feat(device-edge): standardize Core channel on mTLS 443

device-plane/services/device-control-core/src/edge-channel-supervisor.mjs

@@ -266,7 +266,7 @@ function normalizeRegistration(value) {
     || endpoint.pathname !== "/"
     || endpoint.search
     || endpoint.hash
-    || endpoint.port !== "8443"
+    || endpoint.port !== ""
     || endpoint.hostname !== String(value.servername || "").toLowerCase()
     || !isPublicIpv4(endpoint.hostname)
   ) {

device-plane/services/device-control-core/src/infrastructure-management.mjs

@@ -418,7 +418,7 @@ function normalizeEdgeEndpoint(value) {
     || endpoint.pathname !== "/"
     || endpoint.search
     || endpoint.hash
-    || endpoint.port !== "8443"
+    || endpoint.port !== ""
     || !isPublicIpv4(endpoint.hostname)
   ) {
     throw new TypeError("device_edge_channel_endpoint_invalid");

device-plane/services/device-control-core/test/edge-channel-supervisor.test.mjs

@@ -101,7 +101,7 @@ test("supervisor keeps a failed trust enrollment isolated from other Edges", asy
 function registration(channelGeneration, edgeRegistrationId = "edge:pilot") {
   return {
     edgeRegistrationId,
-    endpoint: "https://155.212.211.15:8443/",
+    endpoint: "https://155.212.211.15/",
     servername: "155.212.211.15",
     channelGeneration,
     trustBundleRef: "edge-trust:moscow-edge",

device-plane/services/device-control-core/test/infrastructure-management.test.mjs

@@ -150,7 +150,7 @@ test("normalizes only a pinned Core-initiated public Edge channel", () => {
     deploymentRef: "deployment:device-edge/moscow-1",
     lifecycleState: "active",
     channel: {
-      endpoint: "https://155.212.211.15:8443/",
+      endpoint: "https://155.212.211.15/",
       servername: "155.212.211.15",
       generationRef: "channel-generation:1",
       trustBundleRef: "edge-trust:moscow-edge",
@@ -163,14 +163,15 @@ test("normalizes only a pinned Core-initiated public Edge channel", () => {
     },
   });
 
-  assert.equal(command.channel.endpoint, "https://155.212.211.15:8443/");
+  assert.equal(command.channel.endpoint, "https://155.212.211.15/");
   assert.equal(command.channel.lifecycleState, "active");
   assert.equal(command.channel.certificateIdentities.length, 1);
   for (const endpoint of [
-    "https://127.0.0.1:8443/",
-    "https://192.168.1.1:8443/",
+    "https://127.0.0.1/",
+    "https://192.168.1.1/",
+    "https://155.212.211.15:8443/",
     "https://155.212.211.15:9921/",
-    "http://155.212.211.15:8443/",
+    "http://155.212.211.15/",
   ]) {
     assert.throws(
       () => normalizeInfrastructureManagementCommand("edge.ensure", {

device-plane/services/device-control-core/test/infrastructure-repository.test.mjs

@@ -198,7 +198,7 @@ test("lists only bounded active Edge channel registrations without secrets", asy
     step("from device_edges", {
       rows: [{
         id: edgeId,
-        channel_endpoint: "https://155.212.211.15:8443/",
+        channel_endpoint: "https://155.212.211.15/",
         channel_servername: "155.212.211.15",
         channel_generation_ref: "channel-generation:1",
         channel_trust_bundle_ref: "edge-trust:moscow-edge",
@@ -218,7 +218,7 @@ test("lists only bounded active Edge channel registrations without secrets", asy
 
   assert.deepEqual(registrations[0], {
     edgeRegistrationId: `edge:${edgeId}`,
-    endpoint: "https://155.212.211.15:8443/",
+    endpoint: "https://155.212.211.15/",
     servername: "155.212.211.15",
     channelGeneration: "channel-generation:1",
     trustBundleRef: "edge-trust:moscow-edge",