Let's be a bit more patient.

Author: pantierra

charts/eoapi/profiles/experimental.yaml

@@ -385,7 +385,7 @@ mockOidcServer:
   replicaCount: 1
   image:
     repository: ghcr.io/alukach/mock-oidc-server
-    tag: latest
+    tag: "latest"
     pullPolicy: IfNotPresent
   port: 8888
   clientId: "test-client"
@@ -407,7 +407,15 @@ mockOidcServer:
   tolerations: []
   affinity: {}
   imagePullSecrets: []
-  extraEnv: []
+  extraEnv:
+    - name: MOCK_OIDC_HOST
+      value: "0.0.0.0"
+    - name: MOCK_OIDC_ISSUER
+      value: "http://localhost:8080/mock-oidc"
+    - name: MOCK_OIDC_REFRESH_TTL
+      value: "3600"
+    - name: MOCK_OIDC_ACCESS_TTL
+      value: "300"
 
 ######################
 # SERVICE

charts/eoapi/templates/mock-oidc/deployment.yaml

@@ -41,18 +41,30 @@ spec:
         - name: http
           containerPort: {{ .Values.mockOidcServer.port | default 8888 }}
           protocol: TCP
-        livenessProbe:
+        startupProbe:
           httpGet:
             path: /.well-known/openid-configuration
             port: http
           initialDelaySeconds: 10
+          periodSeconds: 5
+          failureThreshold: 12
+          timeoutSeconds: 3
+        livenessProbe:
+          httpGet:
+            path: /.well-known/openid-configuration
+            port: http
+          initialDelaySeconds: 30
           periodSeconds: 10
+          failureThreshold: 3
+          timeoutSeconds: 3
         readinessProbe:
           httpGet:
             path: /.well-known/openid-configuration
             port: http
           initialDelaySeconds: 5
           periodSeconds: 5
+          failureThreshold: 3
+          timeoutSeconds: 3
         {{- if .Values.mockOidcServer.resources }}
         resources:
           {{- toYaml .Values.mockOidcServer.resources | nindent 10 }}

scripts/deployment.sh

@@ -98,10 +98,48 @@ stac-auth-proxy:
   initContainers:
     - name: wait-for-mock-oidc
       image: busybox:1.35
-      command: ['sh', '-c', 'until nc -z ${RELEASE_NAME}-mock-oidc-server.${NAMESPACE}.svc.cluster.local 8080; do echo waiting for mock-oidc; sleep 2; done']
+      command: ['sh', '-c']
+      args:
+        - |
+          echo "Waiting for mock OIDC server to be ready..."
+          timeout=300
+          elapsed=0
+          while [ \$elapsed -lt \$timeout ]; do
+            if nc -z ${RELEASE_NAME}-mock-oidc-server.${NAMESPACE}.svc.cluster.local 8080; then
+              echo "Mock OIDC server port is open, checking health endpoint..."
+              if wget -q --spider --timeout=5 "http://${RELEASE_NAME}-mock-oidc-server.${NAMESPACE}.svc.cluster.local:8080/.well-known/openid-configuration" 2>/dev/null; then
+                echo "Mock OIDC server is ready!"
+                exit 0
+              else
+                echo "Mock OIDC port open but health check failed, retrying..."
+              fi
+            else
+              echo "Mock OIDC server not ready, waiting..."
+            fi
+            sleep 5
+            elapsed=\$((elapsed + 5))
+          done
+          echo "Timeout waiting for mock OIDC server after \${timeout}s"
+          exit 1
     - name: wait-for-stac
       image: busybox:1.35
-      command: ['sh', '-c', 'until nc -z ${RELEASE_NAME}-stac.${NAMESPACE}.svc.cluster.local 8080; do echo waiting for stac service; sleep 2; done']
+      command: ['sh', '-c']
+      args:
+        - |
+          echo "Waiting for STAC service to be ready..."
+          timeout=300
+          elapsed=0
+          while [ \$elapsed -lt \$timeout ]; do
+            if nc -z ${RELEASE_NAME}-stac.${NAMESPACE}.svc.cluster.local 8080; then
+              echo "STAC service is ready!"
+              exit 0
+            fi
+            echo "STAC service not ready, waiting..."
+            sleep 3
+            elapsed=\$((elapsed + 3))
+          done
+          echo "Timeout waiting for STAC service after \${timeout}s"
+          exit 1
 EOF
         helm_cmd="$helm_cmd -f $temp_values"
         # Configure STAC service to run without root path when behind auth proxy