online.git: kubernetes/helm

["Rashesh Padia (via cogerrit)"]

kubernetes/helm/collabora-online/Chart.yaml | 2 +-
kubernetes/helm/collabora-online/templates/deployment.yaml | 6 +++---
kubernetes/helm/collabora-online/templates/dynamicConfig/deployment.yaml | 6 +++---
kubernetes/helm/collabora-online/templates/dynamicConfig/statefulset.yaml | 6 +++---
kubernetes/helm/collabora-online/templates/statefulset.yaml | 6 +++---
kubernetes/helm/collabora-online/values.yaml | 7 +++++++
6 files changed, 20 insertions(+), 13 deletions(-)

New commits:
commit 38e9196451943f68d85df8336aeeb70968b5123e
Author: Rashesh Padia <rashes...@collabora.com>
AuthorDate: Wed May 20 17:24:40 2026 +0530
Commit: Darshan-Upadhyay <darshan....@collabora.com>
CommitDate: Mon May 25 09:34:02 2026 +0000

feat(helm): make probe scheme configurable for SSL-terminating coolwsd

When SSL is enabled on coolwsd via extra_params, POCO binds a single
TLS socket so the hardcoded HTTP probes always fail and the only
workaround was disabling probes entirely. Surface the scheme as a
values key (probes.scheme, dynamicConfig.probes.scheme), defaulting
to HTTP so existing deployments are unaffected

Signed-off-by: Rashesh Padia <rashes...@collabora.com>
Change-Id: I36314c52bc763c9bf0773f7ce948c52e21c80ff8
Reviewed-on: https://gerrit.collaboraoffice.com/c/online/+/2991
Tested-by: Jenkins CPCI <rel...@collaboraoffice.com>
Reviewed-by: Darshan-Upadhyay <darshan....@collabora.com>

diff --git a/kubernetes/helm/collabora-online/Chart.yaml b/kubernetes/helm/collabora-online/Chart.yaml
index d11c5f9073f0..18c7a327c452 100644
--- a/kubernetes/helm/collabora-online/Chart.yaml
+++ b/kubernetes/helm/collabora-online/Chart.yaml
@@ -4,7 +4,7 @@ type: "application"
name: collabora-online
description: Collabora Online helm chart

-version: 1.1.60
+version: 1.1.61
appVersion: "25.04.9.4.1"

home: "https://www.collaboraonline.com/code/"
diff --git a/kubernetes/helm/collabora-online/templates/deployment.yaml b/kubernetes/helm/collabora-online/templates/deployment.yaml
index 5765fc54c60c..a6c84f724b2f 100644
--- a/kubernetes/helm/collabora-online/templates/deployment.yaml
+++ b/kubernetes/helm/collabora-online/templates/deployment.yaml
@@ -71,7 +71,7 @@ spec:
httpGet:
path: {{ .Values.probes.startup.path }}
port: {{ .Values.deployment.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.probes.scheme | default "HTTP" | upper }}
failureThreshold: {{ .Values.probes.startup.failureThreshold }}
periodSeconds: {{ .Values.probes.startup.periodSeconds }}
{{- end }}
@@ -80,7 +80,7 @@ spec:
httpGet:
path: {{ .Values.probes.liveness.path }}
port: {{ .Values.deployment.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.probes.scheme | default "HTTP" | upper }}
initialDelaySeconds: {{ .Values.probes.liveness.initialDelaySeconds }}
periodSeconds: {{ .Values.probes.liveness.periodSeconds }}
timeoutSeconds: {{ .Values.probes.liveness.timeoutSeconds }}
@@ -92,7 +92,7 @@ spec:
httpGet:
path: {{ .Values.probes.readiness.path }}
port: {{ .Values.deployment.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.probes.scheme | default "HTTP" | upper }}
initialDelaySeconds: {{ .Values.probes.readiness.initialDelaySeconds }}
periodSeconds: {{ .Values.probes.readiness.periodSeconds }}
timeoutSeconds: {{ .Values.probes.readiness.timeoutSeconds }}
diff --git a/kubernetes/helm/collabora-online/templates/dynamicConfig/deployment.yaml b/kubernetes/helm/collabora-online/templates/dynamicConfig/deployment.yaml
index 65ac13b4b14f..e56d30aac418 100644
--- a/kubernetes/helm/collabora-online/templates/dynamicConfig/deployment.yaml
+++ b/kubernetes/helm/collabora-online/templates/dynamicConfig/deployment.yaml
@@ -44,7 +44,7 @@ spec:
httpGet:
path: /
port: {{ .Values.dynamicConfig.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.dynamicConfig.probes.scheme | default "HTTP" | upper }}
failureThreshold: {{ .Values.dynamicConfig.probes.startup.failureThreshold }}
periodSeconds: {{ .Values.dynamicConfig.probes.startup.periodSeconds }}
{{- end }}
@@ -53,7 +53,7 @@ spec:
httpGet:
path: /
port: {{ .Values.dynamicConfig.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.dynamicConfig.probes.scheme | default "HTTP" | upper }}
initialDelaySeconds: {{ .Values.dynamicConfig.probes.liveness.initialDelaySeconds }}
periodSeconds: {{ .Values.dynamicConfig.probes.liveness.periodSeconds }}
timeoutSeconds: {{ .Values.dynamicConfig.probes.liveness.timeoutSeconds }}
@@ -65,7 +65,7 @@ spec:
httpGet:
path: /
port: {{ .Values.dynamicConfig.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.dynamicConfig.probes.scheme | default "HTTP" | upper }}
initialDelaySeconds: {{ .Values.dynamicConfig.probes.readiness.initialDelaySeconds }}
periodSeconds: {{ .Values.dynamicConfig.probes.readiness.periodSeconds }}
timeoutSeconds: {{ .Values.dynamicConfig.probes.readiness.timeoutSeconds }}
diff --git a/kubernetes/helm/collabora-online/templates/dynamicConfig/statefulset.yaml b/kubernetes/helm/collabora-online/templates/dynamicConfig/statefulset.yaml
index 4b53abbbddfd..255da04835fd 100644
--- a/kubernetes/helm/collabora-online/templates/dynamicConfig/statefulset.yaml
+++ b/kubernetes/helm/collabora-online/templates/dynamicConfig/statefulset.yaml
@@ -45,7 +45,7 @@ spec:
httpGet:
path: /
port: {{ .Values.dynamicConfig.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.dynamicConfig.probes.scheme | default "HTTP" | upper }}
failureThreshold: {{ .Values.dynamicConfig.probes.startup.failureThreshold }}
periodSeconds: {{ .Values.dynamicConfig.probes.startup.periodSeconds }}
{{- end }}
@@ -54,7 +54,7 @@ spec:
httpGet:
path: /
port: {{ .Values.dynamicConfig.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.dynamicConfig.probes.scheme | default "HTTP" | upper }}
initialDelaySeconds: {{ .Values.dynamicConfig.probes.liveness.initialDelaySeconds }}
periodSeconds: {{ .Values.dynamicConfig.probes.liveness.periodSeconds }}
timeoutSeconds: {{ .Values.dynamicConfig.probes.liveness.timeoutSeconds }}
@@ -66,7 +66,7 @@ spec:
httpGet:
path: /
port: {{ .Values.dynamicConfig.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.dynamicConfig.probes.scheme | default "HTTP" | upper }}
initialDelaySeconds: {{ .Values.dynamicConfig.probes.readiness.initialDelaySeconds }}
periodSeconds: {{ .Values.dynamicConfig.probes.readiness.periodSeconds }}
timeoutSeconds: {{ .Values.dynamicConfig.probes.readiness.timeoutSeconds }}
diff --git a/kubernetes/helm/collabora-online/templates/statefulset.yaml b/kubernetes/helm/collabora-online/templates/statefulset.yaml
index 572c8dcb8f7d..56adb847aab4 100644
--- a/kubernetes/helm/collabora-online/templates/statefulset.yaml
+++ b/kubernetes/helm/collabora-online/templates/statefulset.yaml
@@ -64,7 +64,7 @@ spec:
httpGet:
path: /
port: {{ .Values.deployment.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.probes.scheme | default "HTTP" | upper }}
failureThreshold: {{ .Values.probes.startup.failureThreshold }}
periodSeconds: {{ .Values.probes.startup.periodSeconds }}
{{- end }}
@@ -73,7 +73,7 @@ spec:
httpGet:
path: /
port: {{ .Values.deployment.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.probes.scheme | default "HTTP" | upper }}
initialDelaySeconds: {{ .Values.probes.liveness.initialDelaySeconds }}
periodSeconds: {{ .Values.probes.liveness.periodSeconds }}
timeoutSeconds: {{ .Values.probes.liveness.timeoutSeconds }}
@@ -85,7 +85,7 @@ spec:
httpGet:
path: /
port: {{ .Values.deployment.containerPort }}
- scheme: HTTP
+ scheme: {{ .Values.probes.scheme | default "HTTP" | upper }}
initialDelaySeconds: {{ .Values.probes.readiness.initialDelaySeconds }}
periodSeconds: {{ .Values.probes.readiness.periodSeconds }}
timeoutSeconds: {{ .Values.probes.readiness.timeoutSeconds }}
diff --git a/kubernetes/helm/collabora-online/values.yaml b/kubernetes/helm/collabora-online/values.yaml
index d577753ae63f..5a90948ff5fe 100644
--- a/kubernetes/helm/collabora-online/values.yaml
+++ b/kubernetes/helm/collabora-online/values.yaml
@@ -197,6 +197,10 @@ deployment:
securityContext: {}

probes:
+ # Scheme used by the kubelet to reach the probe endpoint.
+ # Set to HTTPS when SSL is terminated directly at coolwsd (e.g. via
+ # extra_params: --o:ssl.enable=true).
+ scheme: HTTP
startup:
enabled: true
failureThreshold: 30
@@ -495,6 +499,9 @@ dynamicConfig:
containerPort: 80

probes:
+ # Scheme used by the kubelet to reach the dynamicConfig probe endpoint.
+ # Set to HTTPS when the dynamicConfig pod terminates SSL itself.
+ scheme: HTTP
startup:
enabled: true
failureThreshold: 30