add pdb to redis and mas

Author: shcherbak

charts/redis/Chart.yaml

@@ -1,3 +1,3 @@
 ---
 name: redis
-version: 0.0.4
+version: 0.0.5

charts/redis/templates/deployment.yaml

@@ -42,6 +42,9 @@ spec:
           containerPort: 9121
           protocol: TCP
       {{- end }}
+      {{- if .Values.priorityClassName }}
+      priorityClassName: "{{ .Values.priorityClassName }}"
+      {{- end }}
       volumes:
       - name: devshm
         emptyDir:

charts/redis/values.yaml

@@ -6,6 +6,7 @@ resources: {}
 nodeSelector: {}
 tolerations: []
 affinity: {}
+priorityClassName: ''
 exporter:
   enabled: true
   image:

charts/synapse/Chart.yaml

@@ -1,3 +1,3 @@
 ---
 name: synapse
-version: 0.3.0
+version: 0.4.0

charts/synapse/templates/envoy-deployment.yaml

@@ -77,6 +77,9 @@ spec:
       topologySpreadConstraints:
         {{ toYaml .Values.envoyProxy.topologySpreadConstraints | nindent 8 }}
       {{- end }}
+      {{- if .Values.envoyProxy.priorityClassName }}
+      priorityClassName: "{{ .Values.envoyProxy.priorityClassName }}"
+      {{- end }}
       volumes:
         - name: config
           configMap:

charts/synapse/templates/matrix-authentication-deployment.yaml

@@ -110,6 +110,13 @@ spec:
       affinity:
         {{ toYaml .Values.matrixAuthentication.affinity | nindent 8 }}
       {{- end }}
+      {{- if .Values.matrixAuthentication.topologySpreadConstraints }}
+      topologySpreadConstraints:
+        {{ toYaml .Values.matrixAuthentication.topologySpreadConstraints | nindent 8 }}
+      {{- end }}
+      {{- if .Values.matrixAuthentication.priorityClassName }}
+      priorityClassName: "{{ .Values.matrixAuthentication.priorityClassName }}"
+      {{- end }}
       volumes:
         - name: config
           secret:

charts/synapse/templates/matrix-authentication-pdb.yaml

@@ -0,0 +1,18 @@
+{{- if .Values.matrixAuthentication.enabled }}
+{{- if .Values.matrixAuthentication.podDisruptionBudget.ebabled }}
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: matrix-authentication
+spec:
+  {{- if .Values.matrixAuthentication.podDisruptionBudget.minAvailable }}
+  minAvailable: {{ .Values.matrixAuthentication.podDisruptionBudget.minAvailable }}
+  {{- end }}
+  {{- if .Values.matrixAuthentication.podDisruptionBudget.maxUnavailable }}
+  maxUnavailable: {{ .Values.matrixAuthentication.podDisruptionBudget.maxUnavailable }}
+  {{- end }}
+  selector:
+    matchLabels:
+      {{- include "matrix-authentication.selectorLabels" . | nindent 6 }}
+{{- end }}
+{{- end }}

charts/synapse/templates/pgbouncer-deployment-pdb.yaml

@@ -0,0 +1,16 @@
+{{- if .Values.synapse.pgbouncer.podDisruptionBudget.ebabled }}
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: synapse-pgbouncer
+spec:
+  {{- if .Values.synapse.pgbouncer.podDisruptionBudget.minAvailable }}
+  minAvailable: {{ .Values.synapse.pgbouncer.podDisruptionBudget.minAvailable }}
+  {{- end }}
+  {{- if .Values.synapse.pgbouncer.podDisruptionBudget.maxUnavailable }}
+  maxUnavailable: {{ .Values.synapse.pgbouncer.podDisruptionBudget.maxUnavailable }}
+  {{- end }}
+  selector:
+    matchLabels:
+      app: synapse-pgbouncer
+{{- end }}

charts/synapse/templates/pgbouncer-deployment.yaml

@@ -10,6 +10,11 @@ spec:
   selector:
     matchLabels:
       app: synapse-pgbouncer
+  strategy:
+    rollingUpdate:
+      maxSurge: 1
+      maxUnavailable: 1
+    type: RollingUpdate
   template:
     metadata:
       labels:
@@ -56,4 +61,11 @@ spec:
       affinity:
         {{ toYaml .Values.synapse.pgbouncer.affinity | nindent 8 }}
       {{- end }}
+      {{- if .Values.synapse.pgbouncer.topologySpreadConstraints }}
+      topologySpreadConstraints:
+        {{ toYaml .Values.synapse.pgbouncer.topologySpreadConstraints | nindent 8 }}
+      {{- end }}
+      {{- if .Values.synapse.pgbouncer.priorityClassName }}
+      priorityClassName: "{{ .Values.synapse.pgbouncer.priorityClassName }}"
+      {{- end }}
       terminationGracePeriodSeconds: 10

charts/synapse/values.yaml

@@ -100,7 +100,11 @@ synapse:
       repository: "bitnami/pgbouncer"
       tag: "1.21.0-debian-11-r5"
       pullPolicy: IfNotPresent
-    replicas: 1
+    replicas: 2
+    podDisruptionBudget:
+      ebabled: true
+      #minAvailable: 1
+      maxUnavailable: 1
     authType: "md5"
     maxClientConn: "8192"
     poolSize: "20"
@@ -109,6 +113,8 @@ synapse:
     nodeSelector: {}
     tolerations: []
     affinity: {}
+    priorityClassName: ''
+    topologySpreadConstraints: []
 
   redis:
     enabled: true
@@ -348,6 +354,7 @@ envoyProxy:
   nodeSelector: {}
   tolerations: []
   affinity: {}
+  priorityClassName: ''
   topologySpreadConstraints: []
   # example
   #topologySpreadConstraints:
@@ -363,7 +370,11 @@ matrixAuthentication:
   service:
     type: ClusterIP
     port: 80
-  replicaCount: 1
+  replicaCount: 2
+  podDisruptionBudget:
+    ebabled: true
+    #minAvailable: 1
+    maxUnavailable: 1
   image:
     repository: ghcr.io/matrix-org/matrix-authentication-service
     tag: 0.9.0
@@ -379,6 +390,8 @@ matrixAuthentication:
   nodeSelector: {}
   tolerations: []
   affinity: {}
+  priorityClassName: ''
+  topologySpreadConstraints: []
   autoscaling:
     enabled: false
     minReplicas: 1