panxiao81/helm-charts-hardened
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: Add configurable probes for controller-manager (#784)

Browse Source 
Signed-off-by: Shubham Hibare <[email protected]>
Co-authored-by: kfox1111 <[email protected]>
This commit is contained in:
Shubham Hibare
2026-04-06 18:30:43 +00:00
committed by GitHub
co-authored by kfox1111
parent a27acbcbca
commit 145f3a36b5
3 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
charts/spire/charts/spire-server/README.md
+8
View File
@@ -287,6 +287,14 @@ In order to run Tornjak with simple HTTP Connection only, make sure you don't cr
| `controllerManager.leaderElection.leaseDuration` | Duration that non-leader candidates will wait to force acquire leadership. Increase this in high-load clusters to reduce API server pressure. | `15s` | | `controllerManager.leaderElection.leaseDuration` | Duration that non-leader candidates will wait to force acquire leadership. Increase this in high-load clusters to reduce API server pressure. | `15s` |
| `controllerManager.leaderElection.renewDeadline` | Duration the acting leader will retry refreshing leadership before giving up. Must be less than leaseDuration. | `10s` | | `controllerManager.leaderElection.renewDeadline` | Duration the acting leader will retry refreshing leadership before giving up. Must be less than leaseDuration. | `10s` |
| `controllerManager.leaderElection.retryPeriod` | Duration the LeaderElector clients should wait between tries of actions. Must be less than renewDeadline. | `2s` | | `controllerManager.leaderElection.retryPeriod` | Duration the LeaderElector clients should wait between tries of actions. Must be less than renewDeadline. | `2s` |
| `controllerManager.livenessProbe.initialDelaySeconds` | Initial delay seconds for livenessProbe | `5` |
| `controllerManager.livenessProbe.periodSeconds` | Period seconds for livenessProbe | `10` |
| `controllerManager.livenessProbe.timeoutSeconds` | Timeout seconds for livenessProbe | `5` |
| `controllerManager.livenessProbe.failureThreshold` | Failure threshold for livenessProbe | `3` |
| `controllerManager.readinessProbe.initialDelaySeconds` | Initial delay seconds for readinessProbe | `5` |
| `controllerManager.readinessProbe.periodSeconds` | Period seconds for readinessProbe | `10` |
| `controllerManager.readinessProbe.timeoutSeconds` | Timeout seconds for readinessProbe | `5` |
| `controllerManager.readinessProbe.failureThreshold` | Failure threshold for readinessProbe | `3` |
| `controllerManager.parentIDTemplate` | The template that is used to register workloads. | `spiffe://{{ .TrustDomain }}/spire/agent/k8s_psat/{{ .ClusterName }}/{{ .NodeMeta.UID }}` | | `controllerManager.parentIDTemplate` | The template that is used to register workloads. | `spiffe://{{ .TrustDomain }}/spire/agent/k8s_psat/{{ .ClusterName }}/{{ .NodeMeta.UID }}` |
| `controllerManager.expandEnv` | Set to true to enable environment variable substitution of config file options | `false` | | `controllerManager.expandEnv` | Set to true to enable environment variable substitution of config file options | `false` |
| `controllerManager.extraEnv` | Extra environment variables to add to the controller manager | `[]` | | `controllerManager.extraEnv` | Extra environment variables to add to the controller manager | `[]` |
charts/spire/charts/spire-server/templates/_controller-manager-container.tpl
+2
View File
@@ -146,10 +146,12 @@ Auto-generation preserves trailing numbers from cluster names or uses hash for u
httpGet: httpGet:
path: /healthz path: /healthz
port: {{ $hpName }} port: {{ $hpName }}
{{- toYaml .Values.controllerManager.livenessProbe | nindent 4 }}
readinessProbe: readinessProbe:
httpGet: httpGet:
path: /readyz path: /readyz
port: {{ $hpName }} port: {{ $hpName }}
{{- toYaml .Values.controllerManager.readinessProbe | nindent 4 }}
{{- end }} {{- end }}
resources: resources:
{{- toYaml .Values.controllerManager.resources | nindent 4 }} {{- toYaml .Values.controllerManager.resources | nindent 4 }}
charts/spire/charts/spire-server/values.yaml
+20
View File
@@ -596,6 +596,26 @@ controllerManager:
renewDeadline: "10s" renewDeadline: "10s"
retryPeriod: "2s" retryPeriod: "2s"
## @param controllerManager.livenessProbe.initialDelaySeconds Initial delay seconds for livenessProbe
## @param controllerManager.livenessProbe.periodSeconds Period seconds for livenessProbe
## @param controllerManager.livenessProbe.timeoutSeconds Timeout seconds for livenessProbe
## @param controllerManager.livenessProbe.failureThreshold Failure threshold for livenessProbe
livenessProbe:
initialDelaySeconds: 5
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 3
## @param controllerManager.readinessProbe.initialDelaySeconds Initial delay seconds for readinessProbe
## @param controllerManager.readinessProbe.periodSeconds Period seconds for readinessProbe
## @param controllerManager.readinessProbe.timeoutSeconds Timeout seconds for readinessProbe
## @param controllerManager.readinessProbe.failureThreshold Failure threshold for readinessProbe
readinessProbe:
initialDelaySeconds: 5
periodSeconds: 10
timeoutSeconds: 5
failureThreshold: 3
## @param controllerManager.parentIDTemplate The template that is used to register workloads. ## @param controllerManager.parentIDTemplate The template that is used to register workloads.
parentIDTemplate: "spiffe://{{ .TrustDomain }}/spire/agent/k8s_psat/{{ .ClusterName }}/{{ .NodeMeta.UID }}" parentIDTemplate: "spiffe://{{ .TrustDomain }}/spire/agent/k8s_psat/{{ .ClusterName }}/{{ .NodeMeta.UID }}"