How to add ingress annotations to any service created by Onyxia

[dbeniamine]

Hello,

I am deploying Onyxia on a Cluster and so far everything seems to work fine, except that for any launched service to have a valid https certificate a need to set a few ingress annotations :

annotations:
    kubernetes.io/ingress.class: "traefik"
    traefik.ingress.kubernetes.io/router.tls: "true"
    traefik.ingress.kubernetes.io/router.tls.certresolver: "myresolver"
    traefik.ingress.kubernetes.io/router.entrypoints: "web,websecure"

I did it manually on the values.yaml files for Onyxia and Keycloak, but I do not understant where I should / can put these configurations so the annotations are on the values.yaml when a user creates a jupyter service for instance

[dbeniamine]

Ok so I found a better way to do that, in my traefik configuration I set :

pots:
   websecure:
     tls:
       certResolver: "myResolver"

Then no need to add these annotations to my services, they already have a functionnal HTTPS certificate, I'm closing this issue

[olevitt]

Hi @dbeniamine !
For future reference, if you need to customize what is installed by Onyxia, you can do so in several ways :

• Create and host your own catalogs (feel free to fork our public catalogs) : https://docs.onyxia.sh/admin-doc/catalog-of-services/use-your-own-repositories
  This allows you to configure in-depth whatever you want, either by modifying the raw yaml or by customizing the values.schema.json : https://docs.onyxia.sh/admin-doc/catalog-of-services/customize-your-charts
• Alternativly, you can keep using our open catalogs (default ones) and only override a specific part of the schema.json (in your case ide/ingress.json setting the values you want (in your case, probably constants values for ingress.annotations (see https://github.com/InseeFrLab/helm-charts-interactive-services/blob/main/charts/library-chart/templates/_ingress.tpl) : https://docs.onyxia.sh/admin-doc/catalog-of-services/override-schema-for-a-specific-instance

Those 2 solutions (that you can combine for more fun) let you customize in-depth what is installed and the content of the configuration form

[fcomte]

@dbeniamine I would love if you tell us on our slack your potential usage of onyxia 🙏