We use kustomize and sops and split the mongodb cluster>s< in namespaces. So you have an operator and a cluster per namespace. For ex. dev-psmdb01, dev-psmdb02 etc and they all get accessed from dev.
base layer
cr.yaml and all the other yamls
overlay
stuff (patches to overwrite cpu, memory, disk size) you want to inject for each namespace
encryption key !!!
Unfort. the new 1.13 crd is a show stopper unless you update your installation at the same speed as percona releases (which is a no go)
We also have cluster and operator per namespace and that’s fine for us, but having 10+ clusters with 10+ shards leads to crazy amount of .yaml and duplication.
I’m sorry, I’m new to Kustomize. As far as I understand then Kustomize needs a crd OpenAPI schema in .json format. Should I extract the right version of openAPIV3Schema from crd.yaml and convert it into json ? Or is there a json version of crd available somewhere to download ?
And please could you provide some examples of kustomization.yaml file ?