Guillaume Boutry 90a585370c
[all] reduce mysql-pooling to sensible defaults
Reduce the max_pool_size parameter from default 5 to 2, to reduce the
max number of connections each process needs.
Reduce connection_recycle_time from 200 to 20, to reduce life duration
of a connection, allowing faster recovery in case of failure of a
mysql-router.
Configure horizon-k8s to persist connections for 20 seconds, and enable
connection healthchecks to make sure the connection is usable.

Change-Id: Id88d5a8643b8dd2db618e18c8ad556f3e92282ba
2024-06-17 18:24:41 +02:00
..
2024-06-12 08:26:25 +05:30
2023-11-30 15:32:39 +05:30
2024-05-10 14:25:52 +02:00
2023-05-05 13:37:34 +02:00
2023-05-05 13:37:34 +02:00
2024-04-18 23:21:03 +00:00
2024-04-18 23:21:03 +00:00
2023-11-30 15:32:39 +05:30

barbican-k8s

Description

barbican-k8s is an operator to manage the Barbican API and Worker services on a Kubernetes based environment.

Usage

Deployment

barbican-k8s is deployed using below command:

juju deploy barbican-k8s barbican --trust

Now connect the barbican operator to existing database, messaging and keystone identity operators:

juju relate mysql:database barbican:database
juju relate rabbitmq:amqp barbican:amqp
juju relate keystone:identity-service barbican:identity-service
juju relate vault:vault-kv barbican:vault-kv

Configuration

This section covers common and/or important configuration options. See file config.yaml for the full list of options, along with their descriptions and default values. See the Juju documentation for details on configuring applications.

Actions

This section covers Juju actions supported by the charm. Actions allow specific operations to be performed on a per-unit basis. To display action descriptions run juju actions barbican. If the charm is not deployed then see file actions.yaml.

Relations

barbican-k8s requires the following relations:

database: To connect to MySQL amqp: To connect to RabbitMQ identity-service: To register endpoints in Keystone identity-ops: To register roles in Keystone (optional) ingress-internal: To expose service on underlying internal network ingress-public: To expose service on public network vault-kv: To store secrets in a Vault key-value store

OCI Images

The charm by default uses following images:

`ghcr.io/canonical/barbican-consolidated:2024.1`

Contributing

Please see the Juju SDK docs for guidelines on enhancements to this charm following best practice guidelines, and CONTRIBUTING.md for developer guidance.

Bugs

Please report bugs on Launchpad.