🔧(helm) force SATOSA pods to run on Redis's node

For now it seems we're having trouble when the app pods are not sharing
a node with the Redis server.
This commit is contained in:
Jonathan Perret
2026-03-18 15:39:38 +01:00
parent ef911745a7
commit 2dbeff512c
3 changed files with 33 additions and 2 deletions
+12 -1
View File
@@ -4,7 +4,17 @@ image:
tag: "latest"
satosa:
replicas: 1
replicas: 2
affinity:
podAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: app.kubernetes.io/name
operator: In
values:
- redis
topologyKey: kubernetes.io/hostname
envVars:
BASE_URL: https://oidc2fer.127.0.0.1.nip.io
GUNICORN_CMD_ARGS: --workers=3
@@ -41,6 +51,7 @@ satosa:
"https://test-idp.federation.renater.fr/idp/shibboleth": "12345678200010"
}
ingress:
enabled: true
host: oidc2fer.127.0.0.1.nip.io
@@ -4,7 +4,17 @@ image:
tag: "v1.0.12"
satosa:
replicas: 8
replicas: 2
affinity:
podAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: statefulset.kubernetes.io/pod-name
operator: In
values:
- redis--re-0
topologyKey: kubernetes.io/hostname
envVars:
BASE_URL: https://renater.agentconnect.gouv.fr
GUNICORN_CMD_ARGS: --workers=3 --timeout=10
@@ -5,6 +5,16 @@ image:
satosa:
replicas: 2
affinity:
podAffinity:
requiredDuringSchedulingIgnoredDuringExecution:
- labelSelector:
matchExpressions:
- key: statefulset.kubernetes.io/pod-name
operator: In
values:
- redis--re-0
topologyKey: kubernetes.io/hostname
envVars:
BASE_URL: https://oidc2fer-staging.beta.numerique.gouv.fr
GUNICORN_CMD_ARGS: --workers=3