Don't use privileged ports

So that they don't require running as root.

Author: jwendell

conformance/mesh/manifests.yaml

@@ -30,11 +30,10 @@ spec:
         imagePullPolicy: IfNotPresent
         args:
         - --tcp=9090
-        - --port=80
         - --port=8080
         - --grpc=7070
-        - --port=443
-        - --tls=443
+        - --port=8443
+        - --tls=8443
         - --crt=/cert.crt
         - --key=/cert.key
 ---
@@ -51,11 +50,13 @@ spec:
   - name: http
     port: 80
     appProtocol: http
+    targetPort: 8080
   - name: http-alt
     port: 8080
     appProtocol: http
   - name: https
     port: 443
+    targetPort: 8443
   - name: tcp
     port: 9090
   - name: grpc
@@ -86,11 +87,10 @@ spec:
         imagePullPolicy: IfNotPresent
         args:
         - --tcp=9090
-        - --port=80
         - --port=8080
         - --grpc=7070
-        - --port=443
-        - --tls=443
+        - --port=8443
+        - --tls=8443
         - --crt=/cert.crt
         - --key=/cert.key
 ---
@@ -107,11 +107,13 @@ spec:
   - name: http
     port: 80
     appProtocol: http
+    targetPort: 8080
   - name: http-alt
     port: 8080
     appProtocol: http
   - name: https
     port: 443
+    targetPort: 8443
   - name: tcp
     port: 9090
   - name: grpc
@@ -130,11 +132,13 @@ spec:
   - name: http
     port: 80
     appProtocol: http
+    targetPort: 8080
   - name: http-alt
     port: 8080
     appProtocol: http
   - name: https
     port: 443
+    targetPort: 8443
   - name: tcp
     port: 9090
   - name: grpc

conformance/tests/mesh-frontend.go

@@ -59,7 +59,7 @@ var MeshFrontend = suite.ConformanceTest{
 			{
 				TestCaseName: "Send to pod IP",
 				Request: http.Request{
-					Host:   v2.Address,
+					Host:   v2.Address + ":8080",
 					Method: "GET",
 				},
 				Response: http.Response{