• Icon: Sub-task Sub-task
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • None
    • None
    • False
    • Hide

      None

      Show
      None
    • False
    • None
    • None
    • None
    • None

      Create a new feature gate to control the PKI configuration feature rollout.Feature gate location: openshift/api/config/v1/feature_gates.go*Feature gate definition must include:# Name: ConfigurablePKI# Jira Component: kube-apiserver (or Security - to be determined)# Contact: @jubittajohn, @sanchezl, @dinhxuanvu (enhancement authors)# Product Scope: Enables configuration of cryptographic parameters (algorithm, key size, elliptic curve) for certificates generated internally by OpenShift# Enablement Level: TechPreviewNoUpgrade (FeatureGateLevel 4) → TechPreview → Default → GA# Cluster Profile Restrictions: None# Documentation links: Enhancement PR and tracking issue*When disabled:* PKI resource CRD still exists* Operators ignore PKI resource* All certificates use hardcoded platform defaults (RSA 2048)When enabled:* Operators watch and consume PKI resource* Certificates generated with configured parameters* Validation webhook active*Acceptance:** Feature gate registered in openshift/api/config/v1/feature_gates.go* All required metadata fields populated* Can be toggled via FeatureGate resource* Operators can query feature gate state* Documented in enhancement and godoc

              Unassigned Unassigned
              lusanche@redhat.com Luis Sanchez
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: