feat: Add manifests for basic CDN for firmware images by stevekeay · Pull Request #1692 · rackerlabs/understack

stevekeay · 2026-02-24T22:45:22Z

This provides a HTTPS endpoint that will serve up files from our back-end object storage.

These manifests will create a global storage bucket to hold the content.

A site-local nginx proxy caches the files locally (should work for deployments in countries far away or on slow links).

The ingress was set up for cdn-edge cache on dev: https://github.com/RSS-Engineering/undercloud-deploy/pull/1332

cardoe

Add an entry into charts/argocd-understack/templates and it'll get deployed automatically put cdn in values.yaml under the site: block.

cardoe · 2026-02-25T23:33:43Z

+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: openebs-hostpath


Probably not where we'd want this since that would mean we have to ping the nginx to a specific node?

It's for the cache. The intention was to get fast, cheap, simple storage. If the pod moves to another node then it would re-populate the cache over there. If we run multiple pods, I don't know how that would interact with ceph-backed distributed storage.

Storage on openebs-hostpath is quite limited - imho it normally should not be used for applications. The openebs-lvm would be better choice if you want to keep it local. If ceph, then ceph-block-ecoded if you want block or ceph-fs-ec if you want ReadWriteMany

I moved it to openebs-lvm, multiple writers on ceph seems too advanced.

skrobul

Consider packaging those manifests into a helm chart so that the values can be adjusted on per-environment basis easily.
If you don't want to use the helm's default template, we have https://github.com/rxt-pvc/backbone-sno-helm-scaffold/ that is slightly smaller but will need adjustments for HTTPRoutes

skrobul · 2026-02-26T11:30:15Z

+    maxObjects: "1000"
+    maxSize: "5G"


that seems quite small, imho should be configurable

Increased the size and made it configurable (via values.yaml)

ctria · 2026-02-26T14:55:48Z

Before merging, can we change the namespace to something like "understack-cdn" to avoid possible future overlaps?

stevekeay · 2026-02-26T15:58:10Z

Before merging, can we change the namespace to something like "understack-cdn" to avoid possible future overlaps?

I changed the namespace name. I will remember this every time I have to type that name :)

cardoe · 2026-03-06T01:06:54Z

+apiVersion: v1
+kind: Namespace
+metadata:
+  name: understack-cdn


We shouldn't need this manifest. Helm can make its own and ArgoCD will track that for full clean up.

We can also eventually make the namespaces configurable to allow testing in parallel.

cardoe · 2026-03-06T01:07:48Z

+kind: ConfigMap
+metadata:
+  name: nginx-config
+  namespace: understack-cdn


Don't need to set this as helm will when it's installing.

cardoe · 2026-03-06T01:24:55Z

+        proxy_hide_header x-amz-request-id;
+        proxy_hide_header x-amz-id-2;
+
+        include /etc/nginx/conf.d/*.conf;


So this mostly looks like the default file. Should we just mount the delta in a file here?

cardoe · 2026-03-06T01:25:14Z

+kind: ObjectBucketClaim
+metadata:
+  name: {{ .Values.cdn.bucketName }}
+  namespace: understack-cdn


Leave this out.

cardoe · 2026-03-06T01:25:36Z

+  namespace: understack-cdn
+spec:
+  bucketName: {{ .Values.cdn.bucketName }}
+  storageClassName: ceph-bucket


Should this be configurable as well? Can it change?

cardoe · 2026-03-06T01:26:13Z

+kind: PersistentVolumeClaim
+metadata:
+  name: nginx-cache
+  namespace: understack-cdn


cardoe · 2026-03-06T01:26:37Z

+spec:
+  accessModes:
+    - ReadWriteOnce
+  storageClassName: openebs-lvm


Should be configured?

cardoe · 2026-03-06T01:26:45Z

+  storageClassName: openebs-lvm
+  resources:
+    requests:
+      storage: 5Gi


Configured?

cardoe · 2026-03-06T01:26:54Z

+kind: Service
+metadata:
+  name: cdn-edge
+  namespace: understack-cdn


We also use a global back-end object store via a public hostname and using SSL to secure the connection (the backend can now be in a different cluster to the cache).

cardoe · 2026-03-07T16:35:42Z

We can address the rest in a follow on.

stevekeay marked this pull request as draft February 24, 2026 22:48

stevekeay force-pushed the cdn branch from 8ba12ed to fc8bde1 Compare February 25, 2026 13:52

cardoe reviewed Feb 25, 2026

View reviewed changes

stevekeay force-pushed the cdn branch 6 times, most recently from 641b729 to 66e204a Compare February 26, 2026 08:57

skrobul reviewed Feb 26, 2026

View reviewed changes

stevekeay force-pushed the cdn branch from 50113cf to 293a808 Compare February 26, 2026 12:54

stevekeay changed the title ~~Add manifests for basic CDN for firmware images~~ feat: Add manifests for basic CDN for firmware images Feb 26, 2026

stevekeay force-pushed the cdn branch from c9c769a to 9178a73 Compare February 26, 2026 15:42

stevekeay force-pushed the cdn branch 2 times, most recently from f6dd6a4 to ec40cb2 Compare February 26, 2026 16:26

stevekeay marked this pull request as ready for review February 26, 2026 16:29

stevekeay force-pushed the cdn branch 2 times, most recently from e240966 to 068a2d9 Compare March 4, 2026 12:52

stevekeay requested review from cardoe and skrobul March 4, 2026 12:56

stevekeay force-pushed the cdn branch 4 times, most recently from e37fec6 to 922c9a6 Compare March 5, 2026 11:00

cardoe reviewed Mar 6, 2026

View reviewed changes

stevekeay force-pushed the cdn branch from 922c9a6 to daeabb6 Compare March 6, 2026 18:40

stevekeay added 2 commits March 6, 2026 18:41

Add basic CDN to serve up firmware images

d2692d8

Prefix our URLs to allow for any other future use-cases

0456387

stevekeay added 7 commits March 6, 2026 18:41

Change namespace from cdn to understack-cdn

4f14fd4

Create helm chart for the cdn component

dffc5e5

We also use a global back-end object store via a public hostname and using SSL to secure the connection (the backend can now be in a different cluster to the cache).

Add an Application manifest to install the cdn helm chart

e530f1d

Update cdn README file with new http access details

86b40ff

Delete namespace manifest - the namespace gets created automatically

42e4153

Remove explicit namespace from templates, helm will fill this in for us

78b2eed

Make more cdn variables configurable

38798a9

stevekeay force-pushed the cdn branch from daeabb6 to 38798a9 Compare March 6, 2026 18:41

cardoe enabled auto-merge March 7, 2026 16:35

cardoe approved these changes Mar 7, 2026

View reviewed changes

cardoe added this pull request to the merge queue Mar 7, 2026

Merged via the queue into main with commit 944a7fd Mar 7, 2026
18 checks passed

cardoe deleted the cdn branch March 7, 2026 16:36

Uh oh!

Conversation

stevekeay commented Feb 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cardoe left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

skrobul left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

ctria commented Feb 26, 2026

Uh oh!

stevekeay commented Feb 26, 2026

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

cardoe commented Mar 7, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

stevekeay commented Feb 24, 2026 •

edited

Loading