Custom domains for applications - Deployments | Applications

Configuring custom domains for applications

You can configure a custom domain for your applications. Custom domains are specific wildcard domains that can be used with OpenShift Dedicated applications.

Configuring custom domains for applications

The top-level domains (TLDs) are owned by the customer that is operating the OpenShift Dedicated cluster. The Custom Domains Operator sets up a new ingress controller with a custom certificate as a second day operation. The public DNS record for this ingress controller can then be used by an external DNS to create a wildcard CNAME record for use with a custom domain.

Custom API domains are not supported because Red Hat controls the API domain. However, customers can change their application domains. For private custom domains with a private IngressController, set .spec.scope to Internal in the CustomDomain CR.

Prerequisites

A user account with dedicated-admin privileges
A unique domain or wildcard domain, such as *.apps.<company_name>.io
A custom certificate or wildcard custom certificate, such as CN=*.apps.<company_name>.io
Access to a cluster with the latest version of the oc CLI installed

Do not use the reserved names default or apps*, such as apps or apps2, in the metadata/name: section of the CustomDomain CR.

Procedure

Create a new TLS secret from a private key and a public certificate, where fullchain.pem and privkey.pem are your public or private wildcard certificates.
Example
```
$ oc create secret tls <name>-tls --cert=fullchain.pem --key=privkey.pem -n <my_project>
```

Create a new CustomDomain custom resource (CR):

Example <company_name>-custom-domain.yaml

apiVersion: managed.openshift.io/v1alpha1
kind: CustomDomain
metadata:
  name: <company_name>
spec:
  domain: apps.companyname.io (1)
  scope: External
  loadBalancerType: Classic (2)
  certificate:
    name: <name>-tls (3)
    namespace: <my_project>
  routeSelector: (4)
    matchLabels:
     route: acme
  namespaceSelector: (5)
    matchLabels:
     type: sharded

1	The custom domain.
2	The type of load balancer for your custom domain. This type can be the default `classic` or `NLB` if you use a network load balancer.
3	The secret created in the previous step.
4	Optional: Filters the set of Routes serviced by the CustomDomain ingress. If no value is provided, the default is no filtering.
5	Optional: Filters the set of Namespaces serviced by the CustomDomain ingress. If no value is provided, the default is no filtering.

Apply the CR:

Example

$ oc apply -f <company_name>-custom-domain.yaml

Get the status of your newly created CR:

$ oc get customdomains

Example output

NAME               ENDPOINT                                                    DOMAIN                       STATUS
<company_name>     xxrywp.<company_name>.cluster-01.opln.s1.openshiftapps.com  *.apps.<company_name>.io     Ready

Using the endpoint value, add a new wildcard CNAME recordset to your managed DNS provider, such as Route53, Azure DNS, or Google DNS.
Example
```
*.apps.<company_name>.io -> xxrywp.<company_name>.cluster-01.opln.s1.openshiftapps.com
```

Create a new application and expose it:

Example

$ oc new-app --docker-image=docker.io/openshift/hello-openshift -n my-project

$ oc create route edge --service=hello-openshift hello-openshift-tls --hostname hello-openshift-tls-my-project.apps.acme.io -n my-project

$ oc get route -n my-project

$ curl https://hello-openshift-tls-my-project.apps.<company_name>.io
Hello OpenShift!