Merge pull request radondb#228 from runkecheng/user_manager

*: Support user management through crd. radondb#175

Dockerfile

@@ -18,6 +18,7 @@ COPY controllers/ controllers/
 COPY backup/ backup/
 COPY internal/ internal/
 COPY utils/ utils/
+COPY mysqluser/ mysqluser/
 
 # Build
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o manager cmd/manager/main.go

PROJECT

@@ -27,4 +27,13 @@ resources:
   kind: Backup
   path: github.com/radondb/radondb-mysql-kubernetes/api/v1alpha1
   version: v1alpha1
+- api:
+    crdVersion: v1
+    namespaced: true
+  controller: true
+  domain: radondb.com
+  group: mysql
+  kind: MysqlUser
+  path: github.com/radondb/radondb-mysql-kubernetes/api/v1alpha1
+  version: v1alpha1
 version: "3"

api/v1alpha1/mysqluser_types.go

@@ -0,0 +1,144 @@
+/*
+Copyright 2021 RadonDB.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package v1alpha1
+
+import (
+	corev1 "k8s.io/api/core/v1"
+	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
+)
+
+// EDIT THIS FILE!  THIS IS SCAFFOLDING FOR YOU TO OWN!
+// NOTE: json tags are required.  Any new fields you add must have json tags for the fields to be serialized.
+
+// UserSpec defines the desired state of User.
+type UserSpec struct {
+	// INSERT ADDITIONAL SPEC FIELDS - desired state of cluster
+	// Important: Run "make" to regenerate code after modifying this file
+
+	// Username is the name of user to be operated.
+	// This field should be immutable.
+	// +kubebuilder:validation:Required
+	// +kubebuilder:validation:Pattern="^[A-Za-z0-9_]{2,26}$"
+	User string `json:"user,omitempty"`
+
+	// Hosts is the grants hosts.
+	// +kubebuilder:validation:Required
+	// +kubebuilder:validation:MinItems=1
+	Hosts []string `json:"hosts,omitempty"`
+
+	// UserOwner Contains parameters about the cluster bound by user.
+	// +kubebuilder:validation:Required
+	UserOwner UserOwner `json:"userOwner,omitempty"`
+
+	// SecretSelector Contains parameters about the secret object bound by user.
+	// +kubebuilder:validation:Required
+	SecretSelector SecretSelector `json:"secretSelector,omitempty"`
+
+	// Permissions is the list of roles that user has in the specified database.
+	// +optional
+	Permissions []UserPermission `json:"permissions,omitempty"`
+}
+
+type UserOwner struct {
+	// ClusterName is the name of cluster.
+	ClusterName string `json:"clusterName,omitempty"`
+
+	// NameSpace is the nameSpace of cluster.
+	NameSpace string `json:"nameSpace,omitempty"`
+}
+
+type SecretSelector struct {
+	// SecretName is the name of secret object.
+	SecretName string `json:"secretName,omitempty"`
+
+	// SecretKey is the key of secret object.
+	SecretKey string `json:"secretKey,omitempty"`
+}
+
+// UserPermission defines a UserPermission permission.
+type UserPermission struct {
+	// Database is the grants database.
+	// +kubebuilder:validation:Pattern="^([*]|[A-Za-z0-9_]{2,26})$"
+	Database string `json:"database,omitempty"`
+
+	// Tables is the grants tables inside the database.
+	// +kubebuilder:validation:MinItems=1
+	Tables []string `json:"tables,omitempty"`
+
+	// Privileges is the normal privileges(comma delimited, such as "SELECT,CREATE").
+	// Optional parameters can refer to: https://dev.mysql.com/doc/refman/5.7/en/privileges-provided.html.
+	// +kubebuilder:validation:MinItems=1
+	Privileges []string `json:"privileges,omitempty"`
+}
+
+// UserStatus defines the observed state of MysqlUser.
+type UserStatus struct {
+	// Conditions represents the MysqlUser resource conditions list.
+	// +optional
+	Conditions []MySQLUserCondition `json:"conditions,omitempty"`
+
+	// AllowedHosts contains the list of hosts that the user is allowed to connect from.
+	AllowedHosts []string `json:"allowedHosts,omitempty"`
+}
+
+// MysqlUserConditionType defines the condition types of a MysqlUser resource.
+type MysqlUserConditionType string
+
+const (
+	// MySQLUserReady means the MySQL user is ready when database exists.
+	MySQLUserReady MysqlUserConditionType = "Ready"
+)
+
+// MySQLUserCondition defines the condition struct for a MysqlUser resource.
+type MySQLUserCondition struct {
+	// Type of MysqlUser condition.
+	Type MysqlUserConditionType `json:"type"`
+	// Status of the condition, one of True, False, Unknown.
+	Status corev1.ConditionStatus `json:"status"`
+	// The last time this condition was updated.
+	LastUpdateTime metav1.Time `json:"lastUpdateTime,omitempty"`
+	// Last time the condition transitioned from one status to another.
+	LastTransitionTime metav1.Time `json:"lastTransitionTime"`
+	// The reason for the condition's last transition.
+	Reason string `json:"reason"`
+	// A human readable message indicating details about the transition.
+	Message string `json:"message"`
+}
+
+//+kubebuilder:object:root=true
+//+kubebuilder:subresource:status
+//+kubebuilder:subresource:finalizers
+// MysqlUser is the Schema for the users API.
+type MysqlUser struct {
+	metav1.TypeMeta   `json:",inline"`
+	metav1.ObjectMeta `json:"metadata,omitempty"`
+
+	Spec   UserSpec   `json:"spec,omitempty"`
+	Status UserStatus `json:"status,omitempty"`
+}
+
+//+kubebuilder:object:root=true
+// MysqlUserList contains a list of MysqlUser.
+type MysqlUserList struct {
+	metav1.TypeMeta `json:",inline"`
+	metav1.ListMeta `json:"metadata,omitempty"`
+	Items           []MysqlUser `json:"items"`
+}
+
+func init() {
+	SchemeBuilder.Register(&MysqlUser{}, &MysqlUserList{})
+}