Skip to content

WIP Openshift support#106

Draft
jfaltermeier wants to merge 7 commits into
mainfrom
jf/openshift
Draft

WIP Openshift support#106
jfaltermeier wants to merge 7 commits into
mainfrom
jf/openshift

Conversation

@jfaltermeier
Copy link
Copy Markdown
Contributor

@jfaltermeier jfaltermeier commented Apr 13, 2026

* Create theia-cloud-sessions ServiceAccount for session pods (all
providers)
* Create anyuid SCC RoleBinding for OpenShift to allow any UID in
session pods
* add Route resources for the landing page, service, and session routing
template
* disable Ingress templates when operator.cloudProvider is OPENSHIFT
* grant the operator RBAC permission to manage route.openshift.io/routes
* replace the static session Route template with an
openshift-route-config ConfigMap carrying TLS and annotation settings
for the operator
* fail Helm rendering when OPENSHIFT is combined with hosts.usePaths:
true
* only grant route.openshift.io permissions in the base chart when
cloudProvider is OPENSHIFT
* wrap theia-cloud-ca-certificate.yaml and clusterissuer-selfsigned.yaml
in {{- if .Values.issuerca.enable }} guards
* only render pullSecret in the AppDefinition when it is set
* document the value as optional and leave it unset for public
  registries; matches the existing pattern used for the other
  imagePullSecret fields (landing-page, operator, service)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant