Image: adds cassandra

README.md

@@ -17,6 +17,7 @@
 | [buck2](./images/buck2) | `cgr.dev/chainguard/buck2` | stable | [![](https://storage.googleapis.com/chainguard-images-build-outputs/badges/buck2.build.status.latest.svg)](https://registry-ui.chainguard.app/?image=cgr.dev/chainguard/buck2:latest) |
 | [busybox](./images/busybox) | `cgr.dev/chainguard/busybox` | stable | [![](https://storage.googleapis.com/chainguard-images-build-outputs/badges/busybox.build.status.latest.alpine.svg)](https://registry-ui.chainguard.app/?image=cgr.dev/chainguard/busybox:latest.alpine) |
 | [calico](./images/calico) | `cgr.dev/chainguard/calico` | stable | [![](https://storage.googleapis.com/chainguard-images-build-outputs/badges/calico.build.status.latest.node.svg)](https://registry-ui.chainguard.app/?image=cgr.dev/chainguard/calico:latest.node) |
+| [cassandra](./images/cassandra) | `cgr.dev/chainguard/cassandra` | stable | [![](https://storage.googleapis.com/chainguard-images-build-outputs/badges/cassandra.build.status.latest.svg)](https://registry-ui.chainguard.app/?image=cgr.dev/chainguard/cassandra:latest) |
 | [cc-dynamic](./images/cc-dynamic) | `cgr.dev/chainguard/cc-dynamic` | deprecated | [![](https://storage.googleapis.com/chainguard-images-build-outputs/badges/cc-dynamic.build.status.latest.svg)](https://registry-ui.chainguard.app/?image=cgr.dev/chainguard/cc-dynamic:latest) |
 | [cedar](./images/cedar) | `cgr.dev/chainguard/cedar` | stable | [![](https://storage.googleapis.com/chainguard-images-build-outputs/badges/cedar.build.status.latest.svg)](https://registry-ui.chainguard.app/?image=cgr.dev/chainguard/cedar:latest) |
 | [cert-manager](./images/cert-manager) | `cgr.dev/chainguard/cert-manager` | stable | [![](https://storage.googleapis.com/chainguard-images-build-outputs/badges/cert-manager.build.status.latest.svg)](https://registry-ui.chainguard.app/?image=cgr.dev/chainguard/cert-manager:latest) |

images/cassandra/README.md

@@ -0,0 +1,14 @@
+<!--monopod:start-->
+# cassandra
+| | |
+| - | - |
+| **Status** | stable |
+| **OCI Reference** | `cgr.dev/chainguard/cassandra` |
+
+
+* [View Image in Chainguard Academy](https://edu.chainguard.dev/chainguard/chainguard-images/reference/cassandra/overview/)
+* [View Image Catalog](https://console.enforce.dev/images/catalog) for a full list of available tags.
+*[Contact Chainguard](https://www.chainguard.dev/chainguard-images) for enterprise support, SLAs, and access to older tags.*
+
+---
+<!--monopod:end-->

images/cassandra/configs/latest.apko.yaml

@@ -0,0 +1,50 @@
+contents:
+ packages:
+ - cassandra
+ - python3
+ - busybox
+ - cassandra-compat
+ - bash
+accounts:
+ groups:
+ - groupname: cassandra
+ gid: 999
+ users:
+ - username: cassandra
+ uid: 999
+ run-as: 999
+
+work-dir: /
+
+entrypoint:
+ command: cassandra -f
+environment: 
+ LANG: en_US.UTF-8
+ CASSANDRA_HOME: /opt/cassandra
+ PATH: /usr/sbin:/sbin:/usr/bin:/bin:/opt/cassandra/bin/
+
+paths:
+ - path: /var/lib/cassandra
+ type: directory
+ permissions: 0o777
+ uid: 999
+ gid: 999
+ recursive: true
+ - path: /opt/cassandra
+ type: directory
+ permissions: 0o777
+ uid: 999
+ gid: 999
+ recursive: true
+ - path: /var/lib/cassandra
+ type: directory
+ permissions: 0o777
+ uid: 999
+ gid: 999
+ - path: /var/log/cassandra
+ type: directory
+ permissions: 0o777
+ uid: 999
+ gid: 999
+ recursive: true
+

images/cassandra/image.yaml

@@ -0,0 +1,3 @@
+versions:
+ - apko:
+ config: configs/latest.apko.yaml

images/cassandra/main.tf

@@ -0,0 +1,54 @@
+terraform {
+ required_providers {
+ apko = { source = "chainguard-dev/apko" }
+ }
+}
+
+variable "target_repository" {
+ description = "The docker repo into which the image and attestations should be published."
+}
+
+module "latest" {
+ source = "../../tflib/publisher"
+
+ name = basename(path.module)
+
+ target_repository = var.target_repository
+ config = file("${path.module}/configs/latest.apko.yaml")
+}
+
+module "dev" { source = "../../tflib/dev-subvariant" }
+
+module "latest-dev" {
+ source = "../../tflib/publisher"
+
+ name = basename(path.module)
+
+ target_repository = var.target_repository
+ # Make the dev variant an explicit extension of the
+ # locked original.
+ config = jsonencode(module.latest.config)
+ extra_packages = module.dev.extra_packages
+}
+
+module "version-tags" {
+ source = "../../tflib/version-tags"
+ package = "cassandra"
+ config = module.latest.config
+}
+
+module "test-latest" {
+ source = "./tests"
+ digest = module.latest.image_ref
+}
+
+module "tagger" {
+ source = "../../tflib/tagger"
+
+ depends_on = [module.test-latest]
+
+ tags = merge(
+ { for t in toset(concat(["latest"], module.version-tags.tag_list)) : t => module.latest.image_ref },
+ { for t in toset(concat(["latest"], module.version-tags.tag_list)) : "${t}-dev" => module.latest-dev.image_ref },
+ )
+}

images/cassandra/tests/main.tf

@@ -0,0 +1,197 @@
+terraform {
+ required_providers {
+ oci = { source = "chainguard-dev/oci" }
+ kubernetes = {
+ source = "hashicorp/kubernetes"
+ version = "~> 2.11.0"
+ }
+ }
+}
+
+variable "digest" {
+ description = "The image digest to run tests over."
+}
+
+data "oci_string" "ref" { input = var.digest }
+
+resource "kubernetes_namespace" "cassandra" {
+ metadata {
+ name = "cassandra"
+ }
+}
+
+resource "kubernetes_service" "cassandra" {
+ metadata {
+ name = "cassandra"
+ namespace = "cassandra"
+
+ labels = {
+ app = "cassandra"
+ }
+ }
+
+ spec {
+ port {
+ port = 9042
+ }
+
+ selector = {
+ app = "cassandra"
+ }
+
+ cluster_ip = "None"
+ }
+}
+
+resource "kubernetes_stateful_set" "cassandra" {
+ metadata {
+ name = "cassandra"
+ namespace = kubernetes_namespace.cassandra.metadata[0].name
+
+ labels = {
+ app = "cassandra"
+ }
+ }
+
+ spec {
+ replicas = 1
+
+ selector {
+ match_labels = {
+ app = "cassandra"
+ }
+ }
+
+ template {
+ metadata {
+ labels = {
+ app = "cassandra"
+ }
+ }
+
+ spec {
+ container {
+ name = "cassandra"
+ image = "${data.oci_string.ref.registry_repo}:${data.oci_string.ref.pseudo_tag}"
+
+ port {
+ name = "intra-node"
+ container_port = 7000
+ }
+
+ port {
+ name = "tls-intra-node"
+ container_port = 7001
+ }
+
+ port {
+ name = "jmx"
+ container_port = 7199
+ }
+
+ port {
+ name = "cql"
+ container_port = 9042
+ }
+
+ env {
+ name = "MAX_HEAP_SIZE"
+ value = "512M"
+ }
+
+ env {
+ name = "HEAP_NEWSIZE"
+ value = "100M"
+ }
+
+ env {
+ name = "CASSANDRA_SEEDS"
+ value = "cassandra-0.cassandra.default.svc.cluster.local"
+ }
+
+ env {
+ name = "CASSANDRA_CLUSTER_NAME"
+ value = "K8Demo"
+ }
+
+ env {
+ name = "CASSANDRA_DC"
+ value = "DC1-K8Demo"
+ }
+
+ env {
+ name = "CASSANDRA_RACK"
+ value = "Rack1-K8Demo"
+ }
+
+ env {
+ name = "POD_IP"
+
+ value_from {
+ field_ref {
+ field_path = "status.podIP"
+ }
+ }
+ }
+
+ resources {
+ limits = {
+ cpu = "500m"
+
+ memory = "1Gi"
+ }
+
+ requests = {
+ cpu = "500m"
+
+ memory = "1Gi"
+ }
+ }
+
+ volume_mount {
+ name = "cassandra-data"
+ mount_path = "/cassandra_data"
+ }
+
+ lifecycle {
+ pre_stop {
+ exec {
+ command = ["/bin/sh", "-c", "nodetool drain"]
+ }
+ }
+ }
+
+ image_pull_policy = "Always"
+
+ security_context {
+ capabilities {
+ add = ["IPC_LOCK"]
+ }
+ }
+ }
+
+ termination_grace_period_seconds = 1800
+ }
+ }
+
+ volume_claim_template {
+ metadata {
+ name = "cassandra-data"
+ }
+
+ spec {
+ access_modes = ["ReadWriteOnce"]
+
+ resources {
+ requests = {
+ storage = "1Gi"
+ }
+ }
+
+ storage_class_name = "standard"
+ }
+ }
+
+ service_name = kubernetes_service.cassandra.metadata[0].name
+ }
+}

main.tf

@@ -124,6 +124,11 @@ module "calico" {
  target_repository = "${var.target_repository}/calico"
 }
 
+module "cassandra" {
+ source = "./images/cassandra"
+ target_repository = "${var.target_repository}/cassandra"
+}
+
 module "cc-dynamic" {
  source = "./images/cc-dynamic"
  target_repository = "${var.target_repository}/cc-dynamic"