Add certificate health checker

chart/stash/README.md

@@ -70,6 +70,7 @@ The following table lists the configurable parameters of the Stash chart and the
 | `apiserver.disableStatusSubresource` | If true, disables status sub resource for crds. Otherwise enables based on Kubernetes version | `false`            |
 | `apiserver.bypassValidatingWebhookXray` | If true, bypasses validating webhook xray checks           | `false`               |
 | `apiserver.useKubeapiserverFqdnForAks`  | If true, uses kube-apiserver FQDN for AKS cluster to workaround https://github.com/Azure/AKS/issues/522 | `true`             |
+| `apiserver.healthcheck.enabled`      | Enable readiness and liveliness probes                                                                                                                                     | `true`                                                    |
 | `enableAnalytics`                    | Send usage events to Google Analytics                                                                                                                                      | `true`                                                    |
 | `monitoring.agent`                   | Specify which monitoring agent to use for monitoring Stash. It accepts either `prometheus.io/builtin` or `prometheus.io/coreos-operator`.                                  | `none`                                                    |
 | `monitoring.backup`                  | Specify whether to monitor Stash backup and recovery.                                                                                                                      | `false`                                                   |

chart/stash/templates/deployment.yaml

@@ -69,11 +69,20 @@ spec:
           valueFrom:
             fieldRef:
               fieldPath: metadata.namespace
+{{- if .Values.apiserver.healthcheck.enabled }}
         readinessProbe:
           httpGet:
             path: /healthz
             port: 8443
             scheme: HTTPS
+          initialDelaySeconds: 5
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: 8443
+            scheme: HTTPS
+          initialDelaySeconds: 5
+{{- end }}
         resources:
           requests:
             cpu: "100m"

chart/stash/values.yaml

@@ -87,6 +87,9 @@ apiserver:
   bypassValidatingWebhookXray: false
   # If true, uses kube-apiserver FQDN for AKS cluster to workaround https://github.com/Azure/AKS/issues/522 (default true)
   useKubeapiserverFqdnForAks: true
+  # healthcheck configures the readiness and liveliness probes for the operator pod.
+  healthcheck:
+    enabled: true
 
 # Send usage events to Google Analytics
 enableAnalytics: true

glide.yaml

@@ -28,6 +28,8 @@ import:
   version: v1.1.1
 - package: github.com/evanphx/json-patch
   version: v3.0.0
+- package: github.com/go-ini/ini
+  version: v1.40.0
 - package: github.com/go-openapi/spec
 - package: github.com/golang/glog
 - package: github.com/golang/protobuf
@@ -45,6 +47,8 @@ import:
   version: 1.1.5
 - package: github.com/mailru/easyjson
   version: 2f5df55504ebc322e4d52d34df6a1f5b503bf26d
+- package: github.com/mitchellh/mapstructure
+  version: v1.1.2
 - package: github.com/ncw/swift
   version: master
 - package: github.com/onsi/ginkgo
@@ -74,7 +78,7 @@ import:
 - package: google.golang.org/api/storage/v1
   version: 3639d6d93f377f39a1de765fa4ef37b3c7ca8bd9
 - package: gopkg.in/ini.v1
-  version: v1.37.0
+  version: v1.40.0
 - package: gopkg.in/robfig/cron.v2
   repo: https://github.com/appscode/cron.git
   vcs: git

hack/deploy/operator.yaml

@@ -61,6 +61,13 @@ spec:
             path: /healthz
             port: 8443
             scheme: HTTPS
+          initialDelaySeconds: 5
+        livenessProbe:
+          httpGet:
+            path: /healthz
+            port: 8443
+            scheme: HTTPS
+          initialDelaySeconds: 5
       - name: pushgateway
         args:
         - --web.listen-address=:56789