Giter Club home page Giter Club logo

Comments (9)

intelligentfu avatar intelligentfu commented on August 21, 2024

已经实现,请贴一下现象,doriscluster的yaml以及环境。

from doris-operator.

anthony-yau avatar anthony-yau commented on August 21, 2024

已经实现,请贴一下现象,doriscluster的yaml以及环境。

yaml文件:

apiVersion: doris.selectdb.com/v1
kind: DorisCluster
metadata:
  labels:
    app.kubernetes.io/name: doris-testxx
    app.kubernetes.io/instance: doris-testxx
    app.kubernetes.io/part-of: doris-operator
  name: doris-testxx
  namespace: default
spec:
  adminUser:
    name: dsadmin
    password: DSf@x2412
  # FE配置
  feSpec:
    # 指定参与选举的数量,其他的为仲裁节点
    electionNumber: 3
    # 副本数, 1主2从
    replicas: 3
    image: xxx
    # 配置服务类型, 如果要在集群外访问,需要使用LoadBalancer等类型
    service:
      type: "ClusterIP"
    # 资源配置
    requests:
      cpu: 8
      memory: 16Gi
    limits:
      cpu: 16
      memory: 32Gi
    # 持久化配置
    persistentVolumes:
    - mountPath: /opt/apache-doris/fe/doris-meta
      name: femeta
      persistentVolumeClaimSpec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 200Gi
    - mountPath: /opt/apache-doris/fe/log
      name: felog
      persistentVolumeClaimSpec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 200Gi
    # 初始配置
    systemInitialization:
      command: [ "/sbin/sysctl", "-w", "vm.max_map_count=2000000" ]
  # BE配置
  beSpec:
    # 副本数
    replicas: 3
    image: xxx
    # 资源配置
    requests:
      cpu: 8
      memory: 16Gi
    limits:
      cpu: 16
      memory: 64Gi
    # 持久化配置
    persistentVolumes:
    - mountPath: /opt/apache-doris/be/storage
      name: bedata
      persistentVolumeClaimSpec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 200Gi
    - mountPath: /opt/apache-doris/be/log
      name: belog
      persistentVolumeClaimSpec:
        accessModes:
        - ReadWriteOnce
        resources:
          requests:
            storage: 200Gi
    # 初始配置
    systemInitialization:
      command: [ "/sbin/sysctl", "-w", "vm.max_map_count=2000000" ]

kubectl version

Client Version: version.Info{Major:"1", Minor:"22+", GitVersion:"v1.22.5-tke.15", Compiler:"gc", Platform:"linux/amd64"}
Server Version: version.Info{Major:"1", Minor:"22+", GitVersion:"v1.22.5-tke.15", Compiler:"gc", Platform:"linux/amd64"}

doris operator

spec:
containers:

  • args:
    • --leader-elect
      command:
    • /dorisoperator
      image: selectdb/doris.k8s-operator:latest
      imagePullPolicy: Always

from doris-operator.

anthony-yau avatar anthony-yau commented on August 21, 2024

没看到什么具体错误现象,就是没有创建Yaml里面定义的user。operator日志也没搜索到相关日志(或者搜索错了)。

image

from doris-operator.

intelligentfu avatar intelligentfu commented on August 21, 2024

AdminUser的使用场景是创建出集群后,更改了root的密码。这个时候需要新建管理节点的用户并赋值密码,然后配置到AdminUser,或者配置root 的用户名密码。
adminUser的使用场景是节点管理时使用。

from doris-operator.

anthony-yau avatar anthony-yau commented on August 21, 2024

AdminUser的使用场景是创建出集群后,更改了root的密码。这个时候需要新建管理节点的用户并赋值密码,然后配置到AdminUser,或者配置root 的用户名密码。 adminUser的使用场景是节点管理时使用。

好的,谢谢,那没看懂文档部分描述了。

那有没有可能实现,初装集群后,把root密码设置下的能力。

from doris-operator.

intelligentfu avatar intelligentfu commented on August 21, 2024

AdminUser的使用场景是创建出集群后,更改了root的密码。这个时候需要新建管理节点的用户并赋值密码,然后配置到AdminUser,或者配置root 的用户名密码。 adminUser的使用场景是节点管理时使用。

好的,谢谢,那没看懂文档部分描述了。

那有没有可能实现,初装集群后,把root密码设置下的能力。

不能这么干,自动设置密码肯定是固定的,这么做会导致集群拥有后门,是一个很大的安全漏洞。而且,如果用户改了密码,那么后期节点重启有可能出现无法启动,集群也无法恢复的情况。注意能力设计的最根本的原则要包括安全。

from doris-operator.

intelligentfu avatar intelligentfu commented on August 21, 2024

纵观所有数据库,没有帮忙初始化密码的,这是最基本的安全底线,doris operator也不会这么干。

from doris-operator.

anthony-yau avatar anthony-yau commented on August 21, 2024

纵观所有数据库,没有帮忙初始化密码的,这是最基本的安全底线,doris operator也不会这么干。

那太绝对了吧,MySQL就是因为安全性,默认生成一个密码。

from doris-operator.

intelligentfu avatar intelligentfu commented on August 21, 2024

纵观所有数据库,没有帮忙初始化密码的,这是最基本的安全底线,doris operator也不会这么干。

那太绝对了吧,MySQL就是因为安全性,默认生成一个密码。

https://github.com/mysql/mysql-operator/blob/trunk/mysqloperator/sidecar_main.py#L109
image

from doris-operator.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.