From 5593399cc4fe3c08daabca9c9f8af9c5cf0b6cc5 Mon Sep 17 00:00:00 2001
From: jpaodev <hello@jpao.dev>
Date: Sun, 15 Feb 2026 05:46:12 +0100
Subject: [PATCH] fix: k8s 1.34 baseline PSA compliance

---
 internal/workload/podspec_updates.go      | 1 -
 internal/workload/podspec_updates_test.go | 4 ++--
 2 files changed, 2 insertions(+), 3 deletions(-)

diff --git a/internal/workload/podspec_updates.go b/internal/workload/podspec_updates.go
index 046c898b..0b9bf8a3 100644
--- a/internal/workload/podspec_updates.go
+++ b/internal/workload/podspec_updates.go
@@ -899,7 +899,6 @@ func (s *updateState) addHealthCheck(p *cloudsqlapi.AuthProxyWorkload, c *corev1
 			HTTPGet: &corev1.HTTPGetAction{
 				Port: intstr.IntOrString{IntVal: adminPort},
 				Path: "/quitquitquit",
-				Host: "localhost",
 			},
 		},
 	}
diff --git a/internal/workload/podspec_updates_test.go b/internal/workload/podspec_updates_test.go
index 956a3cf1..59420f35 100644
--- a/internal/workload/podspec_updates_test.go
+++ b/internal/workload/podspec_updates_test.go
@@ -1137,8 +1137,8 @@ func TestPreStopHook(t *testing.T) {
 	if get.Path != "/quitquitquit" {
 		t.Error("got", get.Path, "want", "/quitquitquit")
 	}
-	if get.Host != "localhost" {
-		t.Error("got", get.Host, "want", "localhost")
+	if get.Host != "" {
+		t.Error("got", get.Host, "want empty string (k8s 1.34 baseline PSA compliance)")
 	}
 }