apache / apache/openwhisk-deploy-kube

Support "private" OpenWhisk deployment

Open
#588 1 comment 2 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
309
Forks
231
PR merge metrics
No merged PRs in 30d

Description

I'm in a situation where I'd like to deploy OpenWhisk for use by other components within a cluster. In particular, I don't really want to expose anything to the public internet, which seems to be impossible with the current setup.

The current options (excluding OpenShift) for `whisk.ingress.type` are `LoadBalancer`, `NodePort`, and `Standard` (which is essentially just a `ClusterIP` service with a "frontend" ingress).

Could we add an option for a `None` ingress (which just creates a ClusterIP service and doesn't create a frontend) or an option to disable the frontdoor ingress (something like `whisk.ingress.frontDoorEnabled` as a boolean)? This might also be useful in setups where the ingress is more complicated and so you want to manage it outside of this chart (e.g., using cloud-provider managed certificates).

I'd be happy to make a PR to add an option to disable frontdoor if that sounds okay (afaict it would be three lines of code plus some documentation).

Thanks for all the awesome work on this!

Contributor guide

Open the contributing guide

Research direction

Start by tracing the chart's handling of `whisk.ingress.type` and the frontend ingress, then review the existing documentation for ingress options. Done means the chart can deploy privately with only a ClusterIP service and no frontend, while preserving the current ingress modes and documenting the new option.

Written by the indexing model from the issue text.

Assessment

Tech stack
helm, kubernetes
Domain
cloud, infrastructure
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.