add persistenmce for SQLite database

Signed-off-by: heidmann <carsten.heidmann@disy.net>

Author: stranljip

helmchart/geohealthcheck/README.md

@@ -17,7 +17,7 @@ A Helm chart for GeoHealthCheck
 | geohealthcheck.adminEmail | string | `"you@example.com"` | email address of administrator / contact- notification emails will come from this address |
 | geohealthcheck.auth.secret | string | `"changeme"` | secret key to set when enabling authentication |
 | geohealthcheck.basicAuthDisabled | string | `"False"` | disable Basic Authentication to access GHC webapp and APIs (default: False), |
-| geohealthcheck.databaseUri | string | `"sqlite:///data.db"` | database connection string for SQL-Alchemy valid examples are: SQLite: 'sqlite:///data.db' PostgreSQL: 'postgresql+psycopg2://scott:tiger@localhost:5432/mydatabase' |
+| geohealthcheck.databaseUri | string | `"sqlite:////data/data.db"` | database connection string for SQL-Alchemy valid examples are: SQLite: 'sqlite:///data.db' PostgreSQL: 'postgresql+psycopg2://scott:tiger@localhost:5432/mydatabase' |
 | geohealthcheck.largeXml | string | `"False"` | allows GeoHealthCheck to receive large XML files from the servers under test (default False). Note: setting this to True might pose a security risk |
 | geohealthcheck.logLevel | string | `"30"` | logging level: 10=DEBUG 20=INFO 30=WARN(ING) 40=ERROR 50=FATAL/CRITICAL (default: 30, WARNING) |
 | geohealthcheck.metadataCacheSecs | string | `"900"` | metadata, “Capabilities Docs”, cache expiry time, default 900 secs, -1 to disable |
@@ -56,6 +56,9 @@ A Helm chart for GeoHealthCheck
 | networkPolicy.egressEnabled | bool | `true` | allow/deny external connections. This should be enabled if you want to monitor resources outside of this namespace |
 | networkPolicy.enabled | bool | `true` | Enable/disable network policy generation |
 | nodeSelector | object | `{}` |  |
+| persistence.enabled | bool | `true` | enable persistence when using an SQLite database |
+| persistence.size | string | `"1Gi"` | size of the data partition |
+| persistence.storageClassName | string | `""` |  |
 | podAnnotations | object | `{}` | This is for setting Kubernetes Annotations to a Pod. For more information checkout: yamllint disable-line rule:line-length https://kubernetes.io/docs/concepts/overview/working-with-objects/annotations/ |
 | podLabels | object | `{}` | This is for setting Kubernetes Labels to a Pod. For more information checkout: https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ |
 | podSecurityContext | object | `{}` |  |

helmchart/geohealthcheck/templates/deployment.yaml

@@ -73,6 +73,8 @@ spec:
               mountPath: '/usr/local/share/ca-certificates'
             - name: 'ca-bundle'
               mountPath: '/etc/ssl/certs'
+            - name: data
+              mountPath: /data
           {{- with .Values.volumeMounts }}
             {{- toYaml . | nindent 12 }}
           {{- end }}
@@ -82,6 +84,9 @@ spec:
             name: {{ printf "%s-certificates" (include "geohealthcheck.fullname" .) | squote }}
         - name: ca-bundle
           emptyDir: {}
+        - name: data
+          persistentVolumeClaim:
+            claimName: {{ include "geohealthcheck.fullname" . | squote }}
       {{- with .Values.volumes }}
         {{- toYaml . | nindent 8 }}
       {{- end }}

helmchart/geohealthcheck/templates/pvc.yaml

@@ -0,0 +1,18 @@
+---
+{{- if .Values.persistence.enabled }}
+apiVersion: 'v1'
+kind: 'PersistentVolumeClaim'
+metadata:
+  name: {{ include "geohealthcheck.fullname" . | squote }}
+  labels:
+    {{- include "geohealthcheck.labels" . | nindent 4 }}
+spec:
+  accessModes:
+    - 'ReadWriteOnce'
+  resources:
+    requests:
+      storage: {{ .Values.persistence.size | squote }}
+  {{- if .Values.persistence.storageClassName }}
+  storageClassName: {{ .Values.persistence.storageClassName | squote }}
+  {{- end }}
+{{- end }}

helmchart/geohealthcheck/values.yaml

@@ -85,7 +85,7 @@ geohealthcheck:
   # valid examples are:
   # SQLite: 'sqlite:///data.db'
   # PostgreSQL: 'postgresql+psycopg2://scott:tiger@localhost:5432/mydatabase'
-  databaseUri: 'sqlite:///data.db'
+  databaseUri: 'sqlite:////data/data.db'
   auth:
     # -- secret key to set when enabling authentication
     secret: 'changeme'
@@ -210,6 +210,14 @@ readinessProbe:
     path: '/'
     port: 'http'
 
+persistence:
+  # -- enable persistence when using an SQLite database
+  enabled: true
+  # -- size of the data partition
+  size: '1Gi'
+  # storage class name. Leave empty for the default class
+  storageClassName: ''
+
 # -- Additional volumes on the output Deployment definition.
 # volumes:
 #   - name: foo