Openshift + Helm + Secure Route

[jacuzi]

I am new to Helm and am trying to think how to configure a secure route with values.yaml.

Lets say I have templates/myapp-route.yaml which by default is not secure and I would like to use Edge route without passing any certificates.

I can see that helm has an option to enable TLS for Ingress, but I am confused how to enable TLS just by using that or should there be something else that would cover Openshift route?

If I have understood correctly values.yaml is just values you can basically make up from your mind to change or overwrite the values in the templates/myapp-route.yaml -file.

If I enable Edge route in the Openshift, the route.yaml will add the following lines:

spec:
   tls:
     insecureEdgeTermininationPolicy: None
     termination: edge

If values.yaml is just for changing or overwriting values and it can not add anything, how does one add those lines to the templates/myapp-route.yaml -file? I think they dont have any other values which would disable Edge route and TLS.

[Wasim_Raja]

@jacuzi The below links should help you get a little idea.

https://docs.openshift.com/container-platform/4.7/networking/routes/secured-routes.html

https://docs.openshift.com/container-platform/4.9/networking/routes/route-configuration.html 

[alexcorcoles · Accepted solution]

Hi,

This will depend on your chart you are using. For example, the etherpad chart in the redhat-cop repo:

https://github.com/redhat-cop/helm-charts/blob/main/charts/etherpad/templates/route.yaml

Has a template for creating a route; The addition of the route is controlled by the .route.enabled value, and you can further parameterize the route using other values. This charts does edge/redirect, but does not have any customization- however I think that's fine because those values are likely quite adequate for most cases.

However, for example the Bitnami Wordpress chart:

https://github.com/bitnami/charts/tree/main/bitnami/wordpress/

, does not seem to have support for enabling routes, and only provides ingress resources.

Cheers,

Álex