OpenRun - Declaratively deploy Reflex apps on single-node or Kubernetes

[akclace]

I have been building the OpenRun open-source project https://github.com/openrundev/openrun. OpenRun is a platform for teams to deploy internal tools. OpenRun makes it easy to deploy Reflex apps with a declarative interface.

OpenRun now supports deploying apps on Kubernetes. If you have multiple Reflex apps, you need to setup a build job for each app (Jenkins), CD using ArgoCD etc and an IDP like Backstage to monitor your deployments. If you use OAuth2-Proxy, setting up OAuth for each app will require new OAuth clients per app. Even with all that work, there is no way to control which user has access to each app (RBAC). Using Helm to templatize your app setup does not actually reduce the complexity when adding new apps.

With OpenRun, you install OpenRun on your Kubernetes cluster, setup your RBAC rules and configure a sync to implement declarative deployments. After that, adding a new app just requires adding an app config line for the new app, like below. You just say what domain to install the app at, where to get the source code from and what name to use for the app.

rf_args = {"container_opts": {"cpus": "2", "memory": "512m"}, "spec": "python-reflex"}

app("counter.:", "github.com/reflex-dev/reflex-examples/counter", **rf_args)

app("clock.:", "github.com/reflex-dev/reflex-examples/clock", **rf_args)

OpenRun handles the container builds, the zero downtime rolling deployments using Kubernetes Pods, secrets management, TLS certs and setting up access controls using OIDC/SAML with RBAC. Apps are automatically scaled down to zero when idle.

The same OpenRun config works on a single-node when you do not need Kubernetes scale-out.