add liveness probe and failurethreshold to probes

bank-vaults · Feb 9, 2024 · fb51d1b · fb51d1b
1 parent d28e85b
commit fb51d1b
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 0 deletions.
diff --git a/deploy/charts/vault-secrets-webhook/templates/webhook-deployment.yaml b/deploy/charts/vault-secrets-webhook/templates/webhook-deployment.yaml
@@ -88,11 +88,25 @@ spec:
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           ports:
             - containerPort: {{ .Values.service.internalPort }}
+          livenessProbe:
+            httpGet:
+              scheme: HTTPS
+              path: /healthz
+              port: {{ .Values.service.internalPort }}
+            initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
+            failureThreshold: {{ .Values.livenessProbe.failureThreshold }}
+            periodSeconds: {{ .Values.livenessProbe.periodSeconds }}
+            successThreshold: {{ .Values.livenessProbe.successThreshold }}
+            timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
           readinessProbe:
             httpGet:
               scheme: HTTPS
               path: /healthz
               port: {{ .Values.service.internalPort }}
+            failureThreshold: {{ .Values.readinessProbe.failureThreshold }}
+            periodSeconds: {{ .Values.readinessProbe.periodSeconds }}
+            successThreshold: {{ .Values.readinessProbe.successThreshold }}
+            timeoutSeconds: {{ .Values.readinessProbe.timeoutSeconds }}
           volumeMounts:
             - mountPath: /var/serving-cert
               name: serving-cert

diff --git a/deploy/charts/vault-secrets-webhook/values.yaml b/deploy/charts/vault-secrets-webhook/values.yaml
@@ -173,6 +173,19 @@ topologySpreadConstraints: {}
 # Check: https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/
 priorityClassName: ""
 
+# -- Liveness and readiness probes for the webhook container
+livenessProbe:
+  initialDelaySeconds: 30
+  failureThreshold: 3
+  periodSeconds: 10
+  successThreshold: 1
+  timeoutSeconds: 1
+readinessProbe:
+  failureThreshold: 3
+  periodSeconds: 10
+  successThreshold: 1
+  timeoutSeconds: 1
+
 rbac:
   psp:
     # -- Use pod security policy