Skip to content

fix(controller): tolerate delayed webhook certificate startup - #115

Draft
jmclong (jmclong) wants to merge 1 commit into
mainfrom
dev/jlong/fix-webhook-startup-probes
Draft

jmclong (jmclong) wants to merge 1 commit into
mainfrom
dev/jlong/fix-webhook-startup-probes

Conversation

@jmclong

Copy link
Copy Markdown
Contributor

Keep process liveness independent of certificate readiness and allow a bounded startup window in the Helm chart.

Add a controller E2E regression that withholds certificate files for 90 seconds and verifies healthy liveness, blocked readiness, and zero restarts. The regression passes on Minikube with the fix and fails against the unchanged manager.

Summary

Validation

Related issue

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@jmclong
jmclong (jmclong) force-pushed the dev/jlong/fix-webhook-startup-probes branch from b05cb9b to 4f29754 Compare October 16, 2026 13:54
Keep process liveness independent of certificate readiness and allow a bounded startup window in the Helm chart. Preserve certificate and webhook gating for readiness.

Add simple unit coverage for disabled webhooks, pending certificates, webhook startup, and readiness. Do not add E2E coverage or readiness diagnostics.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 0c077ebb-9cd5-4c85-a49d-0178a7f67a57
@jmclong
jmclong (jmclong) force-pushed the dev/jlong/fix-webhook-startup-probes branch from 4f29754 to 5cd5656 Compare October 16, 2026 13:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants