Add probes to Fulcio deployment

Signed-off-by: Cody Soyland <[email protected]>
sigstore · Apr 11, 2023 · 7e952c5 · 7e952c5
1 parent 220b721
commit 7e952c5
Show file tree

Hide file tree

Showing 4 changed files with 32 additions and 0 deletions.
diff --git a/charts/fulcio/README.md b/charts/fulcio/README.md
@@ -131,8 +131,14 @@ helm uninstall [RELEASE_NAME]
 | server.ingress.http.hosts[0].host | string | `"fulcio.localhost"` |  |
 | server.ingress.http.hosts[0].path | string | `"/"` |  |
 | server.ingress.http.tls | list | `[]` |  |
+| server.livenessProbe.httpGet.path | string | `"/api/v1/rootCert"` |  |
+| server.livenessProbe.httpGet.port | string | `"http"` |  |
+| server.livenessProbe.initialDelaySeconds | int | `10` |  |
 | server.logging.production | bool | `false` |  |
 | server.name | string | `"server"` |  |
+| server.readinessProbe.httpGet.path | string | `"/api/v1/rootCert"` |  |
+| server.readinessProbe.httpGet.port | string | `"http"` |  |
+| server.readinessProbe.initialDelaySeconds | int | `10` |  |
 | server.replicaCount | int | `1` |  |
 | server.secret | string | `"fulcio-server-secret"` |  |
 | server.securityContext.runAsNonRoot | bool | `true` |  |

diff --git a/charts/fulcio/templates/fulcio-deployment.yaml b/charts/fulcio/templates/fulcio-deployment.yaml
@@ -67,6 +67,14 @@ spec:
                   name: {{ .Values.server.secret }}
                   key: password
           {{- end }}
+          {{- if .Values.server.livenessProbe }}
+          livenessProbe:
+{{ toYaml .Values.server.livenessProbe | indent 12 }}
+          {{- end }}
+          {{- if .Values.server.readinessProbe }}
+          readinessProbe:
+{{ toYaml .Values.server.readinessProbe | indent 12 }}
+          {{- end }}
           volumeMounts:
             - name: fulcio-config
               mountPath: /etc/fulcio-config

diff --git a/charts/fulcio/values.schema.json b/charts/fulcio/values.schema.json
@@ -445,6 +445,14 @@
                         }
                     ]
                 },
+                "livenessProbe": {
+                    "description": "Liveness probe configuration",
+                    "$ref": "https://kubernetesjsonschema.dev/v1.18.1/_definitions.json#/definitions/io.k8s.api.core.v1.Probe"
+                },
+                "readinessProbe": {
+                    "description": "Readiness probe configuration",
+                    "$ref": "https://kubernetesjsonschema.dev/v1.18.1/_definitions.json#/definitions/io.k8s.api.core.v1.Probe"
+                },
                 "ingress": {
                     "type": "object",
                     "default": {},

diff --git a/charts/fulcio/values.yaml b/charts/fulcio/values.yaml
@@ -51,6 +51,16 @@ server:
         port: 2112
         protocol: TCP
         targetPort: 2112
+  livenessProbe:
+    initialDelaySeconds: 10
+    httpGet:
+      path: /api/v1/rootCert
+      port: http
+  readinessProbe:
+    initialDelaySeconds: 10
+    httpGet:
+      path: /api/v1/rootCert
+      port: http
   ingress:
     http:
       enabled: true