From 09e4225de545e3a36e15024837e1b43d81e9b824 Mon Sep 17 00:00:00 2001
From: Thore Cimbal <cfx@riot.8shield.net>
Date: Mon, 27 Jul 2026 12:00:00 +0000
Subject: [PATCH] fix: Replace broken netstat liveness probe on coturn with
 tcpSocket check

coturn started up cleanly every time (all TCP/UDP listeners on 3478/5349
opened fine per logs) but was killed every ~10s because the liveness
probe ran "netstat -uln", which doesn't exist in coturn/coturn:latest
(sh: netstat: not found) - 36000+ restarts over 88 days for a healthy
process. Switched to a tcpSocket probe against the TCP listener coturn
already opens on 3478, no in-container tooling required.
---
 apps/production/coturn.yaml | 7 ++-----
 1 file changed, 2 insertions(+), 5 deletions(-)
 mode change 100644 => 100755 apps/production/coturn.yaml

diff --git a/apps/production/coturn.yaml b/apps/production/coturn.yaml
old mode 100644
new mode 100755
index 9038940..09f02e9
--- a/apps/production/coturn.yaml
+++ b/apps/production/coturn.yaml
@@ -130,11 +130,8 @@ spec:
             cpu: 100m
             memory: 128Mi
         livenessProbe:
-          exec:
-            command:
-            - /bin/sh
-            - -c
-            - "netstat -uln | grep 3478 || exit 1"
+          tcpSocket:
+            port: 3478
           initialDelaySeconds: 30
           periodSeconds: 10
       volumes: