apiVersion: ps.percona.com/v1
kind: PerconaServerMySQL
metadata:
  finalizers:
    - percona.com/delete-mysql-pods-in-order
#    - percona.com/delete-ssl
#    - percona.com/delete-mysql-pvc
  name: ps-cluster1
spec:
#  metadata:
#    annotations:
#      service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#      service.beta.kubernetes.io/aws-load-balancer-type: nlb
#    labels:
#      rack: rack-22
#  unsafeFlags:
#    asyncFailoverWithPossibleDataLoss: false
#    backupNonReadyCluster: false
#    mysqlSize: false
#    orchestrator: false
#    orchestratorSize: false
#    proxy: false
#    proxySize: false
#  pause: false
#  clusterServiceDNSSuffix: cluster.local
  crVersion: 1.3.0
#  enableVolumeExpansion: false
#  storageScaling:
#    autoscaling:
#      enabled: false
#      growthStep: 2Gi
#      maxSize: 40Gi
#      triggerThresholdPercent: 80
#    enableExternalAutoscaling: false
#    enableVolumeScaling: false
  secretsName: ps-cluster1-secrets
  sslSecretName: ps-cluster1-ssl
  updateStrategy: SmartUpdate
  upgradeOptions:
    apply: disabled
    versionServiceEndpoint: https://check.percona.com
#  initContainer:
#    containerSecurityContext:
#      privileged: false
#      runAsGroup: 1001
#      runAsUser: 1001
#    image: percona/percona-server-mysql-operator:1.3.0
#    resources:
#      limits:
#        cpu: 100m
#        memory: 100M
#      requests:
#        cpu: 200m
#        memory: 200M
#  ignoreAnnotations:
#    - service.beta.kubernetes.io/aws-load-balancer-backend-protocol
#  ignoreLabels:
#    - rack
#  tls:
#    SANs:
#      - mysql-1.example.com
#      - mysql-2.example.com
#      - mysql-3.example.com
#    issuerConf:
#      group: cert-manager.io
#      kind: ClusterIssuer
#      name: special-selfsigned-issuer
  mysql:
    clusterType: group-replication
    autoRecovery: true
#    vaultSecretName: ps-cluster1-vault
    size: 3
    image: percona/percona-server:8.4.11-11.1
    imagePullPolicy: Always
#    imagePullSecrets:
#      - name: my-secret-1
#      - name: my-secret-2
#    runtimeClassName: image-rc
#    tolerations:
#      - effect: NoExecute
#        key: node.alpha.kubernetes.io/unreachable
#        operator: Exists
#        tolerationSeconds: 6000
#    annotations:
#      service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#      service.beta.kubernetes.io/aws-load-balancer-type: nlb
#    labels:
#      rack: rack-22
#    nodeSelector:
#      topology.kubernetes.io/zone: us-east-1a
#    priorityClassName: high-priority
#    schedulerName: default-scheduler
#    serviceAccountName: some-service-account
    gracePeriod: 600
#    initContainer:
#      containerSecurityContext:
#        privileged: false
#        runAsGroup: 1001
#        runAsUser: 1001
#      image: percona/percona-server-mysql-operator:1.3.0
#      resources:
#        limits:
#          cpu: 100m
#          memory: 100M
#        requests:
#          cpu: 200m
#          memory: 200M
#    env:
#      - name: BOOTSTRAP_READ_TIMEOUT
#        value: "600"
#      - name: ASYNC_SOURCE_RETRY_COUNT
#        value: "3"
#      - name: ASYNC_SOURCE_CONNECT_RETRY
#        value: "60"
#      - name: BOOTSTRAP_CLONE_STALL_TIMEOUT
#        value: "900"
#    envFrom:
#      - secretRef:
#          name: mysql-env-secret
    podDisruptionBudget:
      maxUnavailable: 1
#      minAvailable: 0
    resources:
      limits:
        cpu: "4"
        memory: 8Gi
      requests:
        cpu: "2"
        memory: 4Gi
#    startupProbe:
#      failureThreshold: 1
#      initialDelaySeconds: 15
#      periodSeconds: 10
#      successThreshold: 1
#      timeoutSeconds: 604800
#    readinessProbe:
#      failureThreshold: 3
#      initialDelaySeconds: 30
#      periodSeconds: 5
#      successThreshold: 1
#      timeoutSeconds: 3
#    livenessProbe:
#      failureThreshold: 3
#      initialDelaySeconds: 15
#      periodSeconds: 10
#      successThreshold: 1
#      timeoutSeconds: 10
    affinity:
#      advanced:
#        nodeAffinity:
#          requiredDuringSchedulingIgnoredDuringExecution:
#            nodeSelectorTerms:
#              - matchExpressions:
#                  - key: kubernetes.io/e2e-az-name
#                    operator: In
#                    values:
#                      - e2e-az1
#                      - e2e-az2
      antiAffinityTopologyKey: kubernetes.io/hostname
#    topologySpreadConstraints:
#      - labelSelector:
#          matchLabels:
#            app.kubernetes.io/name: percona-server
#        maxSkew: 1
#        topologyKey: kubernetes.io/hostname
#        whenUnsatisfiable: DoNotSchedule
#    containerSecurityContext:
#      privileged: false
#      runAsGroup: 1001
#      runAsUser: 1001
#    podSecurityContext:
#      fsGroup: 1001
#      supplementalGroups:
#        - 1001
#        - 1002
#        - 1003
    exposePrimary:
#      allocateLoadBalancerNodePorts: false
#      annotations:
#        service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#        service.beta.kubernetes.io/aws-load-balancer-type: nlb
      enabled: true
#      externalTrafficPolicy: Cluster
#      internalTrafficPolicy: Cluster
#      labels:
#        rack: rack-22
#      loadBalancerSourceRanges:
#        - 10.0.0.0/8
#      type: ClusterIP
#    expose:
#      allocateLoadBalancerNodePorts: false
#      annotations:
#        service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#        service.beta.kubernetes.io/aws-load-balancer-type: nlb
#      enabled: false
#      externalTrafficPolicy: Cluster
#      internalTrafficPolicy: Cluster
#      labels:
#        rack: rack-22
#      loadBalancerSourceRanges:
#        - 10.0.0.0/8
#      type: ClusterIP
    volumeSpec:
#      emptyDir: {}
#      hostPath:
#        path: /data
#        type: Directory
      persistentVolumeClaim:
#        accessModes:
#          - ReadWriteOnce
        resources:
          requests:
            storage: 30Gi
#        storageClassName: standard
#    configuration: |-
#      [mysqld]
#      max_connections=250
#      innodb_buffer_pool_size={{containerMemoryLimit * 3/4}}
#    sidecars:
#      - command:
#          - sleep
#          - 30d
#        image: busybox
#        imagePullPolicy: Always
#        lifecycle: {}
#        livenessProbe: {}
#        name: noop-memory
#        readinessProbe: {}
#        resources:
#          requests:
#            memory: 16M
#        securityContext: {}
#        startupProbe: {}
#        volumeMounts:
#          - mountPath: /var/log/app/memory
#            name: memory-vol
#      - command:
#          - sleep
#          - 30d
#        image: busybox
#        imagePullPolicy: Always
#        lifecycle: {}
#        livenessProbe: {}
#        name: noop-pvc
#        readinessProbe: {}
#        resources:
#          requests:
#            memory: 16M
#        securityContext: {}
#        startupProbe: {}
#        volumeMounts:
#          - mountPath: /var/log/app/memory
#            name: memory-vol
#    sidecarVolumes:
#      - emptyDir:
#          medium: Memory
#        name: memory-vol
#    sidecarPVCs:
#      - name: pvc-vol
#        spec:
#          resources:
#            requests:
#              storage: 1Gi
    autoConfig:
      enabled: true
      loadType: someWrites
      version: 8.4.0
#    bootstrap:
#      mode: auto
  proxy:
    haproxy:
      enabled: true
#      expose:
#        allocateLoadBalancerNodePorts: false
#        annotations:
#          service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#          service.beta.kubernetes.io/aws-load-balancer-type: nlb
#        externalTrafficPolicy: Cluster
#        internalTrafficPolicy: Cluster
#        labels:
#          rack: rack-22
#        loadBalancerSourceRanges:
#          - 10.0.0.0/8
#        type: ClusterIP
      size: 3
      image: percona/haproxy:2.8.29-1
      imagePullPolicy: Always
#      imagePullSecrets:
#        - name: my-secret-1
#        - name: my-secret-2
#      runtimeClassName: image-rc
#      tolerations:
#        - effect: NoExecute
#          key: node.alpha.kubernetes.io/unreachable
#          operator: Exists
#          tolerationSeconds: 6000
#      annotations:
#        service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#        service.beta.kubernetes.io/aws-load-balancer-type: nlb
#      labels:
#        rack: rack-22
#      nodeSelector:
#        topology.kubernetes.io/zone: us-east-1a
#      priorityClassName: high-priority
#      schedulerName: default-scheduler
#      serviceAccountName: some-service-account
      gracePeriod: 30
#      initContainer:
#        containerSecurityContext:
#          privileged: false
#          runAsGroup: 1001
#          runAsUser: 1001
#        image: percona/percona-server-mysql-operator:1.3.0
#        resources:
#          limits:
#            cpu: 100m
#            memory: 100M
#          requests:
#            cpu: 200m
#            memory: 200M
#      env:
#        - name: HA_CONNECTION_TIMEOUT
#          value: "600"
#      envFrom:
#        - secretRef:
#            name: haproxy-env-secret
      podDisruptionBudget:
        maxUnavailable: 1
#        minAvailable: 0
      resources:
#        limits:
#          cpu: 700m
#          memory: 1Gi
        requests:
          cpu: 600m
          memory: 1Gi
#      startupProbe:
#        failureThreshold: 10
#        initialDelaySeconds: 10
#        periodSeconds: 10
#        successThreshold: 1
#        timeoutSeconds: 3
#      readinessProbe:
#        failureThreshold: 3
#        initialDelaySeconds: 15
#        periodSeconds: 5
#        successThreshold: 1
#        timeoutSeconds: 1
#      livenessProbe:
#        failureThreshold: 4
#        initialDelaySeconds: 60
#        periodSeconds: 30
#        successThreshold: 1
#        timeoutSeconds: 3
      affinity:
#        advanced:
#          nodeAffinity:
#            requiredDuringSchedulingIgnoredDuringExecution:
#              nodeSelectorTerms:
#                - matchExpressions:
#                    - key: kubernetes.io/e2e-az-name
#                      operator: In
#                      values:
#                        - e2e-az1
#                        - e2e-az2
        antiAffinityTopologyKey: kubernetes.io/hostname
#      topologySpreadConstraints:
#        - labelSelector:
#            matchLabels:
#              app.kubernetes.io/name: percona-server
#          maxSkew: 1
#          topologyKey: kubernetes.io/hostname
#          whenUnsatisfiable: DoNotSchedule
#      containerSecurityContext:
#        privileged: false
#        runAsGroup: 1001
#        runAsUser: 1001
#      podSecurityContext:
#        fsGroup: 1001
#        supplementalGroups:
#          - 1001
#          - 1002
#          - 1003
#      sidecarResources:
#        mysql-monit:
#          limits:
#            cpu: 100m
#            memory: 128Mi
#          requests:
#            cpu: 50m
#            memory: 64Mi
#      configuration: |-
#        #      the actual default configuration file can be found here https://github.com/percona/percona-server-mysql-operator/blob/main/build/haproxy-global.cfg
#
#        global
#          maxconn 2048
#          external-check
#          insecure-fork-wanted
#          stats socket /etc/haproxy/mysql/haproxy.sock mode 600 expose-fd listeners level admin
#
#        defaults
#          default-server init-addr last,libc,none
#          log global
#          mode tcp
#          retries 10
#          timeout client 28800s
#          timeout connect 100500
#          timeout server 28800s
#
#        frontend mysql-primary-in
#          bind *:3309 accept-proxy
#          bind *:3306
#          mode tcp
#          option clitcpka
#          default_backend mysql-primary
#
#        frontend mysql-replicas-in
#          bind *:3307
#          mode tcp
#          option clitcpka
#          default_backend mysql-replicas
#
#        frontend stats
#          bind *:8404
#          mode http
#          http-request use-service prometheus-exporter if { path /metrics }
    router:
      enabled: false
#      expose:
#        allocateLoadBalancerNodePorts: false
#        annotations:
#          service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#          service.beta.kubernetes.io/aws-load-balancer-type: nlb
#        externalTrafficPolicy: Cluster
#        internalTrafficPolicy: Cluster
#        labels:
#          rack: rack-22
#        loadBalancerSourceRanges:
#          - 10.0.0.0/8
#        type: ClusterIP
      size: 3
      image: percona/percona-mysql-router:8.4.11-11.1
      imagePullPolicy: Always
#      imagePullSecrets:
#        - name: my-secret-1
#        - name: my-secret-2
#      runtimeClassName: image-rc
#      tolerations:
#        - effect: NoExecute
#          key: node.alpha.kubernetes.io/unreachable
#          operator: Exists
#          tolerationSeconds: 6000
#      annotations:
#        service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#        service.beta.kubernetes.io/aws-load-balancer-type: nlb
#      labels:
#        rack: rack-22
#      nodeSelector:
#        topology.kubernetes.io/zone: us-east-1a
#      priorityClassName: high-priority
#      schedulerName: default-scheduler
#      serviceAccountName: some-service-account
      gracePeriod: 30
#      initContainer:
#        containerSecurityContext:
#          privileged: false
#          runAsGroup: 1001
#          runAsUser: 1001
#        image: percona/percona-server-mysql-operator:1.3.0
#        resources:
#          limits:
#            cpu: 100m
#            memory: 100M
#          requests:
#            cpu: 200m
#            memory: 200M
#      env:
#        - name: ROUTER_ENV
#          value: VALUE
#      envFrom:
#        - secretRef:
#            name: router-env-secret
      podDisruptionBudget:
        maxUnavailable: 1
#        minAvailable: 0
      resources:
        limits:
          memory: 256M
        requests:
          memory: 256M
#      startupProbe:
#        failureThreshold: 1
#        initialDelaySeconds: 5
#        periodSeconds: 5
#        successThreshold: 1
#        timeoutSeconds: 3
#      readinessProbe:
#        failureThreshold: 3
#        periodSeconds: 5
#        successThreshold: 1
#        timeoutSeconds: 3
#      livenessProbe:
#        failureThreshold: 3
#        periodSeconds: 5
#        successThreshold: 1
#        timeoutSeconds: 3
      affinity:
#        advanced:
#          nodeAffinity:
#            requiredDuringSchedulingIgnoredDuringExecution:
#              nodeSelectorTerms:
#                - matchExpressions:
#                    - key: kubernetes.io/e2e-az-name
#                      operator: In
#                      values:
#                        - e2e-az1
#                        - e2e-az2
        antiAffinityTopologyKey: kubernetes.io/hostname
#      topologySpreadConstraints:
#        - labelSelector:
#            matchLabels:
#              app.kubernetes.io/name: percona-server
#          maxSkew: 1
#          topologyKey: kubernetes.io/hostname
#          whenUnsatisfiable: DoNotSchedule
#      containerSecurityContext:
#        privileged: false
#        runAsGroup: 1001
#        runAsUser: 1001
#      podSecurityContext:
#        fsGroup: 1001
#        supplementalGroups:
#          - 1001
#          - 1002
#          - 1003
#      ports:
#        - name: http
#          port: 8443
#          targetPort: 0
#        - name: rw-default
#          port: 3306
#          targetPort: 6446
#        - name: read-write
#          port: 6446
#          targetPort: 0
#        - name: read-only
#          port: 6447
#          targetPort: 0
#        - name: x-read-write
#          port: 6448
#          targetPort: 0
#        - name: x-read-only
#          port: 6449
#          targetPort: 0
#        - name: x-default
#          port: 33060
#          targetPort: 0
#        - name: rw-admin
#          port: 33062
#          targetPort: 0
#        - name: custom-port
#          port: 1111
#          targetPort: 6446
#      configuration: |-
#        [default]
#        logging_folder=/tmp/router/log
#        [logger]
#        level=DEBUG
  orchestrator:
    enabled: false
#    expose:
#      allocateLoadBalancerNodePorts: false
#      annotations:
#        service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#        service.beta.kubernetes.io/aws-load-balancer-type: nlb
#      externalTrafficPolicy: Cluster
#      internalTrafficPolicy: Cluster
#      labels:
#        rack: rack-22
#      loadBalancerSourceRanges:
#        - 10.0.0.0/8
#      type: ClusterIP
#    failover:
#      onTimeout: Abort
#      timeout: 1h
    size: 3
    image: percona/percona-orchestrator:3.2.6-24
    imagePullPolicy: Always
#    imagePullSecrets:
#      - name: my-secret-1
#      - name: my-secret-2
#    runtimeClassName: image-rc
#    tolerations:
#      - effect: NoExecute
#        key: node.alpha.kubernetes.io/unreachable
#        operator: Exists
#        tolerationSeconds: 6000
#    annotations:
#      service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp
#      service.beta.kubernetes.io/aws-load-balancer-type: nlb
#    labels:
#      rack: rack-22
#    nodeSelector:
#      topology.kubernetes.io/zone: us-east-1a
#    priorityClassName: high-priority
#    schedulerName: default-scheduler
#    serviceAccountName: percona-server-mysql-operator-orchestrator
    gracePeriod: 30
#    initContainer:
#      containerSecurityContext:
#        privileged: false
#        runAsGroup: 1001
#        runAsUser: 1001
#      image: percona/percona-server-mysql-operator:1.3.0
#      resources:
#        limits:
#          cpu: 100m
#          memory: 100M
#        requests:
#          cpu: 200m
#          memory: 200M
#    env:
#      - name: ORC_ENV
#        value: VALUE
#    envFrom:
#      - secretRef:
#          name: orc-env-secret
    podDisruptionBudget:
      maxUnavailable: 1
#      minAvailable: 0
    resources:
      limits:
        memory: 512M
      requests:
        memory: 128M
#    startupProbe:
#      failureThreshold: 3
#      periodSeconds: 5
#      successThreshold: 1
#      timeoutSeconds: 3
#    readinessProbe:
#      failureThreshold: 3
#      periodSeconds: 5
#      successThreshold: 1
#      timeoutSeconds: 3
#    livenessProbe:
#      failureThreshold: 3
#      periodSeconds: 5
#      successThreshold: 1
#      timeoutSeconds: 3
    affinity:
#      advanced:
#        nodeAffinity:
#          requiredDuringSchedulingIgnoredDuringExecution:
#            nodeSelectorTerms:
#              - matchExpressions:
#                  - key: kubernetes.io/e2e-az-name
#                    operator: In
#                    values:
#                      - e2e-az1
#                      - e2e-az2
      antiAffinityTopologyKey: kubernetes.io/hostname
#    topologySpreadConstraints:
#      - labelSelector:
#          matchLabels:
#            app.kubernetes.io/name: percona-server
#        maxSkew: 1
#        topologyKey: kubernetes.io/hostname
#        whenUnsatisfiable: DoNotSchedule
#    containerSecurityContext:
#      privileged: false
#      runAsGroup: 1001
#      runAsUser: 1001
#    podSecurityContext:
#      supplementalGroups:
#        - 1001
#    configuration: '{"ReasonableReplicationLagSeconds": 60, "ReasonableMaintenanceReplicationLagSeconds": 120}'
  pmm:
    enabled: false
    image: percona/pmm-client:3.10.0
    imagePullPolicy: Always
    serverHost: monitoring-service
#    customClusterName: cluster1-custom
#    mysqlParams: PMM_ADMIN_CUSTOM_PARAMS
#    haproxyParams: PMM_ADMIN_CUSTOM_PARAMS
#    containerSecurityContext:
#      privileged: false
#      runAsGroup: 1001
#      runAsUser: 1001
    resources:
#      limits:
#        cpu: 400m
#        memory: 256M
      requests:
        cpu: 300m
        memory: 150M
    livenessProbe:
      failureThreshold: 3
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 3
    readinessProbe:
      failureThreshold: 3
      periodSeconds: 5
      successThreshold: 1
      timeoutSeconds: 3
  logcollector:
    enabled: true
    image: percona/fluentbit:5.1.4-1
#    imagePullPolicy: Always
#    configuration: |
#      pipeline:
#        filters:
#          - name: record_modifier
#            match: "*"
#            record:
#              - cluster_name cluster1
#    env: []
#    envFrom: []
#    containerSecurityContext:
#      privileged: false
#      runAsGroup: 1001
#      runAsUser: 1001
#    resources:
#      limits:
#        cpu: 350m
#        memory: 200M
#      requests:
#        cpu: 300m
#        memory: 150M
#    readinessProbe:
#      initialDelaySeconds: 5
#      periodSeconds: 10
#      tcpSocket:
#        port: 2020
#    livenessProbe:
#      initialDelaySeconds: 30
#      periodSeconds: 15
#      tcpSocket:
#        port: 2020
#    volumeMounts: []
#    volumes: []
#    logRotate:
#      schedule: 0 0 * * *
#      configuration: |
#        /var/lib/mysql/log/*.log {
#            daily
#            minsize 10M
#            maxsize 100M
#            rotate 7
#            missingok
#            nocompress
#            notifempty
#            nocreate
#            sharedscripts
#            postrotate
#                /opt/percona/logcollector/logrotate/postrotate-mysql.sh
#            endscript
#        }
#      extraConfig:
#        name: my-logrotate-config
#      readinessProbe:
#        exec:
#          command:
#            - /bin/true
#        initialDelaySeconds: 5
#        periodSeconds: 10
#      livenessProbe:
#        exec:
#          command:
#            - /bin/true
#        initialDelaySeconds: 30
#        periodSeconds: 15
  backup:
    enabled: true
    pitr:
      enabled: false
#      binlogServer:
#        size: 1
#        image: percona/percona-server-mysql-operator:1.3.0-binlog-server-0.4.1
#        imagePullPolicy: Always
#        imagePullSecrets:
#          - name: my-secret-1
#          - name: my-secret-2
#        storage:
#          encryption:
#            cipher: AES-256-CTR
#            kekId: alpha
#          s3:
#            bucket: S3-BACKUP-BUCKET-NAME-HERE
#            caBundle:
#              key: ca.crt
#              name: minio-ca-bundle
#            credentialsSecret: ps-cluster1-s3-credentials
#            endpointUrl: https://s3.amazonaws.com
#            prefix: PREFIX_NAME
#            region: us-west-2
#        keyringSecret:
#          key: keyring.json
#          name: ps-cluster1-binlog-server-keyring
#        connectTimeout: 30
#        readTimeout: 30
#        writeTimeout: 30
#        idleTime: 30
#        affinity:
#          advanced:
#            nodeAffinity:
#              requiredDuringSchedulingIgnoredDuringExecution:
#                nodeSelectorTerms:
#                  - matchExpressions:
#                      - key: kubernetes.io/e2e-az-name
#                        operator: In
#                        values:
#                          - e2e-az1
#                          - e2e-az2
#          antiAffinityTopologyKey: kubernetes.io/hostname
#        checkpointInterval: 30s
#        checkpointSize: 16M
#        containerSecurityContext:
#          privileged: false
#          runAsGroup: 1001
#          runAsUser: 1001
#        env: []
#        envFrom: []
#        initContainer:
#          containerSecurityContext:
#            privileged: false
#            runAsGroup: 1001
#            runAsUser: 1001
#          image: percona/percona-server-mysql-operator:1.3.0
#          resources:
#            limits:
#              cpu: 100m
#              memory: 100M
#            requests:
#              cpu: 200m
#              memory: 200M
#        logLevel: info
#        podSecurityContext:
#          fsGroup: 1001
#          supplementalGroups:
#            - 1001
#            - 1002
#            - 1003
#        resources:
#          limits:
#            cpu: 100m
#            memory: 100M
#          requests:
#            cpu: 200m
#            memory: 200M
#        rewriteFileSize: ""
#        sslMode: ""
#    sourcePod: ps-cluster1-mysql-1
    image: percona/percona-xtrabackup:8.4.0-7.1
    imagePullPolicy: Always
#    imagePullSecrets:
#      - name: my-secret-1
#      - name: my-secret-2
#    schedule:
#      - keep: 0
#        name: sat-night-backup
#        schedule: 0 0 * * 6
#        storageName: s3-us-west
#        type: full
#      - keep: 0
#        name: daily-backup
#        schedule: 0 0 * * *
#        storageName: s3
#        type: incremental
#    backoffLimit: 6
#    serviceAccountName: some-service-account
#    initContainer:
#      containerSecurityContext:
#        privileged: false
#        runAsGroup: 1001
#        runAsUser: 1001
#      image: percona/percona-server-mysql-operator:1.3.0
#      resources:
#        limits:
#          cpu: 100m
#          memory: 100M
#        requests:
#          cpu: 200m
#          memory: 200M
#    containerSecurityContext:
#      privileged: false
#      runAsGroup: 1001
#      runAsUser: 1001
#    resources:
#      limits:
#        cpu: 100m
#        memory: 100M
#      requests:
#        cpu: 200m
#        memory: 200M
    storages:
#      azure-blob:
#        azure:
#          container: CONTAINER-NAME
#          credentialsSecret: SECRET-NAME
#          endpointUrl: https://accountName.blob.core.windows.net
#          prefix: PREFIX-NAME
#          storageClass: Cool
#        containerOptions:
#          args:
#            xbcloud:
#              - --someflag=abc
#            xbstream:
#              - --someflag=abc
#            xtrabackup:
#              - --someflag=abc
#          env:
#            - name: CUSTOM_VAR
#              value: "false"
#        containerSecurityContext:
#          privileged: false
#          runAsGroup: 1001
#          runAsUser: 1001
#        encryptionKeySecret:
#          key: encryptionKey
#          name: my-azure-encryption-key-secret
#        podSecurityContext:
#          fsGroup: 1001
#          supplementalGroups:
#            - 1001
#            - 1002
#            - 1003
#        resources:
#          limits:
#            cpu: 100m
#            memory: 100M
#          requests:
#            cpu: 200m
#            memory: 200M
#        tolerations:
#          - effect: NoExecute
#            key: node.alpha.kubernetes.io/unreachable
#            operator: Exists
#            tolerationSeconds: 6000
#        topologySpreadConstraints:
#          - labelSelector:
#              matchLabels:
#                app.kubernetes.io/name: percona-server
#            maxSkew: 1
#            topologyKey: kubernetes.io/hostname
#            whenUnsatisfiable: DoNotSchedule
#        type: azure
#        verifyTLS: null
#      gcp-cs:
#        containerOptions:
#          args:
#            xbcloud:
#              - --someflag=abc
#            xbstream:
#              - --someflag=abc
#            xtrabackup:
#              - --someflag=abc
#          env:
#            - name: CUSTOM_VAR
#              value: "false"
#        containerSecurityContext:
#          privileged: false
#          runAsGroup: 1001
#          runAsUser: 1001
#        encryptionKeySecret:
#          key: encryptionKey
#          name: my-gcs-encryption-key-secret
#        gcs:
#          bucket: BUCKET-NAME
#          credentialsSecret: SECRET-NAME
#          endpointUrl: https://storage.googleapis.com
#          prefix: PREFIX-NAME
#          storageClass: ""
#        podSecurityContext:
#          fsGroup: 1001
#          supplementalGroups:
#            - 1001
#            - 1002
#            - 1003
#        resources:
#          limits:
#            cpu: 100m
#            memory: 100M
#          requests:
#            cpu: 200m
#            memory: 200M
#        tolerations:
#          - effect: NoExecute
#            key: node.alpha.kubernetes.io/unreachable
#            operator: Exists
#            tolerationSeconds: 6000
#        topologySpreadConstraints:
#          - labelSelector:
#              matchLabels:
#                app.kubernetes.io/name: percona-server
#            maxSkew: 1
#            topologyKey: kubernetes.io/hostname
#            whenUnsatisfiable: DoNotSchedule
#        type: gcs
      s3-us-west:
#        affinity:
#          nodeAffinity:
#            requiredDuringSchedulingIgnoredDuringExecution:
#              nodeSelectorTerms:
#                - matchExpressions:
#                    - key: kubernetes.io/e2e-az-name
#                      operator: In
#                      values:
#                        - e2e-az1
#                        - e2e-az2
#        annotations:
#          testName: scheduled-backup
#        containerOptions:
#          args:
#            xbcloud:
#              - --someflag=abc
#            xbstream:
#              - --someflag=abc
#            xtrabackup:
#              - --someflag=abc
#          env:
#            - name: CUSTOM_VAR
#              value: "false"
#        containerSecurityContext:
#          privileged: false
#          runAsGroup: 1001
#          runAsUser: 1001
#        encryptionKeySecret:
#          key: encryptionKey
#          name: my-s3-encryption-key-secret
#        labels:
#          backupWorker: "True"
#        nodeSelector:
#          topology.kubernetes.io/zone: us-east-1a
#        podSecurityContext:
#          fsGroup: 1001
#          supplementalGroups:
#            - 1001
#            - 1002
#            - 1003
#        priorityClassName: high-priority
#        resources:
#          limits:
#            cpu: 100m
#            memory: 100M
#          requests:
#            cpu: 200m
#            memory: 200M
#        runtimeClassName: image-rc
        s3:
          bucket: S3-BACKUP-BUCKET-NAME-HERE
#          caBundle:
#            key: ca.crt
#            name: minio-ca-bundle
          credentialsSecret: ps-cluster1-s3-credentials
#          endpointUrl: https://s3.amazonaws.com
#          prefix: PREFIX_NAME
          region: us-west-2
#        schedulerName: default-scheduler
#        tolerations:
#          - effect: NoExecute
#            key: node.alpha.kubernetes.io/unreachable
#            operator: Exists
#            tolerationSeconds: 6000
#        topologySpreadConstraints:
#          - labelSelector:
#              matchLabels:
#                app.kubernetes.io/name: percona-server
#            maxSkew: 1
#            topologyKey: kubernetes.io/hostname
#            whenUnsatisfiable: DoNotSchedule
        type: s3
        verifyTLS: true
#        volumeSpec:
#          emptyDir: {}
#          hostPath:
#            path: /data
#            type: Directory
#          persistentVolumeClaim:
#            accessModes:
#              - ReadWriteOnce
#            resources:
#              requests:
#                storage: 30Gi
#            storageClassName: standard
#    encryptionKeySecret:
#      key: encryptionKey
#      name: my-encryption-key-secret
#    startingDeadlineSeconds: 0
#    suspendedDeadlineSeconds: 0
  toolkit:
    image: percona/percona-toolkit:3.7.2-1
    imagePullPolicy: Always
#    imagePullSecrets:
#      - name: my-secret-1
#      - name: my-secret-2
#    env:
#      - name: TOOLKIT_ENV
#        value: VALUE
#    envFrom:
#      - secretRef:
#          name: toolkit-env-secret
#    resources:
#      limits:
#        cpu: 400m
#        memory: 256M
#      requests:
#        cpu: 100m
#        memory: 150M
#    containerSecurityContext:
#      privileged: false
#      runAsGroup: 1001
#      runAsUser: 1001
#    startupProbe:
#      failureThreshold: 3
#      periodSeconds: 5
#      successThreshold: 1
#      timeoutSeconds: 3
#    readinessProbe:
#      failureThreshold: 3
#      periodSeconds: 5
#      successThreshold: 1
#      timeoutSeconds: 3
#    livenessProbe:
#      failureThreshold: 3
#      periodSeconds: 5
#      successThreshold: 1
#      timeoutSeconds: 3
#  users:
#    - dbs:
#        - mydb
#      grants:
#        - SELECT
#        - INSERT
#      hosts: []
#      name: alice
#      passwordSecretRef:
#        key: password
#        name: alice-secret
#      withGrantOption: false
#    - dbs:
#        - mydb
#      grants:
#        - SELECT
#        - INSERT
#      hosts: []
#      name: bob
#      withGrantOption: true