DaemonSet type for Pomerium

Question

DaemonSet type for Pomerium

ramzcode opened this issue 2 years ago · comments

Ponnurangam H commented 2 years ago

Hi,

Is there a way to install Pomerium using helm chart as a daemonset ? Please let us know.

Travis Groth · Answer 1 · Mon Jan 03 2022 22:45:49 GMT+0800 (China Standard Time)

Hi @ramzcode,

No, there isn't an option for that.

Can you elaborate on the use case/reasoning?

Ponnurangam H · Answer 2 · Mon Jan 03 2022 23:09:04 GMT+0800 (China Standard Time)

Hi @travisgroth,

I want to make sure 100% uptime for the pomerium during the Cluster upgrade. Want to make sure that pomerium should be running even if a node or pod is down.

A loadbalanced way of setup to be simple.

Travis Groth · Answer 3 · Tue Jan 04 2022 00:05:12 GMT+0800 (China Standard Time)

Typically that's done by increasing the replica count and setting pod anti-affinity rules so that replicas avoid running on the same node. During maintenance, the pods should get evicted correctly; but the anti-affinity will keep unexpected node failures from impacting too many replicas.

The chart also supports pod autoscaling so that you can keep pomerium scaled up based on your utilization rather than node count.

Ponnurangam H · Answer 4 · Tue Jan 04 2022 00:35:29 GMT+0800 (China Standard Time)

@travisgroth Great to know, thanks a lot. Will plan and build the environment accordingly.