How to verify certificates for Liveness probe configured to https?

Question

I'm using readinessProbe on my container and configured it work on HTTPS with scheme attribute. My server expects the get the certificates. how can I configure the readiness probe to support HTTPS with certificates exchange? I don't want it to skip the certificates

      readinessProbe:
        httpGet:
          path: /eh/heartbeat
          port: 2347
          scheme: HTTPS
        initialDelaySeconds: 210
        periodSeconds: 10
        timeoutSeconds: 5

score 2 · Answer 1 · answered Jun 30 '20 at 12:46

2

You can use Readiness command instead of HTTP request. This will give you complete control over the check, including the certificate exchange.

So, instead of:

readinessProbe:
    httpGet:
      path: /eh/heartbeat
      port: 2347
      scheme: HTTPS

, you would have something like:

readinessProbe:
  exec:
    command:
    - python
    - your_script.py

Be sure the script returns 0 if all is well, and non-zero value on failure. (python your_script.py is, of course, just one example. You would know what is the best approach for you)

answered Jun 30 '20 at 12:46

Dragan Bocevski

41
2

where do I keep the certificates in such case? – Mary1 Jun 30 '20 at 12:52
Inside your docker image. The same for the script. – Dragan Bocevski Jun 30 '20 at 13:13
Actually, you can also pull them from an online location somewhere. When you have the power of the script it's up to you how you will solve any challenge. Point is, almost anything is solvable. – Dragan Bocevski Jun 30 '20 at 13:19
@DraganBocevski Is there any way to implement it at configuration file level instead of writing different script? – Aman Sep 22 '21 at 11:01

How to verify certificates for Liveness probe configured to https?

1 Answers1