A Kubernetes operator to manage database migrations or similar application setup tasks.
TODO
For the common case of running SQL migrations for a deployment, create a Migrator object:
apiVersion: migrations.coderanger.net/v1beta1
kind: Migrator
metadata:
name: mymigrations
spec:
selector:
matchLabels:
app: myapp
command:
- python
- manage.py
- migrateThis will automatically run migrations on all future deployment changes.
There's one API object, the Migrator, with these fields:
- selector: LabelSelector for which pods to watch to trigger an upgrade action.
- templateSelector: optional
LabelSelector for which
specific pod, selected by
selector, to use as a template for building the upgrade Job. - command: optional string array which will be used as the upgrade Job's
command. - args: optional string array to be used as the upgrade Job's
args. - image: optional image to use for the upgrade Job.
- container: optional name of a container from the selected template Pod. The selected container will be used to run the upgrader.
- labels: optional map of labels to set on the Job's pod template,
- annotations: optional map of annotations to set on the Job's pod template,
The migrator Job will contain only the single template container, initContainers will be included but sidecars will not. Any livenessProbes and readinessProbes in the template will be ignored.
The operator has three main components: the migrations controller, the waiter init container, and the injector webhook. The migrations controller watches for new pods matching its selector and if they are running a new image, it launches a Job to run the migrations as configured. The waiter init container stalls a pod from fully launching until the required migrations have been executed successfully. The injector webhook automatically adds the waiter init container to any pod that matches a Migrator object.
Put together, these three components allow relatively normal Kubernetes usage while ensuring migrations are applied in the expected way.
A common choice for running database migrations is the pre-install/upgrade hook in both Helm and Argo-CD. This allows for ensuring that migrations succeed before the main segment of the chart or application is applied. The main frustration with this approach is you can end up having to move a lot of things into the hook. If your pod uses a Secret or ConfigMap for holding configuration data that's required for running migrations, that will have to be hook'd too. If you need a whole chart dependency to be up for migrations, it may not even be posible. Migrations-Operator solves this by lazily cloning the pod specification on the new, waiting pods.
Another common solution for database migrations is an init container to run the migration commands. The main problem here is locking, if you run 4 replicas of your application, all 4 of those are going to try and apply your migrations in parallel. You could add some leader election code to your migrations runner, however this has to be built in at the application image level and so requires a specific solution for each application framework or toolkit. Migrations-Operator has a top-level view of the world and so can ensure for only a single job at a time is created.
In order for Actions to be able to push a container image into GHCR, a GHCR_PAT secret must be present on the repository. A container image will only be built on pushes to the default branch.