gulecroc
1180db46cd
add template for ca issuer name and secret name ( #565 )
...
* set template for ca issuer name and secret name + geo-replication installation example
* remove geo-replication from this PR
* use certs template to define ca name and secret name
* Handle proxy, toolset and zookeeper in the same way as others
* Make the logic more consistent by separating the selfsigning issuer configuration
---------
Co-authored-by: GLECROC <guillaume.lecroc@cnp.fr>
Co-authored-by: Lari Hotari <lhotari@users.noreply.github.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
2025-05-23 16:22:17 +03:00
Bruno Domenici
a9f2ba76ae
OpenID: introducing support for OpenID configuration ( #509 )
...
* feat!(openid): introducing support for openid configuration
BREAKING CHANGE: provider configuration changed from auth.authentication.provider to auth.authentication.jwt.enabled
* add upgrading to 4.1.0
* add validation for deprecated values
* add openid CI with keycloak
* fix chart-testing lint new-line-at-end-of-file
* fix keycloak dependency repository
* fix keycloak repository
* fix yaml to json convert error
* disable keycloak to validate github actions before re-enable it
* disable openid test scenario
* disable keycloak in values
* enable keycloak without authentication and authorization
* add openid test scenario
* disable test scenario other than openid
* enable all test scenario
* disable functions component
* create openid resources
* test truncate command
* test truncate command
* change client_secret generator
* change client_secret generator
* test python
* fix script
* fix script
* print python result
* test python
* test python
* fix client_secret generation
* fix create openid resources
* fix secret name
* fix mount keycloak config
* fix keycloak service
* exclude keycloak from chart
* add license
* add license
* wait keycloak is alive
* fix keycloak chart install namespace
* add test pulsar real openid config
* fix keycloak issuer url
* fix pod name
* remove check keycloak alive
* check realm pulsar openid configuration
* change keycloak service
* remove test keyclock service
* remove selector to get all pod log
* wait keycloak is alive
* check keycloak realm pulsar urls
* wait until keycloak is ready
* add wait timeout
* fix realm pulsar name
* add log to debug
* add openid for toolset
* set authorization
* set authorization
* fix client template filename
* fix install keycloak
* disable authorization
* debug sub claim value
* fix sub claim value
* cleanup
* enable all build
---------
Co-authored-by: glecroc <guillaume.lecroc@cnp.fr>
2025-05-20 14:09:12 +03:00
Lari Hotari
52d3164b8d
Upgrade oxia image to 0.12.0 in default values.yaml ( #611 )
2025-05-20 03:29:49 -07:00
Artem Nosulchyk
9ddbf4bc86
extra containers and volumes for oxia coordinator ( #609 )
2025-05-20 13:13:07 +03:00
Artem Nosulchyk
fa1456ea4d
configurable oxia coordinator configmap and entrypoint ( #606 )
2025-05-19 16:16:40 +03:00
Artem Nosulchyk
8382906775
annotations ( #610 )
2025-05-13 16:35:44 -07:00
Haim Kortovich
77ec4cedfb
Add appAnnotations for all statefulsets ( #604 )
2025-05-07 09:05:19 +03:00
Artem Nosulchyk
cd701ecedd
add support of extra volumes and mounts for autorecovery ( #607 )
2025-05-07 08:44:11 +03:00
Lari Hotari
b703761a52
Upgrade Oxia to 0.11.15 ( #600 )
2025-04-15 00:50:32 -07:00
Lari Hotari
637cf11d1a
Fix Grafana dashboards for Broker with honorLabels, remove unnecessary *_created metrics and improve docs ( #593 )
...
* Drop _created metrics for broker and proxy
* Enable all metrics by default for broker
* change default dashboard
* Remove messy dashboards
* Enable default dashboards in Grafana
* Add testing values with more aggressive disk cleanup
* Add VictoriaMetrics debugging instructions
* Set honorLabels to true
* Document disabling monitoring
* Set password in testing values
* Fix linting issue detected by kubeconform
2025-03-10 16:46:28 -07:00
Lari Hotari
e6f05809bd
Migrate from kube-prometheus-metrics to victoria-metrics-k8s-stack ( #592 )
2025-03-08 16:36:41 -08:00
Lari Hotari
302db43e91
Remove PSP support ( #591 )
2025-03-08 12:00:35 -08:00
Lari Hotari
6fe37a373f
Use bookkeeperMetadataServiceUri in broker and make PulsarMetadataClientDriver configurable ( #589 )
2025-03-07 09:24:03 -08:00
Lari Hotari
dd1325216f
Change Pulsar Proxy service load balancer type to ClusterIP ( #588 )
2025-03-06 05:03:42 -08:00
Lari Hotari
18c4cc5440
Add comment warning about enabling PulsarMetadataBookieDriver
...
- upgrade compatibility tests didn't pass with this setting, so more testing is needed
2025-03-06 09:49:56 +02:00
Lari Hotari
601e78d8a5
Add Broker Cache and Sockets dashboards ( #586 )
2025-03-05 23:24:19 -08:00
Lari Hotari
9f61859d19
Use PIP-45 metadata store config to replace deprecated ZK config and make PulsarMetadataBookieDriver configurable in BK ( #576 )
2025-03-04 20:23:35 +02:00
Lari Hotari
43f8dfa04e
Revisit solution to configure Bookkeeper RocksDB settings - default to individual config files ( #583 )
2025-03-04 04:04:38 -08:00
Lari Hotari
5c1b7a9288
Restore support for dbStorage_rocksDB_* settings defined in bookkeeper.configData ( #580 )
2025-03-03 22:05:59 -08:00
Lari Hotari
4bdf6d51eb
Improve kube-prometheus-stack config in values.yaml by adding missing key and some basic comments ( #579 )
...
* Enable prometheusOperator in CI test
* Add comments and add offloader dashboard
2025-03-03 11:09:25 -08:00
Lari Hotari
4386eacba8
[fix] Fix broker service annotations issue and other annotations issues ( #574 )
...
* Fix broker services annotations issues
* Add annotations support to autorecovery.service
* Consistently use similar way to handle annotations
* Add autorecovery service annotations key to values.yaml
2025-02-28 09:17:54 -08:00
Philipp Dolif
ab46d2165e
Increase defaults for ensemble size, write quorum, and ack quorum to 2 ( #570 )
2025-02-18 22:27:34 -08:00
Eric Shen
b5ff00b16b
feat(tls): support ca type issuer and v1alpha* version cert-manager api ( #561 )
2024-12-18 07:11:54 -08:00
Raúl Sánchez
df9284dc97
Fix helm chart to allow configurable ingress pathType ( #558 )
2024-12-11 07:21:03 -08:00
Yuwei Sung
c6ce11a9b7
Add support for using Oxia as the metadata store for Pulsar and BookKeeper ( #544 )
...
Co-authored-by: Lari Hotari <lhotari@apache.org>
2024-11-21 16:52:20 -08:00
Liam Gibson
17b739d10a
Add support for admin port on ZooKeeper ( #550 )
...
* Add support for admin port on ZooKeeper
* Make ZK admin port conditional
2024-11-20 09:27:44 -08:00
lenglet-k
ed50c68633
feat: add loadBalancerClass for proxy and pulsar-manager ( #546 )
...
* feat: add loadBalancerClass for proxy and pulsar-manager
Co-authored-by: Lari Hotari <lhotari@users.noreply.github.com>
2024-11-08 07:23:45 -08:00
lenglet-k
db20c2bfa6
fix: broker extraEnv variable ( #540 )
...
* fix: broker extraEnv variable
* fix: comment extraEnv for broker as default values
* fix(typo): rename extreEnvs to extraEnvs
2024-10-18 00:07:24 -07:00
lenglet-k
346c5cdcd4
feat! add extraVolumes and Mounts for pulsar-manager ( #535 )
2024-10-08 05:00:00 -07:00
Shu.Wang
a45bc4bfe1
Add topologyspreadconstraint to deploy pods in sts cross different az evenly ( #526 )
...
Signed-off-by: Wang, Shu <shu.wang@fmr.com>
2024-09-26 21:37:15 -07:00
ludmanl
54401c0b9a
feat: Support to customize broker podManagementPolicy from values.yaml ( #525 )
2024-09-03 03:47:52 -07:00
Duncan Schulze
0031827761
Support using self generated certificates ( #523 )
...
* Support using self generated certificates
* chore: fix linting
2024-08-23 17:49:36 +03:00
Starry
093fa273f8
Add initContainers to templates ( #516 )
2024-08-05 09:40:55 -07:00
Lari Hotari
70f36ffe43
Add timeouts for cluster metadata initialization and for init containers ( #218 )
...
- Add timeouts for waiting for zk and bk to become available.
- If the waiting gets stuck for some reason, the Pulsar deployment never
becomes starts the broker services.
- timeouts will help failures recover eventually
2024-06-20 10:07:48 -07:00
Lari Hotari
023f902a02
Allow specifying default pull policy and functions pull policy ( #507 )
2024-06-12 04:16:48 -07:00
Lari Hotari
47c2ac442a
Add defaultPulsarImageRepository configuration ( #503 )
...
- makes it easier to use a custom image
2024-06-05 04:20:16 -07:00
Massimiliano Mirelli
6e84409b48
Support NodePort Proxy service ( #500 )
...
* Enables nodeport support for the proxy
* Correct indentation and remove null `nodePort`
Removing null `nodePort` causes k8s to pick up a random port
* Address review comment
https://github.com/apache/pulsar-helm-chart/pull/500/files#r1605762312
2024-06-04 08:46:16 -07:00
Massimiliano Mirelli
cb5c44f8ec
Allow broker's service clusterIP customisation ( #498 )
...
* Allow broker's service clusterIP customisation
This customisation is useful to configure headless vs non-headless
broker's service. The default is headless broker service, i.e. a
service for which kubernetes does not allocate an IP
address (https://kubernetes.io/docs/concepts/services-networking/service/#type-clusterip ). A
headless service is a very simple type of service that doesn't seem to work well
when pulsar service is exposed by pulsar-proxy via a nodeport.
Addresses #497 .
* Address review comments
https://github.com/apache/pulsar-helm-chart/pull/498/files#r1605762934
and https://github.com/apache/pulsar-helm-chart/pull/498/files#r1605763245
* Move doc to Values.broker.service
2024-06-04 08:45:14 -07:00
Lari Hotari
59f6f74fd7
Fix prometheus node-exporter crashloop ( #488 )
2024-04-12 03:10:24 -07:00
Lari Hotari
ee4b7a7988
Increase default Prometheus scrape interval to 60s ( #487 )
2024-04-11 07:35:57 -07:00
Martin
7c7ca4a7bc
enable message peeking ( #486 )
2024-04-10 23:20:37 -07:00
Martin
347326e0c3
Fix pulsar-manager persistence ( #485 )
...
- only setup environment in pulsar manager if broker is deployed
- fix indent
- enable persistence for manager and move configs around
2024-04-03 21:28:46 -07:00
Lari Hotari
cc0a1acf22
Disable functions by default in values.yaml ( #483 )
2024-03-26 23:17:40 +01:00
doug-ba
9929b80b3c
add ability to use separate disk for zookeeper tx log ( #476 )
...
* add ability to use separate disk for zookeeper tx log
* Use absolute path
---------
Co-authored-by: Lari Hotari <lhotari@users.noreply.github.com>
2024-03-26 07:51:31 -07:00
doug-ba
bc5862d4b0
pulsar-manager adding support for existing secret ( #478 )
2024-03-26 05:26:37 -07:00
doug-ba
3dee8dfe3b
making .ReleaseIsInstall optional for init jobs ( #480 )
...
* making .ReleasIsInstall optional for init jobs
* initialize simplifying an if condition based on feedback
2024-03-25 22:26:32 -07:00
Lari Hotari
17a4239733
Remove buggy and useless function-worker-config-map ( #462 )
...
Fixes #56
2024-02-21 13:47:23 -08:00
Lari Hotari
0e3251bea8
Remove deprecated "extra" key to configure components, also remove dashboard that has been replaced ( #461 )
...
- the "extra" key has been deprecated a long time ago
- the dashboard is outdated and there's a replacement with kube-prometheus-stack and #439
2024-02-21 04:53:29 -08:00
csthomas1
cb269bbaf3
Feature/pulsar manager v0.2.0 with jwt setup admin account creation ( #219 )
...
* Added support for JWT secretref and key volume mount. Added admin user auto-creation.
* Removed variables accidentally re-added and comments no longer relevant
* Enabling pulsar manager test w/ manager-admin superuser for symmetric and asymmetric jwt tests
* Added verification of communication with broker to ci test-pulsar-manager
* Fixing error on line 115 of helm.sh
* More fixes
* Adding echo of envs and tenants
* Fixing LOGIN_JSESSIONID variable name
2024-02-21 04:25:23 -08:00
Victor Fauth
29ea17b3fc
Enable persistence for pulsar-manager ( #343 )
...
* Enable persistence for pulsar-manager
* Upgrade to v0.4.0 version of pulsar-manager to get required fix
- contains https://github.com/apache/pulsar-manager/pull/501
in https://github.com/apache/pulsar-manager/releases/tag/v0.4.0
---------
Co-authored-by: Victor Fauth <victor.fauth@thalesgroup.com>
Co-authored-by: Lari Hotari <lhotari@apache.org>
2024-02-15 01:27:40 -08:00
