permify/docs/performance-test/values.yaml at master · Permify/permify · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
image:
  repository: "ghcr.io/permify/permify"
  tag: "v1.3.0"

service:
  type: "LoadBalancer"
  annotations: {}

ingress:
  enabled: false

resources:
  limits:
    cpu: "300m"
    memory: "600Mi"
  requests:
    cpu: "150m"
    memory: "300Mi"

autoscaling:
  enabled: true
  minReplicas: 5
  maxReplicas: 15

extraVolumes:
  - name: "tls-certs"
    secret:
      secretName: "my-app-tls"

extraVolumeMounts:
  - name: "tls-certs"
    mountPath: "/etc/tls"
    readOnly: true

customReadinessProbe:
  exec:
    command:
      - "grpc_health_probe"
      - "-addr=127.0.0.1:3478"
      - "-tls"
      - "-tls-no-verify"

customLivenessProbe:
  exec:
    command:
      - "grpc_health_probe"
      - "-addr=127.0.0.1:3478"
      - "-tls"
      - "-tls-no-verify"

customStartupProbe:
  exec:
    command:
      - "grpc_health_probe"
      - "-addr=127.0.0.1:3478"
      - "-tls"
      - "-tls-no-verify"

app:
  account_id: "myAccountID"
  server:
    rate_limit: 10000
    name_override: "my-permify.permify.co"
    http:
      enabled: true
      port: 3476
      tls:
        enabled: true
        certPath: "/etc/tls/tls.crt"
        keyPath: "/etc/tls/tls.key"
    grpc:
      port: 3478
      tls:
        enabled: true
        certPath: "/etc/tls/tls.crt"
        keyPath: "/etc/tls/tls.key"

  service:
    circuit_breaker: false
    schema:
      cache:
        number_of_counters: 1000
        max_cost: "24MiB"
    permission:
      concurrency_limit: 1000
      cache:
        number_of_counters: 10000
        max_cost: "256MiB"

  profiler:
    enabled: false

  authn:
    enabled: true
    method: "preshared"
    oidc:
      issuer: ""
      audience: ""
    preshared:
      keys:
        - "<your-preshared-key>"

  database:
    engine: "postgres"
    writer:
      uri: "postgresql://postgres:<password>@pgcat:6432/permify?sslmode=disable"
    reader:
      uri: "postgresql://postgres:<password>@pgcat:6432/permify?sslmode=disable"
    auto_migrate: true
    max_connections: 1
    max_open_connections: 1  # Deprecated: use max_connections instead
    max_idle_connections: 1  # Deprecated: use min_connections instead (maps to MinConnections if min_connections is not set)
    min_connections: 1
    min_idle_connections: 0
    max_connection_lifetime: "300s"
    max_connection_idle_time: "60s"
    health_check_period: "0s"
    max_connection_lifetime_jitter: "0s"
    connect_timeout: "0s"
    garbage_collection:
      enabled: true
      interval: "7200s"
      window: "7200s"
      timeout: "5m"
    max_data_per_write: 10000

  distributed:
    enabled: true
    address: "<your-domain>:5053"
    port: 5053