Skip to content

update kubernetes example and lint workflow - #38

Merged
tstirrat15 merged 1 commit into
mainfrom
update-k8s-example
Jun 27, 2025
Merged

update kubernetes example and lint workflow#38
tstirrat15 merged 1 commit into
mainfrom
update-k8s-example

Conversation

@miparnisari

Copy link
Copy Markdown
Contributor

No description provided.

Comment thread kubernetes/example.yaml
Comment on lines -146 to -148
readinessProbe:
exec:
command: ["grpc_health_probe", "-v", "-addr=localhost:50051"]

@miparnisari miparnisari Jun 25, 2025

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Avoids

image

See https://github.com/grpc-ecosystem/grpc-health-probe?tab=readme-ov-file#grpc_health_probe1

⚠️ Kubernetes has now built-in gRPC health checking capability as generally available. As a result, you might no longer need to use this tool and can use the native Kubernetes feature instead.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The probes do not support any authentication parameters (like -tls).

That's the reason we've kept using the shipped health probe binary rather than using the native K8s one. I'm ambivalent on using it here; on one hand using the health probe binary is in line with how we run it ourselves, but on the other hand for the purposes of this example, using the built-in is probably fine.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've reverted this change. The problem is in the SpiceDB docker image - it's not being built for my architecture arm64

- uses: "actions/checkout@v3"
- uses: "actions/checkout@v4"
- uses: "authzed/actions/yaml-lint@main"
- uses: "instrumenta/kubeval-action@5915e4adba5adccac07cb156b82e54c3fed74921"

@miparnisari miparnisari Jun 25, 2025

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

https://github.com/instrumenta/kubeval?tab=readme-ov-file#kubeval

NOTE: This project is no longer maintained, a good replacement is kubeconform

@miparnisari miparnisari changed the title update kubernetes example update kubernetes example and lint workflow Jun 25, 2025
@miparnisari
miparnisari force-pushed the update-k8s-example branch 3 times, most recently from 9814c90 to 63c7037 Compare June 25, 2025 20:37
@miparnisari
miparnisari requested a review from tstirrat15 June 27, 2025 15:40

@tstirrat15 tstirrat15 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@tstirrat15
tstirrat15 merged commit cb9bf97 into main Jun 27, 2025
6 checks passed
@tstirrat15
tstirrat15 deleted the update-k8s-example branch June 27, 2025 18:02
@github-actions github-actions Bot locked and limited conversation to collaborators Jun 27, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants