Hello everyone,
the problem was in our OpenShift Route.
We used “tls: edge”. This means something like the ingress gives the data unencrypted to the cluster.
We now used “tls: passthrough” for the route. This seems to work and the gui is using https.
Thanks to everyone who helped us, especially Bert who gave us the right direction! 