Deploy on Google Compute Engine

This guide outlines the process of deploying Permify, on Google Compute Engine. The steps include setting up Google Cloud SDK and kubectl, managing containers using Google Kubernetes Engine (GKE), deploying Permify, and implementing Permify in a distributed configuration with Serf. By following these steps, you can efficiently deploy Permify on Google’s scalable and secure infrastructure.

​

Google Cloud SDK Install

1. At the command line, run the following command:
   curl https://sdk.cloud.google.com | bash
   
2. When prompted, choose a location on your file system (usually your Home directory) to create the google-cloud-sdk subdirectory under.
3. If you want to send anonymous usage statistics to help improve gcloud CLI, answer Y when prompted.
4. To add gcloud CLI command-line tools to your PATH and enable command completion, answer Y when prompted
5. Restart your shell:
   exec -l $SHELL
   
6. To initialize the Google Cloud CLI environment, run gcloud init

​

Install kubectl

1. Install the kubectl component:
   gcloud components install kubectl
   
2. Verify that kubectl is installed:
   kubectl version
   
3. Install Authn Plug-in
   gcloud components install gke-gcloud-auth-plugin
   
   Check the gke-gcloud-auth-plugin binary version:
   gke-gcloud-auth-plugin --version
   

​

Create Containers with GKE

1. Login & Initialize Google Cloud CLI
   gcloud init
   
2. Follow configuration instructions
3. Create Container Cluster
   gcloud container clusters create [CLUSTER_NAME]
   
4. Authenticate the cluster
   gcloud container clusters get-credentials [CLUSTER_NAME]
   

​

Deploy Permify

1. Apply deployment config
   kubectl apply -f deployment.yaml
   
   • Deployment.yaml
     apiVersion: apps/v1
     kind: Deployment
     metadata:
         labels:
             app: permify
         name: permify
     spec:
       replicas: 3
       selector:
         matchLabels:
           app: permify
       strategy:
           type: Recreate
       template:
           metadata:
             labels:
               app: permify
           spec:
             containers:
               - image: ghcr.io/permify/permify
                 name: permify
                 args:
                 - "serve"
                 - "--database-engine=postgres"
                 - "--database-uri=postgres://user:password@host:5432/db_name"
                 - "--database-max-open-connections=20"
                 ports:
                     - containerPort: 3476
                       protocol: TCP
                 resources: {}
             restartPolicy: Always
     status: {}
     
2. Apply service manfiest
   kubectl apply -f service.yaml
   
   • Service Manifest
     apiVersion: v1
     kind: Service
     metadata:
       name: permify
     spec:
       ports:
           - name: 3476-tcp
             port: 3476
             protocol: TCP
             targetPort: 3476
       selector:
             app: permify
       type: LoadBalancer
     status:
       loadBalancer: {}
     

​

Deploying Permify in a Distributed Configuration

If you aim to deploy Permify in a distributed configuration, you will need to create a Serf deployment. The Serf deployment can be dockerized to our Container Registry under the name permify/serf:v1.0, which is provided by Hashicorp. Please note: It is crucial to ensure that both Serf and Permify deployments reside within the same namespace for proper operation.

1. Serf Service Create:
   • Serf Deployment&Service yaml
     apiVersion: apps/v1
     kind: Deployment
     metadata:
       name: serf-deployment
     spec:
       replicas: 1
       selector:
         matchLabels:
           app: serf
       template:
         metadata:
           labels:
             app: serf
         spec:
           containers:
           - name: serf
             image: permify/serf:v1.0
             args: 
              - "-node=main-serf"
             ports:
             - containerPort: 7946
             resources:
               requests:
                 cpu: 100m
                 memory: 128Mi
               limits:
                 cpu: 200m
                 memory: 256Mi
     ---
     apiVersion: v1
     kind: Service
     metadata:
       name: serf
     spec:
       selector:
         app: serf
       ports:
       - protocol: TCP
         port: 7946
         targetPort: 7946
         name: serf
       type: ClusterIP
     
2. Apply Deployment Manifest
   • Deployment.yaml
     apiVersion: apps/v1
     kind: Deployment
     metadata:
       name: permify-deployment
     spec:
       replicas: 3
       selector:
         matchLabels:
           app: permify
       template:
         metadata:
           labels:
             app: permify
         spec:
           containers:
             - image: permify/permify:tagname
               name: permify
               args:
                 - "serve"
                 - "--database-engine=postgres"
                 - "--database-uri=postgres://user:password@host:5432/db_name"
                 - "--database-max-open-connections=20"
                 - "--distributed-enabled=true"
                 - "--distributed-node=serf:7946"
                 - "--distributed-node-name=main-serf"
                 - "--distributed-protocol=serf"
               resources:
                  requests:
                    memory: "128Mi"
                    cpu: "200m"
                  limits:
                   memory: "128Mi"
                   cpu: "400m"
               ports:
               - containerPort: 3476
                 name: permify-port
               - containerPort: 7946
                 name: permify-dist
               - containerPort: 6060
                 name: permify-pprof
     
3. Apply Service Manifest
   • Service.yaml
     apiVersion: v1
     kind: Service
     metadata:
       name: permify
     spec:
       ports:
           - name: permify-port
             port: 3476
             targetPort: 3476
           - name: permify-dist
             port: 7946
             targetPort: 7946
       selector:
             app: permify
       type: LoadBalancer
     

​

Need any help ?

Our team is happy to help you to deploy Permify, schedule a call with a Permify engineer.