Shibboleth SP3, TCPListener's clientAddress & Kubernetes

[Sandro Mathys]

On 01.02.21, 14:17, "users on behalf of Robert Bradley" <users-bounces at shibboleth.net on behalf of robert.bradley at it.ox.ac.uk> wrote:

> I don't know nearly enough about Kubernetes, unfortunately, but is there 
> any reason why you couldn't run one shibd container per pod and then use 
> shared Unix sockets within each pod?

You mean both the apache container and the shibd container in the same pod? Sure, that's the easiest way. In case someone wonders about the details: all you need is an emptyDir volume that is mounted to both containers where you create/share the unix socket.

But there are several reason why you'd want separate deployments (and thus separate pods), e.g. the possibility to (auto)scale both independent of each other.

Cheers,
Sandro