Give time for injector to come up (hashicorp#885)

* Give time for injector to come up Getting certificates can take a couple of seconds causing the liveness probes to fail
rrondeau · Mar 30, 2021 · 6bac7c4 · 6bac7c4
1 parent 86a91e1
commit 6bac7c4
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,11 @@ IMPROVEMENTS:
 BREAKING CHANGES:
 * Minimum Kubernetes versions supported is 1.16+. [[GH-883](https://github.com/hashicorp/consul-helm/pull/883)]
 
+BUG FIXES:
+* Add startup probe to connect-inject deployment to give time for certificates to be available.
+  Previously, the deployment could be killed by Kubernetes and crash loop because certificates would take a couple
+  of seconds. [[GH-885](https://github.com/hashicorp/consul-helm/pull/885)]
+
 ## 0.31.1 (Mar 19, 2021)
 
 BUG FIXES:

diff --git a/templates/connect-inject-deployment.yaml b/templates/connect-inject-deployment.yaml
@@ -205,6 +205,14 @@ spec:
             periodSeconds: 2
             successThreshold: 1
             timeoutSeconds: 5
+          startupProbe:
+            httpGet:
+              path: /health/ready
+              port: 8080
+              scheme: HTTPS
+            failureThreshold: 15
+            periodSeconds: 2
+            timeoutSeconds: 5
           {{- if (or .Values.connectInject.certs.secretName .Values.global.tls.enabled) }}
           volumeMounts:
             {{- if .Values.connectInject.certs.secretName }}