Scale out and docs improvements (pomerium#24)

- Switch to a headless Authorize service to support client side load balancing - Allow independent replicaCount scaling of the different services - Add upgrading/changelog documentation and ToC Signed-off-by: Travis Groth <[email protected]>
psychomelet · Sep 11, 2019 · 38ff489 · 38ff489
1 parent d73d32b
commit 38ff489
Show file tree

Hide file tree

Showing 7 changed files with 82 additions and 46 deletions.
diff --git a/Chart.yaml b/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v1
 name: pomerium
-version: 1.3.2
+version: 2.0.0
 appVersion: 0.3.0
 home: http://www.pomerium.io/
 icon: https://www.pomerium.io/logo.svg

diff --git a/README.md b/README.md
diff --git a/templates/authenticate-deployment.yaml b/templates/authenticate-deployment.yaml
@@ -15,7 +15,7 @@ metadata:
 {{ toYaml .Values.annotations | indent 4 }}
 {{- end }}
 spec:
-  replicas: {{ .Values.replicaCount }}
+  replicas: {{ default .Values.replicaCount .Values.authenticate.replicaCount }}
   selector:
     matchLabels:
       app.kubernetes.io/name: {{ template "pomerium.authenticate.name" . }}

diff --git a/templates/authorize-deployment.yaml b/templates/authorize-deployment.yaml
@@ -15,7 +15,7 @@ metadata:
 {{ toYaml .Values.annotations | indent 4 }}
 {{- end }}
 spec:
-  replicas: {{ .Values.replicaCount }}
+  replicas: {{ default .Values.replicaCount .Values.authorize.replicaCount }}
   selector:
     matchLabels:
       app.kubernetes.io/name: {{ template "pomerium.authorize.name" . }}

diff --git a/templates/authorize-service.yaml b/templates/authorize-service.yaml
@@ -16,6 +16,7 @@ metadata:
 {{ toYaml .Values.service.annotations | indent 4 }}
 {{- end }}
 spec:
+  clusterIP: None
   type: {{ .Values.service.type }}
   ports:
     - port: {{ .Values.service.externalPort }}

diff --git a/templates/proxy-deployment.yaml b/templates/proxy-deployment.yaml
@@ -15,7 +15,7 @@ metadata:
 {{ toYaml .Values.annotations | indent 4 }}
 {{- end }}
 spec:
-  replicas: {{ .Values.replicaCount }}
+  replicas: {{ default .Values.replicaCount .Values.proxy.replicaCount }}
   selector:
     matchLabels:  
       app.kubernetes.io/name: {{ template "pomerium.proxy.name" . }}

diff --git a/values.yaml b/values.yaml
@@ -30,6 +30,8 @@ authenticate:
     key: ""
     defaultSANList: []
     defaultIPList: []
+  # replicaCount: 1
+
 
 authorize:
   # fullnameOverride: authorize
@@ -39,6 +41,8 @@ authorize:
     key: ""
     defaultSANList: []
     defaultIPList: []
+  # replicaCount: 1
+
 
 proxy:
   # fullnameOverride: proxy
@@ -48,6 +52,7 @@ proxy:
     key: ""
     defaultSANList: []
     defaultIPList: []
+  # replicaCount: 1
   authenticateServiceUrl: ""
   authorizeServiceUrl: ""
   authorizeInternalUrl: ""