feat: Add Valkey cache for scaling

helm/flowfuse/Chart.lock

@@ -2,5 +2,8 @@ dependencies:
 - name: postgresql
   repository: https://charts.bitnami.com/bitnami
   version: 11.9.13
-digest: sha256:1423e37aa789fccab1a4b5db593ccda3887032de2a4814b928df938f6db1de3a
-generated: "2024-02-13T12:15:48.820039+01:00"
+- name: valkey
+  repository: oci://registry-1.docker.io/cloudpirates
+  version: 0.4.1
+digest: sha256:18914f01a3fbac576b655e1eca8cae8303dc16ce33df9532c1f9c800ec932289
+generated: "2025-10-10T17:09:58.788141744+01:00"

helm/flowfuse/Chart.yaml

@@ -16,6 +16,10 @@ dependencies:
     import-values:
       - child: image
         parent: postgresql.image
+  - name: valkey
+    version: 0.4.1
+    repository: oci://registry-1.docker.io/cloudpirates
+    condition: forge.localValey
 maintainers:
   - name: "FlowFuse Inc"
     url: "https://flowfuse.com"

helm/flowfuse/README.md

@@ -333,6 +333,15 @@ Note: External secret must contain following keys:
 - `postgress-password` - the password to use for the postgres user (equivalent to `postgresql.auth.postgresPassword` key)
 
 
+### Valkey Shared Cache
+- `valkey.replicaCount` Number of Redis instances (default `1`)
+- `valkey.persistence.enabled` Should Valkey persist to disk (default `false`)
+- `valkey.persistence.size` How large a storage volume should be created if enabled (default `20Gi`)
+- `valkey.auth.enabled` Should Valkey require authentication (default `false`)
+- `valkey.auth.password` Set a password (default not set, will generate if enabled)
+- `valkey.metrics.enabled` Enabled metrics endpoint (default `true`)
+- `valkey.config` allows to overwrite the default Valkey configuration
+
 ###  Liveness, readiness and startup probes
 
 Following values can be used to configure the liveness, readiness and startup probes for all pods:

helm/flowfuse/templates/_helpers.tpl

@@ -222,3 +222,26 @@ Generate NPM registry admin password if not provided
 {{- sha256sum $seed | trunc 25 }}
 {{- end }}
 {{- end -}}
+
+
+{{/*
+Get the valkey host name.
+*/}}
+{{- define "forge.valkeyHost" -}}
+{{- if not .Values.valkey.host -}}
+    {{- printf "%s-%s" .Release.Name "valkey" }}
+{{- else -}}
+    {{- .Values.valkey.host }}
+{{- end -}}
+{{- end -}}
+
+{{/*
+Get the valkey port number.
+*/}}
+{{- define "forge.valkeyPort" -}}
+{{- if not .Values.valkey.host -}}
+    6379
+{{- else -}}
+    {{- .Values.valkey.port }}
+{{- end -}}
+{{- end -}}

helm/flowfuse/templates/configmap.yaml

@@ -317,3 +317,9 @@ data:
 {{ toYaml .Values.forge.tables.driver | indent 8 }}
       {{- end -}}
     {{- end -}}
+    {{- if gt (int .Values.forge.replicas) 1 }}
+    cache:
+      driver: 'redis'
+      options:
+        url: redis://{{ include "forge.valkeyHost" . }}:{{ include "forge.valkeyPort" . }}
+    {{- end -}}

helm/flowfuse/values.yaml

@@ -344,3 +344,31 @@ npmRegistry:
     repository: "flowfuse/npm-registry"
     tag: "latest"
   podSecurityContext: {}
+
+valkey:
+  replicaCount: 1
+
+  persistence:
+    enabled: false
+    size: 20Gi
+
+  resources:
+    requests:
+      memory: 512Mi
+      cpu: 250m
+    limits:
+      memory: 1Gi
+      cpu: 500m
+
+  auth:
+    enabled: false
+
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+
+  config:
+    maxMemory: 800mb
+    maxMemoryPolicy: allkeys-lru
+    save: 3600 1 300 100 60 10000