build(deps): bump urllib3 from 2.2.1 to 2.2.2

rcds/backends/k8s/templates/deployment.yaml

@@ -1,4 +1,5 @@
 {% import '_helpers.jinja' as helpers with context %}
+{% set has_healthcheck = container.config.healthcheck is defined and container.config.healthcheck.enabled %}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -20,40 +21,69 @@ spec:
         {{ helpers.container_labels() | indent(8) }}
     spec:
       containers:
-        - name: {{ container.name }}
-          image: {{ container.config.image }}
-          {% if container.config.ports %}
+        - name: challenge
+          image: {{ container.config.challenge.image }}
+          {% if container.config.challenge.ports %}
           ports:
-          {% for port in container.config.ports %}
+          {% for port in container.config.challenge.ports %}
             - containerPort: {{ port }}
               name: port-{{ port }}
           {% endfor %}
           {% endif %}
-          {% if container.config.environment %}
+          {% if container.config.challenge.environment %}
           env:
-          {% for name, value in container.config.environment.items() %}
+          {% for name, value in container.config.challenge.environment.items() %}
             - name: {{ name }}
               value: {{ value | quote }}
           {% endfor %}
           {% endif %}
-          {% if container.config.resources %}
+          {% if container.config.challenge.resources %}
           resources:
-            {{ container.config.resources | yaml(12) }}
+            {{ container.config.challenge.resources | yaml(12) }}
           {% endif %}
           securityContext:
             allowPrivilegeEscalation: false
             privileged: false
-            readOnlyRootFilesystem: {{ container.config.readOnlyRootFilesystem }}
-          {% if container.config.tmpfsMounts | first is defined %}
+            readOnlyRootFilesystem: {{ container.config.challenge.readOnlyRootFilesystem }}
+          {% if container.config.challenge.tmpfsMounts | first is defined %}
           volumeMounts:
-            {% for tmpfsMount in container.config.tmpfsMounts %}
+            {% for tmpfsMount in container.config.challenge.tmpfsMounts %}
             - name: {{ tmpfsMount }}
               mountPath: {{ tmpfsMount }}
             {% endfor %}
           {% endif %}
-      {% if container.config.tmpfsMounts | first is defined %}
+          {% if has_healthcheck %}
+          livenessProbe:
+            httpGet:
+              path: /healthz
+              port: 45281
+            initialDelaySeconds: 45
+            timeoutSeconds: 3
+            periodSeconds: 30
+          readinessProbe:
+            httpGet:
+              path: /healthz
+              port: 45281
+            initialDelaySeconds: 5
+            timeoutSeconds: 3
+            periodSeconds: 5
+          {% endif %}
+        {% if has_healthcheck %}
+        - name: healthcheck
+          image: {{ container.config.healthcheck.image }}
+          resources:
+            limits:
+              cpu: 1000m
+            requests:
+              cpu: 50m
+          securityContext:
+            allowPrivilegeEscalation: false
+            privileged: false
+            readOnlyRootFilesystem: false
+        {% endif %}
+      {% if container.config.challenge.tmpfsMounts | first is defined %}
       volumes:
-        {% for tmpfsMount in container.config.tmpfsMounts %}
+        {% for tmpfsMount in container.config.challenge.tmpfsMounts %}
         - name: {{ tmpfsMount }}
           emptyDir:
             medium: Memory

rcds/backends/k8s/templates/service.yaml

@@ -1,5 +1,5 @@
 {% import '_helpers.jinja' as helpers with context %}
-{% if container.config.ports %}
+{% if container.config.challenge.ports %}
 apiVersion: v1
 kind: Service
 metadata:
@@ -18,7 +18,7 @@ spec:
     {{ helpers.common_labels() | indent(4) }}
     {{ helpers.container_labels() | indent(4) }}
   ports:
-  {% for port in container.config.ports %}
+  {% for port in container.config.challenge.ports %}
     - port: {{ port }}
       targetPort: {{ port }}
       name: port-{{ port }}