Customize console to OAuth redirect URL

[linearlyIndependent]

Describe the bug

The OKD cluster is running behind a firewall/reverse-proxy at <internal.address.lan>. In the cluster Ingress, spec.domain is apps.<internal.address.lan> and spec.appsDomain is apps.<external.address.tld>. The console and OAuth are both accessible over the internal and the external address over corresponding Routes. Traffic gets forwarded from <external.address.tld> to <internal.address.lan>. Everything works fine except the redirection from the console to OAuth.

When accessing the console (without being logged in) at console-openshift-console.apps.<external.address.tld>, the user is redirected to oauth-openshift.apps. <internal.address.lan> instead of oauth-openshift.apps.<external.address.tld>.

Is there any way to configure this redirection? I could not find anything in the docs or in the Red Hat Knowledgebase.

Version

4.7.0-0.okd-2021-07-03-190901

How reproducible

100%

How to reproduce

• OKD cluster deployed on KVM VMs (FCOS), behind a pfSense firewall and HAProxy.
• Configure the external hostname according to the documentation
  • This creates also the corresponding Route to expose the console.
• Configure a Route to expose OAuth on the external hostname (same as the default oauth-openshift Route, just with the external hostname).
• In a fresh browser session (user is not logged in yet) open console-openshift-console.apps.<external.address.tld>, which will redirect you to oauth-openshift.apps.<internal.address.lan> for login.

Log bundle

[vrutkovs]

See #750 - this is not supported

[linearlyIndependent]

Thank you for the answer!