drop route, add ingress, if openshiftv3=false

chart/templates/ingress.yaml

+{{- if .Values.ingress.enabled }}
+{{- if not .Values.openshiftv3 }}
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: {{ include "shibboleth-sp.fullname" . }}
+  labels:
+    {{- include "shibboleth-sp.labels" . | nindent 4 }}
+  annotations:
+    {{- if .Values.ingress.keep }}
+    helm.sh/resource-policy: "keep"
+    {{- end }}
+    {{- if .Values.ingress.letsEncrypt.enabled }}
+    cert-manager.io/cluster-issuer: {{- .Values.ingress.letsEncrypt.clusterIssuer }}
+    {{- end }}
+    {{- if .Values.ingress.annotations }}
+    {{- .Values.ingress.annotations | toYaml | nindent 4 }}
+    {{- end }}
+spec:
+  rules:
+  - host: {{ .Values.global.domainName }}
+    http:
+      paths:
+      - backend:
+          service:
+            name: {{ include "shibboleth-sp.fullname" . }}
+            port:
+              number: 80
+        path: /
+        pathType: Exact
+{{- if .Values.ingress.letsEncrypt.enabled }}
+  tls:
+    - hosts:
+        - {{ .Values.global.domainName }}
+      secretName: {{ include "shibboleth-sp.frontend.fullname" . }}-letsencrypt-certs
+{{- end }}
+{{- end }}
+{{- end }}
\ No newline at end of file

chart/templates/route.yaml

 {{- if .Values.route.enabled }}
+{{- if .Values.openshiftv3 }}
 ---
 apiVersion: route.openshift.io/v1
 kind: Route
@@ -34,3 +35,4 @@ spec:
     weight: 100
   wildcardPolicy: None
 {{- end }}
+{{- end }}

chart/values.yaml

@@ -16,6 +16,7 @@ global:
 ##############
 
 # temporary flag to support legacy openshiftv3 and modern vanilla kubernetes
+# TODO: documentation
 openshiftv3: true
 
 nameOverride: ""
@@ -63,6 +64,7 @@ serviceAccount:
   # If not set and create is true, a name is generated using the fullname template
   name: ""
 
+# only if openshiftv3=true
 route:
   enabled: false
   # Annotations to add to the route
@@ -79,6 +81,16 @@ route:
     termination: "edge"
     insecureEdgeTerminationPolicy: "Redirect"
 
+# only if openshiftv3=false
+# TODO: validation, documentation
+ingress:
+  enabled: false
+  annotations: {}
+  keep: false
+  letsEncrypt:
+    enabled: false
+    clusterIssuer: ""
+
 deployment:
   # To pick up ConfigMap and Secret changes, all pods in the Deployment need to be restarted. This can
   # be done manually, e.g. with `kubectl rollout restart deployment/<deployment>`, or automatically.