[helm] Use http-based liveness probe

The previous commit introduced an HTTP endopoint that can be used for the liveness probe. This patch changes helm to make that default instead of the tetra status based liveness probe. Signed-off-by: Anastasios Papagiannis <tasos.papagiannnis@gmail.com>
cilium · May 27, 2024 · f3c11ed · f3c11ed
1 parent 032ca05
commit f3c11ed
Show file tree

Hide file tree

Showing 4 changed files with 16 additions and 0 deletions.
diff --git a/docs/content/en/docs/reference/helm-chart.md b/docs/content/en/docs/reference/helm-chart.md
diff --git a/install/kubernetes/tetragon/README.md b/install/kubernetes/tetragon/README.md
diff --git a/install/kubernetes/tetragon/templates/_container_tetragon.tpl b/install/kubernetes/tetragon/templates/_container_tetragon.tpl
@@ -67,6 +67,15 @@
 {{- if .Values.tetragon.livenessProbe }}
   livenessProbe:
   {{- toYaml .Values.tetragon.livenessProbe | nindent 4 }}
+{{- else if .Values.tetragon.livenessHttpProbe.enabled }}
+  livenessProbe:
+     timeoutSeconds: 60
+     httpGet:
+       path: /liveness
+       port: 6789
+{{- if .Values.tetragon.livenessHttpProbe.host }}
+       host: {{ .Values.tetragon.livenessHttpProbe.host }}
+{{- end }}
 {{- else if .Values.tetragon.grpc.enabled }}
   livenessProbe:
      timeoutSeconds: 60

diff --git a/install/kubernetes/tetragon/values.yaml b/install/kubernetes/tetragon/values.yaml
@@ -68,6 +68,11 @@ tetragon:
   #  grpc:
   #    port: 54321
 
+  # -- Use http-based livenessProbe for the tetragon container. livenessProbe has a higher priority.
+  livenessHttpProbe:
+    enabled: true
+  # host: "localhost"
+
   # Tetragon puts processes in an LRU cache. The cache is used to find ancestors
   # for subsequently exec'ed processes.
   processCacheSize: 65536