kubevirt / containerized-data-importer / #6036

49%

Build Type

push

travis-ci

Committed by web-flow

Commit Message

cdi: expose secure pprof endpoints for controller and operator (#4161)

pprof is Go's built-in profiling toolkit that exposes runtime
diagnostics (e.g., heap allocations, goroutine stacks, CPU profiles,
etc.) over HTTP. Exposing these endpoints enables live debugging of
memory leaks, goroutine leaks, and CPU hotspots in running controller
and operator pods without redeployment or recompilation.

This commit exposes the handlers via the existing metrics server by
relying on controller-runtime's ExtraHandlers along with the previously
introduced WithAuthenticationAndAuthorization which serves to secure
the handlers with TLS and RBAC auth. A new ClusterRole (cdi-pprof-reader)
is added to grant pprof access independently of metrics scraping.

Signed-off-by: Adi Aloni <aaloni@redhat.com>

Coverage Stats

0 of 37 new or added lines in 4 files covered. (0.0%)

21 existing lines in 3 files now uncovered.

14997 of 30341 relevant lines covered (49.43%)

0.55 hits per line