add readiness probe to hidden replsets

Author: pooknull

pkg/apis/psmdb/v1/psmdb_defaults.go

@@ -929,7 +929,7 @@ func (h *HiddenSpec) setLivenessProbe(cr *PerconaServerMongoDB, rs *ReplsetSpec)
 	}
 }
 
-func (h *HiddenSpec) setReadinessProbe(rs *ReplsetSpec) {
+func (h *HiddenSpec) setReadinessProbe(cr *PerconaServerMongoDB, rs *ReplsetSpec) {
 	if h.ReadinessProbe == nil {
 		h.ReadinessProbe = &corev1.Probe{}
 	}
@@ -942,6 +942,12 @@ func (h *HiddenSpec) setReadinessProbe(rs *ReplsetSpec) {
 				"--component", "mongod",
 			},
 		}
+		if cr.TLSEnabled() {
+			h.ReadinessProbe.Exec.Command = append(h.ReadinessProbe.Exec.Command,
+				"--ssl", "--sslInsecure",
+				"--sslCAFile", "/etc/mongodb-ssl/ca.crt",
+				"--sslPEMKeyFile", "/tmp/tls.pem")
+		}
 	}
 	if h.ReadinessProbe.InitialDelaySeconds < 1 {
 		h.ReadinessProbe.InitialDelaySeconds = rs.ReadinessProbe.InitialDelaySeconds
@@ -971,7 +977,7 @@ func (h *HiddenSpec) SetDefaults(cr *PerconaServerMongoDB, rs *ReplsetSpec) erro
 	}
 
 	h.setLivenessProbe(cr, rs)
-	h.setReadinessProbe(rs)
+	h.setReadinessProbe(cr, rs)
 
 	if len(h.ServiceAccountName) == 0 {
 		h.ServiceAccountName = WorkloadSA

pkg/controller/perconaservermongodb/testdata/reconcile-statefulset/rs0-hidden.yaml

@@ -115,6 +115,12 @@ spec:
             - readiness
             - --component
             - mongod
+            - --ssl
+            - --sslInsecure
+            - --sslCAFile
+            - /etc/mongodb-ssl/ca.crt
+            - --sslPEMKeyFile
+            - /tmp/tls.pem
           failureThreshold: 8
           initialDelaySeconds: 10
           periodSeconds: 3