helm: Healthcheck the health-check endpoint.

This works around 404s when a realm has not yet been created. We make
use of the new TRUST_GATEWAY_IP, since the healthcheck accesses come
from the local network gateway.

Fixes: #496.

Author: alexmv

kubernetes/chart/zulip/templates/statefulset.yaml

@@ -68,7 +68,7 @@ spec:
           {{- if .Values.livenessProbe.enabled }}
           livenessProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
               httpHeaders:
               - name: Host
@@ -82,7 +82,7 @@ spec:
           {{- if .Values.startupProbe.enabled }}
           startupProbe:
             httpGet:
-              path: /
+              path: /health
               port: http
               httpHeaders:
               - name: Host

kubernetes/chart/zulip/values.yaml

@@ -131,6 +131,7 @@ zulip:
     ## certificates are managed by the Kubernetes cluster, so by
     ## default it's disabled inside the container.
     DISABLE_HTTPS: true
+    TRUST_GATEWAY_IP: true
     ## Set SSL certificate generation to self-signed because
     ## Kubernetes manages the client-facing SSL certs.
     SSL_CERTIFICATE_GENERATION: self-signed