[PR #157] [MERGED] Add managed certificate support and update ingress configuration for GKE #236

New issue

Closed

opened 2026-10-18 21:07:25 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-18 21:07:25 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/open-webui/helm-charts/pull/157
Author: @ido777
Created: 2/9/2025
Status: ✅ Merged
Merged: 2/9/2025
Merged by: @james-westbrook

Base: main ← Head: add_certificate

📝 Commits (4)

0e86541 Add managed certificate support and update ingress configuration for Open WebUI
3d8db7d Disable ingress in values.yaml for open-webui chart to minimize changes
9c5db2c disabled managed certificate setting in values.yaml
d23608a Clear ingress annotations in values.yaml for open-webui chart

📊 Changes

3 files changed (+318 additions, -3 deletions)

View changed files

➕ charts/open-webui/templates/managed-cert.yaml (+11 -0)
➕ charts/open-webui/values-gke-min.yaml (+290 -0)
📝 charts/open-webui/values.yaml (+17 -3)

📄 Description

This pull request introduces small enhancement to the Open WebUI Helm chart, including the addition of managed certificate support and various ingress configuration options needed for https for improved deployment, while minimizing changes in the default values.yaml.

Key changes include:

Managed Certificate Support:

Added a ManagedCertificate resource in managed-cert.yaml to enable automatic certificate management for specified domains.

Configuration Enhancements:

Added values-gke-min.yaml to include working gke environment for "minimal" set up - only the main open-webui stateful set with no Ollama, Pipelines, Tika, Redis, and WebSocket support. This setup works with openai and it good as a starting point for deployment in GKE for a new comer. This meant to help users to overcome the issues I faced as new comer to add HTTPS.
Added ingress with annotations for working with HTTPS, including SSL redirection and managed certificates, but left it disabled as it was in order not to change the default deployment at all.

These changes collectively improve the flexibility and ease of deploying Open WebUI on GKE with managed certificates and other configurable components.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/open-webui/helm-charts/pull/157 **Author:** [@ido777](https://github.com/ido777) **Created:** 2/9/2025 **Status:** ✅ Merged **Merged:** 2/9/2025 **Merged by:** [@james-westbrook](https://github.com/james-westbrook) **Base:** `main` ← **Head:** `add_certificate` --- ### 📝 Commits (4) - [`0e86541`](https://github.com/open-webui/helm-charts/commit/0e865418e85aa26ccac3b337ce53ec23eac94c8d) Add managed certificate support and update ingress configuration for Open WebUI - [`3d8db7d`](https://github.com/open-webui/helm-charts/commit/3d8db7dc34438cb0d8a16c668656a788ba0ac6b6) Disable ingress in values.yaml for open-webui chart to minimize changes - [`9c5db2c`](https://github.com/open-webui/helm-charts/commit/9c5db2ccd27aa3a9c4abb22d4e78ad44c3020690) disabled managed certificate setting in values.yaml - [`d23608a`](https://github.com/open-webui/helm-charts/commit/d23608a77867a36abef35b3c33844e852bdd70e6) Clear ingress annotations in values.yaml for open-webui chart ### 📊 Changes **3 files changed** (+318 additions, -3 deletions) <details> <summary>View changed files</summary> ➕ `charts/open-webui/templates/managed-cert.yaml` (+11 -0) ➕ `charts/open-webui/values-gke-min.yaml` (+290 -0) 📝 `charts/open-webui/values.yaml` (+17 -3) </details> ### 📄 Description This pull request introduces small enhancement to the Open WebUI Helm chart, including the addition of managed certificate support and various ingress configuration options needed for https for improved deployment, while minimizing changes in the default values.yaml. Key changes include: ### Managed Certificate Support: * Added a `ManagedCertificate` resource in `managed-cert.yaml` to enable automatic certificate management for specified domains. ### Configuration Enhancements: * Added `values-gke-min.yaml` to include working gke environment for "minimal" set up - only the main `open-webui `stateful set with no `Ollama`, `Pipelines`, `Tika`, `Redis`, and `WebSocket` support. This setup works with openai and it good as a starting point for deployment in GKE for a new comer. This meant to help users to overcome the issues I faced as new comer to add HTTPS. * Added ingress with annotations for working with HTTPS, including SSL redirection and managed certificates, but left it disabled as it was in order not to change the default deployment at all. These changes collectively improve the flexibility and ease of deploying Open WebUI on GKE with managed certificates and other configurable components. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-18 21:07:25 +00:00