OpenShift Routes Denied After Upgrading IDSP to 4.0.2

Products

• Symantec Identity Security Platform - IDSP (formerly VIP Authentication Hub)

Issue/Introduction

After performing a full Helm upgrade to VIP Authentication Hub IDSP 4.0.2 in an OpenShift environment, the following symptoms occur:

• The command oc get routes shows a status of "Route Denied" for IDSP components.
• Application endpoints are unreachable.
• The Admin Console is inaccessible.
• The environment specifically utilizes OpenShift native Routes rather than standard Kubernetes Ingress.

Environment

Product: VIP Authentication Hub (IDSP)
Version: 4.0.2
Platform: Red Hat OpenShift Service

Resolution

To resolve this, explicitly instruct the Helm chart to preserve the existing route configuration during the upgrade process.

Add the keepLegacyRoutes flag to your Helm upgrade command:

# helm upgrade <release-name> <chart-path> \
  --set ssp.ingress.keepLegacyRoutes=true \
  [other-existing-parameters]