grpc / grpc/grpc.io

Blog proposal: - TLS for Kubernetes native gRPC health probes

Open
#1,536 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
479
Forks
545
Avg merge
2d 7h
Merged PRs (30d)
5

Description

I'd like to check whether a guest blog post would be welcome before opening a PR.

**Background.** : -

Kubernetes native gRPC probes (`grpc.health.v1`) used to dial with plaintext credentials only. If a service exposed its health endpoint over TLS, kubelet failed the handshake and healthy gRPC servers could look unhealthy. In Kubernetes 1.37 this is addressed by [KEP-4939](https://github.com/kubernetes/enhancements/issues/4939) (alpha, behind a feature gate): `GRPCAction` can use TLS when probing. I authored the KEP, the kubelet implementation ([kubernetes/kubernetes#137762](https://github.com/kubernetes/kubernetes/pull/137762)), and the Kubernetes docs update.

**Proposed angle (gRPC audience, not a KEP recap).**: -

A short engineering post for people who run TLS gRPC servers on Kubernetes, covering:
- Why plaintext kubelet probes fail against TLS health endpoints
- How this uses the standard gRPC Health Checking Protocol
- A small Pod example enabling TLS on the native gRPC probe
- Current status (alpha in 1.37) and caveats
Happy to keep it focused on operator-facing gRPC behavior, and to wait if this is a better fit after the feature leaves alpha.
Would this be interesting for the gRPC blog?
cc @chalin @thisisnotapril

Contributor guide

Open the contributing guide

Research direction

Start by reviewing KEP-4939, the linked kubelet implementation, and the Kubernetes documentation update to verify the alpha status, feature gate, and operator caveats. A suitable contribution would be a focused draft covering plaintext probe failures, the gRPC Health Checking Protocol, and a small TLS-enabled Pod example, subject to maintainer approval.

Written by the indexing model from the issue text.

Assessment

Tech stack
grpc, kubernetes
Domain
documentation
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
58/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.