Merge pull request #519 from BSWANG/fix-probe-timeout

fix healthcheck timeout due socat close-wait state

Author: l1b0k

policy/policyinit.sh

@@ -123,8 +123,10 @@ fi
       cleanup_felix
       # for health check
       if [ "$FELIX_HEALTHPORT" != "" ]; then
-          exec socat PIPE TCP-LISTEN:"$FELIX_HEALTHPORT",fork,reuseaddr
+          # shellcheck disable=SC2016
+          exec socat TCP-LISTEN:"$FELIX_HEALTHPORT",bind=127.0.0.1,fork,reuseaddr system:'sleep 2;kill -9 $SOCAT_PID 2>/dev/null'
       else
-          exec socat PIPE TCP-LISTEN:9099,fork,reuseaddr
+          # shellcheck disable=SC2016
+          exec socat TCP-LISTEN:9099,bind=127.0.0.1,fork,reuseaddr system:'sleep 2;kill -9 $SOCAT_PID 2>/dev/null'
       fi
   fi

terway-cilium.yml

@@ -263,15 +263,10 @@ spec:
           livenessProbe:
             tcpSocket:
               port: 9099
-              host: localhost
+              host: 127.0.0.1
             periodSeconds: 10
             initialDelaySeconds: 10
             failureThreshold: 6
-          readinessProbe:
-            tcpSocket:
-              port: 9099
-              host: localhost
-            periodSeconds: 10
           volumeMounts:
             - mountPath: /lib/modules
               name: lib-modules

terway-multiip.yml

@@ -209,15 +209,10 @@ spec:
           livenessProbe:
             tcpSocket:
               port: 9099
-              host: localhost
+              host: 127.0.0.1
             periodSeconds: 10
             initialDelaySeconds: 10
             failureThreshold: 6
-          readinessProbe:
-            tcpSocket:
-              port: 9099
-              host: localhost
-            periodSeconds: 10
           volumeMounts:
             - mountPath: /lib/modules
               name: lib-modules

terway.yml

@@ -181,22 +181,17 @@ spec:
         livenessProbe:
           tcpSocket:
             port: 9099
-            host: localhost
+            host: 127.0.0.1
           periodSeconds: 10
           initialDelaySeconds: 10
           failureThreshold: 6
-        readinessProbe:
-          tcpSocket:
-            port: 9099
-            host: localhost
-          periodSeconds: 10
         volumeMounts:
         - mountPath: /lib/modules
           name: lib-modules
 
       volumes:
       - name: configvolume
-        configMap: 
+        configMap:
           name: eni-config
           items:
             - key: eni_conf