diff --git a/charts/pdp/Chart.yaml b/charts/pdp/Chart.yaml index 20322cf2..ac9815e2 100644 --- a/charts/pdp/Chart.yaml +++ b/charts/pdp/Chart.yaml @@ -1,13 +1,14 @@ apiVersion: v2 name: pdp -description: An official Helm chart for Permit.io PDP (Policy Decision Point) with OpenShift support -version: 0.0.5 +description: An official Helm chart for Permit.io PDP (Policy Decision Point) with OpenShift support and configurable ports +version: 0.0.6 keywords: - policy - authorization - security - permit - openshift + - grpc maintainers: - name: Permit.io url: https://permit.io diff --git a/charts/pdp/templates/deployment.yaml b/charts/pdp/templates/deployment.yaml index 3269e2a4..214cea11 100644 --- a/charts/pdp/templates/deployment.yaml +++ b/charts/pdp/templates/deployment.yaml @@ -45,6 +45,10 @@ spec: {{- end }} ports: - containerPort: {{ .Values.pdp.port }} + {{- range .Values.pdp.additionalPorts }} + - name: {{ .name }} + containerPort: {{ .targetPort }} + {{- end }} env: - name: PDP_API_KEY valueFrom: diff --git a/charts/pdp/templates/service.yaml b/charts/pdp/templates/service.yaml index f83791d1..3cfc33d6 100644 --- a/charts/pdp/templates/service.yaml +++ b/charts/pdp/templates/service.yaml @@ -14,6 +14,13 @@ spec: selector: {{- include "pdp.selectorLabels" . | nindent 4 }} ports: - - protocol: TCP + - name: http + protocol: TCP port: {{ .Values.pdp.port }} targetPort: 7000 + {{- range .Values.pdp.additionalPorts }} + - name: {{ .name }} + port: {{ .port }} + targetPort: {{ .targetPort }} + protocol: TCP + {{- end }} diff --git a/charts/pdp/values.yaml b/charts/pdp/values.yaml index a7b80d6c..49aebdf7 100644 --- a/charts/pdp/values.yaml +++ b/charts/pdp/values.yaml @@ -6,6 +6,10 @@ pdp: [] # - name: custom_env # value: "custom_env" + # + # Example - enable Envoy gRPC ext_authz on port 9191 (requires PDP >= 0.9.10): + # - name: PDP_OPA_PLUGINS + # value: '{"permit_graph":{},"envoy_ext_authz_grpc":{"addr":":9191","path":"permit/root"}}' ApiKey: "" # Use an existing secret for the API key instead of creating one @@ -14,6 +18,12 @@ pdp: # name: "my-existing-secret" # key: "api-key" port: 7766 + # Example - expose Envoy gRPC ext_authz port (requires PDP_OPA_PLUGINS env var above): + # additionalPorts: + # - name: grpc + # port: 9191 + # targetPort: 9191 + additionalPorts: [] replicas: 1 image: repository: permitio/pdp-v2