Envoy proxy pdb and topology (#4)

* envoy-proxy-pdb-and-topology

* upgrade admin spa and sliding sync

Author: shcherbak

charts/synapse/Chart.yaml

@@ -1,3 +1,3 @@
 ---
 name: synapse
-version: 0.2.1
+version: 0.3.0

charts/synapse/templates/envoy-deployment.yaml

@@ -73,6 +73,10 @@ spec:
       affinity:
         {{ toYaml .Values.envoyProxy.affinity | nindent 8 }}
       {{- end }}
+      {{- if .Values.envoyProxy.topologySpreadConstraints }}
+      topologySpreadConstraints:
+        {{ toYaml .Values.envoyProxy.topologySpreadConstraints | nindent 8 }}
+      {{- end }}
       volumes:
         - name: config
           configMap:

charts/synapse/templates/envoy-pdb.yaml

@@ -0,0 +1,16 @@
+{{- if .Values.envoyProxy.podDisruptionBudget.ebabled }}
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: synapse-client-reader-envoy
+spec:
+  {{- if .Values.envoyProxy.podDisruptionBudget.minAvailable }}
+  minAvailable: {{ .Values.envoyProxy.podDisruptionBudget.minAvailable }}
+  {{- end }}
+  {{- if .Values.envoyProxy.podDisruptionBudget.maxUnavailable }}
+  maxUnavailable: {{ .Values.envoyProxy.podDisruptionBudget.maxUnavailable }}
+  {{- end }}
+  selector:
+    matchLabels:
+      {{- include "synapse-client-reader-envoy.selectorLabels" . | nindent 6 }}
+{{- end }}

charts/synapse/values.yaml

@@ -278,7 +278,7 @@ admin:
   serverName: NOT-CONFIGURED
   image:
     repository: "awesometechnologies/synapse-admin"
-    tag: "0.10.0"
+    tag: "0.10.1"
     pullPolicy: IfNotPresent
   replicas: 1
   resources: {}
@@ -302,7 +302,7 @@ slidingSyncProxy:
   affinity: {}
   image:
     repository: ghcr.io/matrix-org/sliding-sync
-    tag: v0.99.18
+    tag: v0.99.19
   service:
     type: ClusterIP
     port: 80
@@ -328,10 +328,14 @@ envoyProxy:
   service:
     type: ClusterIP
     port: 80
-  replicaCount: 1
+  replicaCount: 2
+  podDisruptionBudget:
+    ebabled: true
+    #minAvailable: 1
+    maxUnavailable: 1
   image:
     repository: envoyproxy/envoy
-    tag: v1.27.4
+    tag: v1.27.7
     pullPolicy: IfNotPresent
   resources: {}
   #  limits:
@@ -344,6 +348,15 @@ envoyProxy:
   nodeSelector: {}
   tolerations: []
   affinity: {}
+  topologySpreadConstraints: []
+  # example
+  #topologySpreadConstraints:
+  #  - maxSkew: 1
+  #    topologyKey: failure-domain.beta.kubernetes.io/zone
+  #    whenUnsatisfiable: ScheduleAnyway
+  #    labelSelector:
+  #      matchLabels:
+  #        kubernetes.io/os: linux
 
 matrixAuthentication:
   enabled: true