Add abilitiy to specify health check path

Author: gianrubio

README.md

@@ -105,6 +105,7 @@ Please note:
 | `LEGO_SERVICE_NAME_NGINX` | n | `kube-lego-nginx` | Service name for NGINX ingress |
 | `LEGO_SERVICE_NAME_GCE` | n | `kube-lego-gce` | Service name for GCE ingress |
 | `LEGO_SUPPORTED_INGRESS_CLASS` | n | `nginx,gce` | Specify the supported ingress class |
+| `LEGO_HEALTH_CHECK_PATH` | n | `/healthz` | Specify the health check path |
 | `LEGO_INGRESS_NAME_NGINX` | n | `kube-lego-nginx` | Ingress name which contains the routing for HTTP verification for nginx ingress |
 | `LEGO_PORT` | n | `8080` | Port where this daemon is listening for verifcation calls (HTTP method)|
 | `LEGO_CHECK_INTERVAL` | n | `8h` | Interval for periodically certificate checks (to find expired certs)|

pkg/acme/acme.go

@@ -48,7 +48,7 @@ func (a *Acme) Mux() *http.ServeMux {
 		}
 	})
 
-	mux.HandleFunc("/healthz", func(w http.ResponseWriter, r *http.Request) {
+	mux.HandleFunc(a.kubelego.LegoHealthCheckPath(), func(w http.ResponseWriter, r *http.Request) {
 		w.Header().Set("Content-Type", "text/plain")
 		w.WriteHeader(http.StatusOK)
 		fmt.Fprint(w, "ok")

pkg/kubelego/kubelego.go

@@ -157,6 +157,9 @@ func (kl *KubeLego) LegoEmail() string {
 	return kl.legoEmail
 }
 
+func (kl *KubeLego) LegoHealthCheckPath() string {
+	return kl.legoHealthCheckPath
+}
 func (kl *KubeLego) LegoNamespace() string {
 	return kl.legoNamespace
 }
@@ -340,5 +343,12 @@ func (kl *KubeLego) paramsLego() error {
 	} else {
 		kl.legoWatchNamespace = watchNamespace
 	}
+
+	kl.legoHealthCheckPath = os.Getenv("LEGO_HEALTH_CHECK_PATH")
+	if len(kl.legoHealthCheckPath) == 0 {
+		kl.legoHealthCheckPath = kubelego.LegoHealthCheckPath
+	}
+
+
 	return nil
 }

pkg/kubelego/type.go

@@ -25,6 +25,7 @@ type KubeLego struct {
 	legoServiceNameGce        string
 	legoSupportedIngressClass []string
 	legoHTTPPort              intstr.IntOrString
+	legoHealthCheckPath       string
 	legoCheckInterval         time.Duration
 	legoMinimumValidity       time.Duration
 	legoDefaultIngressClass   string

pkg/kubelego_const/consts.go

@@ -10,7 +10,7 @@ const AcmeRegistrationUrl = "acme-registration-url"
 const AcmePrivateKey = k8sApi.TLSPrivateKeyKey
 const AcmeHttpChallengePath = "/.well-known/acme-challenge"
 const AcmeHttpSelfTest = "/.well-known/acme-challenge/_selftest"
-
+const LegoHealthCheckPath = "/healthz"
 const TLSCertKey = k8sApi.TLSCertKey
 const TLSPrivateKeyKey = k8sApi.TLSPrivateKeyKey
 const TLSCaKey = "ca.crt"

pkg/kubelego_const/interfaces.go

@@ -28,6 +28,7 @@ type KubeLego interface {
 	LegoCheckInterval() time.Duration
 	LegoMinimumValidity() time.Duration
 	LegoPodIP() net.IP
+	LegoHealthCheckPath() string
 	IngressProvider(string) (IngressProvider, error)
 	Version() string
 	AcmeUser() (map[string][]byte, error)

pkg/mocks/mocks.go

@@ -82,6 +82,12 @@ func (_m *MockKubeLego) LegoEmail() string {
 	return ret0
 }
 
+func (_m *MockKubeLego) LegoHealthCheckPath() string {
+	ret := _m.ctrl.Call(_m, "LegoHealthCheckPath")
+	ret0, _ := ret[0].(string)
+	return ret0
+}
+
 func (_mr *_MockKubeLegoRecorder) LegoEmail() *gomock.Call {
 	return _mr.mock.ctrl.RecordCall(_mr.mock, "LegoEmail")
 }