fix(chart/webapp): introduce separate webapp.service.servicePortTargetPort knob

PLT-906's previous patch overloaded webapp.service.targetPort for two
different purposes: (1) the webapp container's listening port (used
by .containerPort on the Deployment AND by downstream consumers like
sidecar nginx proxy_pass localhost:<port>), and (2) the Service's
ports[].targetPort field that controls in-pod routing.

Those two values diverge whenever the Service should route through a
sidecar container's named port (e.g. an in-pod TLS terminator or auth
proxy) rather than directly to the webapp container. Overloading one
field forced consumers to pick between routing through the sidecar
and being able to reach the webapp.

Add a dedicated webapp.service.servicePortTargetPort knob (default
empty -> falls back to webapp.service.targetPort -> 'http'), so
deployments can route Service traffic to a sidecar's named port
without affecting containerPort / downstream consumers. Existing
behavior preserved for users who don't set the new knob.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: ConProgramming

hosting/k8s/helm/Chart.yaml

@@ -2,7 +2,7 @@ apiVersion: v2
 name: trigger
 description: The official Trigger.dev Helm chart
 type: application
-version: 4.5.0-rc.4-plt663.4
+version: 4.5.0-rc.4-plt663.5
 appVersion: v4.5.0-rc.4
 home: https://trigger.dev
 sources:

hosting/k8s/helm/templates/webapp.yaml

@@ -498,7 +498,7 @@ spec:
   type: {{ .Values.webapp.service.type }}
   ports:
     - port: {{ .Values.webapp.service.port }}
-      targetPort: {{ .Values.webapp.service.targetPort | default "http" }}
+      targetPort: {{ .Values.webapp.service.servicePortTargetPort | default .Values.webapp.service.targetPort | default "http" }}
       protocol: TCP
       name: {{ .Values.webapp.service.name | default "http" }}
   selector:

hosting/k8s/helm/values.yaml

@@ -581,6 +581,15 @@ electric:
     # (e.g. a service-mesh ingress or platform LB) needs to address the
     # port by a specific name instead of the chart default "http".
     name: ""
+    # Optional override of the Service's `ports[].targetPort` field
+    # only. Defaults to `webapp.service.targetPort` (same value used
+    # for the webapp container's listening port), which matches
+    # historical behavior — Service routes directly to the webapp
+    # container. Override when the Service should route to a sidecar
+    # container's named port instead (e.g. an in-pod TLS terminator or
+    # auth proxy listening on a different containerPort than the
+    # webapp itself).
+    servicePortTargetPort: ""
     annotations: {}
   resources: {}