From 53ce4a2c4e2e2949c582878a6c519ae333e3958a Mon Sep 17 00:00:00 2001
From: Mitsuru Kariya <kariya_mitsuru@hotmail.com>
Date: Thu, 15 Feb 2024 05:59:14 +0900
Subject: [PATCH] Fix the nginx's containerPort (#1497)

It is better to limit the nginx's containerPort and port to only those that are enabled.

8443 is valid only if .Values.expose.tls.enabled is true.
4443 is no longer used since notary was removed.

Signed-off-by: Mitsuru Kariya <mitsuru.kariya@nttdata.com>
---
 templates/nginx/deployment.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/templates/nginx/deployment.yaml b/templates/nginx/deployment.yaml
index 8290d497b..1ccdf7929 100644
--- a/templates/nginx/deployment.yaml
+++ b/templates/nginx/deployment.yaml
@@ -89,8 +89,9 @@ spec:
 {{- end }}
         ports:
         - containerPort: 8080
+        {{- if .Values.expose.tls.enabled }}
         - containerPort: 8443
-        - containerPort: 4443
+        {{- end }}
         volumeMounts:
         - name: config
           mountPath: /etc/nginx/nginx.conf