feat: add option to override gateway sectionName for all HTTPRoutes

- Add configurable sectionName to unify all routes under one gateway section
- Maintain backward compatibility with component-specific defaults
- Useful for integration with existing gateways that have a single HTTPS listener
- Update documentation in README and values.yaml

Co-authored-by: Teo Hoinaru <[email protected]>

Author: teo

charts/opencloud/README.md

@@ -445,6 +445,7 @@ This chart includes HTTPRoute resources that can be used to expose the OpenCloud
 | `httpRoute.enabled` | Enable HTTPRoutes | `true` |
 | `httpRoute.gateway.name` | Gateway name | `opencloud-gateway` |
 | `httpRoute.gateway.namespace` | Gateway namespace | `""` (defaults to Release.Namespace) |
+| `httpRoute.gateway.sectionName` | Gateway section name | `""` (defaults to multiple route-specific section names for the routes listed below) |
 
 The following HTTPRoutes are created when `httpRoute.enabled` is set to `true`:
 
@@ -495,7 +496,7 @@ The following HTTPRoutes are created when `httpRoute.enabled` is set to `true`:
    - Port: 9300
    - Headers: Adds Permissions-Policy header to prevent browser features like interest-based advertising
 
-All HTTPRoutes are configured to use the same Gateway specified by `httpRoute.gateway.name` and `httpRoute.gateway.namespace`.
+All HTTPRoutes are configured to use the same Gateway specified by `httpRoute.gateway.name` and `httpRoute.gateway.namespace`. If `httpRoute.gateway.sectionName` is set, they also all use a single section (e.g. `https`) in the gateway resource (useful when `httpRoute.gateway.create` is `false` because a gateway already exists). Otherwise, when `httpRoute.gateway.sectionName` is left empty, each route gets its own generated `sectionName` that points to a section in the gateway resource that is automatically set up when `httpRoute.gateway.create` is `true`.
 
 ## Setting Up Gateway API with Talos, Cilium, and cert-manager
 

charts/opencloud/templates/gateway/collabora-httproute.yaml

@@ -10,7 +10,7 @@ spec:
   parentRefs:
     - name: {{ .Values.httpRoute.gateway.name }}
       namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
-      sectionName: collabora-https
+      sectionName: {{ .Values.httpRoute.gateway.sectionName | default "collabora-https" }}
   hostnames:
     - {{ .Values.global.domain.collabora | quote }}
   rules:

charts/opencloud/templates/gateway/collaboration-httproute.yaml

@@ -10,7 +10,7 @@ spec:
   parentRefs:
     - name: {{ .Values.httpRoute.gateway.name }}
       namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
-      sectionName: collaboration-https
+      sectionName: {{ .Values.httpRoute.gateway.sectionName | default "collaboration-https" }}
   hostnames:
     - {{ .Values.global.domain.wopi | quote }}
   rules:

charts/opencloud/templates/gateway/https-httproute.yaml

@@ -9,7 +9,7 @@ spec:
   parentRefs:
     - name: {{ .Values.httpRoute.gateway.name }}
       namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
-      sectionName: opencloud-https
+      sectionName: {{ .Values.httpRoute.gateway.sectionName | default "opencloud-https" }}
   hostnames:
     - {{ include "opencloud.domain" . | quote }}
   rules:

charts/opencloud/templates/gateway/keycloak-https-httproute.yaml

@@ -10,7 +10,7 @@ spec:
   parentRefs:
     - name: {{ .Values.httpRoute.gateway.name }}
       namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
-      sectionName: keycloak-https
+      sectionName: {{ .Values.httpRoute.gateway.sectionName | default "keycloak-https" }}
   hostnames:
     - {{ include "opencloud.keycloak.domain" . | quote }}
   rules:

charts/opencloud/templates/gateway/minio-httproute.yaml

@@ -10,7 +10,7 @@ spec:
   parentRefs:
     - name: {{ .Values.httpRoute.gateway.name }}
       namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
-      sectionName: minio-https
+      sectionName: {{ .Values.httpRoute.gateway.sectionName | default "minio-https" }}
   hostnames:
     - {{ include "opencloud.minio.domain" . | quote }}
   rules:

charts/opencloud/templates/gateway/onlyoffice-httproute.yaml

@@ -10,7 +10,7 @@ spec:
   parentRefs:
     - name: {{ .Values.httpRoute.gateway.name }}
       namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
-      sectionName: onlyoffice-https
+      sectionName: {{ .Values.httpRoute.gateway.sectionName | default "onlyoffice-https" }}
   hostnames:
     - {{ .Values.global.domain.onlyoffice | quote }}
   rules:

charts/opencloud/templates/gateway/wopi-https-httproute.yaml

@@ -10,7 +10,7 @@ spec:
   parentRefs:
     - name: {{ .Values.httpRoute.gateway.name }}
       namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
-      sectionName: wopi-https
+      sectionName: {{ .Values.httpRoute.gateway.sectionName | default "wopi-https" }}
   hostnames:
     - {{ .Values.global.domain.wopi | quote }}
   rules:

charts/opencloud/templates/gateway/wopi-tlsroute.yaml

@@ -11,7 +11,7 @@ spec:
   parentRefs:
     - name: {{ .Values.httpRoute.gateway.name }}
       namespace: {{ .Values.httpRoute.gateway.namespace | default .Release.Namespace }}
-      sectionName: wopi-https
+      sectionName: {{ .Values.httpRoute.gateway.sectionName | default "wopi-https" }}
   hostnames:
     - {{ .Values.global.domain.wopi | quote }}
   rules:

charts/opencloud/values.yaml

@@ -688,6 +688,8 @@ httpRoute:
     className: cilium
     # Gateway namespace (defaults to Release.Namespace)
     namespace: ""
+    # Gateway section name (applies to all routes). If set to a non-empty value, this overrides the default component-specific section names (e.g., opencloud-https, onlyoffice-https) for all routes. If left empty, the defaults are used.
+    sectionName: ""
     # Gateway annotations
     annotations:
     # Gateway annotations