Skip to content

Commit b93f06d

Browse files
author
Your Name
committed
Update Readme
1 parent edff3e5 commit b93f06d

File tree

1 file changed

+25
-63
lines changed

1 file changed

+25
-63
lines changed

charts/opencloud-microservices/README.md

Lines changed: 25 additions & 63 deletions
Original file line numberDiff line numberDiff line change
@@ -963,71 +963,9 @@ Or via command line:
963963
--set opencloud.proxy.basicAuth.enabled=true
964964
```
965965

966-
967-
#### Improved Namespace Handling
968-
969-
The chart now automatically uses the correct namespace across all resources, eliminating the need to manually set the namespace in multiple places.
970-
971-
The following HTTPRoutes are created when `httpRoute.enabled` is set to `true`:
972-
973-
1. **OpenCloud Proxy HTTPRoute (`oc-proxy-https`)**:
974-
- Hostname: `global.domain.opencloud`
975-
- Service: `{{ release-name }}-opencloud`
976-
- Port: 9200
977-
- Headers: Removes Permissions-Policy header to prevent browser console errors
978-
979-
2. **Keycloak HTTPRoute (`oc-keycloak-https`)** (when `keycloak.enabled` is `true`):
980-
- Hostname: `global.domain.keycloak`
981-
- Service: `{{ release-name }}-keycloak`
982-
- Port: 8080
983-
- Headers: Adds Permissions-Policy header to prevent browser features like interest-based advertising
984-
985-
3. **MinIO HTTPRoute (`oc-minio-https`)** (when `opencloud.storage.s3.internal.enabled` is `true`):
986-
- Hostname: `global.domain.minio`
987-
- Service: `{{ release-name }}-minio`
988-
- Port: 9001
989-
- Headers: Adds Permissions-Policy header to prevent browser features like interest-based advertising
990-
991-
default user: opencloud
992-
pass: opencloud-secret-key
993-
994-
4. **MinIO Console HTTPRoute (`oc-minio-console-https`)** (when `opencloud.storage.s3.internal.enabled` is `true`):
995-
- Hostname: `console.minio.opencloud.test` (or `global.domain.minioConsole` if defined)
996-
- Service: `{{ release-name }}-minio`
997-
- Port: 9001
998-
- Headers: Adds Permissions-Policy header to prevent browser features like interest-based advertising
999-
1000-
5. **OnlyOffice HTTPRoute (`oc-onlyoffice-https`)** (when `onlyoffice.enabled` is `true`):
1001-
- Hostname: `global.domain.onlyoffice`
1002-
- Service: `{{ release-name }}-onlyoffice`
1003-
- Port: 443 (or 80 if using HTTP)
1004-
- Path: "/"
1005-
- This route is used to access the OnlyOffice Document Server for collaborative editing
1006-
1007-
6. **WOPI HTTPRoute (`oc-wopi-https`)** (when `onlyoffice.collaboration.enabled` and `onlyoffice.enabled` are `true`):
1008-
- Hostname: `global.domain.wopi` (or `collaboration.wopiDomain`)
1009-
- Service: `{{ release-name }}-collaboration`
1010-
- Port: 9300
1011-
- Path: "/"
1012-
- This route is used for the WOPI protocol communication between OnlyOffice and the collaboration service
1013-
1014-
7. **Collabora HTTPRoute** (when `collabora.enabled` is `true`):
1015-
- Hostname: `global.domain.collabora`
1016-
- Service: `{{ release-name }}-collabora`
1017-
- Port: 9980
1018-
- Headers: Adds Permissions-Policy header to prevent browser features like interest-based advertising
1019-
1020-
8. **Collaboration (WOPI) HTTPRoute** (when `collaboration.enabled` is `true`):
1021-
- Hostname: `collaboration.wopiDomain`
1022-
- Service: `{{ release-name }}-collaboration`
1023-
- Port: 9300
1024-
- Headers: Adds Permissions-Policy header to prevent browser features like interest-based advertising
1025-
1026-
All HTTPRoutes are configured to use the same Gateway specified by `httpRoute.gateway.name` and `httpRoute.gateway.namespace`.
1027-
1028966
## Setting Up Gateway API with Talos, Cilium, and cert-manager
1029967

1030-
This section provides a practical guide to setting up the Gateway API with Talos, Cilium, and cert-manager for the production OpenCloud chart.
968+
This section provides a practical guide to setting up the Gateway API with Talos Kubernetes, Cilium, and cert-manager for the production OpenCloud chart.
1031969

1032970
### Prerequisites
1033971

@@ -1201,6 +1139,30 @@ spec:
12011139
allowedRoutes:
12021140
namespaces:
12031141
from: All
1142+
- name: oc-collabora-https
1143+
protocol: HTTPS
1144+
port: 443
1145+
hostname: "collabora.opencloud.test"
1146+
tls:
1147+
mode: Terminate
1148+
certificateRefs:
1149+
- name: opencloud-wildcard-tls
1150+
namespace: kube-system
1151+
allowedRoutes:
1152+
namespaces:
1153+
from: All
1154+
- name: oc-collaboration-https
1155+
protocol: HTTPS
1156+
port: 443
1157+
hostname: "collaboration.opencloud.test"
1158+
tls:
1159+
mode: Terminate
1160+
certificateRefs:
1161+
- name: opencloud-wildcard-tls
1162+
namespace: kube-system
1163+
allowedRoutes:
1164+
namespaces:
1165+
from: All
12041166
- name: oc-onlyoffice-https
12051167
protocol: HTTPS
12061168
port: 443

0 commit comments

Comments
 (0)