promenade/charts
Phil Sphicas 354deab382 kube-proxy: use HTTP probes instead of exec
The existing liveness and readiness probes for kube-proxy are in need of
adjustment. The current implementation is exec-based, which can be a
resource concern, and is tied heavily to iptables, so is incompatible
with ipvs.

This change removes the exec-based liveness and readiness probes from
the kube-proxy daemonset, and replaces them with HTTP probes of the
healthz endpoint, following the direction that kubernetes seems to be
taking.[0][1]

The values.yaml interface to enable and disable the probes and set various
parameters is also modified to use the helm-toolkit standard snippet.[2]
Notably, the settings previously configurable under livenessProbe.config
are now under pod.probes.proxy.proxy.liveness.params.

0: https://github.com/kubernetes/kubernetes/issues/81630
1: https://github.com/kubernetes/kubernetes/pull/75323
2: https://opendev.org/openstack/openstack-helm-infra/src/branch/master/helm-toolkit/templates/snippets/_kubernetes_probes.tpl

Change-Id: I99ccbc2270a1f8a204417aa410868d04788dc60f
2020-05-24 07:38:55 +00:00
..
apiserver Add Docker default AppArmor profile to apiserver 2020-02-05 15:17:16 +00:00
apiserver-webhook apiserver-webhook: Add Apparmor runtime default to apiserver-webhook 2020-04-20 21:53:53 +00:00
controller_manager Merge "Promenade: Add Docker default AppArmor profile to controller_manager anchor" 2020-02-05 00:56:55 +00:00
coredns Promenade: Add apparmor profile to promenade charts 2020-05-18 16:18:28 +00:00
etcd Promenade: Add apparmor profile to promenade charts 2020-05-18 16:18:28 +00:00
haproxy Promenade: Add apparmor profile to promenade charts 2020-05-18 16:18:28 +00:00
promenade Promenade: Add apparmor profile to promenade charts 2020-05-18 16:18:28 +00:00
proxy kube-proxy: use HTTP probes instead of exec 2020-05-24 07:38:55 +00:00
scheduler Add apparmor profile to scheduler chart 2020-02-06 16:19:26 -06:00
.gitignore Add initial Makefile 2017-10-31 12:46:23 -05:00