From ef8d67f3c1525de6f958ac7a8893b4b30ea3f7dc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thorsten=20Ro=C3=9Fner?= <thorsten.rossner.extern@zendis.de>
Date: Wed, 6 Aug 2025 16:01:24 +0200
Subject: [PATCH] fix(nubus): Add `livenessProbe` for `nubusUdmListener` to
 mitigate cases where the listener becomes uninitialized and stops forwarding
 provisioning data to NATS. Temporary until upstream provides a probe

---
 helmfile/apps/nubus/values-nubus.yaml.gotmpl | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/helmfile/apps/nubus/values-nubus.yaml.gotmpl b/helmfile/apps/nubus/values-nubus.yaml.gotmpl
index edeb2c2a..b24534d4 100644
--- a/helmfile/apps/nubus/values-nubus.yaml.gotmpl
+++ b/helmfile/apps/nubus/values-nubus.yaml.gotmpl
@@ -1128,6 +1128,13 @@ nubusProvisioning:
 
 nubusUdmListener:
   enabled: true
+  # Temporary local liveness probe, should be removed once available in the upstream Nubus Helm chart
+  livenessProbe:
+    exec:
+      command:
+        - sh
+        - -c
+        - 'grep -E "^[13]$" /var/lib/univention-directory-listener/handlers/ldap_listener'
   containerSecurityContext:
     allowPrivilegeEscalation: false
     capabilities: