jacuzi
Mission Specialist
Mission Specialist
  • 896 Views

Openshift + Helm + Secure Route

Jump to solution

I am new to Helm and am trying to think how to configure a secure route with values.yaml.

Lets say I have templates/myapp-route.yaml which by default is not secure and I would like to use Edge route without passing any certificates.

I can see that helm has an option to enable TLS for Ingress, but I am confused how to enable TLS just by using that or should there be something else that would cover Openshift route?

If I have understood correctly values.yaml is just values you can basically make up from your mind to change or overwrite the values in the templates/myapp-route.yaml -file.

If I enable Edge route in the Openshift, the route.yaml will add the following lines:

spec:
   tls:
     insecureEdgeTermininationPolicy: None
     termination: edge

If values.yaml is just for changing or overwriting values and it can not add anything, how does one add those lines to the templates/myapp-route.yaml -file? I think they dont have any other values which would disable Edge route and TLS.

 

Labels (3)
1 Solution

Accepted Solutions
alexcorcoles
Flight Engineer
Flight Engineer
  • 829 Views

Hi,

This will depend on your chart you are using. For example, the etherpad chart in the redhat-cop repo:

https://github.com/redhat-cop/helm-charts/blob/main/charts/etherpad/templates/route.yaml

Has a template for creating a route; The addition of the route is controlled by the .route.enabled value, and you can further parameterize the route using other values. This charts does edge/redirect, but does not have any customization- however I think that's fine because those values are likely quite adequate for most cases.

However, for example the Bitnami Wordpress chart:

https://github.com/bitnami/charts/tree/main/bitnami/wordpress/

, does not seem to have support for enabling routes, and only provides ingress resources.

Cheers,

Álex

View solution in original post

2 Replies
alexcorcoles
Flight Engineer
Flight Engineer
  • 830 Views

Hi,

This will depend on your chart you are using. For example, the etherpad chart in the redhat-cop repo:

https://github.com/redhat-cop/helm-charts/blob/main/charts/etherpad/templates/route.yaml

Has a template for creating a route; The addition of the route is controlled by the .route.enabled value, and you can further parameterize the route using other values. This charts does edge/redirect, but does not have any customization- however I think that's fine because those values are likely quite adequate for most cases.

However, for example the Bitnami Wordpress chart:

https://github.com/bitnami/charts/tree/main/bitnami/wordpress/

, does not seem to have support for enabling routes, and only provides ingress resources.

Cheers,

Álex

Join the discussion
You must log in to join this conversation.