Shib + Kubernetes rollingupdates

[Mark Y. Goh]

Hi
I run shibboleth3 on Google Kubernetes Engine and wondering if folks have
experience with getting rollingupdates working correctly with shib.

we run shib 3.3 with a hazelcast backend with google load balancer. i have
been experimenting with different values for periodSec, initialDelay but
have not found any combination that does not cause a small downtime
(3-10s). the 502 service unavailable error usually occurs when the new pod
becomes pending even though i have 3 working replicas. (4 replicas,
maxsurge 4, maxunavail 25%).

thanks,
mark
-- 

Mark Y. Goh, Lead Systems Administrator, California College of the
Arts, mgoh at cca.edu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190516/1e894d64/attachment.html>