adding option '--insecure-policy' for passthrough and reencrypt route…

… for CLI

PR11953 added support for insecureEdgeTerminationPolicy to reencrypt and passthrough routes,
so it should be supported in the CLI as well.

Bug: 1403155

contrib/completions/bash/oc

@@ -7649,6 +7649,8 @@ _oc_create_route_passthrough()
     local_nonpersistent_flags+=("--dry-run")
     flags+=("--hostname=")
     local_nonpersistent_flags+=("--hostname=")
+    flags+=("--insecure-policy=")
+    local_nonpersistent_flags+=("--insecure-policy=")
     flags+=("--no-headers")
     local_nonpersistent_flags+=("--no-headers")
     flags+=("--output=")
@@ -7743,6 +7745,8 @@ _oc_create_route_reencrypt()
     local_nonpersistent_flags+=("--dry-run")
     flags+=("--hostname=")
     local_nonpersistent_flags+=("--hostname=")
+    flags+=("--insecure-policy=")
+    local_nonpersistent_flags+=("--insecure-policy=")
     flags+=("--key=")
     flags_with_completion+=("--key")
     flags_completion+=("_filedir")

contrib/completions/bash/openshift

@@ -12640,6 +12640,8 @@ _openshift_cli_create_route_passthrough()
     local_nonpersistent_flags+=("--dry-run")
     flags+=("--hostname=")
     local_nonpersistent_flags+=("--hostname=")
+    flags+=("--insecure-policy=")
+    local_nonpersistent_flags+=("--insecure-policy=")
     flags+=("--no-headers")
     local_nonpersistent_flags+=("--no-headers")
     flags+=("--output=")
@@ -12736,6 +12738,8 @@ _openshift_cli_create_route_reencrypt()
     local_nonpersistent_flags+=("--dry-run")
     flags+=("--hostname=")
     local_nonpersistent_flags+=("--hostname=")
+    flags+=("--insecure-policy=")
+    local_nonpersistent_flags+=("--insecure-policy=")
     flags+=("--key=")
     flags_with_completion+=("--key")
     flags_completion+=("_filedir")

contrib/completions/zsh/oc

@@ -7797,6 +7797,8 @@ _oc_create_route_passthrough()
     local_nonpersistent_flags+=("--dry-run")
     flags+=("--hostname=")
     local_nonpersistent_flags+=("--hostname=")
+    flags+=("--insecure-policy=")
+    local_nonpersistent_flags+=("--insecure-policy=")
     flags+=("--no-headers")
     local_nonpersistent_flags+=("--no-headers")
     flags+=("--output=")
@@ -7891,6 +7893,8 @@ _oc_create_route_reencrypt()
     local_nonpersistent_flags+=("--dry-run")
     flags+=("--hostname=")
     local_nonpersistent_flags+=("--hostname=")
+    flags+=("--insecure-policy=")
+    local_nonpersistent_flags+=("--insecure-policy=")
     flags+=("--key=")
     flags_with_completion+=("--key")
     flags_completion+=("_filedir")

contrib/completions/zsh/openshift

@@ -12788,6 +12788,8 @@ _openshift_cli_create_route_passthrough()
     local_nonpersistent_flags+=("--dry-run")
     flags+=("--hostname=")
     local_nonpersistent_flags+=("--hostname=")
+    flags+=("--insecure-policy=")
+    local_nonpersistent_flags+=("--insecure-policy=")
     flags+=("--no-headers")
     local_nonpersistent_flags+=("--no-headers")
     flags+=("--output=")
@@ -12884,6 +12886,8 @@ _openshift_cli_create_route_reencrypt()
     local_nonpersistent_flags+=("--dry-run")
     flags+=("--hostname=")
     local_nonpersistent_flags+=("--hostname=")
+    flags+=("--insecure-policy=")
+    local_nonpersistent_flags+=("--insecure-policy=")
     flags+=("--key=")
     flags_with_completion+=("--key")
     flags_completion+=("_filedir")

docs/man/man1/oc-create-route-passthrough.1

@@ -32,6 +32,10 @@ Specify the service (either just its name or using type/name syntax) that the ge
 \fB\-\-hostname\fP=""
     Set a hostname for the new route
 
+.PP
+\fB\-\-insecure\-policy\fP=""
+    Set an insecure policy for the new route
+
 .PP
 \fB\-\-no\-headers\fP=false
     When using the default or custom\-column output format, don't print headers.

docs/man/man1/oc-create-route-reencrypt.1

@@ -44,6 +44,10 @@ Specify the service (either just its name or using type/name syntax) that the ge
 \fB\-\-hostname\fP=""
     Set a hostname for the new route
 
+.PP
+\fB\-\-insecure\-policy\fP=""
+    Set an insecure policy for the new route
+
 .PP
 \fB\-\-key\fP=""
     Path to a key file.

docs/man/man1/openshift-cli-create-route-passthrough.1

@@ -32,6 +32,10 @@ Specify the service (either just its name or using type/name syntax) that the ge
 \fB\-\-hostname\fP=""
     Set a hostname for the new route
 
+.PP
+\fB\-\-insecure\-policy\fP=""
+    Set an insecure policy for the new route
+
 .PP
 \fB\-\-no\-headers\fP=false
     When using the default or custom\-column output format, don't print headers.

docs/man/man1/openshift-cli-create-route-reencrypt.1

@@ -44,6 +44,10 @@ Specify the service (either just its name or using type/name syntax) that the ge
 \fB\-\-hostname\fP=""
     Set a hostname for the new route
 
+.PP
+\fB\-\-insecure\-policy\fP=""
+    Set an insecure policy for the new route
+
 .PP
 \fB\-\-key\fP=""
     Path to a key file.

pkg/cmd/cli/cmd/create/route.go

@@ -198,6 +198,7 @@ func NewCmdCreatePassthroughRoute(fullName string, f *clientcmd.Factory, out io.
 	kcmdutil.AddDryRunFlag(cmd)
 	cmd.Flags().String("hostname", "", "Set a hostname for the new route")
 	cmd.Flags().String("port", "", "Name of the service port or number of the container port the route will route traffic to")
+	cmd.Flags().String("insecure-policy", "", "Set an insecure policy for the new route")
 	cmd.Flags().String("service", "", "Name of the service that the new route is exposing")
 	cmd.MarkFlagRequired("service")
 
@@ -232,6 +233,11 @@ func CreatePassthroughRoute(f *clientcmd.Factory, out io.Writer, cmd *cobra.Comm
 	route.Spec.TLS = new(api.TLSConfig)
 	route.Spec.TLS.Termination = api.TLSTerminationPassthrough
 
+	insecurePolicy := kcmdutil.GetFlagString(cmd, "insecure-policy")
+	if len(insecurePolicy) > 0 {
+		route.Spec.TLS.InsecureEdgeTerminationPolicy = api.InsecureEdgeTerminationPolicyType(insecurePolicy)
+	}
+
 	dryRun := kcmdutil.GetFlagBool(cmd, "dry-run")
 	actualRoute := route
 
@@ -293,6 +299,7 @@ func NewCmdCreateReencryptRoute(fullName string, f *clientcmd.Factory, out io.Wr
 	kcmdutil.AddDryRunFlag(cmd)
 	cmd.Flags().String("hostname", "", "Set a hostname for the new route")
 	cmd.Flags().String("port", "", "Name of the service port or number of the container port the route will route traffic to")
+	cmd.Flags().String("insecure-policy", "", "Set an insecure policy for the new route")
 	cmd.Flags().String("service", "", "Name of the service that the new route is exposing")
 	cmd.MarkFlagRequired("service")
 	cmd.Flags().String("path", "", "Path that the router watches to route traffic to the service.")
@@ -359,6 +366,11 @@ func CreateReencryptRoute(f *clientcmd.Factory, out io.Writer, cmd *cobra.Comman
 	}
 	route.Spec.TLS.DestinationCACertificate = string(destCACert)
 
+	insecurePolicy := kcmdutil.GetFlagString(cmd, "insecure-policy")
+	if len(insecurePolicy) > 0 {
+		route.Spec.TLS.InsecureEdgeTerminationPolicy = api.InsecureEdgeTerminationPolicyType(insecurePolicy)
+	}
+
 	dryRun := kcmdutil.GetFlagBool(cmd, "dry-run")
 	actualRoute := route