[stable/kube2iam] allow to customize liveness probe configuration (#22717)

* allow to customise livenessProbe parameters

Signed-off-by: Luigi Tagliamonte <luigi.tagliamonte@doordash.com>

* bump chart version

Signed-off-by: Luigi Tagliamonte <luigi.tagliamonte@doordash.com>

* document variables in the README

Signed-off-by: Luigi Tagliamonte <luigi.tagliamonte@doordash.com>

stable/kube2iam/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v1
 name: kube2iam
-version: 2.5.0
+version: 2.5.1
 appVersion: 0.10.9
 description: Provide IAM credentials to pods based on annotations.
 keywords:

stable/kube2iam/README.md

@@ -62,6 +62,12 @@ Parameter | Description | Default
 `prometheus.serviceMonitor.interval` | Interval at which the metrics endpoint is scraped | `10s`
 `prometheus.serviceMonitor.namespace` | An alternative namespace in which to install the ServiceMonitor | `""`
 `prometheus.serviceMonitor.labels` | Labels to add to the ServiceMonitor | `{}`
+`probe.enabled`|Enable/disable pod liveness probe|`true`
+`probe.initialDelaySeconds`|Liveness probe initial delay|`30`
+`probe.periodSeconds`|Liveness probe check inteval|`5`
+`probe.successThreshold`|Liveness probe success threshold|`1`
+`probe.failureThreshold`|Liveness probe fail threshold|`3`
+`probe.timeoutSeconds`|Livenees probe timeout|`1`
 `rbac.create` | If true, create & use RBAC resources | `false`
 `rbac.serviceAccountName` | existing ServiceAccount to use (ignored if rbac.create=true) | `default`
 `resources` | pod resource requests & limits | `{}`

stable/kube2iam/templates/daemonset.yaml

@@ -91,17 +91,17 @@ spec:
               containerPort: {{ .Values.prometheus.metricsPort }}
             {{- end}}
             {{- end}}
-        {{- if .Values.probe }}
+        {{- if .Values.probe.enabled }}
           livenessProbe:
             httpGet:
               path: /healthz
               port: {{ .Values.host.port }}
               scheme: HTTP
-            initialDelaySeconds: 30
-            periodSeconds: 5
-            successThreshold: 1
-            failureThreshold: 3
-            timeoutSeconds: 1
+            initialDelaySeconds: {{ .Values.probe.initialDelaySeconds }}
+            periodSeconds: {{ .Values.probe.periodSeconds }}
+            successThreshold: {{ .Values.probe.successThreshold }}
+            failureThreshold: {{ .Values.probe.failureThreshold }}
+            timeoutSeconds: {{ .Values.probe.timeoutSeconds }}
         {{- end }}
           resources:
 {{ toYaml .Values.resources | indent 12 }}

stable/kube2iam/values.yaml

@@ -72,7 +72,13 @@ priorityClassName: ""
 
 podLabels: {}
 
-probe: true
+probe:
+  enabled: true
+  initialDelaySeconds: 30
+  periodSeconds: 5
+  successThreshold: 1
+  failureThreshold: 3
+  timeoutSeconds: 1
 
 rbac:
   ## If true, create & use RBAC resources