Running multiple matrix-authentication-service pods at once

[derritter88]

Hello there,

I am running MAS within my Kubernetes landscape - currently only one pod. But I would like to change that to have at least two, three pods for HA and load balancing.

Is there any showstopper I need to consider, to take care of?

[seang96]

I have been running it replicated for a while with separate oauth provider setup configured, but found out that the compatibility layer appears to be stateful and require the same service to be hit, so you would at least need a separate one that is at minimum dedicated to those 3 endpoints.

[derritter88]

Thanks for the reply. I have been running two pods for a while but with sticky sessions on my LoadBalancer service.
So far I haven't experienced any problem.

[sandhose]

Are you sure about that? I don't think there is anything stateful in those compatibility endpoints specifically

[seang96]

I fixed a well known issue earlier so unless that was cached and reason for the failure, though I did try multiple times and as soon as I set replicas to 1 web element app logged in without error. I'll try again this evening and see what happens.