From a13b062d386c376e142671d6dafbddf1a3987e16 Mon Sep 17 00:00:00 2001 From: Stefan Reimer Date: Mon, 25 Nov 2024 19:13:57 +0000 Subject: [PATCH] feat: fix keycloak metrics issues, bump EFS memory as workarounf for OOM --- charts/kubezero-auth/README.md | 20 +++++++++---------- charts/kubezero-auth/dashboards-keycloak.yaml | 6 +++--- .../keycloak/grafana-dashboards.yaml | 4 +++- .../templates/keycloak/istio-service.yaml | 4 ++++ charts/kubezero-istio/TODO | 4 ++++ charts/kubezero-storage/values.yaml | 4 ++-- 6 files changed, 25 insertions(+), 17 deletions(-) create mode 100644 charts/kubezero-istio/TODO diff --git a/charts/kubezero-auth/README.md b/charts/kubezero-auth/README.md index b9413375..991f6090 100644 --- a/charts/kubezero-auth/README.md +++ b/charts/kubezero-auth/README.md @@ -1,6 +1,6 @@ # kubezero-auth -![Version: 0.6.0](https://img.shields.io/badge/Version-0.6.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 26.0.5](https://img.shields.io/badge/AppVersion-26.0.5-informational?style=flat-square) +![Version: 0.6.1](https://img.shields.io/badge/Version-0.6.1-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 26.0.5](https://img.shields.io/badge/AppVersion-26.0.5-informational?style=flat-square) KubeZero umbrella chart for all things Authentication and Identity management @@ -19,7 +19,7 @@ Kubernetes: `>= 1.26.0` | Repository | Name | Version | |------------|------|---------| | https://cdn.zero-downtime.net/charts/ | kubezero-lib | >= 0.1.6 | -| oci://registry-1.docker.io/bitnamicharts | keycloak | 24.0.4 | +| oci://registry-1.docker.io/bitnamicharts | keycloak | 24.2.1 | # Keycloak @@ -38,9 +38,15 @@ https://github.com/keycloak/keycloak-benchmark/tree/main/provision/minikube/keyc | Key | Type | Default | Description | |-----|------|---------|-------------| | keycloak.auth.adminUser | string | `"admin"` | | -| keycloak.auth.existingSecret | string | `"kubezero-auth"` | | +| keycloak.auth.existingSecret | string | `"keycloak-auth"` | | | keycloak.auth.passwordSecretKey | string | `"admin-password"` | | | keycloak.enabled | bool | `false` | | +| keycloak.externalDatabase.database | string | `"keycloak"` | | +| keycloak.externalDatabase.existingSecret | string | `"keycloak-pg"` | | +| keycloak.externalDatabase.existingSecretPasswordKey | string | `"password"` | | +| keycloak.externalDatabase.host | string | `"keycloak-pg-rw"` | | +| keycloak.externalDatabase.port | int | `5432` | | +| keycloak.externalDatabase.user | string | `"keycloak"` | | | keycloak.hostnameStrict | bool | `false` | | | keycloak.istio.admin.enabled | bool | `false` | | | keycloak.istio.admin.gateway | string | `"istio-ingress/private-ingressgateway"` | | @@ -52,15 +58,7 @@ https://github.com/keycloak/keycloak-benchmark/tree/main/provision/minikube/keyc | keycloak.metrics.serviceMonitor.enabled | bool | `true` | | | keycloak.pdb.create | bool | `false` | | | keycloak.pdb.minAvailable | int | `1` | | -| keycloak.postgresql.auth.database | string | `"keycloak"` | | -| keycloak.postgresql.auth.existingSecret | string | `"kubezero-auth"` | | -| keycloak.postgresql.auth.username | string | `"keycloak"` | | | keycloak.postgresql.enabled | bool | `false` | | -| keycloak.postgresql.primary.persistence.size | string | `"1Gi"` | | -| keycloak.postgresql.primary.resources.limits.memory | string | `"128Mi"` | | -| keycloak.postgresql.primary.resources.requests.cpu | string | `"100m"` | | -| keycloak.postgresql.primary.resources.requests.memory | string | `"64Mi"` | | -| keycloak.postgresql.readReplicas.replicaCount | int | `0` | | | keycloak.production | bool | `true` | | | keycloak.proxyHeaders | string | `"xforwarded"` | | | keycloak.replicaCount | int | `1` | | diff --git a/charts/kubezero-auth/dashboards-keycloak.yaml b/charts/kubezero-auth/dashboards-keycloak.yaml index 9200d36e..34489006 100644 --- a/charts/kubezero-auth/dashboards-keycloak.yaml +++ b/charts/kubezero-auth/dashboards-keycloak.yaml @@ -1,9 +1,9 @@ configmap: grafana-dashboards condition: '.Values.keycloak.metrics.enabled' gzip: true -# folder: +folder: KubeZero dashboards: - name: keycloak - # url: https://grafana.com/api/dashboards/10441/revisions/2/download - url: https://grafana.com/api/dashboards/17878/revisions/1/download + url: https://grafana.com/api/dashboards/19659/revisions/1/download + # url: https://grafana.com/api/dashboards/17878/revisions/1/download tags: ['Keycloak', 'Auth'] diff --git a/charts/kubezero-auth/templates/keycloak/grafana-dashboards.yaml b/charts/kubezero-auth/templates/keycloak/grafana-dashboards.yaml index e310b245..4ef4a4b7 100644 --- a/charts/kubezero-auth/templates/keycloak/grafana-dashboards.yaml +++ b/charts/kubezero-auth/templates/keycloak/grafana-dashboards.yaml @@ -7,7 +7,9 @@ metadata: labels: grafana_dashboard: "1" {{- include "kubezero-lib.labels" . | nindent 4 }} + annotations: + k8s-sidecar-target-directory: KubeZero binaryData: keycloak.json.gz: - H4sIAAAAAAAC/+1dbVPbuBb+zq/weDt32p1Ak/AWOrMfgNKWu9CyQNnZWzoZxVYSLY7tWjKQMvnvV5LfZFlOHPJCKNqZpYkk6/XonOc8OlYe1gzDbLeR64cEm++Mb/S7YTzwvzTHBQNIU833F+2r48PLL+fH+6dHl+fHhxdmLSnjgA50WKErZBEvQOAUkgBZOCthQ2wFyCfIc1m5s8AbQNKHIX4rPWK8BwQYF14YWDB7nAx93gmbZmIpz3fCHnKPbZbvp/XK+Z/jYWQtm7zAiP79XoumADpwAF0+CQ+jOC2AP0IUQMXEJH3ygUsHnzaHeEc6ILD6ICBZejKPByAwpKxbGOB4YuJO1aZoqgfCHiy28zGfXLmNXgC6wAWFVuTktB05Q2hpb2Nzo/6YIQXA7yub8vvGa8+x38xr8voQkAHwi219kjMqt6OSUVQqnW5RLlVNNjbq6UymEgtc1yOA7SkusmvRXkSYpMKadY/mdELkkGNWXaOWpQrdVXeDloEu6DgsnwQhFNL7yFakIstzDz3HC1iFQa8DXtdrRrPRoH+2t2tG441YdTL+/Wwsxn+MfQcGJNcFAoIeJOkwE8WDBoglNur1mpg+AMTq77tDmtUFDoa5TAJ6fDt/z6emy4f7HQ8EtpnmjsR+lBVLCz3MZ26nmkVW+AL9ZNUIE0Gnx4VpHY+Z9R8hDIbyw7jv3Z3QmouTy6f2A4KOLT+zMssH74m6g6Xryv/9vhbXI1uy90l5w+saf8Kh5XjgxhjExgze+15AoG3cIdLPshNbd3F2fB1cu+z/PiE+fvf2bY8WDDsbljd4C2Dg9SAI3t7Ez63H1a5jH7Fn0vrSTkftAIuEwDFuEab/oJ/R+rIH1g2EDWBYnj9k3c0eQzZdg62tBp8RE9qISEJpdhG2gPMP7c4FXUty6rmkn0ib2XMh4Qa4sdvabUVJTFdfep5DkJ9onEgNuqHj8G9UOm+ylaRfb+Fn705c80hnK2zvYYiJNzjjGv3dtDtOWsFTOPCCoWGFQUCNvzM0OhC5PSPEdNk6w3TRNsQqukyEDj23i3qyTNuwC0KHYCmd5ljxTswnM3H3uBo1SZ8CjT41b9jMFRnVpIr46FOUkts4vk87X9wfPO++uNVYOnLzaiPaD1lfxvQYdLDnhASaNbkEJtDHgh3K/nsopAhzQ+UGQtcsFBnVpqznt6P9g9bmnllTlboFTsj636rP3lAA7fGN7CkakVK+j13u0OVK0vQhFWuXiJOTK2p6FDAE1CRHy6/Ufz2af+bJa2qyrbybq4vtw51cyr0sJSbTz3VlMwwYXKIB/BL3SGEquC7YzhurG1lwTc/Pw5skOUB0JkCyhUFIvNwisFUJLfhF+TRbPeBYKuk0BxBI0idvI771sWQ+sgXHyVBLV4mZz8tkd50wzwkr7Vyu3CkIbigajDWycs4jP+cqw4y7G02KGQtGWB63NDXUZHG5xuHg9b+3g/aAq8d2Z0ggbjOl+IBcTIBrwT+uzVfJ52uzZoAAAppGIbV/bY7e/E5VzVtlLVQTVa3k2pVnuesFFB5wdUkFrI0hFQUsF+orZS6SO94YKc0lMKAL+QEwrzQPlSMphT3o2h/STsgtB7AbuaIHuX26phAnOgDCjSw1Z9z2GLEp+nS0f6bCJpGnJ+PNyTZPNOi5QZt0d/JR5lPLrFuZbSs3O2qjozI54wxOam5iDQh6ssEpNTdF3S2bmqLuTjU3QyprE8zDuAbKbVC5BZqqAbXtKbc8ebvzvVRFlVocUd8orU0mlSpLI9sZ2crINiZnYbKqJ1kXybaYCH+Gd4VCKtMywbCMNSslRqVgUvIbpMSclBmTkeSHTTQkFczISKLKrmQCJ83HFI+LK6S0KHk0PBmPV7I5N2EHBtTLoN99z24z/3Um8zN9ffkeJ3aiuHBjDURmHvaFTbUmCUY1w6AyCzInpf0k7SdpP2n5ftLOnP2k5qZ2lH45R8n13Ln4SkI9L9BZoqPX/pL2l16uv7QzJ38pszHaYXpJDlNlM/SoKlfBbZJNRBXPCTgIYH52inMOBIvsKEgNPzU8gW6Pn4k16rl0qCo+dwvksDlt5hI+BsBmmzMngJXVTKMp6ZlcQqmisaF7EaEMuY/VtFDWSokWigQl33+6WD13H1+qZoxl3/YUqbEjq8hhPT0a+GRYkvc/GHiKrMh2F1K57ZZTA9Trkwtl+ATTP4pUWvZvZHMB2xUpMuIRvp/kFpT6MFsqFhqApWZ44l3cSCMLUaFm/cyjW/c0hhWW57rQIoIxVdsGwOIJUlVaqkMzkCKv9ST16rNeMSkPcY7w4+lFCaTLbcMAcs3ZdTwhAisCxl9yFlpU4hZU7e6CdqeK0LopNMuwlg9tVcjEUuxBJd0ta+rJnsMYZT7eMSjo+lO6cSar+9rCJsjyBgNESBWr+ZTTdOhFvSyZq8OlzFU1cPGU0/QVl07RwVj0IDpU30RUMYDnsBert28KuBHDjK9YdLSoYk6CXx5E5Q6YE1JU715ApLMPrsDbCVRBro1ukR3SCSpoUCF0UwybvAf3SNLIXRW+Mh2vdwCwHDyWsq10/OZE+5SaG4VrMwT3cIyKyzrFRUzChWnfGhNdYqFnE7dC1ih9SgjGHdto3IDkYRQkaViceI5QZGOsBJ6TseHUdIOaUJ9Ap+c93IxKz9fBRnoI2QaFthoWZcVYLxIIweLwTEWhkySSXJV55lBDPIgwW5HKjFHvF2qtEYduLZmr78WAOOkE9Qugigz7ECiGKkJPxRBzG16df4t+KjjPIo/NUNjfMgpLJJD6zPA9wiRAnTB2ugv9TPQBqwgE489IssW/IEOuzkoPMbxuV6qrVFzKCa4qtFXJaclqklYTOKXWFJzSkx6z71ahjXLeQuSv7Yjeg3QuoXYLqAd9nmB2sRc0PRH7+sbebu40xgv9LE/MUriDIrOUFz4bYd8Bw2T/81D5XAFf1DAdjzCdV7AAJ0mTpScME0gxVslVLB/FTOZD0L2jUFBKSCHsG0wfc6DU4QhYRFUpO3t/iawbrnfPvbTPdWWBC6ZbedfqU1Nh8/d02Knz6wACZ/DmNXIt+gnD10msdJvacIpHvzW3+t/fPJqFenjg9Y9GM9FRJ7wrxhkMjPOj/ZNTg4IPwweYGLR3RVYqfXdoRfCBT00O9TvWLQdgjCwNEjRI0CDhZYCEnYkggYOArS0NAjQImBxasXQQEMAeU4PRG1ArgQXOxR5pSKAhgYYEGhI8J0hQOAZ+JHHQrGvMoDHD4jCB5bCpbCN7geRA2sb8CILDk+Ojz5caDmg4oOGAhgPPAA605nSOsKvhgIYDTwQH5ksTzAsVFKmCOYCDJ45rjQNVGzMEqrYmBarKpGVja7pA1YjS3BkfcTplSOk0saHqAJsniPNkCasV4tlceojnCkR0RvqLroladWGfrgps88Bw/G2zPphNedF2Hqm3Hh0/t3V/bwDXNrbpv+fxePBqB9ItLTju1as+1bV/Qn4Lm9f5F1rk3V6rLLpy+li2SsFyyk7sLaoT842ne5YvcizUPsqRP83mQl7kmP09DmkX/WqvceTe8tTvcej3OKaPblJZ+2XG2s92JvpowBDzpX5yeqqD7ueCKxo79TJRKnCcCwvMV3esMT+wsdDofY02Jr42uhi4sbt0uKG4C7sC2pCeWijYmAgplHZcI4pfGVFwRfDGUECKLkAOtCNk0QaEQCrM+MEPPGoBYfDHtZmUvDZr3OqzV/74h2tztAJIJOqLMRoZDw98lJVQSW3+cG1ek2sjQMuvE4gJnWFjZmon7uWr8ZDtYIGQzTjiJJXhuUa0WFFfNHyb4Z3J5SEzDbqeLcWzuZi7Olqa49Ecj0ZkCw9Ue5DxVk2JHJaBwpoLPvyeBycUH5NrlKFRhkYZy6R2FgMzmvoo6RkHhKh7oYHEog6LjEnxbXGkSFVmx3hyUHERjW+as6baciiz+c/rNHzOeJJrQTyOGJSo6Zz5A60FRfDo6JxnS920FoGpNjc1plp16kajrWcZmpN/meCFRujk313QgTqLggbK9xw1N6NhRJGbWQiOaOw9k7ib1aJmdOCNDryZS+BNLT1vYYmH/MuxvRpHQdWDcBYVZ8JelEwnRWMPff6jMcYiqYqtnYUc/zQ1VaGjTDT8WNb9B79ssElt+fTPsg6DKh6RHSyL7BEjcPS5kAZgGoAth+RZDALb3NIkjyZ5NMp6olARzfFUiEHRVI9GGnNDGhYIbAljFG9A5aUO098u3908+LAj3okTPXLBbtrkQ/yRG2GS24eDWLTozvM9BxD4kd01KW5ZpmbookSwYWNLIR5efFup8rfus/1KcCe0bpjemwL3UL1sBchPLiGc5RbZkttfV+Cy1NkvRF3YDZxT03DbivvuICAD4OdFeiL4S5DVQSw0EmrpU8TkMNR0GG+X4q2em9tjMWJRWYzGIxt2H2fI9ogKPMZ58eKJU29BCr358JtS6lWiMfPlFdcd5zfhtvSb9BzrK5SAYo9KppJOPoYq+Y1kkj2ZtIyAI13KmaqPLwFwe7KdTy66bTRbSomE93DgO5HzpLzu2Qx6HfC6ub1dq9f4343dN+rLP+kMUP2VzWYeNbA+wPX6nvJR9c2rE+yIGXh3+EMABrDQGhh6YXa1s/Lh3MWpLluCCrejKk0u23KfqNrwqNkfFM2SuDP3ZYOkuo7agV1SXUJCF/GnBrgItKr/Mlvcwj/ZNl/4b1Sr8PEPKjqkbYcRrmtHluqBVeUx4Pvx6DKDvBxsO7AU+ib67rGwd2sC7DUcaMx8uysfsJEM2IhGavxhxGM1PkmDKAOzytMBmloml0XMKk+XeV8Q1rG6uijbwloMsBrmNmoVK4/k8sALuZYQtvX0F9/PD8uUX00ekQ65I5kSrFzlEnPBS5/DNebM7VnqLeXTVP7b0f5Ba3NvXAN7MzUw8RL3vVb1W9aVijheLXO5ALBAA25vVbmEXcX07Y3HXxMuJKfiEVrwi+JJ8S51SdAhcEWZ/C4hKxhtD0ljK88yi0Y+JcH4teO45LLltNQpCG5gUMrdLf8nTl9T2zC1kaxR60Q/Uw20URdM5lujQoUW1bKlRvd3ptWejm2aydyepXrU8LpGPG6c2trE+hp3ABt0FLfQNpDLxjvAhhcYVHqohSqSPSDsQVNzCJpD+MU4hJ3m6nAIO5pD0ByC5hA0hzAzh3D25eLlkAjRYDWLoFkEzSJoFuERLMJO85EswlZdswjPmUWILMccaQTJ7v6SPEJsbjWRoIkETSRkRmS3vjpEwq4mEjSRoIkETSTMTCR8Otp//2KIhGiwmkjQRIImEjSR8AgiYbf+WCKhoYmE50wkRJZjjkSCZHd/SSIhNreaSNBEgiYSBCPSWh0ioaWJBE0kaCJBEwmzRyR8fUEBCV91PIKmETSNoGmER9IIrcfSCE1NIzzreISvcw5H+PrrRyN8nVMwwlrcLusZkyeWv1mPJiNC6iATneiElerwYdQ9m0peVJJ2MZMg8894peKmzf2Q9M20JcLxO6F2KN1s1DnFRJDAB9WdQXlcC53oqhwVwiTwns/9FWJLhMAppB6yhRWbUVVKuS/7kfYRvVYKB53QhvuO6pagATW/SJHuRuDffJ9tKlHZpkpINM8mXfZgyDW1avNF2alnkFdtyaI2cqk9eC8XxTfI/xo4F0PXUnQ7ER1BF8iKJncTh6PcACxD2U9hkcVJr6B5GNRB1I7Fuo1fmN+O9Kz8K5u1m7ADAxcSiNu+Z7fZUohYfOo1Tm/nP3YxAW5+KcsEgKerZyeRDaSoboJk5PZGKi6zzIaorKQdsp50cP0K0NSOA9f/4k2qfd55yaDi+h6qdiLv/a9kyGY+tyQjluZoooSMEMPLSJMpXY+VEPG5SOx57sLG2cQ1kOuau6yqL9IaRTdpVRVaXlhL7HOV2MLdX7MJraq6Jclt8XrY7Aa4qsKcdP+lyPNa4smOIgiJBArV7EanMKbr3a03krvZTOLFaWbuMR9R5yOjyZPJaSewXnSEzG2BhWnUhS+b4peGcPXttvC5IX6h3oiQI9wg1xQ+N2Ki43syBuaeCGI5sRWx4h2xYrGV5pb4RbhNb9cW+5v0JTd9Pz03UxSZo5IgfiMWUOM9wP2OBwLb+AzvjCuEQ+Cgn9H1iNGzIffdTffj3X8/3zW3YkfiNnU2uFtl3kF4c0Fd1Ggjr43+D4qMqm3O6AAA + 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 {{- end }} diff --git a/charts/kubezero-auth/templates/keycloak/istio-service.yaml b/charts/kubezero-auth/templates/keycloak/istio-service.yaml index fe9ca50f..b8469c2e 100644 --- a/charts/kubezero-auth/templates/keycloak/istio-service.yaml +++ b/charts/kubezero-auth/templates/keycloak/istio-service.yaml @@ -16,6 +16,8 @@ spec: - route: - destination: host: {{ template "kubezero-lib.fullname" $ }}-keycloak + port: + number: 80 {{- end }} --- @@ -41,4 +43,6 @@ spec: route: - destination: host: {{ template "kubezero-lib.fullname" $ }}-keycloak + port: + number: 80 {{- end }} diff --git a/charts/kubezero-istio/TODO b/charts/kubezero-istio/TODO new file mode 100644 index 00000000..52b33d07 --- /dev/null +++ b/charts/kubezero-istio/TODO @@ -0,0 +1,4 @@ + {"time":"2024-11-21T10:32:42.652788Z","level":"warning","scope":"envoy main","msg":"Usage of the deprecated runtime key overload.global_downstream_max_connections, consider switching to `e │ +│ nvoy.resource_monitors.downstream_connections` instead.This runtime key will be removed in future.","caller":"external/envoy/source/server/server.cc:843","thread":"8"} │ +│ {"time":"2024-11-21T10:32:42.653492Z","level":"warning","scope":"envoy main","msg":"There is no configured limit to the number of allowed active downstream connections. Configure a limit i │ +│ n `envoy.resource_monitors.downstream_connections` resource monitor.","caller":"external/envoy/source/server/server.cc:936","thread":"8"} │ diff --git a/charts/kubezero-storage/values.yaml b/charts/kubezero-storage/values.yaml index db1a241f..bb4be298 100644 --- a/charts/kubezero-storage/values.yaml +++ b/charts/kubezero-storage/values.yaml @@ -245,9 +245,9 @@ aws-efs-csi-driver: resources: requests: cpu: 20m - memory: 96Mi + memory: 128Mi limits: - memory: 256Mi + memory: 512Mi affinity: nodeAffinity: