Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Done
Priority: Normal
Fix Version/s: None
Affects Version/s: 4.10.0
Component/s: Storage / Operators
Labels:
None

Severity:
Moderate
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Target Version:

4.13.0

SFDC Cases Counter:
SFDC Cases Links:

Description

See the following:
https://issues.redhat.com/browse/OCPBUGS-2083
https://github.com/openshift/library-go/pull/1413
https://github.com/openshift/vmware-vsphere-csi-driver-operator/pull/117

This was fixed for vsphere, but we need the same change for the other storage operators. Bump library-go and add --tls-cipher-suites=${TLS_CIPHER_SUITES} to the kube RBAC sidecars.

Attachments

Issue Links

blocks

OCPBUGS-18417 [4.12] set TLS cipher suites in Kube RBAC sidecars

Closed

is cloned by

OCPBUGS-18417 [4.12] set TLS cipher suites in Kube RBAC sidecars

Closed

is related to

OCPBUGS-2083 OCP 4.10.33 uses a weak 3DES cipher in the VMWare CSI Operator for communication and provides no method to disable it

Closed

links to

openshift/alibaba-disk-csi-driver-operator#39: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

openshift/aws-ebs-csi-driver-operator#168: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

openshift/aws-efs-csi-driver-operator#58: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

openshift/azure-disk-csi-driver-operator#61: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

openshift/azure-file-csi-driver-operator#40: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

openshift/csi-driver-manila-operator#160: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

openshift/gcp-filestore-csi-driver-operator#22: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

openshift/gcp-pd-csi-driver-operator#56: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

openshift/openstack-cinder-csi-driver-operator#100: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

openshift/ovirt-csi-driver-operator#109: OCPBUGS-4347: set TLS cipher suites in Kube RBAC sidecars

(8 links to)

Activity

People

Assignee:: Jonathan Dobson

Reporter:: Jonathan Dobson

QA Contact:: Wei Duan

Votes:: 0 Vote for this issue

Watchers:: 9 Start watching this issue

Dates

Created:: 2022/12/01 12:27 AM

Updated:: 2023/09/04 9:33 AM

Resolved:: 2023/05/17 10:40 PM