-
Story
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
Future Sustainability
-
False
-
-
False
-
5
-
None
-
None
-
OCP Node Kueue Sprint 281, OCP Node Kueue Sprint 282
Add minTLSVersion and cipherSuites fields to the Kueue Configuration API.
Files to modify:
- apis/config/v1beta2/configuration_types.go - Add TLS fields to ControllerWebhook and ControllerMetrics structs
- apis/config/v1beta2/defaults.go - Add default values (Intermediate profile)
- apis/config/v1beta2/validation.go - Add validation for TLS settings
Proposed API additions:
type ControllerWebhook struct { // ... existing fields ... // MinTLSVersion is the minimum TLS version supported. // Valid values are: "1.0", "1.1", "1.2", "1.3" // Defaults to "1.2" MinTLSVersion string `json:"minTLSVersion,omitempty"` // CipherSuites is the list of allowed cipher suites. CipherSuites []string `json:"cipherSuites,omitempty"` }
Acceptance Criteria:
- TLS fields added to Configuration API
- Default values set to Intermediate profile (TLS 1.2)
- Validation rejects invalid TLS versions and cipher names
- API documentation updated
Depends on: OCPKUEUE-450 (KEP approved)