Rotateauth for databases

.github/workflows/ci.yml

@@ -67,6 +67,12 @@ jobs:
           kubectl create -f https://github.com/fluxcd/helm-controller/raw/main/config/crd/bases/helm.toolkit.fluxcd.io_helmreleases.yaml
           kubectl create -f https://github.com/fluxcd/source-controller/raw/main/config/crd/bases/source.toolkit.fluxcd.io_helmrepositories.yaml
           kubectl create -f https://github.com/appscode-cloud/catalog/raw/master/crds/catalog.appscode.com_redisbindings.yaml
+          # distributed crds
+          kubectl create -f https://github.com/kube-slice/apis/raw/release-v2025.7.31/crd/controller.kubeslice.io_clusters.yaml
+          kubectl create -f https://github.com/kube-slice/apis/raw/release-v2025.7.31/crd/controller.kubeslice.io_projects.yaml
+          kubectl create -f https://github.com/kube-slice/apis/raw/release-v2025.7.31/crd/controller.kubeslice.io_sliceconfigs.yaml
+          kubectl create -f https://github.com/kubeops/petset/raw/master/crds/apps.k8s.appscode.com_placementpolicies.yaml
+          kubectl create -f https://github.com/open-cluster-management-io/api/raw/main/operator/v1/0000_00_operator.open-cluster-management.io_klusterlets.crd.yaml
 
       - name: Check codespan schema
         run: |

.github/workflows/preview-website.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@v5
         with:
-          go-version: '1.24'
+          go-version: '1.25'
         id: go
 
       - name: Use Node.js

docs/examples/cassandra/autoscaling/compute/cassandra-autoscale.yaml

@@ -0,0 +1,29 @@
+apiVersion: kubedb.com/v1alpha2
+kind: Cassandra
+metadata:
+  name: cassandra-autoscale
+  namespace: demo
+spec:
+  version: "5.0.3"
+  topology:
+    rack:
+      - name: r0
+        replicas: 2
+        storage:
+          accessModes:
+            - ReadWriteOnce
+          resources:
+            requests:
+              storage: 600Mi
+        podTemplate:
+          spec:
+            containers:
+              - name: cassandra
+                resources:
+                  limits:
+                    memory: 2Gi
+                    cpu: 1000m
+                  requests:
+                    memory: 600Mi
+                    cpu: 500m
+  deletionPolicy: WipeOut

docs/examples/cassandra/autoscaling/compute/cassandra-autoscaler-ops.yaml

@@ -0,0 +1,21 @@
+apiVersion: autoscaling.kubedb.com/v1alpha1
+kind: CassandraAutoscaler
+metadata:
+  name: cassandra-autoscale-ops
+  namespace: demo
+spec:
+  databaseRef:
+    name: cassandra-autoscale
+  compute:
+    cassandra:
+      trigger: "On"
+      podLifeTimeThreshold: 5m
+      resourceDiffPercentage: 20
+      minAllowed:
+        cpu: 600m
+        memory: 1.2Gi
+      maxAllowed:
+        cpu: 1
+        memory: 2Gi
+      controlledResources: ["cpu", "memory"]
+      containerControlledValues: "RequestsAndLimits"

docs/examples/cassandra/autoscaling/storage/cassandra-autoscale.yaml

@@ -0,0 +1,33 @@
+apiVersion: kubedb.com/v1alpha2
+kind: Cassandra
+metadata:
+
+  name: cassandra-autoscale
+  namespace: demo
+spec:
+  version: 5.0.3
+  topology:
+    rack:
+      - name: r0
+        replicas: 2
+        storage:
+          storageClassName:
+            longhorn
+          accessModes:
+            - ReadWriteOnce
+          resources:
+            requests:
+              storage: 600Mi
+        storageType: Durable
+        podTemplate:
+          spec:
+            containers:
+              - name: cassandra
+                resources:
+                  limits:
+                    memory: 3Gi
+                    cpu: 2
+                  requests:
+                    memory: 1Gi
+                    cpu: 1
+  deletionPolicy: WipeOut

docs/examples/cassandra/autoscaling/storage/cassandra-autoscaler-ops.yaml

@@ -0,0 +1,14 @@
+apiVersion: autoscaling.kubedb.com/v1alpha1
+kind: CassandraAutoscaler
+metadata:
+  name: cassandra-storage-autoscaler
+  namespace: demo
+spec:
+  databaseRef:
+    name: cassandra-autoscale
+  storage:
+    cassandra:
+      trigger: "On"
+      usageThreshold: 20
+      scalingThreshold: 100
+      expansionMode: "Offline"

docs/examples/cassandra/configuration/cassandra-config-file.yaml

@@ -0,0 +1,21 @@
+apiVersion: kubedb.com/v1alpha2
+kind: Cassandra
+metadata:
+  name: cas-custom-config
+  namespace: demo
+spec:
+  version: 5.0.3
+  configSecret:
+    name: cas-configuration
+  topology:
+    rack:
+      - name: r0
+        replicas: 2
+        storage:
+          accessModes:
+            - ReadWriteOnce
+          resources:
+            requests:
+              storage: 1Gi
+        storageType: Durable
+  deletionPolicy: WipeOut

docs/examples/cassandra/monitoring/builtin-prometheus/prom-config.yaml

@@ -0,0 +1,68 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: prometheus-config
+  labels:
+    app: prometheus-demo
+  namespace: monitoring
+data:
+  prometheus.yml: |-
+    global:
+      scrape_interval: 5s
+      evaluation_interval: 5s
+    scrape_configs:
+    - job_name: 'kubedb-databases'
+      honor_labels: true
+      scheme: http
+      kubernetes_sd_configs:
+      - role: endpoints
+      # by default Prometheus server select all Kubernetes services as possible target.
+      # relabel_config is used to filter only desired endpoints
+      relabel_configs:
+      # keep only those services that has "prometheus.io/scrape","prometheus.io/path" and "prometheus.io/port" anootations
+      - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scrape, __meta_kubernetes_service_annotation_prometheus_io_port]
+        separator: ;
+        regex: true;(.*)
+        action: keep
+      # currently KubeDB supported databases uses only "http" scheme to export metrics. so, drop any service that uses "https" scheme.
+      - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_scheme]
+        action: drop
+        regex: https
+      # only keep the stats services created by KubeDB for monitoring purpose which has "-stats" suffix
+      - source_labels: [__meta_kubernetes_service_name]
+        separator: ;
+        regex: (.*-stats)
+        action: keep
+      # service created by KubeDB will have "app.kubernetes.io/name" and "app.kubernetes.io/instance" annotations. keep only those services that have these annotations.
+      - source_labels: [__meta_kubernetes_service_label_app_kubernetes_io_name]
+        separator: ;
+        regex: (.*)
+        action: keep
+      # read the metric path from "prometheus.io/path: <path>" annotation
+      - source_labels: [__meta_kubernetes_service_annotation_prometheus_io_path]
+        action: replace
+        target_label: __metrics_path__
+        regex: (.+)
+      # read the port from "prometheus.io/port: <port>" annotation and update scraping address accordingly
+      - source_labels: [__address__, __meta_kubernetes_service_annotation_prometheus_io_port]
+        action: replace
+        target_label: __address__
+        regex: ([^:]+)(?::\d+)?;(\d+)
+        replacement: $1:$2
+      # add service namespace as label to the scraped metrics
+      - source_labels: [__meta_kubernetes_namespace]
+        separator: ;
+        regex: (.*)
+        target_label: namespace
+        replacement: $1
+        action: replace
+      # add service name as a label to the scraped metrics
+      - source_labels: [__meta_kubernetes_service_name]
+        separator: ;
+        regex: (.*)
+        target_label: service
+        replacement: $1
+        action: replace
+      # add stats service's labels to the scraped metrics
+      - action: labelmap
+        regex: __meta_kubernetes_service_label_(.+)

docs/examples/cassandra/monitoring/cas-with-monitoring.yaml

@@ -0,0 +1,38 @@
+apiVersion: kubedb.com/v1alpha2
+kind: Cassandra
+metadata:
+  name: cassandra-prod
+  namespace: demo
+spec:
+  version: 5.0.3
+  configuration:
+  topology:
+    rack:
+      - name: r0
+        replicas: 2
+        podTemplate:
+          spec:
+            containers:
+              - name: cassandra
+                resources:
+                  limits:
+                    memory: 2Gi
+                    cpu: 2
+                  requests:
+                    memory: 1Gi
+                    cpu: 1
+        storage:
+          accessModes:
+            - ReadWriteOnce
+          resources:
+            requests:
+              storage: 1Gi
+        storageType: Durable
+  deletionPolicy: WipeOut
+  monitor:
+    agent: "prometheus.io/operator"
+    prometheus:
+      serviceMonitor:
+        labels:
+          release: prometheus
+        interval: 10s

docs/examples/cassandra/monitoring/cassandra-builtin-prom.yaml

@@ -0,0 +1,38 @@
+apiVersion: kubedb.com/v1alpha2
+kind: Cassandra
+metadata:
+  name: cassandra-builtin-prom
+  namespace: demo
+spec:
+  version: 5.0.3
+  configuration:
+  topology:
+    rack:
+      - name: r0
+        replicas: 2
+        podTemplate:
+          spec:
+            containers:
+              - name: cassandra
+                resources:
+                  limits:
+                    memory: 2Gi
+                    cpu: 2
+                  requests:
+                    memory: 1Gi
+                    cpu: 1
+        storage:
+          accessModes:
+            - ReadWriteOnce
+          resources:
+            requests:
+              storage: 1Gi
+        storageType: Durable
+  deletionPolicy: WipeOut
+  monitor:
+    agent: "prometheus.io/builtin"
+    prometheus:
+      serviceMonitor:
+        labels:
+          release: prometheus
+        interval: 10s

docs/examples/cassandra/quickstart/cassandra-quickstart.yaml

@@ -0,0 +1,18 @@
+apiVersion: kubedb.com/v1alpha2
+kind: Cassandra
+metadata:
+  name: cassandra-quickstart
+  namespace: demo
+spec:
+  version: 5.0.3
+  topology:
+    rack:
+      - name: r0
+        replicas: 2
+        storage:
+          accessModes:
+            - ReadWriteOnce
+          resources:
+            requests:
+              storage: 600Mi
+  deletionPolicy: Delete

docs/examples/cassandra/reconfigure-tls/casops-remove.yaml

@@ -0,0 +1,11 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: CassandraOpsRequest
+metadata:
+  name: casops-remove
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: cassandra-prod
+  tls:
+    remove: true

docs/examples/cassandra/reconfigure-tls/casops-rotate.yaml

@@ -0,0 +1,11 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: CassandraOpsRequest
+metadata:
+  name: casops-rotate
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: cassandra-prod
+  tls:
+    rotateCertificates: true

docs/examples/cassandra/reconfigure-tls/cassandra-add-tls.yaml

@@ -0,0 +1,23 @@
+apiVersion: ops.kubedb.com/v1alpha1
+kind: CassandraOpsRequest
+metadata:
+  name: casops-add-tls
+  namespace: demo
+spec:
+  type: ReconfigureTLS
+  databaseRef:
+    name: cassandra-prod
+  tls:
+    issuerRef:
+      name: cas-issuer
+      kind: Issuer
+      apiGroup: "cert-manager.io"
+    certificates:
+      - alias: client
+        subject:
+          organizations:
+            - cassandra
+          organizationalUnits:
+            - client
+  timeout: 5m
+  apply: IfReady

docs/examples/cassandra/reconfigure-tls/cassandra-issuer.yaml

@@ -0,0 +1,8 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: cas-issuer
+  namespace: demo
+spec:
+  ca:
+    secretName: cassandra-ca

docs/examples/cassandra/reconfigure-tls/cassandra-new-issuer.yaml

@@ -0,0 +1,8 @@
+apiVersion: cert-manager.io/v1
+kind: Issuer
+metadata:
+  name: cas-new-issuer
+  namespace: demo
+spec:
+  ca:
+    secretName: cassandra-new-ca