workspace-server/Dockerfile: add HEALTHCHECK for /health endpoint

mc#1158: workspace/Dockerfile has a HEALTHCHECK; workspace-server/Dockerfile was missing one. Without this, docker ps never shows (healthy) for this container, and orchestrators that poll /health directly have no equivalent signal baked into the image layer. HEALTHCHECK probes http://localhost:8080/health every 30s with a 5s timeout, 3 retries, and a 30s start period to allow for server boot. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-15 23:17:47 +00:00
1 changed files with 7 additions and 0 deletions
@@ -69,6 +69,13 @@ COPY .tenant-bundle-deps/plugins /plugins
 # Non-root runtime with Docker socket access for workspace provisioning.
 RUN addgroup -g 1000 platform && adduser -u 1000 -G platform -s /bin/sh -D platform
 EXPOSE 8080
+# HEALTHCHECK: probe the /health endpoint so orchestrators and docker's
+# health monitoring can detect a crashed or wedged server.
+# mc#1158: workspace/Dockerfile has a HEALTHCHECK; workspace-server/Dockerfile
+# was missing one, so docker ps never shows (healthy) for this container.
+# Interval 30s, timeout 5s, 3 retries, 30s start period (server boot).
+HEALTHCHECK --interval=30s --timeout=5s --retries=3 --start-period=30s \
+  CMD wget -qO- --timeout=5 http://localhost:8080/health || exit 1
 COPY <<'ENTRY' /entrypoint.sh
 #!/bin/sh
 # Set up docker-socket group (unchanged from pre-sidecar entrypoint).