Pinniped is the easy, secure way to log in to your Kubernetes clusters.
ecde8fa8af
- Call the auto-generated /healthz endpoint of our aggregated API server - Use http for liveness even though tcp seems like it might be more appropriate, because tcp probes cause TLS handshake errors to appear in our logs every few seconds - Use conservative timeouts and retries on the liveness probe to avoid having our container get restarted when it is temporarily slow due to running in an environment under resource pressure - Use less conservative timeouts and retries for the readiness probe to remove an unhealthy pod from the service less conservatively than restarting the container - Tuning the settings for retries and timeouts seem to be a mysterious art, so these are just a first draft |
||
---|---|---|
.github | ||
cmd | ||
deploy | ||
hack | ||
internal | ||
kubernetes/1.19 | ||
pkg | ||
test | ||
tools | ||
.gitignore | ||
.golangci.yaml | ||
.pre-commit-config.yaml | ||
Dockerfile | ||
go.mod | ||
go.sum | ||
LICENSE | ||
README.md |
placeholder-name
Copyright 2020 VMware, Inc.
Developing
Running Lint
./hack/module.sh lint
Running Tests
./hack/module.sh unittest
Pre-commit hooks
This project uses the pre-commit to agree on some conventions about whitespace/file encoding.
$ brew install pre-commit
[...]
$ pre-commit install
pre-commit installed at .git/hooks/pre-commit