# HTTPS access through the OpenShift router.
#
# Termination is passthrough: vshell-httpsd does its own TLS with the PKCS#12
# certificate the entrypoint generated, so the router must not decrypt. Clients
# therefore see the container's self-signed certificate unless you mount a real
# certificate at $VSHELL_TLS_P12.
#
# HTTP is not routed: VShell's port-80 listener only redirects to https://<host>:443
# and the redirect target uses the container's own hostname.
apiVersion: route.openshift.io/v1
kind: Route
metadata:
  name: vshell-https
  namespace: vshell
  labels:
    app.kubernetes.io/name: vshell
spec:
  to:
    kind: Service
    name: vshell
    weight: 100
  port:
    targetPort: https
  tls:
    termination: passthrough
    insecureEdgeTerminationPolicy: None
  wildcardPolicy: None