Designing Smarter Health Checks for Pomerium

My coworker wrote this and it’s a genuinely solid read. I’m still pretty new to k8s (only deployed 3 clusters so far, demos and home lab), but the pods saying “ready” while dropping traffic during rollouts hit home. Ran into that exact issue on my last deployment.

Posting a coworker’s deep dive on the nuance of health checks that actually represent readiness. If you’ve had pods say "ready" while still failing traffic during rollouts, this will resonate.

Happy to answer any questions about the finer points of readiness checks in Pomerium, Envoy, and in general for systems running in systems like k8s, systemd, and so on.

Great article. Health checks often seem like an afterthought in most applications.

A great balance of architectural context and practical examples.