Allow public LiveView origin in development

deploy/helm/who-need-help/templates/deployments.yaml

@@ -83,6 +83,10 @@ spec:
               value: {{ $root.Values.app.scheme | quote }}
             - name: PHX_URL_PORT
               value: {{ $root.Values.app.urlPort | quote }}
+            {{- with $root.Values.app.checkOrigins }}
+            - name: PHX_CHECK_ORIGINS
+              value: {{ . | quote }}
+            {{- end }}
             - name: PORT
               value: {{ $root.Values.app.port | quote }}
             - name: POOL_SIZE

deploy/helm/who-need-help/values-kind.yaml

@@ -11,6 +11,7 @@ service:
 existingSecret: who-need-help-local
 
 app:
-  host: localhost
+  host: whoneedhelp.imalto.site
-  scheme: http
+  scheme: https
-  urlPort: "4011"
+  urlPort: "443"
+  checkOrigins: "https://whoneedhelp.imalto.site,http://localhost:4011"

deploy/helm/who-need-help/values.yaml

@@ -22,6 +22,9 @@ app:
   host: localhost
   scheme: https
   urlPort: "443"
+  # Optional comma-separated HTTP(S) origins accepted by Phoenix for
+  # LiveView/WebSocket connections. Leave empty to use the public URL above.
+  checkOrigins: ""
   port: "4000"
   migratePoolSize: "2"
   # OTP otherwise derives this from the container nofile ulimit. Some

scripts/quality.sh

@@ -1274,6 +1274,16 @@ test "$(
 test "$(
   grep -c 'value: "+Q 65536"' "$scan_dir/rendered-helm.yaml"
 )" -eq 5
+test "$(
+  grep -c 'name: PHX_CHECK_ORIGINS' "$scan_dir/rendered-helm.yaml"
+)" -eq 2
+test "$(
+  grep -c 'value: "https://whoneedhelp.imalto.site,http://localhost:4011"' \
+    "$scan_dir/rendered-helm.yaml"
+)" -eq 2
+test "$(
+  grep -c 'value: "whoneedhelp.imalto.site"' "$scan_dir/rendered-helm.yaml"
+)" -eq 2
 test "$(
   grep -c '^kind: NetworkPolicy$' "$scan_dir/rendered-helm.yaml"
 )" -eq 1

scripts/verify-beam-runtime.sh

@@ -145,6 +145,7 @@ case "$MODE" in
           | .metadata.labels["app.kubernetes.io/component"] as $component
           | select(
               ($component == "web" or $component == "worker") and
+              .metadata.deletionTimestamp == null and
               .status.phase == "Running" and
               ([.status.containerStatuses[]?.ready] | all)
             )