TT-11532 added config option for the http server in mdcb 2.5.1

components/tyk-mdcb/templates/deployment-mdcb.yaml

@@ -44,7 +44,7 @@ spec:
             httpGet:
               path: {{ .Values.mdcb.probes.liveness.path }}
               port: {{ .Values.mdcb.probes.healthCheckPort}}
-              scheme: "HTTP"
+              scheme: {{ if .Values.mdcb.httpServerOptions.useSSL }}HTTPS{{ else }}HTTP{{ end }}
             initialDelaySeconds: {{ .Values.mdcb.probes.liveness.initialDelaySeconds }}
             periodSeconds: {{ .Values.mdcb.probes.liveness.periodSeconds }}
             timeoutSeconds: {{ .Values.mdcb.probes.liveness.timeoutSeconds }}
@@ -57,7 +57,7 @@ spec:
             httpGet:
               path: {{ .Values.mdcb.probes.readiness.path }}
               port: {{ .Values.mdcb.probes.healthCheckPort}}
-              scheme: "HTTP"
+              scheme: {{ if .Values.mdcb.httpServerOptions.useSSL }}HTTPS{{ else }}HTTP{{ end }}
           resources:
             {{- toYaml .Values.mdcb.resources | nindent 12 }}
           volumeMounts:
@@ -124,6 +124,18 @@ spec:
             - name: TYK_MDCB_SERVEROPTIONS_CERTIFICATE_CERTFILE
               value: "{{ .Values.mdcb.tls.certificateCertFile }}"                         
             {{- end }}
+
+            {{- if .Values.mdcb.httpServerOptions.useSSL }}
+            - name: TYK_MDCB_HTTPSERVEROPTIONS_USESSL
+              value: "{{ .Values.mdcb.httpServerOptions.useSSL }}"
+            - name: TYK_MDCB_HTTPSERVEROPTIONS_CERTIFICATE_KEYFILE
+              value: "{{ .Values.mdcb.httpServerOptions.certificateKeyFile }}"
+            - name: TYK_MDCB_HTTPSERVEROPTIONS_CERTIFICATE_CERTFILE
+              value: "{{ .Values.mdcb.httpServerOptions.certificateCertFile }}"
+            - name: TYK_MDCB_HTTPSERVEROPTIONS_MINVERSION
+              value: "{{ .Values.mdcb.httpServerOptions.minVersion }}"
+            {{- end }}
+
             {{ if .Values.global.mtls.privateCertificateEncodingSecret }}
             - name: TYK_MDCB_SECURITY_PRIVATECERTIFICATEENCODINGSECRET
               value: {{ .Values.global.mtls.privateCertificateEncodingSecret | quote }}

components/tyk-mdcb/values.yaml

@@ -184,7 +184,17 @@ mdcb:
 
   # If enabled, aggregate data will be generated per minute.
   storeAnalyticsPerMinute: false   
-
+
+  # defines the SSL/TLS settings for the http server where the healthcheck is exposed
+  httpServerOptions:
+    # if enabled then the endpoints will be served over https
+    useSSL: false
+    # certificateKeyFile: /path-to-cert-keyfile
+    # certificateCertFile: /path-to-certfile
+
+    # For TLS 1.0 use 769, for TLS 1.1 use 770, for TLS 1.2 use 771, for TLS 1.3 use 772
+    # minVersion: 771
+
   probes:
     # This port lets MDCB allow standard health checks.
     # It also defines the path for liveness and readiness probes.

tyk-control-plane/values.yaml

@@ -1189,6 +1189,13 @@ tyk-mdcb:
 
     # If enabled, aggregate data will be generated per minute.
     storeAnalyticsPerMinute: false
+    httpServerOptions:
+      # if enabled then the endpoints will be served over https
+      useSSL: false
+      # certificateKeyFile: /path-to-cert-keyfile
+      # certificateCertFile: /path-to-certfile
+      # For TLS 1.0 use 769, for TLS 1.1 use 770, for TLS 1.2 use 771, for TLS 1.3 use 772
+      # minVersion: 771
 
     probes:
       # This port lets MDCB allow standard health checks.