Uploaded image for project: 'OpenShift Kueue'
  1. OpenShift Kueue
  2. OCPKUEUE-452

[Upstream] Implement TLS profile for Metrics Server

XMLWordPrintable

    • Icon: Story Story
    • Resolution: Done
    • Icon: Undefined Undefined
    • None
    • None
    • None
    • None
    • None

      Apply TLS profile settings to the metrics server via controller-runtime's TLSOpts.

      File to modify:

      • cmd/kueue/main.go

      Implementation:

      metricsServerOptions.TLSOpts = append(metricsServerOptions.TLSOpts, func(config *tls.Config) {
          config.MinVersion = tlsVersionFromConfig(cfg.Metrics.MinTLSVersion)
          config.CipherSuites = cipherSuitesFromConfig(cfg.Metrics.CipherSuites)
      })
      

      Acceptance Criteria:

      • Metrics server respects minTLSVersion from configuration
      • Metrics server respects cipherSuites from configuration
      • Defaults to Intermediate profile when not specified
      • TLS scanner confirms correct settings

      Depends on: OCPKUEUE-451 (API fields)

              harpatil@redhat.com Harshal Patil
              harpatil@redhat.com Harshal Patil
              None
              None
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: