Skip to content

fix: Bug #58523 - Add suitable startup probe for LDAP secondary servers #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Nov 5, 2025
Merged

fix: Bug #58523 - Add suitable startup probe for LDAP secondary servers #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion helm/ldap-server/templates/statefulset-secondary.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -254,7 +254,7 @@ spec:
{{- end }}
livenessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.livenessProbe "context" .) | nindent 12 }}
readinessProbe: {{- include "common.tplvalues.render" (dict "value" .Values.readinessProbe "context" .) | nindent 12 }}
startupProbe: {{- include "common.tplvalues.render" (dict "value" .Values.startupProbe "context" .) | nindent 12 }}
startupProbe: {{- include "common.tplvalues.render" (dict "value" (coalesce .Values.startupProbeSecondary .Values.startupProbe) "context" .) | nindent 12 }}
ports:
{{- range $key, $value := .Values.service.ports }}
- name: {{ $key }}
Expand Down
22 changes: 22 additions & 0 deletions helm/ldap-server/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -366,6 +366,28 @@ startupProbe:
tcpSocket:
port: 389

# Configure extra options for containers probes for secondary servers.
# This startup probe checks that LDAP is responding and can serve queries,
# ensuring the secondary has completed initial replication before it receives traffic.
# The probe queries the base DN to verify the server has data and is ready.
startupProbeSecondary:
# -- Delay after container start until StartupProbe is executed.
initialDelaySeconds: 15
# -- Number of failed executions until container is terminated.
# Increased to 30 to allow time for initial replication to complete.
failureThreshold: 30
# -- Time between probe executions.
periodSeconds: 10
# -- Number of successful executions after failed ones until container is marked healthy.
successThreshold: 1
# -- Timeout for command return.
timeoutSeconds: 5
exec:
command:
- "/bin/sh"
- "-c"
- 'ldapsearch -H ldapi:/// -Y EXTERNAL -b "${LDAP_BASEDN}" -s base "(objectClass=*)" dn >/dev/null 2>&1'

# -- Allows to configure the system extensions to load. This is intended for
# internal usage, prefer to use `extensions` for user configured extensions.
# This value will override the configuration in `global.systemExtensions`.
Expand Down