edgelesssys / contrast

Deploy and manage confidential containers on Kubernetes
https://docs.edgeless.systems/contrast
GNU Affero General Public License v3.0
160 stars 6 forks source link

resourcegen: add startup probe to service mesh #573

Closed davidweisse closed 2 weeks ago

davidweisse commented 2 weeks ago

This adds a startup probe to the Service Mesh sidecar container. It probes on the port the Envoy proxy listens on for incoming traffic. Envoy only starts after the iptables rules have been updated, which is when the regular containers should start.