Commit e8e53f28 authored by Alan (Maciej) Paruszewski's avatar Alan (Maciej) Paruszewski Committed by Jarka Košanová

Switch from startupProbe to livenessProbe in Modsecurity

parent b46bfa0c
...@@ -30,7 +30,6 @@ module Clusters ...@@ -30,7 +30,6 @@ module Clusters
enum modsecurity_mode: { logging: 0, blocking: 1 } enum modsecurity_mode: { logging: 0, blocking: 1 }
FETCH_IP_ADDRESS_DELAY = 30.seconds FETCH_IP_ADDRESS_DELAY = 30.seconds
MODSEC_SIDECAR_INITIAL_DELAY_SECONDS = 10
state_machine :status do state_machine :status do
after_transition any => [:installed] do |application| after_transition any => [:installed] do |application|
...@@ -108,11 +107,13 @@ module Clusters ...@@ -108,11 +107,13 @@ module Clusters
"readOnly" => true "readOnly" => true
} }
], ],
"startupProbe" => { "livenessProbe" => {
"exec" => { "exec" => {
"command" => ["ls", "/var/log/modsec"] "command" => [
}, "ls",
"initialDelaySeconds" => MODSEC_SIDECAR_INITIAL_DELAY_SECONDS "/var/log/modsec/audit.log"
]
}
} }
} }
], ],
......
...@@ -219,6 +219,12 @@ describe Clusters::Applications::Ingress do ...@@ -219,6 +219,12 @@ describe Clusters::Applications::Ingress do
expect(subject.values).to include('extraContainers') expect(subject.values).to include('extraContainers')
end end
it 'includes livenessProbe for modsecurity sidecar container' do
probe_config = YAML.safe_load(subject.values).dig('controller', 'extraContainers', 0, 'livenessProbe')
expect(probe_config).to eq('exec' => { 'command' => ['ls', '/var/log/modsec/audit.log'] })
end
end end
context 'when modsecurity_enabled is disabled' do context 'when modsecurity_enabled is disabled' do
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment