A Kubernetes operator that bridges Hardware Security Module (HSM) data storage with Kubernetes Secrets, providing true secret portability th
fix grpc on agent pod
+7
-7
+2
-2
helm/hsm-secrets-operator/Chart.yaml
+2
-2
helm/hsm-secrets-operator/Chart.yaml
···
2
2
name: hsm-secrets-operator
3
3
description: A Kubernetes operator that bridges Pico HSM binary data storage with Kubernetes Secrets
4
4
type: application
5
-
version: 0.5.4
6
-
appVersion: v0.5.4
5
+
version: 0.5.5
6
+
appVersion: v0.5.5
7
7
icon: https://raw.githubusercontent.com/cncf/artwork/master/projects/kubernetes/icon/color/kubernetes-icon-color.svg
8
8
home: https://github.com/evanjarrett/hsm-secrets-operator
9
9
sources:
+5
-5
internal/api/server.go
+5
-5
internal/api/server.go
···
192
192
}, pool)
193
193
194
194
if err == nil && pool.Status.Phase == hsmv1alpha1.HSMPoolPhaseReady && len(pool.Status.AggregatedDevices) > 0 {
195
-
// Generate agent endpoint
195
+
// Generate agent endpoint for gRPC communication
196
196
agentName := fmt.Sprintf("hsm-agent-%s", device.Name)
197
-
agentEndpoint := fmt.Sprintf("http://%s.%s.svc.cluster.local:8092", agentName, namespace)
197
+
agentEndpoint := fmt.Sprintf("%s.%s.svc.cluster.local:9090", agentName, namespace)
198
198
199
-
// Test if agent is responsive
200
-
testURL := agentEndpoint + "/api/v1/hsm/info"
201
-
resp, err := s.httpClient.Get(testURL)
199
+
// Test if agent is responsive using health check on HTTP port
200
+
healthURL := fmt.Sprintf("http://%s.%s.svc.cluster.local:8093/healthz", agentName, namespace)
201
+
resp, err := s.httpClient.Get(healthURL)
202
202
if err == nil && resp.StatusCode == 200 {
203
203
_ = resp.Body.Close()
204
204
return agentEndpoint, nil