apiVersion: apps/v1
kind: StatefulSet
metadata:
  namespace: emc
  name: stats-mysql
  labels:
    app: mysql
    tier: stats
spec:
  serviceName: stats-mysql
  replicas: 1
  selector:
    matchLabels:
      app: mysql
      tier: stats
  updateStrategy:
    type: RollingUpdate
  template:
    metadata:
      labels:
        app: mysql
        tier: stats
    spec:
      nodeName: emc-master
      securityContext:
        runAsUser: 27
        fsGroup: 27
      initContainers:
      - name: prepare-mysql-volumes
        image: busybox
        command: ['sh', '-c', 'chown 27:27 /srv/lib && chmod 700 /srv/lib && mkdir -p /srv/tmp/log /srv/tmp/run /srv/tmp/files && ln -sf /dev/stderr /srv/tmp/log/mysqld.log && chown 27:27 /srv/tmp/log/mysqld.log /srv/tmp/run /srv/tmp/files']
        securityContext:
          runAsUser: 0
        volumeMounts:
        - name: mysql-lib
          mountPath: /srv/lib
        - name: mysql-tmp
          mountPath: /srv/tmp
      containers:
      - name: mysql
        image: quay.io/neith00/mysql-docker:s2streamstats
        imagePullPolicy: IfNotPresent
        env:
        - name: MYSQL_ROOT_PASSWORD
          value: /var/run/mysql-secret/password
        volumeMounts:
        - name: mysql-lib
          mountPath: /var/lib/mysql
        - name: mysql-tmp
          subPath: log
          mountPath: /var/log
        - name: mysql-tmp
          subPath: run
          mountPath: /var/run/mysqld
        - name: mysql-tmp
          subPath: files
          mountPath: /var/lib/mysql-files/
        - name: mysql-secret
          mountPath: /var/run/mysql-secret/
      volumes:
      - name: mysql-lib
        hostPath:
          type: DirectoryOrCreate
          path: /srv/stats/mysql
      - name: mysql-tmp
        emptyDir:
          medium: Memory
      - name: mysql-secret
        secret:
          secretName: stats-mysql-root
          defaultMode: 0400