K8SPG-708 replace ready/live probe http check with custom command, change pg entrypoint

build/postgres-operator/Dockerfile

@@ -63,6 +63,9 @@ COPY --from=go_builder /usr/local/bin/pgbackrest /usr/local/bin/
 COPY --from=go_builder /licenses /licenses
 COPY build/postgres-operator/install-extensions.sh /usr/local/bin
 COPY build/postgres-operator/init-entrypoint.sh /usr/local/bin
+COPY build/postgres-operator/postgres-entrypoint.sh /usr/local/bin
+COPY build/postgres-operator/postgres-liveness-check.sh /usr/local/bin
+COPY build/postgres-operator/postgres-readiness-check.sh /usr/local/bin
 COPY hack/tools/queries /opt/crunchy/conf
 
 RUN chgrp -R 0 /opt/crunchy/conf && chmod -R g=u opt/crunchy/conf

build/postgres-operator/init-entrypoint.sh

@@ -6,3 +6,6 @@ set -o xtrace
 CRUNCHY_BINDIR="/opt/crunchy"
 
 install -o "$(id -u)" -g "$(id -g)" -m 0755 -D "/usr/local/bin/pgbackrest" "${CRUNCHY_BINDIR}/bin/pgbackrest"
+install -o "$(id -u)" -g "$(id -g)" -m 0755 -D "/usr/local/bin/postgres-entrypoint.sh" "${CRUNCHY_BINDIR}/bin/postgres-entrypoint.sh"
+install -o "$(id -u)" -g "$(id -g)" -m 0755 -D "/usr/local/bin/postgres-liveness-check.sh" "${CRUNCHY_BINDIR}/bin/postgres-liveness-check.sh"
+install -o "$(id -u)" -g "$(id -g)" -m 0755 -D "/usr/local/bin/postgres-readiness-check.sh" "${CRUNCHY_BINDIR}/bin/postgres-readiness-check.sh"

build/postgres-operator/postgres-entrypoint.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+# /pgdata/ is already mounted to the pg database container with rw permissions
+recovery_file='/pgdata/sleep-forever'
+if [[ -f ${recovery_file} ]]; then
+	set +o xtrace
+	echo "The $recovery_file file is detected, node entered an infinite sleep"
+	echo "If you want to exit from the infinite sleep, remove the $recovery_file file"
+
+	if [[ ! -d /tmp/postgres ]]; then
+		mkdir -p /tmp/postgres
+	fi
+
+	while [ -f "${recovery_file}" ]; do
+		sleep 3
+	done
+	exit 0
+fi
+
+exec "$@"

build/postgres-operator/postgres-liveness-check.sh

@@ -0,0 +1,20 @@
+#!/bin/bash
+
+PATRONI_PORT=8008
+PATRONI_HOST=localhost
+
+# /pgdata/ is already mounted to the pg database container with rw permissions
+recovery_file='/pgdata/sleep-forever'
+if [ -f "${recovery_file}" ]; then
+	set +o xtrace
+	echo "The $recovery_file file is detected, node entered an infinite sleep"
+	echo "If you want to exit from the infinite sleep, remove the $recovery_file file"
+	exit 0
+fi
+
+response=$(curl -s -o /dev/null -w "%{http_code}" -k "https://${PATRONI_HOST}:${PATRONI_PORT}/liveness")
+
+if [[ $response -eq 200 ]]; then
+	exit 0
+fi
+exit 1

build/postgres-operator/postgres-readiness-check.sh

@@ -0,0 +1,11 @@
+#!/bin/bash
+
+PATRONI_PORT=8008
+PATRONI_HOST=localhost
+
+response=$(curl -s -o /dev/null -w "%{http_code}" -k "https://${PATRONI_HOST}:${PATRONI_PORT}/readiness")
+
+if [[ $response -eq 200 ]]; then
+	exit 0
+fi
+exit 1

deploy/cr.yaml

@@ -10,7 +10,31 @@ metadata:
 #  - percona.com/delete-backups
 spec:
   crVersion: 2.7.0
-#  initImage: perconalab/percona-postgresql-operator:main
+#  initContainer:
+#    image: perconalab/percona-postgresql-operator:main
+#    resources:
+#      limits:
+#        cpu: 2.0
+#        memory: 4Gi
+#    containerSecurityContext:
+#      fsGroup: 1001
+#      runAsUser: 1001
+#      runAsNonRoot: true
+#      fsGroupChangePolicy: "OnRootMismatch"
+#      runAsGroup: 1001
+#      seLinuxOptions:
+#        type: spc_t
+#        level: s0:c123,c456
+#      seccompProfile:
+#        type: Localhost
+#        localhostProfile: localhost/profile.json
+#      supplementalGroups:
+#      - 1001
+#      sysctls:
+#      - name: net.ipv4.tcp_keepalive_time
+#        value: "600"
+#      - name: net.ipv4.tcp_keepalive_intvl
+#        value: "60"
 #  metadata:
 #    annotations:
 #      example-annotation: value
@@ -150,6 +174,31 @@ spec:
   instances:
   - name: instance1
     replicas: 3
+#    initContainer:
+#      image: perconalab/percona-postgresql-operator:main
+#      resources:
+#        limits:
+#          cpu: 2.0
+#          memory: 4Gi
+#      containerSecurityContext:
+#        fsGroup: 1001
+#        runAsUser: 1001
+#        runAsNonRoot: true
+#        fsGroupChangePolicy: "OnRootMismatch"
+#        runAsGroup: 1001
+#        seLinuxOptions:
+#          type: spc_t
+#          level: s0:c123,c456
+#        seccompProfile:
+#          type: Localhost
+#          localhostProfile: localhost/profile.json
+#        supplementalGroups:
+#        - 1001
+#        sysctls:
+#        - name: net.ipv4.tcp_keepalive_time
+#          value: "600"
+#        - name: net.ipv4.tcp_keepalive_intvl
+#          value: "60"
 
     affinity:
       podAntiAffinity:
@@ -324,8 +373,31 @@ spec:
 #      metadata:
 #        labels:
       image: perconalab/percona-postgresql-operator:main-pgbackrest17
-#      initImage: perconalab/percona-postgresql-operator:main
-#
+#      initContainer:
+#        image: perconalab/percona-postgresql-operator:main
+#        resources:
+#          limits:
+#            cpu: 2.0
+#            memory: 4Gi
+#        containerSecurityContext:
+#          fsGroup: 1001
+#          runAsUser: 1001
+#          runAsNonRoot: true
+#          fsGroupChangePolicy: "OnRootMismatch"
+#          runAsGroup: 1001
+#          seLinuxOptions:
+#            type: spc_t
+#            level: s0:c123,c456
+#          seccompProfile:
+#            type: Localhost
+#            localhostProfile: localhost/profile.json
+#          supplementalGroups:
+#          - 1001
+#          sysctls:
+#          - name: net.ipv4.tcp_keepalive_time
+#            value: "600"
+#          - name: net.ipv4.tcp_keepalive_intvl
+#            value: "60"
 #      containers:
 #        pgbackrest:
 #          resources: