fix(meshcentral): http port and probe (#4196)

* remove debug

* fix(meshcentral): http port and probe

* auto configure probe protocol

* add note

charts/incubator/meshcentral/docs/installation-instructions.md

@@ -1,5 +1,11 @@
 # Installation instructions
 
+:::warn
+
+Ingress for this chart is **required**
+
+:::
+
 In order to be able to expose some options in the GUI,
 but also give users the option to users to **unset** those values,
 instead of using our defaults. We decided to do the following.

charts/incubator/meshcentral/questions.yaml

@@ -372,7 +372,7 @@ questions:
                               type: int
                               default: 10205
                               required: true
-# Include{advancedPortHTTPS}
+# Include{advancedPortHTTP}
                                 - variable: targetPort
                                   label: Target Port
                                   description: The internal(!) port on the container the Application runs on

charts/incubator/meshcentral/templates/_secret.tpl

@@ -20,7 +20,6 @@
 
 {{/* Inject some values */}}
 {{- $_ := set $config "$schema" "http://info.meshcentral.com/downloads/meshcentral-config-schema.json" }}
-{{- $_ := set $config "__comment__" "This file is generated dynamically at install time, do not attempt to modify it. On next start it will be re-generated" }}
 
 {{- if not (hasKey $config "settings") }}
   {{- $_ := set $config "settings" dict }}
@@ -66,7 +65,6 @@ data:
 {{- end }}
 
 {{/* Prunes keys that start with _ */}}
-
 {{- define "prune.keys" }}
   {{- $values := . }}
   {{- range $k, $v := $values }}
@@ -88,7 +86,6 @@ data:
 {{/* Prunes keys that start with _ */}}
 {{/* Renames tcdefaultdomain variable to "" as this is the key used by MeshCentral */}}
 {{/* but SCALE GUI does not handle it well */}}
-
 {{- define "prune.keys.scale" }}
   {{- $values := . }}
   {{- if (hasKey $values "domains") }}
@@ -104,9 +101,6 @@ data:
           {{- $_ := unset $values $k }}
         {{- end }}
       {{- end }}
-      {{- if eq $k "browserPing" }}
-        {{- $_ := set $values "__browserPing" (printf "%v-%v" (kindOf $v) (typeOf $v)) }}
-      {{- end }}
       {{- if or (eq (kindOf $v) "float64") (eq (kindOf $v) "int64") }}
         {{- if eq (int $v) -99 }}
           {{- $_ := unset $values $k }}

charts/incubator/meshcentral/templates/common.yaml

@@ -4,5 +4,20 @@
 {{/* Render secret */}}
 {{- include "meshcentral.secret" . }}
 
+{{- define "meshcentral.probes" -}}
+probes:
+  liveness:
+    type: {{ .Values.service.main.ports.main.protocol }}
+    path: /health.ashx
+  readiness:
+    type: {{ .Values.service.main.ports.main.protocol }}
+    path: /health.ashx
+  startup:
+    type: {{ .Values.service.main.ports.main.protocol }}
+    path: /health.ashx
+{{- end -}}
+
+{{- $_ := mergeOverwrite .Values (include "meshcentral.probes" . | fromYaml) -}}
+
 {{/* Render the templates */}}
 {{ include "tc.common.loader.apply" . }}

charts/incubator/meshcentral/values.yaml

@@ -938,21 +938,11 @@ meshcentral:
               # - When set, limits what OIDC groups are mirrored into MeshCentral user groups.
               filter: []
 
-probes:
-  liveness:
-    type: HTTPS
-    path: /health.ashx
-  readiness:
-    type: HTTPS
-    path: /health.ashx
-  startup:
-    type: HTTPS
-    path: /health.ashx
-
 service:
   main:
     ports:
       main:
+        # - Set this to HTTP if certs are served by a proxy
         protocol: HTTPS
         port: 10205
   # mps:
@@ -997,7 +987,7 @@ persistence:
     enabled: true
     type: secret
     readOnly: true
-    # defaultMode: "0600"
+    defaultMode: "0600"
     objectName: '{{ include "tc.common.names.fullname" . }}-secret'
     mountPath: /opt/meshcentral/meshcentral-config
     items: