feat: install dragonfly

[martinohmann]

Updates #670

[github-actions]

kustomization changes in kubernetes/main

--- kubernetes/main/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/dragonfly

+++ kubernetes/main/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/dragonfly

@@ -0,0 +1,32 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: cluster-apps
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dragonfly
+  namespace: flux-system
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: dragonfly
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  interval: 2h
+  path: ./kubernetes/main/apps/database/dragonfly/app
+  postBuild:
+    substituteFrom:
+    - kind: Secret
+      name: cluster-secrets
+  prune: true
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  targetNamespace: database
+  timeout: 5m
+  wait: true
+
--- kubernetes/main/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/dragonfly-cluster

+++ kubernetes/main/apps Kustomization: flux-system/cluster-apps Kustomization: flux-system/dragonfly-cluster

@@ -0,0 +1,34 @@

+---
+apiVersion: kustomize.toolkit.fluxcd.io/v1
+kind: Kustomization
+metadata:
+  labels:
+    kustomize.toolkit.fluxcd.io/name: cluster-apps
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dragonfly-cluster
+  namespace: flux-system
+spec:
+  commonMetadata:
+    labels:
+      app.kubernetes.io/name: dragonfly-cluster
+  decryption:
+    provider: sops
+    secretRef:
+      name: sops-age
+  dependsOn:
+  - name: dragonfly
+  interval: 2h
+  path: ./kubernetes/main/apps/database/dragonfly/cluster
+  postBuild:
+    substituteFrom:
+    - kind: Secret
+      name: cluster-secrets
+  prune: true
+  retryInterval: 1m
+  sourceRef:
+    kind: GitRepository
+    name: home-kubernetes
+  targetNamespace: database
+  timeout: 5m
+  wait: true
+
--- kubernetes/main/apps/database/dragonfly/app Kustomization: flux-system/dragonfly HelmRelease: database/dragonfly-operator

+++ kubernetes/main/apps/database/dragonfly/app Kustomization: flux-system/dragonfly HelmRelease: database/dragonfly-operator

@@ -0,0 +1,111 @@

+---
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  labels:
+    app.kubernetes.io/name: dragonfly
+    kustomize.toolkit.fluxcd.io/name: dragonfly
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dragonfly-operator
+  namespace: database
+spec:
+  chart:
+    spec:
+      chart: app-template
+      sourceRef:
+        kind: HelmRepository
+        name: bjw-s
+        namespace: flux-system
+      version: 3.2.1
+  install:
+    remediation:
+      retries: 3
+  interval: 2h
+  upgrade:
+    cleanupOnFail: true
+    remediation:
+      retries: 3
+      strategy: rollback
+  values:
+    controllers:
+      dragonfly-operator:
+        containers:
+          app:
+            args:
+            - --health-probe-bind-address=:8081
+            - --metrics-bind-address=:8080
+            command:
+            - /manager
+            image:
+              repository: ghcr.io/dragonflydb/operator
+              tag: v1.1.2@sha256:f0d76725950095ac65b36252e0042d339d1db9b181b1d068f4b6686ea93055e4
+            probes:
+              liveness:
+                custom: true
+                enabled: true
+                spec:
+                  failureThreshold: 3
+                  httpGet:
+                    path: /healthz
+                    port: 8081
+                  initialDelaySeconds: 15
+                  periodSeconds: 20
+                  timeoutSeconds: 1
+              readiness:
+                custom: true
+                enabled: true
+                spec:
+                  failureThreshold: 3
+                  httpGet:
+                    path: /readyz
+                    port: 8081
+                  initialDelaySeconds: 5
+                  periodSeconds: 10
+                  timeoutSeconds: 1
+            resources:
+              limits:
+                memory: 128Mi
+              requests:
+                cpu: 10m
+            securityContext:
+              allowPrivilegeEscalation: false
+              capabilities:
+                drop:
+                - ALL
+              readOnlyRootFilesystem: true
+        strategy: RollingUpdate
+    defaultPodOptions:
+      securityContext:
+        runAsGroup: 65534
+        runAsNonRoot: true
+        runAsUser: 65534
+        seccompProfile:
+          type: RuntimeDefault
+      topologySpreadConstraints:
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/name: dragonfly-operator
+        maxSkew: 1
+        topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: DoNotSchedule
+    service:
+      app:
+        controller: dragonfly-operator
+        ports:
+          http:
+            port: 8081
+          metrics:
+            port: 8080
+    serviceAccount:
+      create: true
+      name: dragonfly-operator
+    serviceMonitor:
+      app:
+        endpoints:
+        - interval: 1m
+          path: /metrics
+          port: metrics
+          scheme: http
+          scrapeTimeout: 10s
+        serviceName: dragonfly-operator
+
--- kubernetes/main/apps/database/dragonfly/app Kustomization: flux-system/dragonfly ClusterRole: flux-system/dragonfly-operator

+++ kubernetes/main/apps/database/dragonfly/app Kustomization: flux-system/dragonfly ClusterRole: flux-system/dragonfly-operator

@@ -0,0 +1,81 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  labels:
+    app.kubernetes.io/name: dragonfly
+    kustomize.toolkit.fluxcd.io/name: dragonfly
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dragonfly-operator
+rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - get
+  - list
+  - watch
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ''
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+- apiGroups:
+  - ''
+  resources:
+  - pods
+  - services
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - apps
+  resources:
+  - statefulsets
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - dragonflydb.io
+  resources:
+  - dragonflies
+  verbs:
+  - create
+  - delete
+  - get
+  - list
+  - patch
+  - update
+  - watch
+- apiGroups:
+  - dragonflydb.io
+  resources:
+  - dragonflies/finalizers
+  verbs:
+  - update
+- apiGroups:
+  - dragonflydb.io
+  resources:
+  - dragonflies/status
+  verbs:
+  - get
+  - patch
+  - update
+
--- kubernetes/main/apps/database/dragonfly/app Kustomization: flux-system/dragonfly ClusterRoleBinding: flux-system/dragonfly-operator

+++ kubernetes/main/apps/database/dragonfly/app Kustomization: flux-system/dragonfly ClusterRoleBinding: flux-system/dragonfly-operator

@@ -0,0 +1,18 @@

+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  labels:
+    app.kubernetes.io/name: dragonfly
+    kustomize.toolkit.fluxcd.io/name: dragonfly
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dragonfly-operator
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: dragonfly-operator
+subjects:
+- kind: ServiceAccount
+  name: dragonfly-operator
+  namespace: database
+
--- kubernetes/main/apps/database/dragonfly/cluster Kustomization: flux-system/dragonfly-cluster Dragonfly: database/dragonfly

+++ kubernetes/main/apps/database/dragonfly/cluster Kustomization: flux-system/dragonfly-cluster Dragonfly: database/dragonfly

@@ -0,0 +1,37 @@

+---
+apiVersion: dragonflydb.io/v1alpha1
+kind: Dragonfly
+metadata:
+  labels:
+    app.kubernetes.io/name: dragonfly-cluster
+    kustomize.toolkit.fluxcd.io/name: dragonfly-cluster
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dragonfly
+  namespace: database
+spec:
+  args:
+  - --maxmemory=$(MAX_MEMORY)Mi
+  - --proactor_threads=2
+  - --cluster_mode=emulated
+  - --lock_on_hashtags
+  env:
+  - name: MAX_MEMORY
+    valueFrom:
+      resourceFieldRef:
+        divisor: 1Mi
+        resource: limits.memory
+  image: ghcr.io/dragonflydb/dragonfly:v1.18.1
+  replicas: 3
+  resources:
+    limits:
+      memory: 512Mi
+    requests:
+      cpu: 100m
+  topologySpreadConstraints:
+  - labelSelector:
+      matchLabels:
+        app.kubernetes.io/part-of: dragonfly
+    maxSkew: 1
+    topologyKey: kubernetes.io/hostname
+    whenUnsatisfiable: DoNotSchedule
+
--- kubernetes/main/apps/database/dragonfly/cluster Kustomization: flux-system/dragonfly-cluster PodMonitor: database/dragonfly

+++ kubernetes/main/apps/database/dragonfly/cluster Kustomization: flux-system/dragonfly-cluster PodMonitor: database/dragonfly

@@ -0,0 +1,19 @@

+---
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  labels:
+    app.kubernetes.io/name: dragonfly-cluster
+    kustomize.toolkit.fluxcd.io/name: dragonfly-cluster
+    kustomize.toolkit.fluxcd.io/namespace: flux-system
+  name: dragonfly
+  namespace: database
+spec:
+  podMetricsEndpoints:
+  - port: admin
+  podTargetLabels:
+  - app
+  selector:
+    matchLabels:
+      app: dragonfly
+

[github-actions]

helmrelease changes in kubernetes/main

--- HelmRelease: database/dragonfly-operator ServiceAccount: database/dragonfly-operator

+++ HelmRelease: database/dragonfly-operator ServiceAccount: database/dragonfly-operator

@@ -0,0 +1,12 @@

+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: dragonfly-operator
+  labels:
+    app.kubernetes.io/instance: dragonfly-operator
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: dragonfly-operator
+secrets:
+- name: dragonfly-operator-sa-token
+
--- HelmRelease: database/dragonfly-operator Service: database/dragonfly-operator

+++ HelmRelease: database/dragonfly-operator Service: database/dragonfly-operator

@@ -0,0 +1,26 @@

+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: dragonfly-operator
+  labels:
+    app.kubernetes.io/instance: dragonfly-operator
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: dragonfly-operator
+    app.kubernetes.io/service: dragonfly-operator
+spec:
+  type: ClusterIP
+  ports:
+  - port: 8081
+    targetPort: 8081
+    protocol: TCP
+    name: http
+  - port: 8080
+    targetPort: 8080
+    protocol: TCP
+    name: metrics
+  selector:
+    app.kubernetes.io/component: dragonfly-operator
+    app.kubernetes.io/instance: dragonfly-operator
+    app.kubernetes.io/name: dragonfly-operator
+
--- HelmRelease: database/dragonfly-operator Deployment: database/dragonfly-operator

+++ HelmRelease: database/dragonfly-operator Deployment: database/dragonfly-operator

@@ -0,0 +1,85 @@

+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: dragonfly-operator
+  labels:
+    app.kubernetes.io/component: dragonfly-operator
+    app.kubernetes.io/instance: dragonfly-operator
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: dragonfly-operator
+spec:
+  revisionHistoryLimit: 3
+  replicas: 1
+  strategy:
+    type: RollingUpdate
+  selector:
+    matchLabels:
+      app.kubernetes.io/component: dragonfly-operator
+      app.kubernetes.io/name: dragonfly-operator
+      app.kubernetes.io/instance: dragonfly-operator
+  template:
+    metadata:
+      annotations:
+        checksum/secrets: 4141e6981f3b767e75a4e744858b9ff414dba5d0ef6afd761f7700061fb6e32e
+      labels:
+        app.kubernetes.io/component: dragonfly-operator
+        app.kubernetes.io/instance: dragonfly-operator
+        app.kubernetes.io/name: dragonfly-operator
+    spec:
+      enableServiceLinks: false
+      serviceAccountName: dragonfly-operator
+      automountServiceAccountToken: true
+      securityContext:
+        runAsGroup: 65534
+        runAsNonRoot: true
+        runAsUser: 65534
+        seccompProfile:
+          type: RuntimeDefault
+      hostIPC: false
+      hostNetwork: false
+      hostPID: false
+      dnsPolicy: ClusterFirst
+      topologySpreadConstraints:
+      - labelSelector:
+          matchLabels:
+            app.kubernetes.io/name: dragonfly-operator
+        maxSkew: 1
+        topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: DoNotSchedule
+      containers:
+      - args:
+        - --health-probe-bind-address=:8081
+        - --metrics-bind-address=:8080
+        command:
+        - /manager
+        image: ghcr.io/dragonflydb/operator:v1.1.2@sha256:f0d76725950095ac65b36252e0042d339d1db9b181b1d068f4b6686ea93055e4
+        livenessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /healthz
+            port: 8081
+          initialDelaySeconds: 15
+          periodSeconds: 20
+          timeoutSeconds: 1
+        name: app
+        readinessProbe:
+          failureThreshold: 3
+          httpGet:
+            path: /readyz
+            port: 8081
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          timeoutSeconds: 1
+        resources:
+          limits:
+            memory: 128Mi
+          requests:
+            cpu: 10m
+        securityContext:
+          allowPrivilegeEscalation: false
+          capabilities:
+            drop:
+            - ALL
+          readOnlyRootFilesystem: true
+
--- HelmRelease: database/dragonfly-operator ServiceMonitor: database/dragonfly-operator

+++ HelmRelease: database/dragonfly-operator ServiceMonitor: database/dragonfly-operator

@@ -0,0 +1,26 @@

+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: dragonfly-operator
+  labels:
+    app.kubernetes.io/instance: dragonfly-operator
+    app.kubernetes.io/managed-by: Helm
+    app.kubernetes.io/name: dragonfly-operator
+spec:
+  jobLabel: dragonfly-operator
+  namespaceSelector:
+    matchNames:
+    - database
+  selector:
+    matchLabels:
+      app.kubernetes.io/service: dragonfly-operator
+      app.kubernetes.io/name: dragonfly-operator
+      app.kubernetes.io/instance: dragonfly-operator
+  endpoints:
+  - interval: 1m
+    path: /metrics
+    port: metrics
+    scheme: http
+    scrapeTimeout: 10s
+