feat(data): pg数据库升级为17.5版本

apps/infra/data/cloudnative-pg/cnpg17-cluster-hk.yaml

@@ -1,7 +1,7 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
-  name: cnpg-cluster-hk
+  name: cnpg17-cluster-hk
   namespace: infra-data
 spec:
   affinity:
@@ -15,6 +15,7 @@ spec:
                   - cn-hk
           weight: 1
   instances: 1
+  imageName: ghcr.io/tensorchord/cloudnative-pgvecto.rs:17.5-v0.4.0
   enableSuperuserAccess: true
   storage:
     size: 10Gi
@@ -40,11 +41,11 @@ spec:
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: cnpg-cluster-hk-backups
+  name: cnpg17-cluster-hk-backups
   namespace: infra-data
 spec:
   schedule: "0 0 0 * * *"
   immediate: true
   backupOwnerReference: self
   cluster:
-    name: cnpg-cluster-hk
+    name: cnpg17-cluster-hk

apps/infra/data/cloudnative-pg/cnpg17-cluster-sh.yaml

@@ -1,7 +1,7 @@
 apiVersion: postgresql.cnpg.io/v1
 kind: Cluster
 metadata:
-  name: cnpg-cluster-sh
+  name: cnpg17-cluster-sh
   namespace: infra-data
 spec:
   affinity:
@@ -15,6 +15,7 @@ spec:
                   - cn-sh
           weight: 1
   instances: 1
+  imageName: ghcr.io/tensorchord/cloudnative-pgvecto.rs:17.5-v0.4.0
   enableSuperuserAccess: true
   storage:
     size: 10Gi
@@ -36,16 +37,15 @@ spec:
       wal:
         compression: gzip
 
-
 ---
 apiVersion: postgresql.cnpg.io/v1
 kind: ScheduledBackup
 metadata:
-  name: cnpg-cluster-sh-backups
+  name: cnpg17-cluster-sh-backups
   namespace: infra-data
 spec:
   schedule: "0 0 0 * * *"
   immediate: true
   backupOwnerReference: self
   cluster:
-    name: cnpg-cluster-sh
+    name: cnpg17-cluster-sh

apps/infra/data/cloudnative-pg/loadbalancer-hk.yaml

@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: cnpg-cluster-hk-lb
+  name: cnpg17-cluster-hk-lb
   namespace: infra-data
 spec:
   selector:
-    cnpg.io/cluster: cnpg-cluster-hk
+    cnpg.io/cluster: cnpg17-cluster-hk
     role: primary
   ports:
     - protocol: TCP
       port: 65432
       targetPort: 5432
-  type: LoadBalancer
+  type: LoadBalancer

apps/infra/data/cloudnative-pg/loadbalancer-sh.yaml

@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: Service
 metadata:
-  name: cnpg-cluster-sh-lb
+  name: cnpg17-cluster-sh-lb
   namespace: infra-data
 spec:
   selector:
-    cnpg.io/cluster: cnpg-cluster-sh
+    cnpg.io/cluster: cnpg17-cluster-sh
     role: primary
   ports:
     - protocol: TCP
       port: 65432
       targetPort: 5432
-  type: LoadBalancer
+  type: LoadBalancer

apps/infra/data/milvus/helmchart.yaml

@@ -1,33 +0,0 @@
-apiVersion: helm.cattle.io/v1
-kind: HelmChart
-metadata:
-  name: milvus
-  namespace: infra-data
-spec:
-  repo: https://zilliztech.github.io/milvus-helm/
-  chart: milvus
-  targetNamespace: infra-data
-  version: 4.2.38
-  valuesContent: |-
-    cluster:
-      enabled: false
-    etcd:
-      enabled: false
-    pulsar:
-      enabled: false
-    minio:
-      enabled: false
-      tls:
-        enabled: false
-    extraConfigFiles:
-      user.yaml: |+
-        etcd:
-          use:
-            embed: true
-          data:
-            dir: /var/lib/milvus/etcd
-        common:
-          storageType: local
-          security:
-            authorizationEnabled: false
-    

apps/infra/data/milvus/loadbalancer.yaml

@@ -1,15 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: milvus-lb
-  namespace: infra-data
-spec:
-  selector:
-    app.kubernetes.io/name: milvus
-    app.kubernetes.io/instance: milvus
-    component: standalone
-  ports:
-    - protocol: TCP
-      port: 19530
-      targetPort: 19530
-  type: LoadBalancer

apps/infra/data/redis/helmchart-hk.yaml

@@ -0,0 +1,28 @@
+apiVersion: helm.cattle.io/v1
+kind: HelmChart
+metadata:
+  name: redis-cluster-hk
+  namespace: infra-data
+spec:
+  chart: oci://registry-1.docker.io/bitnamicharts/redis
+  targetNamespace: infra-data
+  version: 20.7.0
+  valuesContent: |-
+    global:
+      redis:
+        password: ribiPwYQNU6GWxCYR0Nj
+    master:
+      nodeAffinityPreset:
+        type: soft
+        key: topology.kubernetes.io/region
+        values:
+          - cn-hk
+    replica:
+      replicaCount: 0
+      nodeAffinityPreset:
+        type: soft
+        key: topology.kubernetes.io/region
+        values:
+          - cn-hk 
+
+

apps/infra/data/redis/helmchart-sh.yaml

@@ -11,7 +11,18 @@ spec:
     global:
       redis:
         password: ribiPwYQNU6GWxCYR0Nj
+    master:
+      nodeAffinityPreset:
+        type: soft
+        key: topology.kubernetes.io/region
+        values:
+          - cn-sh
     replica:
       replicaCount: 0
+      nodeAffinityPreset:
+        type: soft
+        key: topology.kubernetes.io/region
+        values:
+          - cn-sh   
 
 

apps/infra/devops/gitea/helmchart.yaml

@@ -58,10 +58,10 @@ spec:
           ROOT_URL: https://git.dev.cm/
         database:
           DB_TYPE: postgres
-          HOST: cnpg-cluster-sh-rw.infra-data:5432
+          HOST: cnpg17-cluster-sh-rw.infra-data:5432
           NAME: gitea
           USER: app
-          PASSWD: 6UeWq0EEQaP47eMjAt3hmmquGY3e6bqDanCeSKWDmLtLCuMe1TH0UGTKuaw2LfIO
+          PASSWD: HueUoQx05DM0ICBPu1GrmBvBXE6NO3poKE6yPqokPv3dPpWvWRLAr3RXSpaL3AZd
           SSL_MODE: disable
         session:
           PROVIDER: redis

apps/infra/monitor/prometheus/helmchart.yaml

@@ -44,10 +44,10 @@ spec:
           news_feed_enabled: false
         database:
           type: postgres
-          host: cnpg-cluster-hk-rw.infra-data:5432
+          host: cnpg17-cluster-hk-rw.infra-data:5432
           name: grafana
           user: app
-          password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
+          password: QrmOnigueiiKWDxS5HqS8h765fUZoV1fj2WFkHpqZOPnKAGcM9paiXC1VzGUA3PD
       persistence:
         type: pvc
         enabled: true

apps/infra/net/crowdsec/helmchart.yaml

@@ -91,11 +91,11 @@ spec:
       config.yaml.local: |
         db_config:
           type: postgresql
-          host: cnpg-cluster-hk-rw.infra-data
+          host: cnpg17-cluster-hk-rw.infra-data
           port: 5432
           db_name: crowdsec
           user: app
-          password: nyrHzh9WWlDZzvVw7bDFo74gKb9zsls0Sy7OwRTDWiRTNPQQQkW85taUFAoX2AIC
+          password: QrmOnigueiiKWDxS5HqS8h765fUZoV1fj2WFkHpqZOPnKAGcM9paiXC1VzGUA3PD
           sslmode: require
         api:
           server: