KEP-4939keps/sig-node/4939-grpc-probe-with-tls
TLS Credentials in gRPC Probe
The new gRPC health probe enables developers to probe gRPC health servers from the node. This allows them to stop using workarounds such as this grpc-health-probe paired with exec probes. It allows natively running health checks on gRPC services without deploying additional binaries as well as other benefits outlined in the announcement. A limitation in th… Full summary
The new gRPC health probe enables developers to probe gRPC health servers from the node. This allows them to stop using workarounds such as this grpc-health-probe paired with exec probes. It allows natively running health checks on gRPC services without deploying additional binaries as well as other benefits outlined in the announcement. A limitation in the current implementation is that it only supports gRPC servers that do not leverage TLS connections. Even if they are not concerned about certificate verification for the health check, a connection cannot be established at all if the server is expecting TLS and the client is not. This enhancement aims to add configuration options to enable TLS on the gRPC probe.
Facts
- Approvers
- @mrunalp
- Reviewers
- @sergeykanzhelev@aojea
- Tracking issue
- #4939(opens GitHub in a new tab) openreopenedmilestone v1.38sig/nodestage/betatracked/yeskind/keplead-opted-in
- Milestones
- alpha v1.37beta v1.38stable v1.39
- Participating SIGs
- sig-network
- Feature gates
- GRPCContainerProbeTLS
- Created / last updated
- 2026-05-21 / none