Dream Ja - 夢想嘉

# If permissions are insufficient, please first change the permissions: sudo chmod 777 /var/run/docker.sock
docker login container-registry.oracle.com

# Create a token secret based on config.json. The following command includes a namespace. If no namespace is specified, it will be created in the default namespace.
kubectl create secret generic oracle --from-file=.dockerconfigjson=$HOME/.docker/config.json --type=kubernetes.io/dockerconfigjson --namespace=database

# Create a folder
# <path> is the path to the database storage
# Example: /mnt/disks/data/database
mkdir database <path>/oracle <path>/oracle/oradata

# Change the folder permissions.
# <path> is the path to the database storage
# Example: /mnt/disks/data/database
sudo chmod 777 <path>/oracle <path>/oracle/oradata

# Create a namespace
kubectl create namespace database

# Label the node
# <node-name> is the node server name.
kubectl label node <node-name> worker=database

apiVersion: storage.k8s.io/v1
kind: StorageClass
metadata:
  name: database
provisioner: kubernetes.io/no-provisioner
volumeBindingMode: WaitForFirstConsumer
reclaimPolicy: Retain

# <path> is the path to the database storage
# Example: path: "/mnt/disks/data/database"
apiVersion: v1
kind: PersistentVolume
metadata:
  name: database
  labels:
    app: database
spec:
  storageClassName: database
  capacity:
    storage: 100Gi
  accessModes:
    - ReadWriteMany
  hostPath:
    path: <path>
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: database
  namespace: database
  labels:
    app: database
spec:
  storageClassName: database
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 100Gi

# <password> Set your password.
apiVersion: v1
kind: ConfigMap
metadata:
  name: oracle
  namespace: database
  labels:
    app: oracle
data:
  ORACLE_PWD: <password>

apiVersion: apps/v1
kind: Deployment
metadata:
  name: oracle
  namespace: database
  labels:
    app: oracle
spec:
  replicas: 1
  selector:
    matchLabels:
      app: oracle
  template:
    metadata:
      labels:
        app: oracle
    spec:
      nodeSelector:
        worker: database
      containers:
      - name: oracle
        image: container-registry.oracle.com/database/enterprise:latest
        ports:
        - name: listener
          containerPort: 1521
        envFrom:
          - configMapRef:
              name: oracle
        volumeMounts:
        - mountPath: /opt/oracle/oradata
          name: oracle
          subPath: oracle/oradata
        - mountPath: /opt/oracle/scripts/setup
          name: oracle
          subPath: oracle/scripts/setup
        - mountPath: /opt/oracle/scripts/startup
          name: oracle
          subPath: oracle/scripts/startup
      volumes:
      - name: oracle
        persistentVolumeClaim:
          claimName: database

# For external connectivity, NodePort is used here. If internal connectivity is sufficient, ClusterIP can be used.
apiVersion: v1
kind: Service
metadata:
  name: oracle
  namespace: database
  labels:
    app: oracle
spec:
  type: NodePort
  ports:
    - name: oracle
      port: 1521
      nodePort: 1521
      targetPort: 1521
  selector:
    app: oracle

# Deploy storage
kubectl apply -f storage.yaml

# Deploy volume
kubectl apply -f volume.yaml

# Deploy config
kubectl apply -f config.yaml

# Deploy deployment
kubectl apply -f deployment.yaml

# Deploy service
kubectl apply -f service.yaml

# After creating listener.ora, save and close it. Pay attention to formatting and spaces, as incorrect formatting may prevent it from starting.
sudo vim listener.ora

# listener.ora
LISTENER =
(DESCRIPTION_LIST =
  (DESCRIPTION =
    (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
    (ADDRESS = (PROTOCOL = TCP)(HOST = 0.0.0.0)(PORT = 1521))
  )
)
SID_LIST_LISTENER =
   (SID_LIST =
     (SID_DESC =
       (SID_NAME = ORCLCDB)
       (ORACLE_HOME = /opt/oracle/product/21c/dbhome_1)
       (GLOBAL_DBNAME = ORCLPDB1)
     )
   )
DEDICATED_THROUGH_BROKER_LISTENER=ON
DIAG_ADR_ENABLED = off

# Copy listener.ora to the pod.
# <pod-name> is the name of the Oracle pod.
# <oracle-home> is the $ORACLE_HOME path inside the pod, for example: /opt/oracle/homes/OraDB21Home1。
kubectl cp listener.ora <pod-name>:<oracle-home>/network/admin/listener.ora

# Enter the oracle pod
# <pod-name> is the oracle pod name.
kubectl exec --stdin --tty <pod-name> -n database -- /bin/bash

# Disable the listener.
lsnrctl stop

# Enable the listener.
lsnrctl start

# Log in as sysdba.
sqlplus / as sysdba;

# Switch to the PDB container.
alter session set container = ORCLPDB1;

# Create a user.
# <user> is the username.
# <password> is the password.
create user <user> identified by "<password>";

# Grant user permissions (connect: connect, resource: developer, dba: administrator).
# <user> is the username.
grant connect, resource, dba to <user>;

# Log in as sysdba.
sqlplus / as sysdba;

# Check the expiration setting for the user password (usually the default configuration is DEFAULT).
SELECT * FROM dba_profiles WHERE profile='DEFAULT' AND resource_name='PASSWORD_LIFE_TIME';

# Change the password.
# <user> is the username.
# <password> is the new password.
alter user <user> identified by "<password>";

# Set the expiration to unlimited.
ALTER PROFILE DEFAULT LIMIT PASSWORD_LIFE_TIME UNLIMITED;