chore: add liveness probe and failurethreshold to probes (#329)

Signed-off-by: Chris Mooney <chris.mooney@omaticsoftware.com>
Co-authored-by: Chris Mooney <chris.mooney@omaticsoftware.com>

Author: chrism417

deploy/charts/vault-secrets-webhook/templates/webhook-deployment.yaml

@@ -88,11 +88,25 @@ spec:
           imagePullPolicy: {{ .Values.image.pullPolicy }}
           ports:
             - containerPort: {{ .Values.service.internalPort }}
+          livenessProbe:
+            httpGet:
+              scheme: HTTPS
+              path: /healthz
+              port: {{ .Values.service.internalPort }}
+            initialDelaySeconds: {{ .Values.livenessProbe.initialDelaySeconds }}
+            failureThreshold: {{ .Values.livenessProbe.failureThreshold }}
+            periodSeconds: {{ .Values.livenessProbe.periodSeconds }}
+            successThreshold: {{ .Values.livenessProbe.successThreshold }}
+            timeoutSeconds: {{ .Values.livenessProbe.timeoutSeconds }}
           readinessProbe:
             httpGet:
               scheme: HTTPS
               path: /healthz
               port: {{ .Values.service.internalPort }}
+            failureThreshold: {{ .Values.readinessProbe.failureThreshold }}
+            periodSeconds: {{ .Values.readinessProbe.periodSeconds }}
+            successThreshold: {{ .Values.readinessProbe.successThreshold }}
+            timeoutSeconds: {{ .Values.readinessProbe.timeoutSeconds }}
           volumeMounts:
             - mountPath: /var/serving-cert
               name: serving-cert

deploy/charts/vault-secrets-webhook/values.yaml

@@ -173,6 +173,19 @@ topologySpreadConstraints: {}
 # Check: https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/
 priorityClassName: ""
 
+# -- Liveness and readiness probes for the webhook container
+livenessProbe:
+  initialDelaySeconds: 30
+  failureThreshold: 3
+  periodSeconds: 10
+  successThreshold: 1
+  timeoutSeconds: 1
+readinessProbe:
+  failureThreshold: 3
+  periodSeconds: 10
+  successThreshold: 1
+  timeoutSeconds: 1
+
 rbac:
   psp:
     # -- Use pod security policy