fix(pydio-cells): Use different port for healthcheck (#1949)

* fix(pydio-cells): Use different port for healthcheck

* stupid

* allow rootfs for s3 storage

* revert root fs access

* try persistence

* rofs

* runAsRoot, so s3 compatible storage works..

* make healthcheck service internal only

* https?

* check without clusterip

* try clIP again

* more generous probes

* use number port

* clip is def

* remove timeouts

charts/stable/pydio-cells/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v2
 kubeVersion: ">=1.16.0-0"
 name: pydio-cells
-version: 1.0.3
+version: 1.0.4
 appVersion: "3.0.4"
 description: Pydio-cells is the nextgen file sharing platform for organizations.
 type: application

charts/stable/pydio-cells/questions.yaml

@@ -461,7 +461,7 @@ questions:
                 label: "runAsNonRoot"
                 schema:
                   type: boolean
-                  default: true
+                  default: false
 # Include{securityContextAdvanced}
 
   - variable: podSecurityContext
@@ -476,13 +476,13 @@ questions:
           description: "The UserID of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: runAsGroup
           label: "runAsGroup"
           description: The groupID this App of the user running the application"
           schema:
             type: int
-            default: 568
+            default: 0
         - variable: fsGroup
           label: "fsGroup"
           description: "The group that should own ALL storage."

charts/stable/pydio-cells/values.yaml

@@ -3,11 +3,19 @@ image:
   pullPolicy: IfNotPresent
   tag: v3.0.4@sha256:81c6f8675ffc243af9ffab5a43da0ed50f33f0c153c352aad027127c3c0318ad
 
+securityContext:
+  readOnlyRootFilesystem: false
+  runAsNonRoot: false
+
+podSecurityContext:
+  runAsUser: 0
+  runAsGroup: 0
+
 env:
   CELLS_EXTERNAL: ""
-  CELLS_GRPC_EXTERNAL: "{{ .Values.service.gprc.ports.gprc.targetPort }}"
+  CELLS_GRPC_EXTERNAL: "{{ .Values.service.gprc.ports.gprc.port }}"
-  CELLS_HEALTHCHECK: "{{ .Values.service.main.ports.main.targetPort }}"
+  CELLS_HEALTHCHECK: "{{ .Values.service.healthcheck.ports.healthcheck.port }}"
-  CELLS_BIND: "0.0.0.0:{{ .Values.service.main.ports.main.targetPort }}"
+  CELLS_BIND: "0.0.0.0:{{ .Values.service.main.ports.main.port }}"
   CELLS_WORKING_DIR: "/cells"
   CELLS_DATA_DIR: "/cells/data"
   CELLS_LOG_DIR: "/cells/logs"
@@ -21,28 +29,45 @@ pydioinstall:
 
 probes:
   liveness:
+    custom: true
+    spec:
+      httpGet:
+        scheme: HTTP
         path: "/healthcheck"
-
+        port: 10162
   readiness:
+    custom: true
+    spec:
+      httpGet:
+        scheme: HTTP
         path: "/healthcheck"
-
+        port: 10162
   startup:
+    custom: true
+    spec:
+      httpGet:
+        scheme: HTTP
         path: "/healthcheck"
+        port: 10162
 
 service:
   main:
     ports:
       main:
         protocol: HTTPS
-        targetPort: 10150
         port: 10150
   gprc:
     enabled: true
     ports:
       gprc:
         enabled: true
-        targetPort: 33060
         port: 33060
+  healthcheck:
+    enabled: true
+    ports:
+      healthcheck:
+        enabled: true
+        port: 10162
 
 persistence:
   cells:

docs/manual/default-ports.md

@@ -316,6 +316,7 @@ These defaults can of course be changed, but as we guarantee "sane, working defa
 | photoview                  |      main       |      main       | 10159 |   TCP    |                                         |
 | linkace                    |      main       |      main       | 10160 |   TCP    |                                         |
 | librephotos                |      main       |      main       | 10161 |   TCP    |                                         |
+| pydio-cells                |   healthcheck   |   healthcheck   | 10162 |   TCP    |                                         |
 | satisfactory               |     beacon      |     beacon      | 15000 |   UDP    |                                         |
 | satisfactory               |      query      |      query      | 15777 |   UDP    |                                         |
 | minecraft-bedrock          |      main       |      main       | 19132 |   UDP    |                                         |