XS✔ ◾ feat: HA & Raft quorum safety guardrails

Changelog.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## 1.1.0 ![AppVersion: 30.1](https://img.shields.io/static/v1?label=AppVersion&message=30.1&color=success&logo=) ![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm)
+
+**Release date:** 2026-03-20
+
+### Added
+
+- PodDisruptionBudget is now enabled by default for multi-node clusters (replicaCount > 1), automatically skipped for single-replica deployments
+- Auto-calculated `maxUnavailable` for both PDB and StatefulSet `updateStrategy`, based on Raft fault tolerance (`floor(replicaCount/2)`), with user override support and quorum validation
+- Explicit `updateStrategy` on StatefulSet with `RollingUpdate` default and `OnDelete` support
+- Built-in soft pod anti-affinity (`preferredDuringSchedulingIgnoredDuringExecution`) on `kubernetes.io/hostname` for multi-node clusters, automatically spreading replicas across nodes
+- Template-level validation that rejects `maxUnavailable` values exceeding Raft fault tolerance
+
+### Changed
+
+- `pdb.enabled` default changed from `false` to `true`
+- `pdb.maxUnavailable` default changed from `1` to `"auto"` (auto-calculate as `floor(replicaCount/2)`)
+- `updateStrategy.rollingUpdate.maxUnavailable` added with default `"auto"` (auto-calculate)
+- Built-in soft pod anti-affinity is now injected when `affinity` is empty (`{}`)
+
 ## 1.0.0 ![AppVersion: 30.1](https://img.shields.io/static/v1?label=AppVersion&message=30.1&color=success&logo=) ![Helm: v3](https://img.shields.io/static/v1?label=Helm&message=v3&color=informational&logo=helm)
 
 **Release date:** 2026-03-19

Chart.yaml

@@ -1,11 +1,9 @@
 apiVersion: v2
 name: typesense
 description: >-
-  Deploy Typesense search engine on Kubernetes with Raft-based HA clustering,
-  Prometheus metrics, and Gateway API support. This chart is not officially
-  maintained by or affiliated with the Typesense project.
+  Deploy Typesense search engine on Kubernetes with Raft-based HA clustering, Prometheus metrics, and Gateway API support. This chart is not officially maintained by or affiliated with the Typesense project.
 type: application
-version: 1.0.0
+version: 1.1.0
 appVersion: "30.1"
 icon: https://typesense.org/typesense-logo.svg
 home: https://github.com/hackthebox/typesense-helm

README.md

@@ -1,6 +1,6 @@
 # typesense
 
-![Version: 1.0.0](https://img.shields.io/badge/Version-1.0.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 30.1](https://img.shields.io/badge/AppVersion-30.1-informational?style=flat-square)
+![Version: 1.1.0](https://img.shields.io/badge/Version-1.1.0-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 30.1](https://img.shields.io/badge/AppVersion-30.1-informational?style=flat-square)
 
 [![Artifact Hub](https://img.shields.io/endpoint?url=https://artifacthub.io/badge/repository/typesense)](https://artifacthub.io/packages/search?repo=typesense)
 
@@ -217,7 +217,7 @@ storage:
 
 | Key | Type | Default | Description |
 |-----|------|---------|-------------|
-| affinity | object | `{}` | Affinity rules for pod scheduling |
+| affinity | object | `{}` | Affinity rules for pod scheduling. When unset or empty and replicaCount > 1, a soft pod anti-affinity on kubernetes.io/hostname is automatically applied. Set to a non-empty affinity object to override this default behavior. |
 | extraArgs | list | `[]` | Extra command-line arguments for Typesense server (e.g., ["--filter-by-max-ops=200"]) |
 | extraEnv | list | `[]` | Extra environment variables for the Typesense container |
 | fullnameOverride | string | `""` | Override the full name of the release (optional) |
@@ -247,8 +247,8 @@ storage:
 | metrics.serviceMonitor.labels | object | `{}` | Additional labels for ServiceMonitor |
 | nameOverride | string | `""` | Override the name of the release (optional) |
 | nodeSelector | object | `{}` | Node selector to schedule pods on specific nodes (optional) |
-| pdb.enabled | bool | `false` | Enable PodDisruptionBudget for Typesense StatefulSet |
-| pdb.maxUnavailable | int | `1` | Maximum number of pods that can be unavailable during disruption |
+| pdb.enabled | bool | `true` | Enable PodDisruptionBudget for Typesense StatefulSet. Automatically skipped when replicaCount is 1. |
+| pdb.maxUnavailable | string/int | `"auto"` | Maximum number of pods that can be unavailable during disruption. Set to "auto" (default) to auto-calculate as floor(replicaCount/2), preserving Raft quorum. Set to 0 to block all voluntary disruptions. Any positive value is used directly and must not exceed floor(replicaCount/2). |
 | podAnnotations | object | `{}` | Additional annotations to add to the Typesense pod(s) |
 | podLabels | object | `{}` | Additional labels to add to the Typesense pod(s) |
 | podSecurityContext.fsGroup | int | `2000` | Group ID for the filesystem of the Typesense container |
@@ -295,6 +295,9 @@ storage:
 | typesense.logging.slowRequestsTimeMs | string | `nil` | Threshold in ms for slow request logging (-1 disables). Unset uses Typesense default (-1) |
 | typesense.snapshots.intervalSeconds | string | `nil` | Replication log snapshot frequency in seconds. Unset uses Typesense default (3600) |
 | typesense.threadPoolSize | string | `nil` | Concurrent request handler threads. Unset uses Typesense default (NUM_CORES * 8) |
+| updateStrategy | object | `{"rollingUpdate":{"maxUnavailable":"auto"},"type":"RollingUpdate"}` | StatefulSet update strategy configuration. When type is RollingUpdate, rollingUpdate.maxUnavailable is required. When type is OnDelete, rollingUpdate is optional and ignored. |
+| updateStrategy.rollingUpdate.maxUnavailable | string/int | `"auto"` | Maximum number of pods that can be unavailable during a rolling update. Set to "auto" (default) to auto-calculate as floor(replicaCount/2), preserving Raft quorum. Set to 0 to block all voluntary pod replacements. Any positive value is used directly and must not exceed floor(replicaCount/2). Ignored when updateStrategy.type is OnDelete. |
+| updateStrategy.type | string | `"RollingUpdate"` | StatefulSet update strategy type. Use RollingUpdate (default) for zero-downtime upgrades or OnDelete for manual pod-by-pod control. |
 
 ## Upgrading
 

templates/pdb.yaml

@@ -1,4 +1,15 @@
-{{- if .Values.pdb.enabled -}}
+{{- if and .Values.pdb.enabled (gt (int .Values.replicaCount) 1) -}}
+{{- $replicaCount := int .Values.replicaCount -}}
+{{- $maxFault := div $replicaCount 2 -}}
+{{- $maxUnavailable := .Values.pdb.maxUnavailable -}}
+{{- if and (kindIs "string" $maxUnavailable) (eq $maxUnavailable "auto") }}
+  {{- $maxUnavailable = $maxFault -}}
+{{- else }}
+  {{- $maxUnavailable = int $maxUnavailable -}}
+  {{- if gt $maxUnavailable $maxFault }}
+{{- fail (printf "pdb.maxUnavailable (%d) exceeds Raft fault tolerance for replicaCount %d (max: floor(%d/2) = %d)" $maxUnavailable $replicaCount $replicaCount $maxFault) }}
+  {{- end }}
+{{- end }}
 apiVersion: policy/v1
 kind: PodDisruptionBudget
 metadata:
@@ -7,7 +18,7 @@ metadata:
   labels:
     {{- include "typesense.labels" . | nindent 4 }}
 spec:
-  maxUnavailable: {{ .Values.pdb.maxUnavailable }}
+  maxUnavailable: {{ $maxUnavailable }}
   selector:
     matchLabels:
       {{- include "typesense.selectorLabels" . | nindent 6 }}

templates/statefulset.yaml

@@ -13,6 +13,30 @@ spec:
   serviceName: {{ include "typesense.fullname" . }}-headless-svc
   podManagementPolicy: Parallel
   replicas: {{ .Values.replicaCount }}
+  updateStrategy:
+    {{- if not (or (eq .Values.updateStrategy.type "RollingUpdate") (eq .Values.updateStrategy.type "OnDelete")) }}
+    {{- fail (printf "updateStrategy.type must be RollingUpdate or OnDelete, got %q" .Values.updateStrategy.type) }}
+    {{- end }}
+    type: {{ .Values.updateStrategy.type }}
+    {{- if eq .Values.updateStrategy.type "RollingUpdate" }}
+    {{- $replicaCount := int .Values.replicaCount }}
+    {{- $maxFault := div $replicaCount 2 }}
+    {{- $maxUnavailable := .Values.updateStrategy.rollingUpdate.maxUnavailable }}
+    {{- if and (kindIs "string" $maxUnavailable) (eq $maxUnavailable "auto") }}
+      {{- if gt $replicaCount 1 }}
+        {{- $maxUnavailable = $maxFault }}
+      {{- else }}
+        {{- $maxUnavailable = 1 }}
+      {{- end }}
+    {{- else }}
+      {{- $maxUnavailable = int $maxUnavailable }}
+      {{- if and (gt $replicaCount 1) (gt $maxUnavailable $maxFault) }}
+        {{- fail (printf "updateStrategy.rollingUpdate.maxUnavailable (%d) exceeds Raft fault tolerance for replicaCount %d (max: floor(%d/2) = %d)" $maxUnavailable $replicaCount $replicaCount $maxFault) }}
+      {{- end }}
+    {{- end }}
+    rollingUpdate:
+      maxUnavailable: {{ $maxUnavailable }}
+    {{- end }}
   selector:
     matchLabels:
       {{- include "typesense.selectorLabels" . | nindent 6 }}
@@ -155,9 +179,19 @@ spec:
       tolerations:
         {{- toYaml . | nindent 8 }}
       {{- end }}
-      {{- with .Values.affinity }}
+      {{- if .Values.affinity }}
       affinity:
-        {{- toYaml . | nindent 8 }}
+        {{- toYaml .Values.affinity | nindent 8 }}
+      {{- else if gt (int .Values.replicaCount) 1 }}
+      affinity:
+        podAntiAffinity:
+          preferredDuringSchedulingIgnoredDuringExecution:
+            - weight: 100
+              podAffinityTerm:
+                labelSelector:
+                  matchLabels:
+                    {{- include "typesense.selectorLabels" . | nindent 20 }}
+                topologyKey: kubernetes.io/hostname
       {{- end }}
       {{- with .Values.topologySpreadConstraints }}
       topologySpreadConstraints:

tests/config_test.yaml

@@ -1,6 +1,4 @@
 suite: Configuration
-chart:
-  version: 1.0.0
 release:
   name: foo
   namespace: bar

tests/external_secret_test.yaml

@@ -1,6 +1,4 @@
 suite: Secrets
-chart:
-  version: 1.0.0
 release:
   name: foo
   namespace: bar

tests/ingress_test.yaml

@@ -1,6 +1,4 @@
 suite: Networking
-chart:
-  version: 1.0.0
 release:
   name: foo
   namespace: bar

tests/pdb_test.yaml

@@ -1,21 +1,11 @@
 suite: PodDisruptionBudget
-chart:
-  version: 1.0.0
 release:
   name: foo
   namespace: bar
 templates:
   - pdb.yaml
 tests:
-  - it: should not create PDB by default
-    asserts:
-      - notFailedTemplate: {}
-      - hasDocuments:
-          count: 0
-  - it: should create PDB when enabled
-    set:
-      pdb:
-        enabled: true
+  - it: should create PDB by default with auto-calculated maxUnavailable
     asserts:
       - notFailedTemplate: {}
       - hasDocuments:
@@ -28,16 +18,107 @@ tests:
       - equal:
           path: .spec.maxUnavailable
           value: 1
-  - it: should allow overriding maxUnavailable
+
+  - it: should not create PDB when replicaCount is 1
+    set:
+      replicaCount: 1
+    asserts:
+      - notFailedTemplate: {}
+      - hasDocuments:
+          count: 0
+
+  - it: should not create PDB when replicaCount is 1 even if pdb.enabled is true
     set:
+      replicaCount: 1
       pdb:
         enabled: true
-        maxUnavailable: 2
+    asserts:
+      - notFailedTemplate: {}
+      - hasDocuments:
+          count: 0
+
+  - it: should not create PDB when disabled
+    set:
+      pdb:
+        enabled: false
+    asserts:
+      - notFailedTemplate: {}
+      - hasDocuments:
+          count: 0
+
+  - it: should auto-calculate maxUnavailable as floor(replicaCount/2) for 5 replicas
+    set:
+      replicaCount: 5
     asserts:
       - notFailedTemplate: {}
       - equal:
           path: .spec.maxUnavailable
           value: 2
+
+  - it: should auto-calculate maxUnavailable as floor(replicaCount/2) for 7 replicas
+    set:
+      replicaCount: 7
+    asserts:
+      - notFailedTemplate: {}
+      - equal:
+          path: .spec.maxUnavailable
+          value: 3
+
+  - it: should auto-calculate when maxUnavailable is auto
+    set:
+      replicaCount: 5
+      pdb:
+        enabled: true
+        maxUnavailable: auto
+    asserts:
+      - notFailedTemplate: {}
+      - equal:
+          path: .spec.maxUnavailable
+          value: 2
+
+  - it: should allow maxUnavailable 0 to block all voluntary disruptions
+    set:
+      pdb:
+        enabled: true
+        maxUnavailable: 0
+    asserts:
+      - notFailedTemplate: {}
+      - equal:
+          path: .spec.maxUnavailable
+          value: 0
+
+  - it: should allow overriding maxUnavailable within quorum bounds
+    set:
+      replicaCount: 5
+      pdb:
+        enabled: true
+        maxUnavailable: 1
+    asserts:
+      - notFailedTemplate: {}
+      - equal:
+          path: .spec.maxUnavailable
+          value: 1
+
+  - it: should reject maxUnavailable exceeding Raft fault tolerance
+    set:
+      replicaCount: 3
+      pdb:
+        enabled: true
+        maxUnavailable: 2
+    asserts:
+      - failedTemplate:
+          errorMessage: "pdb.maxUnavailable (2) exceeds Raft fault tolerance for replicaCount 3 (max: floor(3/2) = 1)"
+
+  - it: should reject maxUnavailable exceeding Raft fault tolerance for 5 replicas
+    set:
+      replicaCount: 5
+      pdb:
+        enabled: true
+        maxUnavailable: 3
+    asserts:
+      - failedTemplate:
+          errorMessage: "pdb.maxUnavailable (3) exceeds Raft fault tolerance for replicaCount 5 (max: floor(5/2) = 2)"
+
   - it: should use selector labels matching the StatefulSet
     set:
       pdb:

tests/service_test.yaml

@@ -1,6 +1,4 @@
 suite: Networking
-chart:
-  version: 1.0.0
 release:
   name: foo
   namespace: bar

tests/serviceaccount_test.yaml

@@ -1,6 +1,4 @@
 suite: ServiceAccount
-chart:
-  version: 1.0.0
 release:
   name: foo
   namespace: bar

tests/servicemonitor_test.yaml

@@ -1,6 +1,4 @@
 suite: ServiceMonitor
-chart:
-  version: 1.0.0
 release:
   name: foo
   namespace: bar