Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-18418

[4.11] set TLS cipher suites in Kube RBAC sidecars

    XMLWordPrintable

Details

    • Moderate
    • False
    • Hide

      None

      Show
      None

    Description

      See the following:
      https://issues.redhat.com/browse/OCPBUGS-2083
      https://github.com/openshift/library-go/pull/1413
      https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/117

      This was fixed for vsphere, but we need the same change for the other storage operators. Bump library-go and add --tls-cipher-suites=${TLS_CIPHER_SUITES} to the kube RBAC sidecars.

      Attachments

        Issue Links

          blocks

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-18419 [4.10] set TLS cipher suites in Kube RBAC sidecars

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed
          clones

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-18417 [4.12] set TLS cipher suites in Kube RBAC sidecars

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed
          is blocked by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-18417 [4.12] set TLS cipher suites in Kube RBAC sidecars

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-18419 [4.10] set TLS cipher suites in Kube RBAC sidecars

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed
          is duplicated by

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-18435 Disabling of this cipher 3DES Azure-disk-csi-driver-controller (SWEET32)

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          links to

          GitHub openshift/alibaba-disk-csi-driver-operator#59: [4.11] OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars

          GitHub openshift/aws-ebs-csi-driver-operator#266: [4.11] OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars

          GitHub openshift/aws-efs-csi-driver-operator#86: [4.11] OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars

          GitHub openshift/azure-disk-csi-driver-operator#96: [4.11] OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars

          GitHub openshift/azure-file-csi-driver-operator#72: [4.11] OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars

          GitHub openshift/csi-driver-manila-operator#200: [4.11] OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars

          GitHub openshift/gcp-pd-csi-driver-operator#83: [4.11] OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars

          GitHub openshift/openstack-cinder-csi-driver-operator#131: [4.11] OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars

          GitHub openshift/ovirt-csi-driver-operator#122: [4.11] OCPBUGS-18418: set TLS cipher suites in Kube RBAC sidecars

          Web Link RHBA-2023:5350 OpenShift Container Platform 4.11.z bug fix update

          Activity

            People

              jdobson@redhat.com Jonathan Dobson
              jdobson@redhat.com Jonathan Dobson
              Wei Duan Wei Duan
              Votes:
              1 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: