Uploaded image for project: 'OpenShift Logging'
  1. OpenShift Logging
  2. LOG-3569

Implement tlsSecurityProfile feature gate

XMLWordPrintable

    • Icon: Task Task
    • Resolution: Done
    • Icon: Major Major
    • None
    • None
    • Log Collection
    • 3
    • False
    • None
    • False
    • NEW
    • OBSDA-160 - Comply with OCP cluster-wide cryptographic policies
    • NEW
    • Log Collection - Sprint 232, Log Collection - Sprint 233

      Summary

      Implement the code to evaluate the enable/disablement of the feature gate for TLS security profile for collector outbound connections

      Acceptance Criteria

      • Verify logging collectors conform to the TLS Security Profile when the feature gate is enabled

      Notes

      The feature gate for TLS Security Profile can follow the same pattern as the feature gate for vector tech preview in Logging 5.4: https://docs.openshift.com/container-platform/4.8/logging/cluster-logging-release-notes.html#cluster-logging-about-vector. Here is what it can look like:

        apiVersion: "logging.openshift.io/v1"
        kind: "ClusterLogging"
        metadata:
          name: "instance"
          namespace: "openshift-logging"
          annotations:
            logging.openshift.io/preview-tls-security-profile: enabled
        spec:
      ...
      

       

            jcantril@redhat.com Jeffrey Cantrill
            syedriko_sub@redhat.com Sergey Yedrikov
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: