Uploaded image for project: 'Machine Config Operator'
  1. Machine Config Operator
  2. MCO-1202

Grab cluster's tlsSecurityProfile from the APIServer object

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Normal Normal
    • None
    • None
    • 5
    • False
    • None
    • False
    • OCPSTRAT-284 - Standardization around configurable TLS security profiles for layered products and components
    • MCO Sprint 256, MCO Sprint 257
    • 0
    • 0.0

      This involves grabbing the clusters global tlssecurity profile from the operator pod and then storing it locally in renderconfig so it can be applied to MCO's templates and the MCS.

      Note: The kubelet config controller already fetches this object and updates the kubeletconfig with it. So this can probably refactored into a common function.

      Done when:

      • new RBAC rules for the operator and controller service account to access APIServer object are setup
      • the operator/controller can grab these values and store them locally in renderconfig.

       

            djoshy David Joshy
            djoshy David Joshy
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: