cheHostTLSSecret is not used to secure dashboard ingress/route when server.cheHost is set

[tolusha]

Describe the bug

cheHostTLSSecret is not used to secure dashboard ingress/route when server.cheHost is set

Che version

• nightly

Steps to reproduce

1. Deploy Eclipse Che chectl server:deploy --platform minikube
2. Generate certificates for a custom che-host [1]
3. Create chehost secret and configmap with a custom certificate

kubectl create configmap custom-certs --from-file=custom.crt=ca.crt -n=eclipse-che
kubectl label configmap custom-certs app.kubernetes.io/part-of=che.eclipse.org app.kubernetes.io/component=ca-bundle -n eclipse-che
kubectl create secret tls chehost --key ./domain.key --cert ./domain.crt -n eclipse-che

4. Patch checluster

kubectl patch checluster/eclipse-che --patch "{\"spec\":{\"server\":{\"cheHost\": \"my-new-ide.com\"}}}" --type=merge -n eclipse-che
kubectl patch checluster/eclipse-che --patch "{\"spec\":{\"server\":{\"cheHostTLSSecret\": \"chehost\"}}}" --type=merge -n eclipse-che

5. Wait until all components are redeployed
6. Modify /etc/hosts by adding 192.168.99.100 my-new-ide.com
7. Import certificates into a browser
8. Open dashboard
9. You can see that connection is not private (see screenshot)

Expected behavior

Runtime

• minikube (include output of minikube version and kubectl version) v1.20.0

Screenshots

Installation method

• chectl
  • chectl server:deploy --platform minikube
  • chectl/0.0.20210527-next.68b3356 linux-x64 node-v12.22.1

Environment

• my computer
  • Linux

Eclipse Che Logs

N/A

Additional context

1. Attempt to fix: eclipse-che/che-operator@main...fixexposewithcustomhost
2. Doc [2] says that it is needed to update redirect urls and weborigins. It seems operator is able to update redirect urls automatically (when restarted) but weborigins are still required to be updates manually. So, we need add changes to che-operator get rid of any manual works and update the doc.
3. Try to open workspace in Firefox otherwise create workspace failed when customize the hostname #18344

[1] https://gist.github.com/tolusha/ac9e11e04b1d4b3e6da43acc872425b7
[2] https://www.eclipse.org/che/docs/che-7/installation-guide/configuring-che-hostname/
[3] https://www.eclipse.org/che/docs/che-7/installation-guide/importing-untrusted-tls-certificates/