feat(ingress-istio-controller): add leader election to allow for multiple replicas.

stable/ingress-istio-controller/Chart.yaml

@@ -15,12 +15,12 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.2.3
+version: 1.3.0
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
-appVersion: v1.3.2
+appVersion: v1.4.0
 
 home: https://statcan.gc.ca
 sources:

stable/ingress-istio-controller/templates/deployment.yaml

@@ -65,6 +65,15 @@ spec:
           {{- end }}
           resources:
             {{- toYaml .Values.resources | nindent 12 }}
+          env:
+            - name: "LOCK_IDENTITY"
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
+            - name: "LOCK_NAMESPACE"
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.namespace
       {{- with .Values.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}

stable/ingress-istio-controller/templates/role.yaml

@@ -0,0 +1,24 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: {{ include "ingress-istio-controller.fullname" . }}
+  labels:
+    {{- include "ingress-istio-controller.labels" . | nindent 4 }}
+rules:
+- apiGroups:
+  - coordination.k8s.io
+  resources:
+  - leases
+  verbs:
+  - create
+- apiGroups:
+  - coordination.k8s.io
+  resourceNames:
+  - ingress-istio-controller # lock-name configuration
+  resources:
+  - leases
+  verbs:
+  - get
+  - update
+  - watch
+  - patch

stable/ingress-istio-controller/templates/rolebinding.yaml

@@ -0,0 +1,14 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: {{ include "ingress-istio-controller.fullname" . }}
+  labels:
+    {{- include "ingress-istio-controller.labels" . | nindent 4 }}
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: {{ include "ingress-istio-controller.fullname" . }}
+subjects:
+- kind: ServiceAccount
+  name: {{ include "ingress-istio-controller.serviceAccountName" . }}
+  namespace: {{ .Release.Namespace }}

stable/ingress-istio-controller/values.yaml

@@ -73,13 +73,13 @@ gateway:
           privateKey: sds
           serverCertificate: sds
 
-replicaCount: 1
+replicaCount: 2
 
 image:
   repository: statcan/ingress-istio-controller
   pullPolicy: IfNotPresent
   # Overrides the image tag whose default is the chart appVersion.
-  # tag: "v1.0.0"
+  # tag: "v1.4.0"
 
 imagePullSecrets: {}