pomerium/pomerium-helm

No longer supported

enniomara opened this issue · 5 comments

enniomara commented

I may have missed something, but it appears that Helm deployments are no longer supported. Would it be possible to add a note to the readme file or archive the repository to reflect this change?

desimone commented

Yes. We should archive the repo and make it clear in our docs.

venkatamutyala commented

Many folks deploy their applications using tools like ArgoCD and FluxCD. It appears in the case of ArgoCD the support for configuring pomerium via kustomize using apps of apps is limited. It does support kustomize but not nearly to the same degree that it supports helm. For example variable substitution does not appear to work out of the box and there are some work arounds but they require altering the ArgoCD configuration and unfortunately this means moving away from it's standard setup. As a cluster operator/administrator this is far from ideal.

As a community user of pomerium, is there anything we can do to help ease the burden of maintaining this helm chart? I'd be happy to make PR's/contributions. Are there any community calls that folks like myself would be able to join?

venkatamutyala commented

Just a quick update, for the folks managing many clusters, I did get a kustomize PoC working with argoCD in pomerium. I deploy a basic ArgoCD app with just this basic kustomize file. Note: I didn't make any argoCD config/server changes to get this working.

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

resources:
  - git::https://github.com/pomerium/ingress-controller.git//config/default?ref=v0.21.2

And then, I deploy all my customizations with another argocd application and just use sync-waves/retry logic to help coordinate the deployment. It's a bit hacky but hopes this helps someone else who is looking to try the customize path over helm. Note: the second argocd App I deploy is a helm chart so I can easily pop in all my unique cluster values.

I'll likely be migrating to the helm chart as we do need persistence, and I'm unclear on how I can make that work practically with my current approach. Anyways, I hope this snippet/approach helps another newbie!

desimone commented

As a community user of pomerium, is there anything we can do to help ease the burden of maintaining this helm chart? I'd be happy to make PR's/contributions. Are there any community calls that folks like myself would be able to join?

Hey @venkatamutyala Definitely are open to it. Could you reach out directly via email to bdd [the_at_symbol] pomerium.com?

  • 👍1