merge commit 410

Twingate · Nov 21, 2024 · fcc7f9a · fcc7f9a
2 parents 0a35d50 + 9a077f6
commit fcc7f9a
Show file tree

Hide file tree

Showing 24 changed files with 415 additions and 3 deletions.
diff --git a/index.yaml b/index.yaml
@@ -3,9 +3,9 @@ entries:
   connector:
   - apiVersion: v1
     appVersion: latest
-    created: "2024-09-05T16:01:46.866022786Z"
+    created: "2024-11-21T21:02:27.909235019Z"
     description: Twingate Connector helm chart
-    digest: 206968f3351cd119c80150ed59cf370c7f8241571fc3cbc1deea6ecaf3df8387
+    digest: c83c331380ff0ffe1916a5dbd2a2972cc57afba16bfcb9ffeb724f8fe2c1bcfd
     home: https://www.twingate.com
     icon: https://www.twingate.com/twingate.png
     name: connector
@@ -200,4 +200,4 @@ entries:
     urls:
     - https://twingate.github.io/helm-charts/packages/connector-0.1.9.tgz
     version: 0.1.9
-generated: "2024-09-05T16:01:46.864896325Z"
+generated: "2024-11-21T21:02:27.907582087Z"
diff --git a/packages/connector-0.1.27.tgz b/packages/connector-0.1.27.tgz
diff --git a/stable/connector/README.md b/stable/connector/README.md
@@ -88,3 +88,5 @@ The following table lists the configurable parameters of the Twingate chart and
 | `podDnsConfig`                          | Optional pod [DNS configurations](https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/#pods-dns-config) |                                                         |
 | `env`                                   | Additional environment variables for the deployment                                                                         | `{}` (The value is evaluated as a template)             |
 | `hostNetwork`                           | Enable/Disable host network for the pod                                                                                     | `false` (Disabled by default)                           |
+| `readinessProbe`                        | Pod's readiness probe                                                                                                       | default healthcheck - `connectorctl health`             |
+| `livenessProbe`                         | Pod's liveness probe                                                                                                        | default healthcheck - `connectorctl health`             |
diff --git a/stable/connector/templates/deployment.yaml b/stable/connector/templates/deployment.yaml
@@ -45,6 +45,14 @@ spec:
         - name: {{ .Chart.Name }}
           image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}"
           imagePullPolicy: {{ .Values.image.pullPolicy }}
+          {{- if .Values.readinessProbe }}
+          readinessProbe:
+{{ toYaml .Values.readinessProbe | indent 12 }}
+          {{- end }}
+          {{- if .Values.livenessProbe }}
+          livenessProbe:
+{{ toYaml .Values.livenessProbe | indent 12 }}
+          {{- end }}
           envFrom:
             - secretRef:
                 {{- if .Values.connector.existingSecret }}

diff --git a/stable/connector/values.yaml b/stable/connector/values.yaml
@@ -84,3 +84,20 @@ connector: {}
 #   refreshToken: "<refresh token>"
 #   existingSecret: "secret name"
 #   dnsServer: "some.dnsserver.com"
+
+readinessProbe:
+  exec:
+    command:
+    - /connectorctl
+    - health
+  initialDelaySeconds:
+  periodSeconds: 5
+
+
+livenessProbe:
+  exec:
+    command:
+    - /connectorctl
+    - health
+  initialDelaySeconds: 5
+  periodSeconds: 5
diff --git a/test/golden/affinity.golden.yaml b/test/golden/affinity.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/connector-url.golden.yaml b/test/golden/connector-url.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/default-values.golden.yaml b/test/golden/default-values.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/env-vars.golden.yaml b/test/golden/env-vars.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/extraPodDefinitions.golden.yaml b/test/golden/extraPodDefinitions.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/image-pull-secrets.golden.yaml b/test/golden/image-pull-secrets.golden.yaml
@@ -44,6 +44,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/logAnalytics.golden.yaml b/test/golden/logAnalytics.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/loglevel-debug.golden.yaml b/test/golden/loglevel-debug.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/loglevel-error.golden.yaml b/test/golden/loglevel-error.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/loglevel-info.golden.yaml b/test/golden/loglevel-info.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/loglevel-warning.golden.yaml b/test/golden/loglevel-warning.golden.yaml
@@ -42,6 +42,20 @@ spec:
         - name: connector
           image: "twingate/connector:1"
           imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: null
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
           envFrom:
             - secretRef:
                 name: test-connector

diff --git a/test/golden/override-readiness-liveness-probes-check.golden.yaml b/test/golden/override-readiness-liveness-probes-check.golden.yaml
@@ -0,0 +1,81 @@
+---
+# Source: connector/templates/secret.yaml
+apiVersion: v1
+kind: Secret
+metadata:
+  name: test-connector
+  labels:
+    app.kubernetes.io/name: connector
+    helm.sh/chart: connector-major.minor.patch-test
+    app.kubernetes.io/instance: test
+    app.kubernetes.io/version: "latest"
+    app.kubernetes.io/managed-by: Helm
+type: Opaque
+data:
+  TWINGATE_ACCESS_TOKEN: "QUNDRVNTX1RPS0VO"
+  TWINGATE_REFRESH_TOKEN: "UkVGUkVTSF9UT0tFTg=="
+---
+# Source: connector/templates/deployment.yaml
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: test-connector
+  labels:
+    app.kubernetes.io/name: connector
+    helm.sh/chart: connector-major.minor.patch-test
+    app.kubernetes.io/instance: test
+    app.kubernetes.io/version: "latest"
+    app.kubernetes.io/managed-by: Helm
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: connector
+      app.kubernetes.io/instance: test
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: connector
+        app.kubernetes.io/instance: test
+    spec:
+      containers:
+        - name: connector
+          image: "twingate/connector:1"
+          imagePullPolicy: Always
+          readinessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 20
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command:
+              - /connectorctl
+              - health
+            initialDelaySeconds: 5
+            periodSeconds: 5
+          envFrom:
+            - secretRef:
+                name: test-connector
+                optional: false
+          env:
+            - name: TWINGATE_LABEL_DEPLOYED_BY
+              value: helm
+            - name: TWINGATE_LABEL_HELM_CHART
+              value: connector-major.minor.patch-test
+            - name: TWINGATE_URL
+              value: "https://test-tenant.twingate.com"
+            - name: TWINGATE_LOG_LEVEL
+              value: "3"
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: ["ALL"]
+            runAsNonRoot: true
+            runAsUser: 65532
+          resources:
+            requests:
+              cpu: 50m
+              memory: 200Mi
diff --git a/test/golden/override-readiness-liveness-probes-check.yaml b/test/golden/override-readiness-liveness-probes-check.yaml
@@ -0,0 +1,14 @@
+image:
+  repository: twingate/connector
+  tag: 1
+  pullPolicy: Always
+
+connector:
+  network: "test-tenant"
+  accessToken: "ACCESS_TOKEN"
+  refreshToken: "REFRESH_TOKEN"
+
+
+readinessProbe:
+  initialDelaySeconds: 20
+