Convert proxy StatefulSet

Author: moubctez

charts/defguard-proxy/Chart.yaml

@@ -3,5 +3,5 @@ name: defguard-proxy
 description: Defguard proxy is a public-facing proxy for core Defguard service
 
 type: application
-version: 0.8.3
-appVersion: 1.6.3
+version: 2.0.0
+appVersion: 2.0.0

…defguard-proxy/templates/deployment.yaml …efguard-proxy/templates/statefulset.yamlcharts/defguard-proxy/templates/deployment.yaml renamed to charts/defguard-proxy/templates/statefulset.yaml charts/defguard-proxy/templates/deployment.yaml renamed to charts/defguard-proxy/templates/statefulset.yaml

@@ -1,10 +1,11 @@
 apiVersion: apps/v1
-kind: Deployment
+kind: StatefulSet
 metadata:
   name: {{ include "defguard-proxy.fullname" . }}
   labels:
     {{- include "defguard-proxy.labels" . | nindent 4 }}
 spec:
+  serviceName: {{ include "defguard-proxy.fullname" . }}-web
   {{- if not .Values.autoscaling.enabled }}
   replicas: {{ .Values.replicaCount }}
   {{- end }}
@@ -40,6 +41,9 @@ spec:
             {{- toYaml .Values.securityContext | nindent 12 }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          volumeMounts:
+            - name: data
+              mountPath: /etc/defguard
           ports:
             - name: http
               containerPort: {{ .Values.service.web.port }}
@@ -69,3 +73,15 @@ spec:
       tolerations:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        accessModes:
+          - ReadWriteOnce
+        {{- with .Values.persistence.storageClassName }}
+        storageClassName: {{ . }}
+        {{- end }}
+        resources:
+          requests:
+            storage: {{ .Values.persistence.size }}

charts/defguard-proxy/values.schema.json

@@ -256,6 +256,28 @@
       "title": "podSecurityContext",
       "type": "object"
     },
+    "persistence": {
+      "additionalProperties": false,
+      "description": "defguard-proxy persistent storage for configuration files",
+      "properties": {
+        "size": {
+          "default": "32Mi",
+          "title": "size",
+          "type": "string"
+        },
+        "storageClassName": {
+          "default": "",
+          "title": "storageClassName",
+          "type": "string"
+        }
+      },
+      "required": [
+        "size",
+        "storageClassName"
+      ],
+      "title": "persistence",
+      "type": "object"
+    },
     "publicUrl": {
       "default": "http://enrollment.local",
       "description": "this should be a URL based on defguard-proxy.ingress.web.host",
@@ -429,6 +451,7 @@
     "podAnnotations",
     "podLabels",
     "podSecurityContext",
+    "persistence",
     "securityContext",
     "replicaCount",
     "resources",
@@ -437,4 +460,4 @@
     "additionalEnvFromConfigMap"
   ],
   "type": "object"
-}
+}

charts/defguard-proxy/values.yaml

@@ -54,6 +54,10 @@ securityContext: {}
 replicaCount: 1
 # defguard-proxy pod resource configuration
 resources: {}
+# defguard-proxy persistent storage configuration
+persistence:
+  size: 32Mi
+  storageClassName: ""
 # defguard-proxy service configuration
 service:
   grpc: