TCP probe configuration in Kubernetes - Time & Space Complexity

Time Complexity: TCP probe configuration

O(n)

Understanding Time Complexity

We want to understand how the time it takes to check a TCP connection changes as we check more endpoints.

How does the number of TCP probes affect the total checking time?

Scenario Under Consideration

Analyze the time complexity of the following Kubernetes TCP probe configuration.

readinessProbe:
  tcpSocket:
    port: 8080
  initialDelaySeconds: 5
  periodSeconds: 10
  timeoutSeconds: 2

This configuration checks if the container is ready by trying to open a TCP connection on port 8080 every 10 seconds after an initial delay.

Identify Repeating Operations

Identify the loops, recursion, array traversals that repeat.

• Primary operation: TCP connection attempt to the specified port.
• How many times: Repeats every periodSeconds (e.g., every 10 seconds) indefinitely while the pod runs.

How Execution Grows With Input

As the number of pods or containers increases, the total number of TCP probes grows proportionally.

Number of Pods (n)	Approx. TCP Probes per Period
10	10
100	100
1000	1000

Pattern observation: The total number of TCP probes grows linearly with the number of pods.

Final Time Complexity

Time Complexity: O(n)

This means the total time spent on TCP probes grows directly in proportion to the number of pods being checked.

Common Mistake

[X] Wrong: "Adding more pods does not affect probe time because probes run independently."

[OK] Correct: Even if probes run independently, the total time and resources used increase with more pods, so the overall checking effort grows with pod count.

Interview Connect

Understanding how probe checks scale helps you design systems that stay responsive and efficient as they grow.

Self-Check

What if we changed periodSeconds to a smaller value? How would the time complexity change?

Practice

1. What is the main purpose of a TCP probe in Kubernetes?

easy

A. To check the container's memory usage

B. To monitor CPU usage of a container

C. To verify the container's file system integrity

D. To check if a container accepts TCP connections on a specified port

Solution

1. Step 1: Understand TCP probe function

   A TCP probe tests if a container is accepting TCP connections on a specific port.

2. Step 2: Compare with other options

   CPU, memory, and file system checks are not done by TCP probes but by other mechanisms.

3. Final Answer:

   To check if a container accepts TCP connections on a specified port -> Option D

4. Quick Check:

   TCP probe = connection check [OK]

Hint: TCP probe checks port connectivity, not resource usage [OK]

Common Mistakes:

• Confusing TCP probe with CPU or memory monitoring
• Thinking TCP probe checks file system health
• Assuming TCP probe checks HTTP endpoints

2. Which of the following is the correct syntax to define a TCP liveness probe in a pod spec?

easy

A. livenessProbe:
tcpSocket:
path: "/health"
initialDelaySeconds: 5
periodSeconds: 10

B. livenessProbe:
httpGet:
port: 8080
initialDelaySeconds: 5
periodSeconds: 10

C. livenessProbe:
tcpSocket:
port: 8080
initialDelaySeconds: 5
periodSeconds: 10

D. livenessProbe:
exec:
command: ["curl", "localhost:8080"]
initialDelaySeconds: 5
periodSeconds: 10

Solution

1. Step 1: Identify TCP probe syntax

   TCP probes use tcpSocket with a port field, no path.

2. Step 2: Check options for correctness

   livenessProbe: tcpSocket: port: 8080 initialDelaySeconds: 5 periodSeconds: 10 uses tcpSocket with port 8080 and timing fields correctly. Others use HTTP or exec or invalid fields.

3. Final Answer:

   livenessProbe with tcpSocket and port field -> Option C

4. Quick Check:

   TCP probe syntax = tcpSocket + port [OK]

Hint: TCP probes use tcpSocket with port, no path [OK]

Common Mistakes:

• Using httpGet or exec instead of tcpSocket for TCP probes
• Adding a path field to tcpSocket (invalid)
• Omitting port number in tcpSocket

3. Given this pod spec snippet, what will happen if the container does not accept TCP connections on port 3306?

livenessProbe:
  tcpSocket:
    port: 3306
  initialDelaySeconds: 10
  periodSeconds: 5

medium

A. Kubernetes will ignore the failure and keep the container running

B. Kubernetes will restart the container after the probe fails

C. The container will be marked ready immediately

D. The pod will be deleted permanently

Solution

1. Step 1: Understand liveness probe behavior

   Liveness probes check if a container is alive; failure triggers a restart.

2. Step 2: Apply to TCP probe failure

   If TCP connection on port 3306 fails, Kubernetes restarts the container to fix it.

3. Final Answer:

   Kubernetes will restart the container after the probe fails -> Option B

4. Quick Check:

   Liveness probe failure = container restart [OK]

Hint: Liveness probe failure triggers container restart [OK]

Common Mistakes:

• Confusing liveness with readiness probe effects
• Thinking pod is deleted permanently on failure
• Assuming failure is ignored

4. You configured a TCP readiness probe but Kubernetes reports probe failures immediately after pod start. Which is the most likely cause?

medium

A. initialDelaySeconds is missing or too low, so probe runs before container is ready

B. tcpSocket port is set to 0, which is invalid

C. periodSeconds is set too high, causing delayed checks

D. readinessProbe cannot use tcpSocket, only httpGet

Solution

1. Step 1: Analyze probe timing parameters

   Without initialDelaySeconds, probe starts immediately, possibly before container is ready.

2. Step 2: Evaluate other options

   Port 0 is invalid but would cause different errors; periodSeconds affects frequency, not immediate failure; tcpSocket is valid for readiness probes.

3. Final Answer:

   initialDelaySeconds is missing or too low, so probe runs before container is ready -> Option A

4. Quick Check:

   Missing initialDelaySeconds = early probe failure [OK]

Hint: Set initialDelaySeconds to delay probe start [OK]

Common Mistakes:

• Assuming tcpSocket is invalid for readiness probes
• Ignoring initialDelaySeconds importance
• Confusing periodSeconds with initialDelaySeconds

5. You want to configure a TCP readiness probe for a database container on port 5432. The container takes about 20 seconds to start accepting connections. Which configuration is best to avoid false failures?

hard

A. readinessProbe:
tcpSocket:
port: 5432
initialDelaySeconds: 25
periodSeconds: 10
failureThreshold: 3

B. readinessProbe:
tcpSocket:
port: 5432
initialDelaySeconds: 5
periodSeconds: 5
failureThreshold: 1

C. readinessProbe:
tcpSocket:
port: 5432
initialDelaySeconds: 0
periodSeconds: 10
failureThreshold: 5

D. readinessProbe:
tcpSocket:
port: 5432
initialDelaySeconds: 10
periodSeconds: 20
failureThreshold: 1

Solution

1. Step 1: Match initialDelaySeconds to container startup time

   Container needs ~20 seconds to accept connections, so initialDelaySeconds should be at least 20 to avoid early failures.

2. Step 2: Use periodSeconds and failureThreshold to allow retries

   Period of 10 seconds and failureThreshold of 3 means Kubernetes retries for up to 30 seconds before marking not ready, avoiding false negatives.

3. Final Answer:

   readinessProbe with initialDelaySeconds 25, periodSeconds 10, failureThreshold 3 -> Option A

4. Quick Check:

   Delay + retries prevent false failures [OK]

Hint: Set initialDelaySeconds > startup time, use retries [OK]

Common Mistakes:

• Setting initialDelaySeconds too low causing false failures
• Using failureThreshold of 1 with short delays
• Ignoring container startup time in probe config