Loading...

XML

Word

Printable

Epic Name:
Ensure Cloud Controller Manager Operator metrics are only available via HTTPS
Work Type:
Strategic Product Work
Blocked:
False
Blocked Reason:
None
Ready:
False
Color Status:
Not Selected
Epic Status:
To Do
Feature Link:
OCPSTRAT-970 - Ports used by OCP should have TLS supports
Parent Link:
OCPSTRAT-970Ports used by OCP should have TLS supports
Hierarchy Progress Bar:

0% To Do, 0% In Progress, 100% Done
Target Version:

openshift-4.15

Sprint:
CLOUD Sprint 245, CLOUD Sprint 246, CLOUD Sprint 247, CLOUD Sprint 248, CLOUD Sprint 249, CLOUD Sprint 250, CLOUD Sprint 251

Currently, we are serving the metrics as http on 9258 we need to upgrade to use TLS

To solve this, use Kube RBAC proxy as a side container to proxy the metrics and provide an authentication/authorization layer for the metrics

is cloned by

OCPCLOUD-2272 Port 9191:Ensure Cluster Machine Approver metrics are only available via HTTPS

is depended on by

OCPSTRAT-970 Ports used by OCP should have TLS supports

relates to

RFE-4665 Is there any plan to secure ports 9099 and 9258 with TLS in the 4.15 timeframe.

links to