- Expose a workload
- Expose and secure a workload
- Security
- Cannot connect to a service exposed by an APIRule
- External DNS management
Ory limitations
Resource configuration
By default, the Ory components' resources have the following configuration:
| Component | CPU | Memory | |
|---|---|---|---|
| Hydra | Limits | 500m | 1Gi |
| Hydra | Requests | 250m | 256Mi |
| Hydra maester | Limits | 400m | 1Gi |
| Hydra maester | Requests | 10m | 256Mi |
| Oathkeeper | Limits | 500m | 512Mi |
| Oathkeeper | Requests | 100m | 64Mi |
| Oathkeeper Maester | Limits | 400m | 1Gi |
| Oathkeeper Maester | Requests | 10m | 32Mi |
Autoscaling configuration
The default configuration in terms of autoscaling of Ory components is as follows:
| Component | Min replicas | Max replicas |
|---|---|---|
| Oathkeeper | 3 | 10 |
| Oathkeeper Maester | Same as Oathkeeper | Same as Oathkeeper |
| Hydra | 2 | 5 |
Oathkeeper Maester is set up as a separate container in the same Pod as Oathkeeper. Because of that, their autoscaling configuration is similar.