Ensure liveness, readiness and startup probes on all workloads

Every container in every Deployment/StatefulSet now defines all three
probes. The paperless-ngx consume CronJob intentionally has none (batch
workload).

- Add probes: apache-tika, calibre-web-automated, cyberchef, gotenberg,
  homeassistant, patchmon-backend, samba (tcp/445), teamspeak-server
  (tcp/30033), zipline (/api/healthcheck)
- Fix voucher-vault null probe values with real defaults
- Fix startup-probe semantics in template-chart and rallly (no
  initialDelaySeconds, generous failureThreshold)
- Switch outline probes to its /_health endpoint
- Add readiness/startup probes to satisfactory
- Add startup probes to matrix-synapse, matrix-delegation-nginx,
  paperless-server, patchmon-frontend, urlaubsverwaltung
- Major version bump for all published charts

cyberchef/Chart.yaml

@@ -4,7 +4,7 @@ description: A Helm chart to deploy Cyberchef on Kubernetes
 
 type: application
 
-version: 1.0.0+up10.22.1
+version: 2.0.0+up10.22.1
 appVersion: "10.22.1"
 
 maintainers:

cyberchef/templates/cyberchef.deployment.yaml

@@ -20,11 +20,16 @@ spec:
         - name: {{ .Release.Name }}-{{ .Chart.Name }}-deployment
           image: "ghcr.io/gchq/cyberchef:{{ .Chart.AppVersion }}"
           imagePullPolicy: IfNotPresent
-          # TODO: liveness and readiness probes
           ports:
             - containerPort: 80
               protocol: TCP
               name: http
+          livenessProbe:
+            {{- toYaml .Values.cyberchef.livenessProbe | nindent 12 }}
+          readinessProbe:
+            {{- toYaml .Values.cyberchef.readinessProbe | nindent 12 }}
+          startupProbe:
+            {{- toYaml .Values.cyberchef.startupProbe | nindent 12 }}
           resources:
             requests:
               memory: "{{ .Values.cyberchef.resources.requests.memory }}"

cyberchef/values.yaml

@@ -1,4 +1,26 @@
 cyberchef:
+  livenessProbe:
+    httpGet:
+      path: /
+      port: http
+    periodSeconds: 10
+    timeoutSeconds: 5
+    failureThreshold: 3
+  readinessProbe:
+    httpGet:
+      path: /
+      port: http
+    periodSeconds: 10
+    timeoutSeconds: 5
+    failureThreshold: 3
+  # The startup probe gates liveness/readiness. Startup budget = 5s * 30 = 150s.
+  startupProbe:
+    httpGet:
+      path: /
+      port: http
+    periodSeconds: 5
+    timeoutSeconds: 5
+    failureThreshold: 30
   resources:
     requests:
       cpu: 0.1