-
Notifications
You must be signed in to change notification settings - Fork 2
Open
Labels
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is needed
Description
The kind/Kubernetes deployment currently has some issues; this is meant to be a meta-issue, to simplify grouping them up and potentially adding problems found while testing.
- Postgres password/user are hardcoded and visible; they should be treated as secrets and potentially given by the system administrator (see also issue Handle SECRET_KEY_BASE as k8s secret/env file #5)
- Filebeat, ElasticSearch and Kibana are not present in the Kubernetes deployment (they are in the docker-compose version)
- Core pods should have a
wait-for-postgresInitContainer, to have them wait untilinit-postgreshas completed before starting deployment (avoiding potential initial crashes) -
postgresdata should be persistent (i.e. we should givepostgresboth aPersistentVolumeand aPersistentVolumeClaimto ensure the service works properly even after restarts) -
init-postgresjob could have await-for-postgresInitContainer, instead of awhilecommand waiting for postgres (makes it easier for logs and diagnostics to see if it's stuck in an InitContainer instead of the main one) - When a
coreis restarted, the DB migration and seeding is run again, causing an error as the database was already seeded; this might just be solvable by catching the constraint exception directly in thecorecomponent -
coreandworkerpods should be able to coexist (right now they both depend on thefllabel to be deployed, and are mutually exclusive) - Replicas of
postgresshould be coupled with the instances ofcore. This might require changes also on funless itself, but would allow us to exploit co-location of data with the actual service, reducing latency for database operations (as of right nowpostgresandcoreare simply deployed on core nodes, but no explicit coupling is specified)
Metadata
Metadata
Assignees
Labels
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is needed