Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1344746

Summary: [RFE] Allow routes to share a host owned by a namespace using multiple paths claimed by different namespaces
Product: OpenShift Container Platform Reporter: Brendan Mchugh <bmchugh>
Component: RFEAssignee: Ben Bennett <bbennett>
Status: CLOSED CURRENTRELEASE QA Contact: Johnny Liu <jialiu>
Severity: urgent Docs Contact:
Priority: medium    
Version: 3.2.0CC: acomabon, akostadi, aos-bugs, bbennett, erich, jnordell, jokerman, jswensso, mbarrett, mcurry, mmccomas, nbhatt, pep, sjr, sreber
Target Milestone: ---Keywords: RFE
Target Release: 3.5.z   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2019-04-17 17:28:48 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1267746    

Description Brendan Mchugh 2016-06-10 15:29:34 UTC
3. What is the nature and description of the request?  

The aim is to be be able to split an application into different pods running in different namespaces, e.g.

https://app.service.com/   (for everything with the exception of /api/old & /api/v2)
https://app.service.com/api/old 
https://app.service.com/api/v2 

It should be possible to create routes to multiple applications running in different namespaces which can be accessed with a http(s) URL that share the same route host name (host part in the URL) with the path component pointing to different pods in different namespaces.

4. Why does the customer need this? (List the business requirements here) 
With this feature, it would be quite simple to setup multiple related microservices exposed using a single host leveraging the namespaces isolation for security.

The solution must cope with the requirement that in one ISE installation multiple name spaces are separated from each other (they don't trust each other and can't claim resources or consume services from each other), so this feature to use that same host must be optional configurable per route host name.

5. How would the customer like to achieve this? (List the functional requirements here)  

6. For each functional requirement listed, specify how Red Hat and the customer can test to confirm the requirement is successfully implemented.  

7. Is there already an existing RFE upstream or in Red Hat Bugzilla?  
No

10. List any affected packages or components.

Comment 2 Dan McPherson 2016-10-18 13:49:41 UTC
*** Bug 1386243 has been marked as a duplicate of this bug. ***

Comment 6 Ben Bennett 2016-11-22 19:32:02 UTC
Initially we are disabling the host checks: https://trello.com/c/jd6RksVX

Then this card covers follow-on behavior: https://trello.com/c/ZhhPv7VQ

Comment 7 Josep 'Pep' Turro Mauri 2016-12-04 23:04:34 UTC
As the two changes in comment 6 have different target releases, bug 1401338 has been created to track the initial work to disable host checks.

This one here will keep tracking the longer term work on host/path claims.

Comment 8 Eric Paris 2017-03-01 16:11:45 UTC
*** Bug 1426538 has been marked as a duplicate of this bug. ***

Comment 11 Ben Bennett 2017-07-12 15:59:38 UTC
*** Bug 1452700 has been marked as a duplicate of this bug. ***

Comment 17 Ben Bennett 2019-04-17 17:28:48 UTC
This was addressed in 3.5 by this feature:
  https://docs.openshift.com/container-platform/3.5/architecture/core_concepts/routes.html#disable-namespace-ownership-check

Please let me know if this does not address your needs.