bump appVersion to v1.3.3 (#63)

openfga · Oct 9, 2023 · 019c62f · 019c62f
1 parent d49726a
commit 019c62f
Show file tree

Hide file tree

Showing 4 changed files with 112 additions and 5 deletions.
diff --git a/charts/openfga/Chart.yaml b/charts/openfga/Chart.yaml
@@ -3,8 +3,8 @@ name: openfga
 description: A Kubernetes Helm chart for the OpenFGA project.
 
 type: application
-version: 0.1.26
-appVersion: "v1.3.1"
+version: 0.1.27
+appVersion: "v1.3.3"
 
 home: "https://openfga.github.io/helm-charts/charts/openfga"
 icon: https://github.com/openfga/community/raw/main/brand-assets/icon/color/openfga-icon-color.svg

diff --git a/charts/openfga/templates/deployment.yaml b/charts/openfga/templates/deployment.yaml
@@ -220,6 +220,11 @@ spec:
               value: "{{ .Values.maxTypesPerAuthorizationModel }}"
             {{- end }}
 
+            {{- if .Values.maxAuthorizationModelSizeInBytes }}
+            - name: OPENFGA_MAX_AUTHORIZATION_MODEL_SIZE_IN_BYTES
+              value: "{{ .Values.maxAuthorizationModelSizeInBytes }}"
+            {{- end }}
+
             {{- if .Values.changelogHorizonOffset }}
             - name: OPENFGA_CHANGELOG_HORIZON_OFFSET
               value: "{{ .Values.changelogHorizonOffset }}"
@@ -230,6 +235,11 @@ spec:
               value: "{{ .Values.resolveNodeLimit }}"
             {{- end }}
 
+            {{- if .Values.resolveNodeBreadthLimit }}
+            - name: OPENFGA_RESOLVE_NODE_BREADTH_LIMIT
+              value: "{{ .Values.resolveNodeBreadthLimit }}"
+            {{- end }}
+
             {{- if .Values.listObjectsDeadline }}
             - name: OPENFGA_LIST_OBJECTS_DEADLINE
               value: "{{ .Values.listObjectsDeadline }}"
@@ -240,6 +250,26 @@ spec:
               value: "{{ .Values.listObjectsMaxResults }}"
             {{- end }}
 
+            {{- if .Values.checkQueryCache.enabled }}
+            - name: OPENFGA_CHECK_QUERY_CACHE_ENABLED
+              value: "{{ .Values.checkQueryCache.enabled }}"
+            {{- end }}
+
+            {{- if .Values.checkQueryCache.limit }}
+            - name: OPENFGA_CHECK_QUERY_CACHE_LIMIT
+              value: "{{ .Values.checkQueryCache.limit }}"
+            {{- end }}
+
+            {{- if .Values.checkQueryCache.ttl }}
+            - name: OPENFGA_CHECK_QUERY_CACHE_TTL
+              value: "{{ .Values.checkQueryCache.ttl }}"
+            {{- end }}
+
+            {{- if .Values.requestDurationDatastoreQueryCountBuckets }}
+            - name: OPENFGA_REQUEST_DURATION_DATASTORE_QUERY_COUNT_BUCKETS
+              value: "{{ join "," .Values.requestDurationDatastoreQueryCountBuckets }}"
+            {{- end }}
+
             {{- if .Values.allowWriting1_0Models }}
             - name: OPENFGA_ALLOW_WRITING_1_0_MODELS
               value: "{{ .Values.allowWriting1_0Models }}"
@@ -275,6 +305,11 @@ spec:
               value: {{ .Values.telemetry.trace.otlp.endpoint }}
             {{- end }}
 
+            {{- if .Values.telemetry.trace.otlp.tls.enabled }}
+            - name: OPENFGA_TRACE_OTLP_TLS_ENABLED
+              value: {{ .Values.telemetry.trace.otlp.tls.enabled }}
+            {{- end }}
+
             {{- if .Values.telemetry.trace.sampleRatio }}
             - name: OPENFGA_TRACE_SAMPLE_RATIO
               value: "{{ .Values.telemetry.trace.sampleRatio }}"

diff --git a/charts/openfga/values.schema.json b/charts/openfga/values.schema.json
@@ -19,6 +19,16 @@
                                 "endpoint": {
                                     "type": ["string", "null"],
                                     "description": "the grpc endpoint of the OpenTelemetry 'otlp' trace collector"
+                                },
+                                "tls": {
+                                    "type": "object",
+                                    "properties": {
+                                        "enabled": {
+                                            "type": "boolean",
+                                            "description": "whether to use TLS connection for the trace collector",
+                                            "default": false
+                                        }
+                                    }
                                 }
                             }
                         },
@@ -280,6 +290,27 @@
                 }
             }
         },
+        "checkQueryCache": {
+            "type": "object",
+            "properties": {
+                "enabled": {
+                    "type": "boolean",
+                    "description": "when executing Check and ListObjects requests, enables caching. This will turn Check and ListObjects responses into eventually consistent responses",
+                    "default": "false"
+                },
+                "limit": {
+                    "type": ["integer", "null"],
+                    "description": "if caching of Check and ListObjects calls is enabled, this is the size limit (in items) of the cache",
+                    "default": "10000"
+                },
+                "ttl": {
+                    "type": ["string", "null"],
+                    "description": "if caching of Check and ListObjects is enabled, this is the TTL of each value",
+                    "format": "duration",
+                    "default": "10s"
+                }
+            }
+        },
         "experimentals": {
             "type": "array",
             "description": "a list of experimental features to enable",
@@ -293,6 +324,20 @@
             "type": ["integer", "null"],
             "description": "the maximum allowed number of type definitions per authorization model"
         },
+        "maxAuthorizationModelSizeInBytes": {
+            "type": ["integer", "null"],
+            "description": "the maximum size in bytes allowed for persisting an authorization model"
+        },
+        "maxConcurrentReadsForCheck": {
+            "type": ["integer", "null"],
+            "description": "the maximum allowed number of concurrent reads in a single Check query",
+            "default": 4294967295
+        },
+        "maxConcurrentReadsForListObjects": {
+            "type": ["integer", "null"],
+            "description": "the maximum allowed number of concurrent reads in a single ListObjects query",
+            "default": 4294967295
+        },
         "changelogHorizonOffset": {
             "type": ["integer", "null"],
             "description": "the offset (in minutes) from the current time - changes that occur after this offset will not be included in the response of ReadChanges."
@@ -301,6 +346,11 @@
             "type": ["integer", "null"],
             "description": "defines how deeply nested an authorization model can be"
         },
+        "resolveNodeBreadthLimit": {
+            "type": ["integer", "null"],
+            "description": "defines how many nodes on a given level can be evaluated concurrently in a Check resolution tree.",
+            "default": 100
+        },
         "listObjectsDeadline": {
             "type": ["string", "null"],
             "description": "the timeout deadline (as a duration) for serving ListObjects requests",
@@ -311,6 +361,16 @@
             "type": ["integer", "null"],
             "description": "the maximum results to return in ListObjects responses"
         },
+        "requestDurationDatastoreQueryCountBuckets": {
+            "description": "datastore query count buckets used to label the histogram metric for measuring request duration.",
+            "type": "array",
+            "items": {
+                "minimum": 0,
+                "type": "integer"
+            },
+            "minItems": 1,
+            "default": [50, 200]
+        },
         "allowWriting1_0Models": {
             "type": ["boolean", "null"],
             "description": "allow calling WriteAuthorizationModel with models that have 1.0 schema version"
@@ -519,4 +579,4 @@
             "default": []
         }
     }
-}
+}
diff --git a/charts/openfga/values.yaml b/charts/openfga/values.yaml
@@ -108,6 +108,8 @@ telemetry:
     enabled: false
     otlp:
       endpoint:
+      tls:
+        enabled: false
     sampleRatio:
 
   metrics:
@@ -133,7 +135,7 @@ datastore:
   uriSecret:
   maxCacheSize:
   maxOpenConns:
-  maxIdleConns: 
+  maxIdleConns:
   connMaxIdleTime:
   connMaxLifetime:
   applyMigrations: true
@@ -151,7 +153,7 @@ grpc:
   tls:
     enabled: false
     cert:
-    key: 
+    key:
 
 http:
   enabled: true
@@ -184,14 +186,24 @@ log:
   level: info
   format: json
 
+checkQueryCache:
+  enabled: false
+  limit:
+  ttl:
+
 experimentals: []
 
 maxTuplesPerWrite:
 maxTypesPerAuthorizationModel:
+maxAuthorizationModelSizeInBytes:
+maxConcurrentReadsForCheck:
+maxConcurrentReadsForListObjects:
 changelogHorizonOffset:
 resolveNodeLimit:
+resolveNodeBreadthLimit:
 listObjectsDeadline:
 listObjectsMaxResults:
+requestDurationDatastoreQueryCountBuckets: [50, 200]
 allowWriting1_0Models:
 allowEvaluating1_0Models: