Release 1.0.17

KnowageLabs · Nov 28, 2023 · 19ff4c1 · 19ff4c1
1 parent 7c6606a
commit 19ff4c1
Show file tree

Hide file tree

Showing 5 changed files with 29 additions and 2 deletions.
diff --git a/charts/knowage/CHANGELOG.md b/charts/knowage/CHANGELOG.md
@@ -11,9 +11,12 @@ and this project adheres to [Semantic Versioning](http://semver.org/).
 
 ### Changed
 
+- Reduce number of workers inside Python container
+
 ### Fixed
 
 - Explicitly specify volumeMode in knowage-main PVC
+- Fixed network policies to enable ingress from everywhere to main app
 
 ## [1.0.16] - 2023-11-13
 

diff --git a/charts/knowage/Chart.yaml b/charts/knowage/Chart.yaml
@@ -18,7 +18,7 @@
 
 apiVersion: v2
 name: knowage
-version: 1.0.16
+version: 1.0.17
 kubeVersion: ">= 1.22.0-0"
 description: A Helm chart for Kubernetes Suite
 type: application

diff --git a/charts/knowage/templates/_helpers.tpl b/charts/knowage/templates/_helpers.tpl
@@ -538,6 +538,13 @@ Deny all.
 {{ printf "%s-%s" (include "knowage.fullname" .) "deny-all" }}
 {{- end }}
 
+{{/*
+Allow all to main app.
+*/}}
+{{- define "knowage.networkpolicy.allow-all-to-main-app" -}}
+{{ printf "%s-%s" (include "knowage.fullname" .) "allow-all-to-main-app" }}
+{{- end }}
+
 {{/*
 For Python.
 */}}

diff --git a/charts/knowage/templates/deployment.yaml b/charts/knowage/templates/deployment.yaml
@@ -585,11 +585,14 @@ spec:
               secretKeyRef:
                 name: {{ include "knowage.secret" . }}
                 key: hmac
+          # TODO : Better to do this on Docker container image
+          - name: GUNICORN_CMD_ARGS
+            value: '--workers=5'
         livenessProbe:
           httpGet:
             path: /dataset/libraries
             port: 5000
-          initialDelaySeconds: 30
+          initialDelaySeconds: 60
           failureThreshold: 5
           periodSeconds: 5
         readinessProbe:

diff --git a/charts/knowage/templates/network-policy.yaml b/charts/knowage/templates/network-policy.yaml
@@ -29,6 +29,20 @@ spec:
   - Ingress
   - Egress
 
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: {{ include "knowage.networkpolicy.allow-all-to-main-app" . }}
+  namespace: {{ .Release.Namespace }}
+spec:
+  podSelector:
+    matchLabels:
+      knowage-suite.com/app: knowage
+      {{- include "knowage.selectorLabels" . | nindent 10 }}  policyTypes:
+  - Ingress
+  ingress:
+    {}
+
 {{ if or (eq ( default .Values.knowage.deployPython false ) true) (eq ( default .Values.knowage.python.deploy false ) true) }}
 ---
 #  _______     _________ _    _  ____  _   _