feat(fleet): expose operator UI via cert-manager TLS ingress #321
Reference in New Issue
Block a user
No description provided.
Delete Branch "feat/fleet-operator-ui-ingress"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Adds a ClusterIP Service to the operator chart and an Ingress applied
after install, exposing the UI at fleet-stg.{base_domain} — coherent
with the sso-stg./secrets-stg. staging hosts.
annotation + tls block + OKD edge-termination (no-op off OpenShift);
None keeps plain HTTP for issuer-less k3d. Render extracted + unit-tested.
unset (dev/e2e) leaves the UI cluster-internal.
HTTP->HTTPS redirect is unconfirmed on OKD (no portable Ingress annotation
in use here) and must be verified on staging.
Adds a ClusterIP Service to the operator chart and an Ingress applied after install, exposing the UI at fleet-stg.{base_domain} — coherent with the sso-stg./secrets-stg. staging hosts. - chart: ClusterIP Service on OPERATOR_HTTP_PORT (18080) - K8sIngressScore: optional cluster_issuer → cert-manager.io/cluster-issuer annotation + tls block + OKD edge-termination (no-op off OpenShift); None keeps plain HTTP for issuer-less k3d. Render extracted + unit-tested. - FleetOperatorScore.ingress(host, issuer): composes the ingress post-install; unset (dev/e2e) leaves the UI cluster-internal. - FleetDeployConfig: base_domain + cluster_issuer; CD binary derives the host. HTTP->HTTPS redirect is unconfirmed on OKD (no portable Ingress annotation in use here) and must be verified on staging.@@ -56,6 +63,8 @@ impl Default for FleetDeployConfig {openbao_namespace: "openbao-staging".to_string(),operator_chart_registry: "hub.nationtech.io".to_string(),operator_chart_project: "harmony".to_string(),base_domain: "cb1.nationtech.io".to_string(),We need to figure out a better (more secure and less vendor-locked) way to provide sane defaults for public hostnames.
We do plan on providing a free tier for harmony users but that is not done yet.
LTGM