openshift.cern.ch -> paas.cern.ch

Do not merge yet, just approve. You will only break the old openshift.cern.ch CI and would need to run it by hand every day till this migration happens

Since the build is now done on CI, no need for specific resource specs on OKD4 side.

chart/charts/nginx-redirect/templates/nginx-redirect.yaml

+
+apiVersion: route.openshift.io/v1
+kind: Route
+metadata:
+  annotations:
+    router.cern.ch/network-visibility: Internet
+    # Autogenerate cert with Let's encrypt: https://cern.service-now.com/service-portal?id=kb_article&n=KB0006299
+    kubernetes.io/tls-acme: 'true'
+    haproxy.router.openshift.io/ip_whitelist: ""
+  labels:
+    app: nginx-redirection
+  name: nginx-redirection
+spec:
+  host: {{ .Values.legacyurl }}
+  tls:
+    insecureEdgeTerminationPolicy: Redirect
+    termination: edge
+  to:
+    kind: Service
+    name: nginx-redirection
+    weight: 100
+  wildcardPolicy: None
+
+---
+
+apiVersion: apps.openshift.io/v1
+kind: DeploymentConfig
+metadata:
+  annotations:
+    description: Redirects users from https://{{ .Values.legacyurl }} to https://{{ .Values.paasurl }}
+  labels:
+    app: nginx-redirection
+  name: nginx-redirection
+spec:
+  replicas: 1
+  selector:
+    app: nginx-redirection
+    deploymentconfig: nginx-redirection
+  strategy:
+    type: Rolling
+  template:
+    metadata:
+      annotations:
+        openshift.io/container.nginx-redirection.image.entrypoint: '["nginx","-g","daemon
+          off;"]'
+        openshift.io/generated-by: OpenShiftNewApp
+      labels:
+        app: nginx-redirection
+        deploymentconfig: nginx-redirection
+    spec:
+      containers:
+      - image: nginx:stable-alpine
+        imagePullPolicy: Always
+        name: nginx-redirection
+        ports:
+        - containerPort: 8080
+          protocol: TCP
+        resources:
+          limits:
+            cpu: 100m
+            memory: 20Mi
+          requests:
+            cpu: 50m
+            memory: 10Mi
+        volumeMounts:
+        - mountPath: /etc/nginx/conf.d
+          name: config
+        - mountPath: /var/cache/nginx
+          name: volume-cache
+        - mountPath: /var/run
+          name: volume-run
+      restartPolicy: Always
+      volumes:
+      - configMap:
+          defaultMode: 420
+          name: nginx-redirection
+        name: config
+      - emptyDir: {}
+        name: volume-cache
+      - emptyDir: {}
+        name: volume-run
+  triggers:
+  - type: ConfigChange
+
+---
+
+apiVersion: v1
+kind: Service
+metadata:
+  labels:
+    app: nginx-redirection
+  name: nginx-redirection
+spec:
+  ports:
+  - name: 8080-tcp
+    port: 8080
+    protocol: TCP
+    targetPort: 8080
+  selector:
+    app: nginx-redirection
+    deploymentconfig: nginx-redirection
+  sessionAffinity: None
+  type: ClusterIP
+
+---
+
+apiVersion: v1
+data:
+  redirect.conf: |
+    server {
+        listen       8080 default_server;
+        server_name  {{ .Values.paasurl }};
+
+        server_tokens off; ## Don't show the nginx version number, a security best practice
+        return 301 https://$server_name$request_uri; # Make sure we redirect to the servername we want and not the host header sent by the client
+        access_log  /dev/stdout;
+        error_log   /dev/stdout;
+
+        # redirect server error pages to the static page /50x.html
+        error_page   500 502 503 504  /50x.html;
+        location = /50x.html {
+            root   /usr/share/nginx/html;
+        }
+    }
+kind: ConfigMap
+metadata:
+  labels:
+    app: gitlab
+  name: nginx-redirection