Uploaded image for project: 'OpenShift Kueue'
  1. OpenShift Kueue
  2. OCPKUEUE-451

[Upstream] Add TLS profile fields to Configuration API

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • None
    • None
    • OCP Node Kueue Sprint 281, OCP Node Kueue Sprint 282

      Add minTLSVersion and cipherSuites fields to the Kueue Configuration API.

      Files to modify:

      • apis/config/v1beta2/configuration_types.go - Add TLS fields to ControllerWebhook and ControllerMetrics structs
      • apis/config/v1beta2/defaults.go - Add default values (Intermediate profile)
      • apis/config/v1beta2/validation.go - Add validation for TLS settings

      Proposed API additions:

      type ControllerWebhook struct {
          // ... existing fields ...
          // MinTLSVersion is the minimum TLS version supported.
          // Valid values are: "1.0", "1.1", "1.2", "1.3"
          // Defaults to "1.2"
          MinTLSVersion string `json:"minTLSVersion,omitempty"`
          // CipherSuites is the list of allowed cipher suites.
          CipherSuites []string `json:"cipherSuites,omitempty"`
      }
      

      Acceptance Criteria:

      • TLS fields added to Configuration API
      • Default values set to Intermediate profile (TLS 1.2)
      • Validation rejects invalid TLS versions and cipher names
      • API documentation updated

      Depends on: OCPKUEUE-450 (KEP approved)

              rh-ee-kehannon Kevin Hannon
              harpatil@redhat.com Harshal Patil
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: