Change operator debug port to 443.

Signed-off-by: joshvanl <me@joshvanl.dev>

The operator service should serve on 443 as this is the more proper TLS
port over the current 80. The injector has been updated to now inject
port 443 to sidecars. Port 80 is still being served for backwards
compatibility, but should be removed in v1.14.

Signed-off-by: joshvanl <me@joshvanl.dev>

charts/dapr/charts/dapr_operator/templates/dapr_operator_service.yaml

@@ -16,9 +16,18 @@ spec:
   type: {{ .Values.apiService.type }}
   ports:
   - protocol: TCP
-    port: {{ .Values.ports.port }} 
+    port: {{ .Values.ports.port }}
     targetPort: {{ .Values.ports.targetPort }}
-
+    name: grpc
+# Added for backwards compatibility where previous clients will attempt to
+# connect on port 80.
+# TOOD: @joshvanl: remove in v1.14
+{{ if (ne (int .Values.ports.port) 80) }}
+  - protocol: TCP
+    port: 80
+    targetPort: {{ .Values.ports.targetPort }}
+    name: legacy
+{{ end }}
 ---
 apiVersion: v1
 kind: Service
@@ -33,10 +42,10 @@ metadata:
 {{ toYaml .Values.webhookService.annotations | indent 4}}
 {{- end }}
 spec:
-  selector:
-    app: dapr-operator
   type: {{ .Values.webhookService.type }}
   ports:
   - port: 443
     targetPort: 19443
-    protocol: TCP
+    protocol: TCP
+  selector:
+    app: dapr-operator

charts/dapr/charts/dapr_operator/values.yaml

@@ -30,7 +30,7 @@ serviceReconciler:
 
 ports:
   protocol: TCP
-  port: 80
+  port: 443
   targetPort: 6500
 
 resources: {}

pkg/injector/patcher/services.go

@@ -25,7 +25,7 @@ type Service struct {
 
 var (
 	// Dapr API service.
-	ServiceAPI = Service{"dapr-api", 80}
+	ServiceAPI = Service{"dapr-api", 443}
 	// Dapr placement service.
 	ServicePlacement = Service{"dapr-placement-server", 50005}
 	// Dapr sentry service.