Merge pull request #1338 from andyzhangx/http-endpoint-1.23

[release-1.23] feat: use new restricted liveness probe endpoint

Author: andyzhangx

charts/latest/blob-csi-driver-v1.23.4.tgz

@@ -91,7 +91,7 @@ spec:
           args:
             - --csi-address=/csi/csi.sock
             - --probe-timeout=3s
-            - --health-port={{ .Values.controller.livenessProbe.healthPort }}
+            - --http-endpoint=localhost:{{ .Values.controller.livenessProbe.healthPort }}
           imagePullPolicy: {{ .Values.image.livenessProbe.pullPolicy }}
           volumeMounts:
             - name: socket-dir
@@ -114,17 +114,15 @@ spec:
             - "--cloud-config-secret-namespace={{ .Values.controller.cloudConfigSecretNamespace }}"
             - "--allow-empty-cloud-config={{ .Values.controller.allowEmptyCloudConfig }}"
           ports:
-            - containerPort: {{ .Values.controller.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
             - containerPort: {{ .Values.controller.metricsPort }}
               name: metrics
               protocol: TCP
           livenessProbe:
             failureThreshold: 5
             httpGet:
+              host: localhost
               path: /healthz
-              port: healthz
+              port: {{ .Values.controller.livenessProbe.healthPort }}
             initialDelaySeconds: 30
             timeoutSeconds: 10
             periodSeconds: 30

charts/latest/blob-csi-driver/templates/csi-blob-controller.yaml

@@ -173,15 +173,12 @@ spec:
             - "--mount-permissions={{ .Values.node.mountPermissions }}"
             - "--allow-inline-volume-key-access-with-idenitity={{ .Values.node.allowInlineVolumeKeyAccessWithIdentity }}"
             - "--enable-aznfs-mount={{ .Values.node.enableAznfsMount }}"
-          ports:
-            - containerPort: {{ .Values.node.livenessProbe.healthPort }}
-              name: healthz
-              protocol: TCP
           livenessProbe:
             failureThreshold: 5
             httpGet:
+              host: localhost
               path: /healthz
-              port: healthz
+              port: {{ .Values.node.livenessProbe.healthPort }}
             initialDelaySeconds: 30
             timeoutSeconds: 10
             periodSeconds: 30

charts/latest/blob-csi-driver/templates/csi-blob-node.yaml

@@ -62,7 +62,7 @@ spec:
           args:
             - --csi-address=/csi/csi.sock
             - --probe-timeout=3s
-            - --health-port=29632
+            - --http-endpoint=localhost:29632
           volumeMounts:
             - name: socket-dir
               mountPath: /csi
@@ -81,17 +81,15 @@ spec:
             - "--metrics-address=0.0.0.0:29634"
             - "--user-agent-suffix=OSS-kubectl"
           ports:
-            - containerPort: 29632
-              name: healthz
-              protocol: TCP
             - containerPort: 29634
               name: metrics
               protocol: TCP
           livenessProbe:
             failureThreshold: 5
             httpGet:
+              host: localhost
               path: /healthz
-              port: healthz
+              port: 29632
             initialDelaySeconds: 30
             timeoutSeconds: 10
             periodSeconds: 30

deploy/csi-blob-controller.yaml

@@ -129,15 +129,12 @@ spec:
             - "--blobfuse-proxy-endpoint=$(BLOBFUSE_PROXY_ENDPOINT)"
             - "--nodeid=$(KUBE_NODE_NAME)"
             - "--user-agent-suffix=OSS-kubectl"
-          ports:
-            - containerPort: 29633
-              name: healthz
-              protocol: TCP
           livenessProbe:
             failureThreshold: 5
             httpGet:
+              host: localhost
               path: /healthz
-              port: healthz
+              port: 29633
             initialDelaySeconds: 30
             timeoutSeconds: 10
             periodSeconds: 30