Note] Starting table crash recovery...
+2023-06-04  8:24:16 0 [Note] Crash table recovery finished.
+2023-06-04  8:24:16 0 [Note] Server socket created on IP: '0.0.0.0'.
+2023-06-04  8:24:16 0 [Note] WSREP: Recovered position: 15d9a0ef-02b1-11ee-9499-decd8e34642e:1
+Warning: Memory not freed: 280
+2023-06-04  8:24:17 0 [Note] Starting MariaDB 10.11.3-MariaDB-1:10.11.3+maria~ubu2204 source revision 0bb31039f54bd6a0dc8f0fc7d40e6b58a51998b0 as process 85132
+2023-06-04  8:24:17 0 [Note] InnoDB: Compressed tables use zlib 1.2.11
+2023-06-04  8:24:17 0 [Note] InnoDB: Number of transaction pools: 1
+2023-06-04  8:24:17 0 [Note] InnoDB: Using crc32 + pclmulqdq instructions
+2023-06-04  8:24:17 0 [Note] mariadbd: O_TMPFILE is not supported on /tmp (disabling future attempts)
+2023-06-04  8:24:17 0 [Note] InnoDB: Using liburing
+2023-06-04  8:24:17 0 [Note] InnoDB: Initializing buffer pool, total size = 128.000MiB, chunk size = 2.000MiB
+2023-06-04  8:24:17 0 [Note] InnoDB: Completed initialization of buffer pool
+2023-06-04  8:24:17 0 [Note] InnoDB: File system buffers for log disabled (block size=512 bytes)
+2023-06-04  8:24:17 0 [Note] InnoDB: 128 rollback segments are active.
+2023-06-04  8:24:17 0 [Note] InnoDB: Setting file './ibtmp1' size to 12.000MiB. Physically writing the file full; Please wait ...
+2023-06-04  8:24:17 0 [Note] InnoDB: File './ibtmp1' size is now 12.000MiB.
+2023-06-04  8:24:17 0 [Note] InnoDB: log sequence number 54530; transaction id 30
+2023-06-04  8:24:17 0 [Warning] InnoDB: Skipping buffer pool dump/restore during wsrep recovery.
+2023-06-04  8:24:17 0 [Note] Plugin 'FEEDBACK' is disabled.
+2023-06-04  8:24:17 0 [Note] Server socket created on IP: '0.0.0.0'.
+2023-06-04  8:24:17 0 [Note] WSREP: Recovered position: 0794bb7b-0614-41cd-8301-4fe1d55a1f60:2
+Warning: Memory not freed: 280
+2023-06-04  8:24:18 0 [Note] Starting MariaDB 10.11.3-MariaDB-1:10.11.3+maria~ubu2204 source revision 0bb31039f54bd6a0dc8f0fc7d40e6b58a51998b0 as process 85425
+2023-06-04  8:24:18 0 [Note] InnoDB: Compressed tables use zlib 1.2.11
+2023-06-04  8:24:18 0 [Note] InnoDB: Number of transaction pools: 1
+2023-06-04  8:24:18 0 [Note] InnoDB: Using crc32 + pclmulqdq instructions
+2023-06-04  8:24:18 0 [Note] mariadbd: O_TMPFILE is not supported on /tmp (disabling future attempts)
+2023-06-04  8:24:18 0 [Note] InnoDB: Using liburing
+2023-06-04  8:24:18 0 [Note] InnoDB: Initializing buffer pool, total size = 128.000MiB, chunk size = 2.000MiB
+2023-06-04  8:24:18 0 [Note] InnoDB: Completed initialization of buffer pool
+2023-06-04  8:24:18 0 [Note] InnoDB: File system buffers for log disabled (block size=512 bytes)
+2023-06-04  8:24:18 0 [Note] InnoDB: 128 rollback segments are active.
+2023-06-04  8:24:18 0 [Note] InnoDB: Setting file './ibtmp1' size to 12.000MiB. Physically writing the file full; Please wait ...
+2023-06-04  8:24:18 0 [Note] InnoDB: File './ibtmp1' size is now 12.000MiB.
+2023-06-04  8:24:18 0 [Note] InnoDB: log sequence number 54530; transaction id 30
+2023-06-04  8:24:18 0 [Warning] InnoDB: Skipping buffer pool dump/restore during wsrep recovery.
+2023-06-04  8:24:18 0 [Note] Plugin 'FEEDBACK' is disabled.
+2023-06-04  8:24:18 0 [Note] Server socket created on IP: '0.0.0.0'.
+2023-06-04  8:24:18 0 [Note] WSREP: Recovered position: 08dd3b99-ac6b-46f8-84bd-8cb8f9f949b0:3
+Warning: Memory not freed: 280	
+`),
+			want: Bootstrap{
+				UUID:  "08dd3b99-ac6b-46f8-84bd-8cb8f9f949b0",
+				Seqno: 3,
+			},
+			wantErr: false,
+		},
+	}
+
+	for _, tt := range tests {
+		t.Run(tt.name, func(t *testing.T) {
+			var bootstrap Bootstrap
+			err := bootstrap.Unmarshal(tt.bytes)
+			if tt.wantErr && err == nil {
+				t.Fatal("error expected, got nil")
+			}
+			if !tt.wantErr && err != nil {
+				t.Fatalf("error unexpected, got %v", err)
+			}
+			if !reflect.DeepEqual(tt.want, bootstrap) {
+				t.Fatalf("unexpected result:\nexpected:\n%v\ngot:\n%v\n", tt.want, bootstrap)
+			}
+		})
+	}
+}
diff --git a/pkg/handler/bootstrap/bootstrap.go b/pkg/handler/bootstrap/bootstrap.go
new file mode 100644
index 0000000..9f6005d
--- /dev/null
+++ b/pkg/handler/bootstrap/bootstrap.go
@@ -0,0 +1,139 @@
+package bootstrap
+
+import (
+	"encoding/json"
+	"errors"
+	"fmt"
+	"net/http"
+	"os"
+	"sync"
+	"time"
+
+	"github.com/go-logr/logr"
+	agenterrors "github.com/mariadb-operator/agent/pkg/errors"
+	"github.com/mariadb-operator/agent/pkg/filemanager"
+	"github.com/mariadb-operator/agent/pkg/galera"
+	"github.com/mariadb-operator/agent/pkg/mariadbd"
+	"github.com/mariadb-operator/agent/pkg/responsewriter"
+)
+
+var (
+	defaultMariadbdReloadOpts = mariadbd.ReloadOptions{
+		Retries:   10,
+		WaitRetry: 1 * time.Second,
+	}
+)
+
+type Bootstrap struct {
+	fileManager           *filemanager.FileManager
+	responseWriter        *responsewriter.ResponseWriter
+	locker                sync.Locker
+	logger                *logr.Logger
+	mariadbdReloadOptions *mariadbd.ReloadOptions
+}
+
+type Option func(*Bootstrap)
+
+func WithMariadbdReload(opts *mariadbd.ReloadOptions) Option {
+	return func(b *Bootstrap) {
+		b.mariadbdReloadOptions = opts
+	}
+}
+
+func NewBootstrap(fileManager *filemanager.FileManager, responseWriter *responsewriter.ResponseWriter, locker sync.Locker,
+	logger *logr.Logger, opts ...Option) *Bootstrap {
+	bootstrap := &Bootstrap{
+		fileManager:           fileManager,
+		responseWriter:        responseWriter,
+		locker:                locker,
+		logger:                logger,
+		mariadbdReloadOptions: &defaultMariadbdReloadOpts,
+	}
+	for _, setOpts := range opts {
+		setOpts(bootstrap)
+	}
+	return bootstrap
+}
+
+func (b *Bootstrap) Put(w http.ResponseWriter, r *http.Request) {
+	var bootstrap galera.Bootstrap
+	if err := json.NewDecoder(r.Body).Decode(&bootstrap); err != nil {
+		b.responseWriter.Write(w, agenterrors.NewAPIErrorf("error decoding bootstrap: %v", err), http.StatusBadRequest)
+		return
+	}
+	if err := bootstrap.Validate(); err != nil {
+		b.responseWriter.Write(w, agenterrors.NewAPIErrorf("invalid bootstrap: %v", err), http.StatusBadRequest)
+		return
+	}
+	b.locker.Lock()
+	defer b.locker.Unlock()
+	b.logger.V(1).Info("enabling bootstrap")
+
+	if err := b.fileManager.DeleteConfigFile(galera.RecoveryFileName); err != nil && !os.IsNotExist(err) {
+		b.responseWriter.WriteErrorf(w, "error deleting existing recovery config: %v", err)
+		return
+	}
+
+	if err := b.setSafeToBootstrap(&bootstrap); err != nil {
+		b.responseWriter.WriteErrorf(w, "error setting safe to bootstrap: %v", err)
+		return
+	}
+
+	if err := b.fileManager.WriteConfigFile(galera.BootstrapFileName, []byte(galera.BootstrapFile)); err != nil {
+		b.responseWriter.WriteErrorf(w, "error writing bootstrap config: %v", err)
+		return
+	}
+
+	b.logger.Info("reloading mariadbd process")
+	if err := mariadbd.ReloadWithOptions(b.mariadbdReloadOptions); err != nil {
+		b.responseWriter.WriteErrorf(w, "error reloading mariadbd process: %v", err)
+		return
+	}
+	b.logger.Info("mariadbd process reloaded")
+
+	w.WriteHeader(http.StatusOK)
+}
+
+func (b *Bootstrap) Delete(w http.ResponseWriter, r *http.Request) {
+	b.locker.Lock()
+	defer b.locker.Unlock()
+	b.logger.V(1).Info("disabling bootstrap")
+
+	if err := b.fileManager.DeleteConfigFile(galera.BootstrapFileName); err != nil {
+		if os.IsNotExist(err) {
+			b.responseWriter.Write(w, agenterrors.NewAPIError("bootstrap config not found"), http.StatusNotFound)
+			return
+		}
+		b.responseWriter.WriteErrorf(w, "error deleting bootstrap config: %v", err)
+		return
+	}
+	w.WriteHeader(http.StatusOK)
+}
+
+func (b *Bootstrap) setSafeToBootstrap(bootstrap *galera.Bootstrap) error {
+	bytes, err := b.fileManager.ReadStateFile(galera.GaleraStateFileName)
+	if err != nil {
+		if os.IsNotExist(err) {
+			return errors.New("galera state does not exist")
+		}
+		return fmt.Errorf("error reading galera state: %v", err)
+	}
+
+	var galeraState galera.GaleraState
+	if err := galeraState.Unmarshal(bytes); err != nil {
+		return fmt.Errorf("error unmarshaling galera state: %v", err)
+	}
+
+	galeraState.UUID = bootstrap.UUID
+	galeraState.Seqno = bootstrap.Seqno
+	galeraState.SafeToBootstrap = true
+	bytes, err = galeraState.Marshal()
+	if err != nil {
+		return fmt.Errorf("error marshaling galera state: %v", err)
+	}
+
+	if err := b.fileManager.WriteStateFile(galera.GaleraStateFileName, bytes); err != nil {
+		return fmt.Errorf("error writing galera state: %v", err)
+	}
+	return nil
+}
diff --git a/pkg/handler/galerastate/galerastate.go b/pkg/handler/galerastate/galerastate.go
new file mode 100644
index 0000000..fb50c37
--- /dev/null
+++ b/pkg/handler/galerastate/galerastate.go
@@ -0,0 +1,53 @@
+package galerastate
+
+import (
+	"net/http"
+	"os"
+	"sync"
+
+	"github.com/go-logr/logr"
+	"github.com/mariadb-operator/agent/pkg/errors"
+	"github.com/mariadb-operator/agent/pkg/filemanager"
+	"github.com/mariadb-operator/agent/pkg/galera"
+	"github.com/mariadb-operator/agent/pkg/responsewriter"
+)
+
+type GaleraState struct {
+	fileManager    *filemanager.FileManager
+	responseWriter *responsewriter.ResponseWriter
+	locker         sync.Locker
+	logger         *logr.Logger
+}
+
+func NewGaleraState(fileManager *filemanager.FileManager, responseWriter *responsewriter.ResponseWriter, locker sync.Locker,
+	logger *logr.Logger) *GaleraState {
+	return &GaleraState{
+		fileManager:    fileManager,
+		responseWriter: responseWriter,
+		locker:         locker,
+		logger:         logger,
+	}
+}
+
+func (g *GaleraState) Get(w http.ResponseWriter, r *http.Request) {
+	g.locker.Lock()
+	defer g.locker.Unlock()
+	g.logger.V(1).Info("getting galera state")
+
+	bytes, err := g.fileManager.ReadStateFile(galera.GaleraStateFileName)
+	if err != nil {
+		if os.IsNotExist(err) {
+			g.responseWriter.Write(w, errors.NewAPIError("galera state not found"), http.StatusNotFound)
+			return
+		}
+		g.responseWriter.WriteErrorf(w, "error reading galera state: %v", err)
+		return
+	}
+
+	var galeraState galera.GaleraState
+	if err := galeraState.Unmarshal(bytes); err != nil {
+		g.responseWriter.WriteErrorf(w, "error unmarshaling galera state: %v", err)
+		return
+	}
+	g.responseWriter.WriteOK(w, galeraState)
+}
diff --git a/pkg/handler/handler.go b/pkg/handler/handler.go
new file mode 100644
index 0000000..80ea881
--- /dev/null
+++ b/pkg/handler/handler.go
@@ -0,0 +1,76 @@
+package handler
+
+import (
+	"sync"
+
+	"github.com/go-logr/logr"
+	"github.com/mariadb-operator/agent/pkg/filemanager"
+	"github.com/mariadb-operator/agent/pkg/handler/bootstrap"
+	"github.com/mariadb-operator/agent/pkg/handler/galerastate"
+	"github.com/mariadb-operator/agent/pkg/handler/recovery"
+	"github.com/mariadb-operator/agent/pkg/responsewriter"
+)
+
+type Handler struct {
+	Bootstrap   *bootstrap.Bootstrap
+	GaleraState *galerastate.GaleraState
+	Recovery    *recovery.Recovery
+}
+
+type Options struct {
+	bootstrap []bootstrap.Option
+	recovery  []recovery.Option
+}
+
+type Option func(*Options)
+
+func WithBootstrapOptions(opts ...bootstrap.Option) Option {
+	return func(o *Options) {
+		o.bootstrap = append(o.bootstrap, opts...)
+	}
+}
+
+func WithRecoveryOptions(opts ...recovery.Option) Option {
+	return func(o *Options) {
+		o.recovery = append(o.recovery, opts...)
+	}
+}
+
+func NewHandler(fileManager *filemanager.FileManager, logger *logr.Logger, handlerOpts ...Option) *Handler {
+	opts := &Options{}
+	for _, setOpts := range handlerOpts {
+		setOpts(opts)
+	}
+
+	mux := &sync.RWMutex{}
+	bootstrapLogger := logger.WithName("bootstrap")
+	galeraStateLogger := logger.WithName("galerastate")
+	recoveryLogger := logger.WithName("recovery")
+
+	bootstrap := bootstrap.NewBootstrap(
+		fileManager,
+		responsewriter.NewResponseWriter(&bootstrapLogger),
+		mux,
+		&bootstrapLogger,
+		opts.bootstrap...,
+	)
+	galerastate := galerastate.NewGaleraState(
+		fileManager,
+		responsewriter.NewResponseWriter(&galeraStateLogger),
+		mux.RLocker(),
+		&galeraStateLogger,
+	)
+	recovery := recovery.NewRecover(
+		fileManager,
+		responsewriter.NewResponseWriter(&recoveryLogger),
+		mux,
+		&recoveryLogger,
+		opts.recovery...,
+	)
+
+	return &Handler{
+		Bootstrap:   bootstrap,
+		GaleraState: galerastate,
+		Recovery:    recovery,
+	}
+}
diff --git a/pkg/handler/recovery/recovery.go b/pkg/handler/recovery/recovery.go
new file mode 100644
index 0000000..dec9a2a
--- /dev/null
+++ b/pkg/handler/recovery/recovery.go
@@ -0,0 +1,146 @@
+package recovery
+
+import (
+	"fmt"
+	"net/http"
+	"os"
+	"sync"
+	"time"
+
+	"github.com/go-logr/logr"
+	"github.com/mariadb-operator/agent/pkg/errors"
+	"github.com/mariadb-operator/agent/pkg/filemanager"
+	"github.com/mariadb-operator/agent/pkg/galera"
+	"github.com/mariadb-operator/agent/pkg/mariadbd"
+	"github.com/mariadb-operator/agent/pkg/responsewriter"
+)
+
+var (
+	defaultMariadbdReloadOpts = mariadbd.ReloadOptions{
+		Retries:   3,
+		WaitRetry: 1 * time.Second,
+	}
+	defaultRecoveryOpts = RecoveryOptions{
+		Retries:   10,
+		WaitRetry: 3 * time.Second,
+	}
+)
+
+type RecoveryOptions struct {
+	Retries   int
+	WaitRetry time.Duration
+}
+
+type Recovery struct {
+	fileManager           *filemanager.FileManager
+	responseWriter        *responsewriter.ResponseWriter
+	locker                sync.Locker
+	logger                *logr.Logger
+	mariadbdReloadOptions *mariadbd.ReloadOptions
+	recoveryOptions       *RecoveryOptions
+}
+
+type Option func(*Recovery)
+
+func WithMariadbdReload(opts *mariadbd.ReloadOptions) Option {
+	return func(b *Recovery) {
+		b.mariadbdReloadOptions = opts
+	}
+}
+
+func WithRecovery(opts *RecoveryOptions) Option {
+	return func(r *Recovery) {
+		r.recoveryOptions = opts
+	}
+}
+
+func NewRecover(fileManager *filemanager.FileManager, responseWriter *responsewriter.ResponseWriter, locker sync.Locker,
+	logger *logr.Logger, opts ...Option) *Recovery {
+	recovery := &Recovery{
+		fileManager:           fileManager,
+		responseWriter:        responseWriter,
+		locker:                locker,
+		logger:                logger,
+		mariadbdReloadOptions: &defaultMariadbdReloadOpts,
+		recoveryOptions:       &defaultRecoveryOpts,
+	}
+	for _, setOpts := range opts {
+		setOpts(recovery)
+	}
+	return recovery
+}
+
+func (r *Recovery) Put(w http.ResponseWriter, req *http.Request) {
+	r.locker.Lock()
+	defer r.locker.Unlock()
+	r.logger.V(1).Info("starting recovery")
+
+	if err := r.fileManager.DeleteConfigFile(galera.BootstrapFileName); err != nil && !os.IsNotExist(err) {
+		r.responseWriter.WriteErrorf(w, "error deleting existing bootstrap config: %v", err)
+		return
+	}
+
+	if err := r.fileManager.DeleteStateFile(galera.RecoveryLogFileName); err != nil && !os.IsNotExist(err) {
+		r.responseWriter.WriteErrorf(w, "error deleting existing recovery log: %v", err)
+		return
+	}
+
+	if err := r.fileManager.WriteConfigFile(galera.RecoveryFileName, []byte(galera.RecoveryFile)); err != nil {
+		r.responseWriter.WriteErrorf(w, "error writing recovery config: %v", err)
+		return
+	}
+
+	r.logger.Info("reloading mariadbd process")
+	if err := mariadbd.ReloadWithOptions(r.mariadbdReloadOptions); err != nil {
+		r.logger.Error(err, "error reloading mariadbd process")
+	} else {
+		r.logger.Info("mariadbd process reloaded")
+	}
+
+	bootstrap, err := r.recover()
+	if err != nil {
+		r.responseWriter.WriteErrorf(w, "error recovering galera: %v", err)
+		return
+	}
+
+	if err := r.fileManager.DeleteConfigFile(galera.RecoveryFileName); err != nil {
+		r.responseWriter.WriteErrorf(w, "error deleting recovery config: %v", err)
+		return
+	}
+
+	r.logger.V(1).Info("finished recovery")
+	r.responseWriter.WriteOK(w, bootstrap)
+}
+
+func (r *Recovery) Delete(w http.ResponseWriter, req *http.Request) {
+	if err := r.fileManager.DeleteConfigFile(galera.RecoveryFileName); err != nil {
+		if os.IsNotExist(err) {
+			r.responseWriter.Write(w, errors.NewAPIError("recovery config not found"), http.StatusNotFound)
+			return
+		}
+		r.responseWriter.WriteErrorf(w, "error deleting recovery config: %v", err)
+		return
+	}
+	w.WriteHeader(http.StatusOK)
+}
+
+func (r *Recovery) recover() (*galera.Bootstrap, error) {
+	for i := 0; i < r.recoveryOptions.Retries; i++ {
+		time.Sleep(r.recoveryOptions.WaitRetry)
+
+		bytes, err := r.fileManager.ReadStateFile(galera.RecoveryLogFileName)
+		if err != nil {
+			r.logger.Error(err, "error recovering galera from recovery log", "retry", i, "max-retries", r.recoveryOptions.Retries)
+			continue
+		}
+
+		var recover galera.Bootstrap
+		err = recover.Unmarshal(bytes)
+		if err == nil {
+			return &recover, nil
+		}
+
+		r.logger.Error(err, "error recovering galera from recovery log", "retry", i, "max-retries", r.recoveryOptions.Retries)
+	}
+	return nil, fmt.Errorf("maximum retries (%d) reached attempting to recover galera from recovery log", r.recoveryOptions.Retries)
+}
diff --git a/pkg/logger/logger.go b/pkg/logger/logger.go
new file mode 100644
index 0000000..e060df1
--- /dev/null
+++ b/pkg/logger/logger.go
@@ -0,0 +1,54 @@
+package logger
+
+import (
+	"fmt"
+
+	"github.com/go-logr/logr"
+	"go.uber.org/zap/zapcore"
+	"sigs.k8s.io/controller-runtime/pkg/log/zap"
+)
+
+type Option func(*zap.Options) error
+
+func WithLogLevel(level string) Option {
+	return func(o *zap.Options) error {
+		var lvl zapcore.Level
+		if err := lvl.UnmarshalText([]byte(level)); err != nil {
+			return err
+		}
+		o.Level = lvl
+		return nil
+	}
+}
+
+func WithTimeEncoder(encoder string) Option {
+	return func(o *zap.Options) error {
+		var enc zapcore.TimeEncoder
+		if err := enc.UnmarshalText([]byte(encoder)); err != nil {
+			return err
+		}
+		o.TimeEncoder = enc
+		return nil
+	}
+}
+
+func WithDevelopment(dev bool) Option {
+	return func(o *zap.Options) error {
+		o.Development = dev
+		return nil
+	}
+}
+
+func NewLogger(opts ...Option) (logr.Logger, error) {
+	zapOpts := zap.Options{
+		Level:       zapcore.InfoLevel,
+		TimeEncoder: zapcore.EpochTimeEncoder,
+		Development: false,
+	}
+	for _, setpOpt := range opts {
+		if err := setpOpt(&zapOpts); err != nil {
+			return logr.Logger{}, fmt.Errorf("error setting logger option: %v", err)
+		}
+	}
+	return zap.New(zap.UseFlagOptions(&zapOpts)), nil
+}
diff --git a/pkg/mariadbd/mariadbd.go b/pkg/mariadbd/mariadbd.go
new file mode 100644
index 0000000..f6578c5
--- /dev/null
+++ b/pkg/mariadbd/mariadbd.go
@@ -0,0 +1,52 @@
+package mariadbd
+
+import (
+	"errors"
+	"fmt"
+	"syscall"
+	"time"
+
+	"github.com/mitchellh/go-ps"
+)
+
+var (
+	mariadbdProcessName = "mariadbd"
+	reloadSysCall       = syscall.SIGKILL
+	errProcessNotFound  = fmt.Errorf("process '%s' not found", mariadbdProcessName)
+)
+
+func Reload() error {
+	processes, err := ps.Processes()
+	if err != nil {
+		return fmt.Errorf("error getting processes: %v", err)
+	}
+	for _, p := range processes {
+		if p.Executable() == mariadbdProcessName {
+			if err := syscall.Kill(p.Pid(), reloadSysCall); err != nil {
+				return fmt.Errorf("error sending kill signal to process '%s' with pid %d: %v", mariadbdProcessName, p.Pid(), err)
+			}
+			return nil
+		}
+	}
+	return errProcessNotFound
+}
+
+type ReloadOptions struct {
+	Retries   int
+	WaitRetry time.Duration
+}
+
+func ReloadWithOptions(opts *ReloadOptions) error {
+	for i := 0; i < opts.Retries; i++ {
+		err := Reload()
+		if err == nil {
+			return nil
+		}
+		if errors.Is(err, errProcessNotFound) {
+			time.Sleep(opts.WaitRetry)
+			continue
+		}
+		return err
+	}
+	return fmt.Errorf("maximum retries (%d) reached attempting to reload '%s' process", opts.Retries, mariadbdProcessName)
+}
diff --git a/pkg/responsewriter/responsewriter.go b/pkg/responsewriter/responsewriter.go
new file mode 100644
index 0000000..3b7db9f
--- /dev/null
+++ b/pkg/responsewriter/responsewriter.go
@@ -0,0 +1,40 @@
+package responsewriter
+
+import (
+	"encoding/json"
+	"net/http"
+
+	"github.com/go-logr/logr"
+	"github.com/mariadb-operator/agent/pkg/errors"
+)
+
+type ResponseWriter struct {
+	logger *logr.Logger
+}
+
+func NewResponseWriter(logger *logr.Logger) *ResponseWriter {
+	return &ResponseWriter{
+		logger: logger,
+	}
+}
+
+func (r *ResponseWriter) Write(w http.ResponseWriter, v any, statusCode int) {
+	w.Header().Set("Content-Type", "application/json")
+	w.WriteHeader(statusCode)
+	if err := json.NewEncoder(w).Encode(v); err != nil {
+		r.logger.Error(err, "error encoding json")
+		http.Error(w, "Internal server error", http.StatusInternalServerError)
+	}
+}
+
+func (r *ResponseWriter) WriteOK(w http.ResponseWriter, v any) {
+	r.Write(w, v, http.StatusOK)
+}
+
+func (r *ResponseWriter) WriteError(w http.ResponseWriter, msg string) {
+	r.Write(w, errors.NewAPIError(msg), http.StatusInternalServerError)
+}
+
+func (r *ResponseWriter) WriteErrorf(w http.ResponseWriter, format string, a ...any) {
+	r.Write(w, errors.NewAPIErrorf(format, a...), http.StatusInternalServerError)
+}
diff --git a/pkg/router/router.go b/pkg/router/router.go
new file mode 100644
index 0000000..b5fa4c3
--- /dev/null
+++ b/pkg/router/router.go
@@ -0,0 +1,71 @@
+package router
+
+import (
+	"net/http"
+	"time"
+
+	chi "github.com/go-chi/chi/v5"
+	middleware "github.com/go-chi/chi/v5/middleware"
+	"github.com/go-chi/httprate"
+	"github.com/mariadb-operator/agent/pkg/handler"
+)
+
+type Options struct {
+	CompressLevel     int
+	RateLimitRequests int
+	RateLimitDuration time.Duration
+}
+
+type Option func(*Options)
+
+func WithCompressLevel(level int) Option {
+	return func(o *Options) {
+		o.CompressLevel = level
+	}
+}
+
+func WithRateLimit(requests int, duration time.Duration) Option {
+	return func(o *Options) {
+		o.RateLimitRequests = requests
+		o.RateLimitDuration = duration
+	}
+}
+
+func NewRouter(handler *handler.Handler, opts ...Option) http.Handler {
+	routerOpts := Options{
+		CompressLevel:     5,
+		RateLimitRequests: 100,
+		RateLimitDuration: 1 * time.Minute,
+	}
+	for _, setOpt := range opts {
+		setOpt(&routerOpts)
+	}
+	r := chi.NewRouter()
+	r.Use(middleware.Compress(routerOpts.CompressLevel))
+	r.Use(middleware.Logger)
+	r.Use(middleware.Recoverer)
+
+	r.Get("/health", func(w http.ResponseWriter, r *http.Request) {
+		w.WriteHeader(http.StatusOK)
+	})
+	r.Mount("/api", apiRouter(handler, &routerOpts))
+
+	return r
+}
+
+func apiRouter(h *handler.Handler, opts *Options) http.Handler {
+	r := chi.NewRouter()
+	r.Use(httprate.LimitAll(opts.RateLimitRequests, opts.RateLimitDuration))
+
+	r.Route("/bootstrap", func(r chi.Router) {
+		r.Put("/", h.Bootstrap.Put)
+		r.Delete("/", h.Bootstrap.Delete)
+	})
+	r.Get("/galerastate", h.GaleraState.Get)
+	r.Route("/recovery", func(r chi.Router) {
+		r.Put("/", h.Recovery.Put)
+		r.Delete("/", h.Recovery.Delete)
+	})
+
+	return r
+}
diff --git a/pkg/server/server.go b/pkg/server/server.go
new file mode 100644
index 0000000..27881ca
--- /dev/null
+++ b/pkg/server/server.go
@@ -0,0 +1,57 @@
+package server
+
+import (
+	"context"
+	"fmt"
+	"net/http"
+	"os"
+	"os/signal"
+	"syscall"
+
+	"github.com/go-logr/logr"
+)
+
+type Server struct {
+	httpServer *http.Server
+	logger     *logr.Logger
+}
+
+func NewServer(addr string, handler http.Handler, logger *logr.Logger) *Server {
+	return &Server{
+		httpServer: &http.Server{
+			Addr:    addr,
+			Handler: handler,
+		},
+		logger: logger,
+	}
+}
+
+func (s *Server) Start(ctx context.Context) error {
+	serverContext, stopServer := context.WithCancel(ctx)
+	errChan := make(chan error)
+
+	sig := make(chan os.Signal, 1)
+	signal.Notify(sig, syscall.SIGHUP, syscall.SIGINT, syscall.SIGTERM, syscall.SIGQUIT)
+
+	go func() {
+		<-sig
+		defer stopServer()
+
+		s.logger.Info("shutting down server")
+		if err := s.httpServer.Shutdown(serverContext); err != nil {
+			errChan <- fmt.Errorf("error shutting down server: %v", err)
+		}
+	}()
+
+	s.logger.Info("server listening", "addr", s.httpServer.Addr)
+	if err := s.httpServer.ListenAndServe(); err != http.ErrServerClosed {
+		errChan <- fmt.Errorf("error starting server: %v", err)
+	}
+
+	select {
+	case <-serverContext.Done():
+		return nil
+	case err := <-errChan:
+		return err
+	}
+}