Disabling external access for an engine

You can disable the route on a Presto engine so it is not exposed outside the cluster.

Disabling external access for an engine

To disable the route on a Presto engine, patch the engine to disable route generation and set an empty hostname. Run the following command:

oc patch wxdengine lakehouse-<engine_id> -n ${PROJECT_CPD_INST_OPERANDS} --type=merge -p '
spec:
  networking:
    generate_openshift_routes: false
    custom_hosts:
      presto: ""
'

Note: When you set generate_openshift_routes: false, existing routes are not automatically deleted.

You can list all routes for your watsonx.data instance by using the following command:

oc get route -l app=ibm-lakehouse -n ${PROJECT_CPD_INST_OPERANDS}

Example output:

NAME                                        HOST/PORT                                                                   PATH   SERVICES                                    PORT   TERMINATION   WILDCARD
ibm-lh-lakehouse-prestissimo01-presto-svc   ibm-lh-lakehouse-prestissimo01-presto-svc.apps.o1-1003177.cp.fyre.ibm.com          ibm-lh-lakehouse-prestissimo01-presto-svc   8443   reencrypt     None

To delete existing generated routes, run the following command:

oc delete route <route-name> -n ${PROJECT_CPD_INST_OPERANDS}