From 4e0c5bfaf2b1d83e00909a0b7a851b58beae1ed7 Mon Sep 17 00:00:00 2001 From: Michel Thebeau Date: Wed, 21 Aug 2024 13:22:30 +0000 Subject: [PATCH] adjust livenessProbe intervals A proposed set of solutions to high platform CPU usage requests livenessProbe intervals to be greater than 10 and not a multiple of 5. It is also requested that timeout values be more forgiving at greater than 5 seconds. livenessProbe is enabled by default for vault injector and vault manager. Vault-manager is not a high performance component, so use rather large intervals. Keep vault injector closer to the requested threshold. Test plan: PASS selected values are presented in pod spec during runtime Story: 2011073 Task: 50887 Change-Id: I72a335957ec88fcc7f2a0c417da6815b363934ba Signed-off-by: Michel Thebeau --- .../vault-manager/vault-manager-static-overrides.yaml | 4 ++++ .../fluxcd-manifests/vault/vault-static-overrides.yaml | 4 ++++ 2 files changed, 8 insertions(+) diff --git a/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault-manager/vault-manager-static-overrides.yaml b/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault-manager/vault-manager-static-overrides.yaml index a3b3bd1..233d9d0 100644 --- a/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault-manager/vault-manager-static-overrides.yaml +++ b/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault-manager/vault-manager-static-overrides.yaml @@ -18,3 +18,7 @@ manager: unsealWaitIntervals: 0 imagePullSecrets: - name: default-registry-key + livenessProbe: + initialDelaySeconds: 31 + periodSeconds: 23 + timeoutSeconds: 13 diff --git a/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault/vault-static-overrides.yaml b/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault/vault-static-overrides.yaml index 8268c4c..1267188 100644 --- a/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault/vault-static-overrides.yaml +++ b/stx-vault-helm/stx-vault-helm/fluxcd-manifests/vault/vault-static-overrides.yaml @@ -38,6 +38,10 @@ injector: - key: "node-role.kubernetes.io/control-plane" operator: "Exists" effect: "NoSchedule" + livenessProbe: + initialDelaySeconds: 11 + periodSeconds: 11 + timeoutSeconds: 7 server: affinity: | podAntiAffinity: