Grace peroid for scan node updates is configurable #3

Implementation
GDATASoftwareAG · Feb 26, 2024 · e141c54 · e141c54
1 parent 0e572fe
commit e141c54
Show file tree

Hide file tree

Showing 5 changed files with 17 additions and 4 deletions.
diff --git a/README.md b/README.md
@@ -117,7 +117,8 @@ export TOKEN_URL=http://vaas/auth/protocol/openid-connect/token
 | `mini-identity-provider.nodeSelector` | mini-identity-provider Node labels for pod assignment | `{}` |
 | `tolerations` | Tolerations for pods | `[]` |
 | `affinity` | Affinity settings for pods | `{}` |
-
+| `gateway.terminationGracePeriodSeconds` | Max time in seconds for scans to complete | `30` |
+| `gdscan.terminationGracePeriodSeconds` | Max time in seconds for scans to complete. Set to same value as ```gateway.terminationGracePeriodSeconds``` | `30` |
 
 ### Production environment
 

diff --git a/charts/vaas/Chart.yaml b/charts/vaas/Chart.yaml
@@ -1,6 +1,6 @@
 apiVersion: v2
 name: vaas
-version: 1.0.2
+version: 1.1.0
 description: Deployment of a Verdict-as-a-Service on-premise instance
 maintainers:
   - name: G DATA CyberDefense AG

diff --git a/charts/vaas/templates/gateway/_helpers.tpl b/charts/vaas/templates/gateway/_helpers.tpl
@@ -84,4 +84,13 @@ Create environment variables to configure gateway container.
 - name: VerdictAsAService__Credentials__ClientSecret
   {{ toYaml .Values.gateway.options.credentials.clientsecret }}
 {{- end }}
-{{- end }}
+{{- end }}
+
+{{- define "common.secondsToHHMMSS" -}}
+{{- $totalSeconds := . -}}
+{{- $hours := div $totalSeconds 3600 | printf "%02d" -}}
+{{- $totalSeconds = mod $totalSeconds 3600 -}}
+{{- $minutes := div $totalSeconds 60 | printf "%02d" -}}
+{{- $seconds := mod $totalSeconds 60 | printf "%02d" -}}
+{{- printf "%s:%s:%s" $hours $minutes $seconds -}}
+{{- end -}}
diff --git a/charts/vaas/templates/gateway/statefulset.yaml b/charts/vaas/templates/gateway/statefulset.yaml
@@ -36,6 +36,8 @@ spec:
           - mountPath: /tmp
             name: gateway-tmp
           env: 
+            - name: HostOptions__ShutdownTimeout
+              value: {{ include "common.secondsToHHMMSS" .Values.gateway.terminationGracePeriodSeconds | quote }}
             {{- include "gateway.env" . | nindent 12 }}
           ports:
             - name: http

diff --git a/charts/vaas/values.yaml b/charts/vaas/values.yaml
@@ -123,6 +123,8 @@ gateway:
       clientsecret:
         value: ""
 
+  terminationGracePeriodSeconds: 30
+
   podAnnotations: {}
   nodeSelector: {}
   tolerations: []
@@ -137,7 +139,6 @@ gateway:
     enabled: false
   gdscanUrl: "http://gdscan:8080/scan/body"
 
-
 gdscan:
   replicaCount: 1
   deploymentStrategy: "Recreate"