-
Sub-task
-
Resolution: Duplicate
-
Undefined
-
None
-
None
-
None
-
None
-
None
-
False
-
-
False
-
None
-
None
-
None
-
None
-
None
Create a new feature gate to control the PKI configuration feature rollout.Feature gate location: openshift/api/config/v1/feature_gates.go*Feature gate definition must include:# Name: ConfigurablePKI# Jira Component: kube-apiserver (or Security - to be determined)# Contact: @jubittajohn, @sanchezl, @dinhxuanvu (enhancement authors)# Product Scope: Enables configuration of cryptographic parameters (algorithm, key size, elliptic curve) for certificates generated internally by OpenShift# Enablement Level: TechPreviewNoUpgrade (FeatureGateLevel 4) → TechPreview → Default → GA# Cluster Profile Restrictions: None# Documentation links: Enhancement PR and tracking issue*When disabled:* PKI resource CRD still exists* Operators ignore PKI resource* All certificates use hardcoded platform defaults (RSA 2048)When enabled:* Operators watch and consume PKI resource* Certificates generated with configured parameters* Validation webhook active*Acceptance:** Feature gate registered in openshift/api/config/v1/feature_gates.go* All required metadata fields populated* Can be toggled via FeatureGate resource* Operators can query feature gate state* Documented in enhancement and godoc
- is duplicated by
-
CNTRLPLANE-1750 Create ConfigurablePKI feature gate
-
- In Progress
-