feat(#594): added probes to most of the pods

kitsudaiki · kitsudaiki · commit 31005c48c6bf · 2026-01-04T21:35:16.000+01:00
Added probes to the kubernetes-pods with a REST-API-server.

Signed-off-by: Tobias Anker &lt;tobias.anker@kitsunemimi.moe&gt;
diff --git a/.github/workflows/build_test.yml b/.github/workflows/build_test.yml
@@ -985,7 +985,7 @@ jobs:
           sudo apt-get install -y wireguard-tools
           pip3 install jinja2
           cd ${GITHUB_REPOSITORY#*/}/deploy/k8s
-          python3 wg_gen.py
+          python3 wg_gen.py --namespace default
       -
         name: Label nodes
         run: |
diff --git a/deploy/k8s/ainari/templates/hanami/hanami-deployment.yaml b/deploy/k8s/ainari/templates/hanami/hanami-deployment.yaml
@@ -70,6 +70,27 @@ spec:
           mountPath: /etc/ainari/hanami.toml
           subPath: hanami.toml
           readOnly: true
+        readinessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:11418/v1alpha/is_ready
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          timeoutSeconds: 2
+          successThreshold: 1
+          failureThreshold: 3
+        livenessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:11418/v1alpha/is_ready
+          initialDelaySeconds: 15
+          periodSeconds: 20
+          timeoutSeconds: 2
+          failureThreshold: 3
 
       - name: tls-termination
         image: nginx:latest
diff --git a/deploy/k8s/ainari/templates/miko/miko-deployment.yaml b/deploy/k8s/ainari/templates/miko/miko-deployment.yaml
@@ -57,6 +57,27 @@ spec:
           mountPath: /etc/ainari/token_key
           subPath: token-key
           readOnly: true
+        readinessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:10417/v1alpha/is_ready
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          timeoutSeconds: 2
+          successThreshold: 1
+          failureThreshold: 3
+        livenessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:10417/v1alpha/is_ready
+          initialDelaySeconds: 15
+          periodSeconds: 20
+          timeoutSeconds: 2
+          failureThreshold: 3
 
       - name: tls-termination
         image: nginx:latest
diff --git a/deploy/k8s/ainari/templates/omamori/omamori-deployment.yaml b/deploy/k8s/ainari/templates/omamori/omamori-deployment.yaml
@@ -65,6 +65,27 @@ spec:
           mountPath: /etc/ainari/omamori.toml
           subPath: omamori.toml
           readOnly: true
+        readinessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:10421/v1alpha/is_ready
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          timeoutSeconds: 2
+          successThreshold: 1
+          failureThreshold: 3
+        livenessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:10421/v1alpha/is_ready
+          initialDelaySeconds: 15
+          periodSeconds: 20
+          timeoutSeconds: 2
+          failureThreshold: 3
 
       - name: tls-termination
         image: nginx:latest
diff --git a/deploy/k8s/ainari/templates/ryokan/ryokan-deployment.yaml b/deploy/k8s/ainari/templates/ryokan/ryokan-deployment.yaml
@@ -80,7 +80,27 @@ spec:
             add:
               - NET_ADMIN
               - SYS_MODULE
-
+        readinessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:10416/v1alpha/is_ready
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          timeoutSeconds: 2
+          successThreshold: 1
+          failureThreshold: 3
+        livenessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:10416/v1alpha/is_ready
+          initialDelaySeconds: 15
+          periodSeconds: 20
+          timeoutSeconds: 2
+          failureThreshold: 3
                 
 
       - name: tls-termination
diff --git a/deploy/k8s/ainari/templates/sakura/sakura-statefulset.yaml b/deploy/k8s/ainari/templates/sakura/sakura-statefulset.yaml
@@ -96,6 +96,27 @@ spec:
             add:
               - NET_ADMIN
               - SYS_MODULE
+        readinessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:11420/v1alpha/is_ready
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          timeoutSeconds: 2
+          successThreshold: 1
+          failureThreshold: 3
+        livenessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:11420/v1alpha/is_ready
+          initialDelaySeconds: 15
+          periodSeconds: 20
+          timeoutSeconds: 2
+          failureThreshold: 3
 
       - name: tls-termination
         image: nginx:latest
diff --git a/deploy/k8s/ainari/templates/torii/torii-deployment.yaml b/deploy/k8s/ainari/templates/torii/torii-deployment.yaml
@@ -65,7 +65,28 @@ spec:
           mountPath: /etc/ainari/torii.toml
           subPath: torii.toml
           readOnly: true
-
+        readinessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:10419/v1alpha/is_ready
+          initialDelaySeconds: 5
+          periodSeconds: 10
+          timeoutSeconds: 2
+          successThreshold: 1
+          failureThreshold: 3
+        livenessProbe:
+          exec:
+            command:
+            - curl
+            - --fail
+            - localhost:10419/v1alpha/is_ready
+          initialDelaySeconds: 15
+          periodSeconds: 20
+          timeoutSeconds: 2
+          failureThreshold: 3
+  
       - name: tls-termination
         image: nginx:latest
         volumeMounts:
diff --git a/dockerfiles/Dockerfile_hanami b/dockerfiles/Dockerfile_hanami
@@ -39,7 +39,7 @@ FROM debian:12.12-slim@sha256:78d2f66e0fec9e5a39fb2c72ea5e052b548df75602b5215ed0
 ARG DEBIAN_FRONTEND=noninteractive
 
 RUN apt-get update && \
-    apt-get install -y openssl libsqlite3-0 && \
+    apt-get install -y curl openssl libsqlite3-0 && \
     apt-get clean autoclean &&\
     apt-get autoremove --yes
 
diff --git a/dockerfiles/Dockerfile_miko b/dockerfiles/Dockerfile_miko
@@ -39,7 +39,7 @@ FROM debian:12.12-slim@sha256:78d2f66e0fec9e5a39fb2c72ea5e052b548df75602b5215ed0
 ARG DEBIAN_FRONTEND=noninteractive
 
 RUN apt-get update && \
-    apt-get install -y openssl libsqlite3-0 && \
+    apt-get install -y curl openssl libsqlite3-0 && \
     apt-get clean autoclean &&\
     apt-get autoremove --yes
 
diff --git a/dockerfiles/Dockerfile_omamori b/dockerfiles/Dockerfile_omamori
@@ -39,7 +39,7 @@ FROM debian:12.12-slim@sha256:78d2f66e0fec9e5a39fb2c72ea5e052b548df75602b5215ed0
 ARG DEBIAN_FRONTEND=noninteractive
 
 RUN apt-get update && \
-    apt-get install -y openssl libsqlite3-0 && \
+    apt-get install -y curl openssl libsqlite3-0 && \
     apt-get clean autoclean &&\
     apt-get autoremove --yes
 
diff --git a/dockerfiles/Dockerfile_ryokan b/dockerfiles/Dockerfile_ryokan
@@ -40,6 +40,7 @@ ARG DEBIAN_FRONTEND=noninteractive
 
 RUN apt-get update && \
     apt-get install -y --no-install-recommends openssl \
+                       curl \
                        libsqlite3-0 \
                        wireguard-tools \
                        iptables-persistent \
diff --git a/dockerfiles/Dockerfile_sakura b/dockerfiles/Dockerfile_sakura
@@ -40,6 +40,7 @@ ARG DEBIAN_FRONTEND=noninteractive
 
 RUN apt-get update && \
     apt-get install -y --no-install-recommends openssl \
+                       curl \
                        libsqlite3-0 \
                        wireguard-tools \
                        iptables-persistent \
diff --git a/dockerfiles/Dockerfile_torii b/dockerfiles/Dockerfile_torii
@@ -39,7 +39,7 @@ FROM debian:12.12-slim@sha256:78d2f66e0fec9e5a39fb2c72ea5e052b548df75602b5215ed0
 ARG DEBIAN_FRONTEND=noninteractive
 
 RUN apt-get update && \
-    apt-get install -y openssl libsqlite3-0 && \
+    apt-get install -y curl openssl libsqlite3-0 && \
     apt-get clean autoclean &&\
     apt-get autoremove --yes
 

Original file line number	Diff line number	Diff line change
`@@ -985,7 +985,7 @@ jobs:`
`985`	`985`	`sudo apt-get install -y wireguard-tools`
`986`	`986`	`pip3 install jinja2`
`987`	`987`	`cd ${GITHUB_REPOSITORY#*/}/deploy/k8s`
`988`		`- python3 wg_gen.py`
	`988`	`+ python3 wg_gen.py --namespace default`
`989`	`989`	`-`
`990`	`990`	`name: Label nodes`
`991`	`991`	`run: \|`