Generador YAML de StatefulSet y Headless Service de Kubernetes
Genere manifiestos de Kubernetes StatefulSet de nivel de producción con Headless Service, plantillas de volumen persistente (volumeClaimTemplates), réplicas y podManagementPolicy.
Configuración de StatefulSet y servicio
Los pods con ordinal >= partition se actualizarán primero (Canary)
Número de pods no disponibles durante el despliegue
:
:
# ============================================================================
# Kubernetes StatefulSet: postgres-ha
# Generated via ToolsAA - 100% Client-Side Stateful Workload Builder
# Headless Network Domain: postgres-ha-headless.database.svc.cluster.local
# Pod Stable FQDN: postgres-ha-[0..2].postgres-ha-headless.database.svc.cluster.local
# ============================================================================
apiVersion: apps/v1
kind: StatefulSet
metadata:
name: postgres-ha
namespace: database
labels:
app: "postgres-ha"
tier: "database"
app.kubernetes.io/managed-by: toolsaa
annotations:
cluster.toolsaa.com/role: "primary-replica"
spec:
serviceName: "postgres-ha-headless"
replicas: 3
podManagementPolicy: OrderedReady
updateStrategy:
type: RollingUpdate
rollingUpdate:
partition: 0
maxUnavailable: 1
revisionHistoryLimit: 10
minReadySeconds: 10
persistentVolumeClaimRetentionPolicy:
whenDeleted: Retain
whenScaled: Retain
selector:
matchLabels:
app: "postgres-ha"
template:
metadata:
labels:
app: "postgres-ha"
tier: "database"
annotations:
prometheus.io/scrape: "true"
prometheus.io/port: "9187"
spec:
serviceAccountName: postgres-sa
terminationGracePeriodSeconds: 120
securityContext:
runAsNonRoot: true
runAsUser: 999
runAsGroup: 999
fsGroup: 999
fsGroupChangePolicy: "OnRootMismatch"
affinity:
podAntiAffinity:
preferredDuringSchedulingIgnoredDuringExecution:
- weight: 100
podAffinityTerm:
labelSelector:
matchExpressions:
- key: app
operator: In
values: ["postgres-ha"]
topologyKey: "kubernetes.io/hostname"
nodeSelector:
node-role.kubernetes.io/database: "true"
containers:
- name: postgres
image: postgres:16-alpine
imagePullPolicy: IfNotPresent
securityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
ports:
- name: postgresql
containerPort: 5432
protocol: TCP
env:
- name: POD_NAME
valueFrom:
fieldRef:
fieldPath: metadata.name
- name: POD_IP
valueFrom:
fieldRef:
fieldPath: status.podIP
- name: POSTGRES_DB
value: "app_production"
- name: POSTGRES_USER
value: "postgres"
- name: PGDATA
value: "/var/lib/postgresql/data/pgdata"
resources:
requests:
cpu: "500m"
memory: "1Gi"
limits:
cpu: "2000m"
memory: "4Gi"
volumeMounts:
- name: pgdata
mountPath: "/var/lib/postgresql/data"
livenessProbe:
exec:
command:
- "pg_isready"
- "-U"
- "postgres"
initialDelaySeconds: 30
periodSeconds: 10
timeoutSeconds: 5
successThreshold: 1
failureThreshold: 3
readinessProbe:
exec:
command:
- "pg_isready"
- "-U"
- "postgres"
- "-h"
- "127.0.0.1"
initialDelaySeconds: 15
periodSeconds: 5
timeoutSeconds: 3
successThreshold: 1
failureThreshold: 3
startupProbe:
exec:
command:
- "pg_isready"
- "-U"
- "postgres"
initialDelaySeconds: 10
periodSeconds: 5
timeoutSeconds: 3
successThreshold: 1
failureThreshold: 15
volumeClaimTemplates:
- metadata:
name: pgdata
labels:
app: "postgres-ha"
spec:
accessModes: ["ReadWriteOnce"]
storageClassName: "gp3"
resources:
requests:
storage: 50GiRéplicas con estadoOrderedReady
3 Pods con estado
Partición: 0 | Estrategia: RollingUpdate
Plantillas de PVCgp3
50Gi / pod (1 plantillas)
Retención: Retain | fsGroup:: 999
Nivel de blindajeNivel de seguridad A+
100 / 100 Preparación
Sondas: 3/3 activas
Generación de manifiestos 100% en el cliente
Sin envíos a servidores externos ni rastreo. Todos los manifiestos de StatefulSet, servicios headless y plantillas PVC se procesan directamente en la memoria del navegador.
Ciclo de vida ordenado e identidad DNS única
Mantiene identidades ordinales únicas, direccionamiento DNS predecible mediante Headless Service, despliegue OrderedReady y plantillas de reclamación de volumen persistente.
Blindaje de seguridad CIS y exportación múltiple
Aplica contextos de seguridad sin root, eliminación de capacidades y genera salidas listas para producción en plantillas Helm, Kustomize y comandos kubectl.