chore(amazon-pod-identity): add probes to the deployment

to make checkov happy Release-As: 1.4.0
meysam81 · Nov 7, 2024 · 4df330c · 4df330c
1 parent c3abb93
commit 4df330c
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 2 deletions.
diff --git a/amazon-eks-pod-identity-webhook/base/deployment.yml b/amazon-eks-pod-identity-webhook/base/deployment.yml
@@ -23,10 +23,32 @@ spec:
                 fieldRef:
                   fieldPath: metadata.namespace
           image: amazon/amazon-eks-pod-identity-webhook
+          livenessProbe:
+            failureThreshold: 3
+            httpGet:
+              path: /healthz
+              port: https
+              scheme: HTTPS
+            initialDelaySeconds: 1
+            periodSeconds: 10
+            successThreshold: 1
+            timeoutSeconds: 1
           name: pod-identity-webhook
           ports:
             - containerPort: 443
               name: https
+            - containerPort: 9999
+              name: metrics
+          readinessProbe:
+            failureThreshold: 3
+            httpGet:
+              path: /healthz
+              port: https
+              scheme: HTTPS
+            initialDelaySeconds: 1
+            periodSeconds: 10
+            successThreshold: 1
+            timeoutSeconds: 1
           resources: {}
           securityContext:
             allowPrivilegeEscalation: false

diff --git a/amazon-eks-pod-identity-webhook/base/service.yml b/amazon-eks-pod-identity-webhook/base/service.yml
@@ -3,12 +3,14 @@ apiVersion: v1
 kind: Service
 metadata:
   annotations:
-    prometheus.io/port: "443"
-    prometheus.io/scheme: https
+    prometheus.io/port: "9999"
     prometheus.io/scrape: "true"
   name: pod-identity-webhook
 spec:
   ports:
     - name: https
       port: 443
       targetPort: https
+    - name: metrics
+      port: 9999
+      targetPort: metrics