Skip to content

step-certificates: make liveness and readiness probes configurable #260

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
aydinseven7 wants to merge 1 commit into
base: master
Choose a base branch
from
Open

step-certificates: make liveness and readiness probes configurable #260

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions step-certificates/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -329,6 +329,8 @@ chart and their default values.
| `podSecurityContext` | Set SecurityContext on POD level for STEP CA and STEP CA bootstrap job. | See [values.yaml](./values.yaml) |
| `shareProcessNamespace` | Share a single process namespace between all of the containers in a pod. | `false` |
| `hostAliases` | Additional entries for `/etc/hosts`. | [] |
| `livenessProbe` | Liveness probe configuration. If empty, defaults to `initialDelaySeconds: 5` on `/health`. | `{}` |
| `readinessProbe` | Readiness probe configuration. If empty, defaults to `initialDelaySeconds: 5` on `/health`. | `{}` |

Specify each parameter using the `--set key=value[,key=value]` argument to `helm
install`. For example,
Expand Down
10 changes: 10 additions & 0 deletions step-certificates/templates/ca.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,18 +103,28 @@ spec:
- name: https
containerPort: {{ .Values.service.targetPort }}
protocol: TCP
{{- with .Values.livenessProbe }}
livenessProbe:
{{- toYaml . | nindent 12 }}
{{- else }}
livenessProbe:
initialDelaySeconds: 5
httpGet:
path: /health
port: {{ .Values.service.targetPort }}
scheme: HTTPS
{{- end }}
{{- with .Values.readinessProbe }}
readinessProbe:
{{- toYaml . | nindent 12 }}
{{- else }}
readinessProbe:
initialDelaySeconds: 5
httpGet:
path: /health
port: {{ .Values.service.targetPort }}
scheme: HTTPS
{{- end }}
resources:
{{- toYaml .Values.resources | nindent 12 }}
{{- with .Values.ca.containerSecurityContext }}
Expand Down
19 changes: 19 additions & 0 deletions step-certificates/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -398,6 +398,25 @@ tolerations: []
# affinity contains the affinity settings for pod assignment.
affinity: {}

# livenessProbe contains the liveness probe configuration.
# If not set, defaults to initialDelaySeconds: 5, httpGet on /health.
# Override entirely to customize (e.g. increase initialDelaySeconds for slow startups).
# livenessProbe:
# initialDelaySeconds: 30
# periodSeconds: 10
# timeoutSeconds: 5
# failureThreshold: 3
livenessProbe: {}

# readinessProbe contains the readiness probe configuration.
# If not set, defaults to initialDelaySeconds: 5, httpGet on /health.
# readinessProbe:
# initialDelaySeconds: 30
# periodSeconds: 10
# timeoutSeconds: 5
# failureThreshold: 3
readinessProbe: {}

# create or use a service account for running the ca. Useful for oidc access to kms for example
serviceaccount:
create: false
Expand Down