The haproxy container uses a non-privileged port.

Service spec.ports maps to the public TLS port. First just for
kubectl/yaml deployments.

Addresses #38

deploy/nodeport.yaml

@@ -14,7 +14,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/architectures/cluster-and-ns-wide/nodeport-coffee.yaml

@@ -15,7 +15,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/architectures/cluster-and-ns-wide/nodeport-system.yaml

@@ -15,7 +15,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/architectures/clusterwide/nodeport.yaml

@@ -15,7 +15,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/architectures/multi-controller/nodeport-coffee.yaml

@@ -15,7 +15,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/architectures/multi-controller/nodeport-tea.yaml

@@ -15,7 +15,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/architectures/multi-varnish-ns/nodeport-coffee.yaml

@@ -15,7 +15,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/architectures/multi-varnish-ns/nodeport-tea.yaml

@@ -15,7 +15,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/file-cache/varnish.yaml

@@ -12,7 +12,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/varnish_pod_template/cli-args.yaml

@@ -12,7 +12,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/varnish_pod_template/env.yaml

@@ -12,7 +12,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/varnish_pod_template/nonroot.yaml

@@ -12,7 +12,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

examples/varnish_pod_template/proxy.yaml

@@ -12,7 +12,7 @@ spec:
     protocol: TCP
     name: http
   - port: 443
-    targetPort: 443
+    targetPort: 4443
     protocol: TCP
     name: tls
   selector:

pkg/haproxy/dataplane.go

@@ -60,7 +60,7 @@ const (
 	crtPath          = "/etc/ssl/private"
 )
 
-var port = int64(443)
+var port = int64(4443)
 
 // ReloadStatus classifies the current state of a dataplane reload.
 type ReloadStatus uint8