MySQL Helm chart

# Standalone mode with defaults
helm install my-mysql ./mysql-server-helm/mysql

# Get root password
kubectl get secret my-mysql -o jsonpath="{.data.mysql-root-password}" | base64 -d

# Create namespace
kubectl create namespace production

# Create secret with passwords
kubectl create secret generic mysql-prod-credentials -n production \
  --from-literal=mysql-root-password="$(openssl rand -base64 32)" \
  --from-literal=mysql-replication-password="$(openssl rand -base64 32)"

# Create values file
cat > production-values.yaml <<EOF
architecture: replication
auth:
  existingSecret: mysql-prod-credentials
  database: myapp
  
primary:
  persistence:
    size: 50Gi
    storageClass: standard
  resources:
    requests:
      memory: 2Gi
      cpu: 1000m
    limits:
      memory: 4Gi
      cpu: 2000m
  
secondary:
  replicaCount: 2
  persistence:
    size: 50Gi
    storageClass: standard
  resources:
    requests:
      memory: 1Gi
      cpu: 500m
    limits:
      memory: 2Gi
      cpu: 1000m

metrics:
  enabled: true
  serviceMonitor:
    enabled: true

volumePermissions:
  enabled: true
EOF

# Install
helm install mysql-prod ./mysql-server-helm/mysql \
  --namespace production \
  -f production-values.yaml

# Check pod status
kubectl get pods -l app.kubernetes.io/instance=mysql-prod -n production

# Verify all pods are ready
kubectl wait --for=condition=ready pod -l app.kubernetes.io/instance=mysql-prod -n production --timeout=300s

# Run Helm test
helm test mysql-prod -n production

# Get root password for verification
export MYSQL_ROOT_PASSWORD=$(kubectl get secret mysql-prod -n production -o jsonpath="{.data.mysql-root-password}" | base64 -d)

# Test direct pod connections
kubectl exec mysql-prod-primary-0 -n production -- \
  mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "SELECT VERSION();"

# Test service connections (primary)
kubectl run mysql-client --image=mysql:9.4.0 --rm -it --restart=Never -n production -- \
  mysql -h mysql-prod-primary -uroot -p${MYSQL_ROOT_PASSWORD} -e "SELECT 'Primary connection successful';"

# Check replication status (MySQL 9.4.0 compatible)
kubectl exec mysql-prod-secondary-0 -n production -- \
  mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "SHOW REPLICA STATUS"

# Alternative replication status check
kubectl exec mysql-prod-secondary-0 -n production -- \
  mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "SELECT * FROM performance_schema.replication_connection_status"

# Verify GTID replication is working
kubectl exec mysql-prod-secondary-0 -n production -- \
  mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "SHOW VARIABLES LIKE 'gtid_mode';"

# Test read from secondary (if using replication)
kubectl run mysql-client-read --image=mysql:9.4.0 --rm -it --restart=Never -n production -- \
  mysql -h mysql-prod-secondary -uroot -p${MYSQL_ROOT_PASSWORD} -e "SELECT 'Secondary read successful';"

# Primary service
<release-name>-primary.<namespace>.svc.cluster.local

# Secondary service (replication mode)
<release-name>-secondary.<namespace>.svc.cluster.local

# Individual pod DNS
<release-name>-primary-0.<release-name>-primary-headless.<namespace>.svc.cluster.local
<release-name>-secondary-0.<release-name>-secondary-headless.<namespace>.svc.cluster.local

# Passwords are auto-generated if not specified
helm install my-mysql ./mysql-server-helm/mysql

# Retrieve auto-generated password
kubectl get secret my-mysql -o jsonpath="{.data.mysql-root-password}" | base64 -d

# Create secret
kubectl create secret generic mysql-passwords \
  --from-literal=mysql-root-password=myRootPassword \
  --from-literal=mysql-password=myUserPassword \
  --from-literal=mysql-replication-password=myReplPassword

# Use in installation
helm install my-mysql ./mysql-server-helm/mysql \
  --set auth.existingSecret=mysql-passwords

# Create secret with previous passwords for validation
kubectl create secret generic mysql-previous-passwords \
  --from-literal=mysql-root-password=oldRootPassword \
  --from-literal=mysql-replication-password=oldReplPassword

# Update values to enable password update job
cat > password-update-values.yaml <<EOF
auth:
  rootPassword: newRootPassword
  replicationPassword: newReplPassword

passwordUpdateJob:
  enabled: true
  previousPasswords:
    existingSecret: mysql-previous-passwords
EOF

# Perform upgrade with new passwords
helm upgrade my-mysql ./mysql-server-helm/mysql \
  --reuse-values \
  -f password-update-values.yaml

# Or you can use --set to re-apply the changes
# architecture: standalone
helm upgrade --install my-mysql ./mysql-server-helm/mysql \
  --set architecture=standalone \
  --set passwordUpdateJob.enabled=true \
  --set auth.rootPassword=newpass456 \
  --set passwordUpdateJob.previousPasswords.rootPassword=testroot123

# architecture: replication
helm upgrade --install my-mysql ./mysql-server-helm/mysql \
  --set architecture=replication \
  --set passwordUpdateJob.enabled=true \
  --set auth.replicationPassword=replicapass123 \
  --set auth.rootPassword=newpass456 \
  --set passwordUpdateJob.previousPasswords.rootPassword=testroot123

# Primary logs
kubectl logs my-mysql-primary-0

# Secondary logs
kubectl logs my-mysql-secondary-0

# Metrics exporter logs
kubectl logs my-mysql-primary-0 -c metrics

# Create backup
kubectl exec my-mysql-primary-0 -- \
  mysqldump -uroot -p${MYSQL_ROOT_PASSWORD} \
  --all-databases --single-transaction \
  --flush-logs --master-data=2 > backup.sql

# Compress backup
gzip backup.sql

# Restore from backup
kubectl exec -i my-mysql-primary-0 -- \
  mysql -uroot -p${MYSQL_ROOT_PASSWORD} < backup.sql

# Scale up
helm upgrade my-mysql ./mysql-server-helm/mysql \
  --reuse-values \
  --set secondary.replicaCount=3

# Scale down
helm upgrade my-mysql ./mysql-server-helm/mysql \
  --reuse-values \
  --set secondary.replicaCount=1

# Backup first
kubectl exec my-mysql-primary-0 -- mysqldump -uroot -p${MYSQL_ROOT_PASSWORD} --all-databases > pre-upgrade-backup.sql

# Upgrade
helm upgrade my-mysql ./mysql-server-helm/mysql \
  --reuse-values \
  --set image.tag=9.4.1

# 1. Create full backup
kubectl exec my-mysql-primary-0 -- mysqldump -uroot -p${MYSQL_ROOT_PASSWORD} \
  --all-databases --routines --triggers --events > full-backup.sql

# 2. Stop replication (if applicable)
kubectl exec my-mysql-secondary-0 -- mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "STOP SLAVE"

# 3. Delete StatefulSets (keep PVCs)
kubectl delete statefulset my-mysql-primary my-mysql-secondary --cascade=orphan

# 4. Upgrade with new version
helm upgrade my-mysql ./mysql-server-helm/mysql \
  --set image.tag=9.4.1 \
  --reuse-values

# 5. Verify and restart replication
kubectl exec my-mysql-secondary-0 -- mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "START SLAVE"

kubectl exec my-mysql-primary-0 -- mysqlcheck -uroot -p${MYSQL_ROOT_PASSWORD} --analyze --all-databases

kubectl exec my-mysql-primary-0 -- mysqlcheck -uroot -p${MYSQL_ROOT_PASSWORD} --optimize --all-databases

kubectl exec my-mysql-primary-0 -- mysqlcheck -uroot -p${MYSQL_ROOT_PASSWORD} --check --all-databases

kubectl get pods
NAME                    READY   STATUS    RESTARTS   AGE
my-mysql-primary-0      0/1     Pending   0          5m

kubectl describe pod my-mysql-primary-0

# Verify password is correct
kubectl get secret my-mysql -o jsonpath="{.data.mysql-root-password}" | base64 -d

# Reset root password if needed
kubectl exec my-mysql-primary-0 -- mysql -uroot -e "ALTER USER 'root'@'%' IDENTIFIED BY 'NewPassword123!'"

kubectl exec my-mysql-secondary-0 -- mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "SHOW REPLICA STATUS" | grep Running
Slave_IO_Running: No
Slave_SQL_Running: No

# Check error
kubectl exec my-mysql-secondary-0 -- mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "SHOW REPLICA STATUS" | grep Last_Error

# Reset replication
kubectl exec my-mysql-secondary-0 -- mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "
STOP SLAVE;
RESET SLAVE ALL;
CHANGE MASTER TO
  MASTER_HOST='my-mysql-primary.default.svc.cluster.local',
  MASTER_PORT=3306,
  MASTER_USER='replicator',
  MASTER_PASSWORD='${MYSQL_REPLICATION_PASSWORD}',
  MASTER_AUTO_POSITION=1;
START SLAVE;"

kubectl describe pod my-mysql-primary-0 | grep -A 5 "Last State"
    Last State:     Terminated
      Reason:       OOMKilled

# Enable slow query log
kubectl exec my-mysql-primary-0 -- mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "
SET GLOBAL slow_query_log = 1;
SET GLOBAL long_query_time = 1;"

# Check slow queries
kubectl exec my-mysql-primary-0 -- tail -f /var/log/mysql/slow.log

# Analyze query execution plan
kubectl exec my-mysql-primary-0 -- mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "EXPLAIN SELECT ..."

# Add indexes as needed
kubectl exec my-mysql-primary-0 -- mysql -uroot -p${MYSQL_ROOT_PASSWORD} -e "CREATE INDEX idx_name ON table(column)"

kubectl exec -it my-mysql-primary-0 -- /bin/bash

kubectl logs my-mysql-primary-0 | grep ERROR

kubectl logs my-mysql-primary-0 -c metrics

# 1. Create backup from source
mysqldump -h source-mysql -uroot -p --all-databases > backup.sql

# 2. Install chart
helm install my-mysql ./mysql-server-helm/mysql --set auth.rootPassword=MyNewPassword

# 3. Import data
kubectl exec -i my-mysql-primary-0 -- mysql -uroot -pMyNewPassword < backup.sql

# 1. Create PVC from existing data
kubectl apply -f - <<EOF
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: mysql-data-migration
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 10Gi
EOF

# 2. Copy data to PVC (using a temporary pod)
kubectl run mysql-migrate --image=mysql:9.4.0 --rm -it --restart=Never \
  --overrides='{"spec":{"containers":[{"name":"mysql-migrate","volumeMounts":[{"name":"data","mountPath":"/var/lib/mysql"}]}],"volumes":[{"name":"data","persistentVolumeClaim":{"claimName":"mysql-data-migration"}}]}}' \
  -- bash -c "cp -r /source/data/* /var/lib/mysql/"

# 3. Install chart with existing PVC
helm install my-mysql ./mysql-server-helm/mysql \
  --set primary.persistence.existingClaim=mysql-data-migration

helm install mysql-dev ./mysql-server-helm/mysql -f dev-values.yaml