Liveness probes kill things that would have lived

An edge blip set my tunnel client's health endpoint failing, and both replicas were restarted once it outlasted the budget a liveness probe on its defaults allowed, while the process was reconnecting on its own. A liveness probe should catch a deadlock, not interrupt a recovery, so its budget has to outlast the recovery it watches.

• kubernetes
• probes
• cloudflared
• reliability
• incident
• debugging