如何禁用console？

[ljtnono]

默认会启动一个console的deployment，删除之后一段时间内会自动再启动，想知道如何禁用

[caigy]

Have you deployed the Console CR?

[ljtnono]

Have you deployed the Console CR?

no, I haven't. This is my deployment yaml file.

# sa定义
apiVersion: v1
kind: ServiceAccount
metadata:
  name: rocketmq-operator
  namespace: common

---

# role定义
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  name: rocketmq-operator
rules:
  - apiGroups:
      - ""
    resources:
      - configmaps
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - ""
    resources:
      - events
    verbs:
      - create
      - patch
  - apiGroups:
      - ""
    resources:
      - pods
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - ""
    resources:
      - pods/exec
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - ""
    resources:
      - services
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - apps
    resources:
      - deployments
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - apps
    resources:
      - statefulsets
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - coordination.k8s.io
    resources:
      - leases
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - brokers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - brokers/finalizers
    verbs:
      - update
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - brokers/status
    verbs:
      - get
      - patch
      - update
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - consoles
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - consoles/finalizers
    verbs:
      - update
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - consoles/status
    verbs:
      - get
      - patch
      - update
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - controllers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - controllers/finalizers
    verbs:
      - update
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - controllers/status
    verbs:
      - get
      - patch
      - update
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - nameservices
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - nameservices/finalizers
    verbs:
      - update
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - nameservices/status
    verbs:
      - get
      - patch
      - update
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - topictransfers
    verbs:
      - create
      - delete
      - get
      - list
      - patch
      - update
      - watch
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - topictransfers/finalizers
    verbs:
      - update
  - apiGroups:
      - rocketmq.apache.org
    resources:
      - topictransfers/status
    verbs:
      - get
      - patch
      - update

---
# roleBinding
kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: rocketmq-operator
subjects:
  - kind: ServiceAccount
    name: rocketmq-operator
    namespace: common
roleRef:
  kind: ClusterRole
  name: rocketmq-operator
  apiGroup: rbac.authorization.k8s.io

---
# deployment
apiVersion: apps/v1
kind: Deployment
metadata:
  name: rocketmq-operator
  namespace: common
spec:
  replicas: 1
  selector:
    matchLabels:
      name: rocketmq-operator
  template:
    metadata:
      labels:
        name: rocketmq-operator
    spec:
      serviceAccountName: rocketmq-operator
      terminationGracePeriodSeconds: 10
      containers:
        - name: manager
          image: apache/rocketmq-operator:latest
          command:
            - /manager
          args:
            - --leader-elect
          imagePullPolicy: IfNotPresent
          securityContext:
            allowPrivilegeEscalation: false
          livenessProbe:
            httpGet:
              path: /healthz
              port: 8081
            initialDelaySeconds: 15
            periodSeconds: 20
          readinessProbe:
            httpGet:
              path: /readyz
              port: 8081
            initialDelaySeconds: 5
            periodSeconds: 10
          env:
            - name: WATCH_NAMESPACE
              valueFrom:
                fieldRef:
                  fieldPath: metadata.namespace
            - name: POD_NAME
              valueFrom:
                fieldRef:
                  fieldPath: metadata.name
            - name: OPERATOR_NAME
              value: "rocketmq-operator"
            - name: ENABLE_ROCKETMQ_CONSOLE
              value: "false"
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: broker-config
  namespace: common
data:
  # BROKER_MEM sets the broker JVM, if set to "" then Xms = Xmx = max(min(1/2 ram, 1024MB), min(1/4 ram, 8GB))
  BROKER_MEM: " -Xms512m -Xmx512m -Xmn512m "
  broker-common.conf: |
    # brokerClusterName, brokerName, brokerId are automatically generated by the operator and do not set it manually!!!
    deleteWhen=04
    fileReservedTime=48
    flushDiskType=ASYNC_FLUSH
    # set brokerRole to ASYNC_MASTER or SYNC_MASTER. DO NOT set to SLAVE because the replica instance will automatically be set!!!
    brokerRole=ASYNC_MASTER

---
apiVersion: rocketmq.apache.org/v1alpha1
kind: Broker
metadata:
  name: broker
  namespace: common
spec:
  size: 1
  nameServers: ""
  replicaPerGroup: 2
  brokerImage: apacherocketmq/rocketmq-broker:4.5.0-alpine-operator-0.3.0
  imagePullPolicy: Always
  resources:
    requests:
      memory: "2048Mi"
      cpu: "250m"
    limits:
      memory: "12288Mi"
      cpu: "500m"
  allowRestart: true
  storageMode: StorageClass
  hostPath: ""
  scalePodName: broker-0-master-0
  env:
    - name: BROKER_MEM
      valueFrom:
        configMapKeyRef:
          name: broker-config
          key: BROKER_MEM
  volumes:
    - name: broker-config
      configMap:
        name: broker-config
        items:
          - key: broker-common.conf
            path: broker-common.conf
  volumeClaimTemplates:
    - metadata:
        name: broker-storage
        namespace: common
        annotations:
          nfs.io/storage-path: rocketmq/broker
      spec:
        accessModes:
          - ReadWriteOnce
        storageClassName: nfs-sc
        resources:
          requests:
            storage: 4Gi
---
apiVersion: rocketmq.apache.org/v1alpha1
kind: NameService
metadata:
  name: name-service
  namespace: common
spec:
  size: 1
  nameServiceImage: apacherocketmq/rocketmq-nameserver:4.5.0-alpine-operator-0.3.0
  imagePullPolicy: Always
  hostNetwork: true
  dnsPolicy: ClusterFirstWithHostNet
  resources:
    requests:
      memory: "512Mi"
      cpu: "250m"
    limits:
      memory: "1024Mi"
      cpu: "500m"
  storageMode: StorageClass
  hostPath: ""
  volumeClaimTemplates:
    - metadata:
        name: namesrv-storage
        namespace: common
        annotations:
          nfs.io/storage-path: rocketmq/nameserver
      spec:
        accessModes:
          - ReadWriteOnce
        storageClassName: nfs-sc
        resources:
          requests:
            storage: 1Gi
---
# namesrv service服务暴露
apiVersion: v1
kind: Service
metadata:
  name: rocketmq-namesrv-extern
  namespace: common
spec:
  type: NodePort
  ports:
    - port: 9876
      name: namesrv
      nodePort: 30160
      targetPort: 9876
  selector:
    app: name_service

[caigy]

@ljtnono Actually the Operator will not deploy console without Console CR, according to your provided definition. You can run kubectl get Console to check whether Console CR exists.

[ljtnono]

@caigy um, maybe you are right, kubectl get Console -n common show that I have deployed a console. so, what can I do to close the Console CR?

[ljtnono]

@caigy Is the Console CR deployed by default strategy，and how to close the Console CR in my yaml file?

[caigy]

@caigy Is the Console CR deployed by default strategy，and how to close the Console CR in my yaml file?

No, it won't. If you don't need it, you can delete the CR (and related pod if it is not cascading removed).

[ljtnono]

@caigy OK. Thanks.