Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

readinessProbe and livenessProbe fail when AUTH is enforced #417

Closed
szelenka opened this issue Jun 24, 2022 · 3 comments
Closed

readinessProbe and livenessProbe fail when AUTH is enforced #417

szelenka opened this issue Jun 24, 2022 · 3 comments
Labels

Comments

@szelenka
Copy link

Expected behaviour

Enable AUTH for Redis and Sentinel via :

spec:
  auth:
    secretPath: k8s-secret-name

Actual behaviour

Issue 1

AUTH is configured on rfr pods, but the livenessProbe fails because it's not attempting to authenticate:

    livenessProbe:
      exec:
        command:
        - sh
        - -c
        - redis-cli -h $(hostname) ping

The readinessProbe doesn't have this issue, as it execute a script from a ConfigMap and the use of -a $REDIS_PASSWORD} in #235 . It'd be nice to have a way to modify these probes, similar to how you can modify the shutdown script.

Issue 2

AUTH is not configured on rfs pods, and has similar challenges with readinessProbe and livenessProbe not attempting to authenticate:

    livenessProbe:
      exec:
        command:
        - sh
        - -c
        - redis-cli -h $(hostname) -p 26379 ping
    readinessProbe:
      exec:
        command:
        - sh
        - -c
        - redis-cli -h $(hostname) -p 26379 ping

It'd be nice to have a way to modify these probes, similar to how you can modify the shutdown script.

Steps to reproduce the behaviour

  1. Redis docker image which enforces protected-mode yes
  2. Create a k8s Secret with a password field to use as the password for AUTH
  3. Enable auth in the RedisFailover CRD

Environment

  • Redis Operator version = 1.1.1
  • Kubernetes version = 1.21
  • Kubernetes configuration used (eg: Is RBAC active?)

Logs

The Operator is running fine, it's just that it never configures AUTH on the probes for Redis and Sentinel, so k8s will continually think the Pods are not available.

@github-actions
Copy link

github-actions bot commented Aug 9, 2022

This issue is stale because it has been open for 45 days with no activity.

@github-actions github-actions bot added the stale label Aug 9, 2022
@github-actions
Copy link

This issue was closed because it has been inactive for 14 days since being marked as stale.

@samof76
Copy link
Contributor

samof76 commented Aug 30, 2022

@szelenka check if #430 fixes the issue now?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants