Support PVC as input for config for Hosted Gateways

charts/lunar-proxy/templates/deployment.yaml

@@ -8,6 +8,12 @@ metadata:
     {{- include "lunar-proxy.labels" . | nindent 4 }}
 spec:
   replicas: {{ .Values.replicaCount }}
+  {{- if eq .Values.configSource "pvc" }}
+  # TODO: This is needed because PersistentVolumeClaim cannot be mounted
+  # twice, as would naturally happen with RollingUpdate (default)
+  strategy:
+    type: Recreate
+  {{- end }}
   selector:
     matchLabels:
       {{- include "lunar-proxy.selectorLabels" . | nindent 6 }}
@@ -207,6 +213,7 @@ spec:
 
           volumeMounts:
           {{- if .Values.lunarStreamsEnabled }}
+          {{- if eq .Values.configSource "configMap" }}
             - mountPath: /etc/lunar-proxy
               name: root
             - mountPath: /etc/lunar-proxy/flows
@@ -222,8 +229,12 @@ spec:
             {{- if .Values.secretNames.mtlsCerts }}
             - mountPath: /etc/lunar-proxy/certs/mtls
               name: mtls-certs
-            {{- end }}            
-          {{- else }}
+            {{- end }}
+            {{- else }} # it's not a configMap source - it's pvc
+            - mountPath: "/etc/lunar-proxy"
+              name: lunar-proxy-config-pvc
+            {{- end }}
+          {{- else }} # Lunar streams not enabled
             - mountPath: /etc/lunar-proxy
               name: policies
           {{- end }}
@@ -241,6 +252,12 @@ spec:
       {{- end }}
       volumes:
       {{- if .Values.lunarStreamsEnabled }}
+      {{- if eq .Values.configSource "pvc" }}
+        - name: lunar-proxy-config-pvc
+          persistentVolumeClaim:
+            claimName: {{ include "lunar-proxy.fullname" . }}
+      {{- end }}
+
       {{- if .Values.configMapNames.flows }}
         - configMap:
             name: {{ .Values.configMapNames.flows }}

charts/lunar-proxy/templates/pvc.yaml

@@ -0,0 +1,14 @@
+{{- if eq .Values.configSource "pvc" }}
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: {{ include "lunar-proxy.fullname" . }}
+spec:
+#   storageClassName: manual
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 1Gi
+{{- end }}

charts/lunar-proxy/values.schema.json

@@ -176,6 +176,11 @@
       "type": "object",
       "description": "Kubernetes requests and limits"
     },
+    "configSource": {
+      "type": "string",
+      "enum": ["configMap", "vpc"],
+      "description": "The type of source for the configuration for Lunar Gateway."
+    },
     "configMapNames": {
       "type": "object",
       "description": "ConfigMap names correlating to configuration to be used by Lunar Proxy. See https://docs.lunar.dev/flows-configurations/#folder-structure for folder structure used by Lunar Gateway. Alternatively, the `.configFiles` field can be used to provide the configurations inline",

charts/lunar-proxy/values.yaml

@@ -194,6 +194,7 @@ serviceMonitor:
 
   targetLabels: []
 
+configSource: 'configMap' # 'configMap' or 'pvc'
 configMapNames: {}
 secretNames: {}
 configFiles: {}