Bug 2074561

Summary:	[GSS] [RFE] Add termination policy to ocs-storagecluster-cephobjectstore route
Product:	[Red Hat Storage] Red Hat OpenShift Data Foundation	Reporter:	Sunil Kumar Acharya <sheggodu>
Component:	ocs-operator	Assignee:	Jiffin <jthottan>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Martin Bukatovic <mbukatov>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	4.10	CC:	agantony, jthottan, kramdoss, madam, mmuench, muagarwa, ocs-bugs, odf-bz-bot, rcyriac, sostapov
Target Milestone:	---	Keywords:	FutureFeature
Target Release:	ODF 4.10.1
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:	Cause: The SSL termination policy was not added to RGW route in ODF. Consequence: So in a close secure environment throwing errors for publically accessible openshift route. Fix: Provide an option to disable RGW routes in such an environment Result: If there is security concerns exists, RGW routes can be disabled	Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-05-13 16:10:03 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Sunil Kumar Acharya 2022-04-12 13:47:31 UTC

This bug was initially created as a copy of Bug #2067079

I am copying this bug because: 



This bug was initially created as a copy of Bug #2063691

I am copying this bug because: 

Separating between MCG and RGW routes. 

Description of problem (please be detailed as possible and provide log
snippets):

- Add termination policy to  ocs-storagecluster-cephobjectstore route


Version of all relevant components (if applicable):

- All

Does this issue impact your ability to continue to work with the product
(please explain in detail what is the user impact)?

- Cu is getting compliant issues because of "EdgeTerminationPolicy" of these 
  routes.

Is there any workaround available to the best of your knowledge?

- The route can be patched with the following command but it gets reconciled.

oc patch route s3 -n openshift-storage --type merge -p '{"spec":{"tls":{"insecureEdgeTerminationPolicy":"Redirect","termination":"reencrypt"}}}'

- Thus we need to add this parameter in the Cephobjectstore CR so that it won't 
  be reconciled.

Rate from 1 - 5 the complexity of the scenario you performed that caused this
bug (1 - very simple, 5 - very complex)?


N/A

Can this issue reproducible?

N/A

Can this issue reproduce from the UI?

N/A

If this is a regression, please provide more details to justify this:

N/A

Steps to Reproduce:
N/A

Actual results:

- The termination policy to ocs-storagecluster-cephobjectstore route gets reconciled.


Expected results:

- Add termination policy toocs-storagecluster-cephobjectstore route without reconcilation.


Additional info:

In the next steps.