fix(unbound): use project's healthcheck pattern

Author: jeboehm

deploy/kustomize/unbound/deployment.yaml

@@ -46,8 +46,9 @@ spec:
               containerPort: 5353
               protocol: TCP
           livenessProbe:
-            tcpSocket:
-              port: dns-tcp
+            exec:
+              command:
+                - /usr/local/bin/healthcheck.sh
             initialDelaySeconds: 30
             periodSeconds: 30
             timeoutSeconds: 10

target/unbound/Dockerfile

@@ -10,4 +10,4 @@ COPY --chown=unbound:unbound rootfs/ /
 USER unbound
 
 EXPOSE 5353/tcp 5353/udp
-HEALTHCHECK CMD dig @127.0.0.1 -p 5353 github.com || exit 1
+HEALTHCHECK CMD /usr/local/bin/healthcheck.sh

target/unbound/rootfs/usr/local/bin/healthcheck.sh

@@ -0,0 +1,18 @@
+#!/bin/sh
+set -e
+
+# Test DNS resolution using dig
+if ! dig @127.0.0.1 -p 5353 github.com >/dev/null 2>&1; then
+	echo "Healthcheck failed: DNS resolution test failed"
+	exit 1
+fi
+
+# Test UDP connectivity (unbound typically uses UDP for DNS)
+if ! dig @127.0.0.1 -p 5353 +tcp github.com >/dev/null 2>&1; then
+	echo "Healthcheck failed: TCP DNS resolution test failed"
+	exit 1
+fi
+
+echo "Healthcheck passed"
+
+exit 0