Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add probes on manager #342

Merged
merged 4 commits into from
Aug 21, 2024
Merged

Conversation

NeuronAddict
Copy link
Contributor

When the manager is redeployed, it take a long time before it can take traffic.
The new manager container is marked ready (because no readiness is configured) but it can't forward requests correctly and the interface became unstable.

This PR add probes on manager :

  • readiness / liveness
  • startupProbe on case witch app is slow to startup.

- Make manager probes optional
- Add related documentation.
- Fix probes always disabled when cert is auto generated.
@NeuronAddict NeuronAddict marked this pull request as draft December 6, 2023 07:42
- Use uppercase for scheme.
- Make manager probe scheme use ssl option.
@NeuronAddict
Copy link
Contributor Author

NeuronAddict commented Dec 8, 2023

I don't find any endpoint like /health on manager, I use the home page (because many urls need a token) but an endpoint without a body that validate the backend connection will be more efficient.

@NeuronAddict NeuronAddict marked this pull request as ready for review December 29, 2023 13:41
@NeuronAddict
Copy link
Contributor Author

Tested on OCP, work since 21d.

@holyspectral
Copy link
Contributor

LGTM

@holyspectral holyspectral merged commit 9e99134 into neuvector:master Aug 21, 2024
1 check passed
mjnagel referenced this pull request in defenseunicorns/uds-core Sep 13, 2024
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
|
[cgr.dev/du-uds-defenseunicorns/neuvector-updater-fips](https://images.chainguard.dev/directory/image/neuvector-fips/overview)
([source](https://redirect.github.com/chainguard-images/images-private/tree/HEAD/images/neuvector-fips))
| minor | `8.9.1-dev` -> `8.10.0-dev` |
| [core](https://neuvector.com)
([source](https://redirect.github.com/neuvector/neuvector-helm)) | patch
| `2.7.8` -> `2.7.9` |
| [crd](https://neuvector.com) | patch | `2.7.8` -> `2.7.9` |
| [monitor](https://neuvector.com) | patch | `2.7.8` -> `2.7.9` |

---

### Release Notes

<details>
<summary>neuvector/neuvector-helm (core)</summary>

###
[`v2.7.9`](https://redirect.github.com/neuvector/neuvector-helm/releases/tag/2.7.9)

[Compare
Source](https://redirect.github.com/neuvector/neuvector-helm/compare/2.7.8...2.7.9)

#### What's Changed

- NVSHAS-9276 do not log jwt token by
[@&#8203;holyspectral](https://redirect.github.com/holyspectral) in
[https://github.com/neuvector/neuvector-helm/pull/421](https://redirect.github.com/neuvector/neuvector-helm/pull/421)
- added edge support in schema json for openshift routes by
[@&#8203;vtrenton](https://redirect.github.com/vtrenton) in
[https://github.com/neuvector/neuvector-helm/pull/420](https://redirect.github.com/neuvector/neuvector-helm/pull/420)
- Add probes on manager by
[@&#8203;NeuronAddict](https://redirect.github.com/NeuronAddict) in
[https://github.com/neuvector/neuvector-helm/pull/342](https://redirect.github.com/neuvector/neuvector-helm/pull/342)
- bug: Remove duplicate volumeMounts keys from registry-adapter
deployment by [@&#8203;sleepy](https://redirect.github.com/sleepy) in
[https://github.com/neuvector/neuvector-helm/pull/397](https://redirect.github.com/neuvector/neuvector-helm/pull/397)
- fix: volumeMounts for both internl and SSL by
[@&#8203;holyspectral](https://redirect.github.com/holyspectral) in
[https://github.com/neuvector/neuvector-helm/pull/423](https://redirect.github.com/neuvector/neuvector-helm/pull/423)
- Bump version up for helm 2.7.9 release by
[@&#8203;holyspectral](https://redirect.github.com/holyspectral) in
[https://github.com/neuvector/neuvector-helm/pull/436](https://redirect.github.com/neuvector/neuvector-helm/pull/436)

#### New Contributors

- [@&#8203;vtrenton](https://redirect.github.com/vtrenton) made their
first contribution in
[https://github.com/neuvector/neuvector-helm/pull/420](https://redirect.github.com/neuvector/neuvector-helm/pull/420)
- [@&#8203;sleepy](https://redirect.github.com/sleepy) made their first
contribution in
[https://github.com/neuvector/neuvector-helm/pull/397](https://redirect.github.com/neuvector/neuvector-helm/pull/397)

**Full Changelog**:
neuvector/neuvector-helm@2.7.8...2.7.9

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/defenseunicorns/uds-core).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC41OS4yIiwidXBkYXRlZEluVmVyIjoiMzguNzQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Micah Nagel <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants