[release-coo-ocp-4.19] TRACING-6116: Add TLS min version and cipher suite configuration support#258
Conversation
Add --tls-min-version and --tls-cipher-suites flags with env var fallback (TLS_MIN_VERSION, TLS_CIPHER_SUITES). Uses k8s component-base for TLS version and cipher suite validation, matching the approach in the opentelemetry-operator. Defaults to TLS 1.2 when no min version is specified.
Simplify TLS cipher suites flag handling by using a plain string flag instead of a custom flag.Value type. The operator is expected to provide valid values, so whitespace trimming is unnecessary.
Previously errors from k8sapiflag.TLSVersion and TLSCipherSuites were silently discarded when configuring the proxy TLS settings. This adds fatal error logging consistent with how the server TLS config handles parse failures.
|
@openshift-cherrypick-robot: Ignoring requests to cherry-pick non-bug issues: TRACING-6116 DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Repository: openshift/coderabbit/.coderabbit.yaml Review profile: CHILL Plan: Enterprise Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
@openshift-cherrypick-robot: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: andreasgerstmayr The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
openshift-ci
Bot
added
the
approved
|
/label qe-approved |
openshift-ci
Bot
added
the
qe-approved
openshift-ci-robot
added
the
jira/valid-reference
|
@openshift-cherrypick-robot: This pull request references TRACING-6116 which is a valid jira issue. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
openshift-merge-bot
Bot
merged commit a772900
into
openshift:release-coo-ocp-4.19
|
@openshift-cherrypick-robot: new pull request created: #259 DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
5 participants
This is an automated cherry-pick of #248
/assign andreasgerstmayr
/cherrypick release-coo-ocp-4.15 release-coo-ocp-4.12