-
Story
-
Resolution: Unresolved
-
Undefined
-
None
-
None
-
None
-
False
-
-
False
-
None
-
None
-
None
-
None
Create user-facing documentation for configuring TLS profiles (cluster-wide and operator-specific).
Documentation locations:
- OpenShift documentation (if applicable)
- Operator README.md
- Kueue Operator user guide
Content to cover:
1. Overview:
- What are TLS security profiles
- Why TLS profile configuration matters (PQC readiness)
- Supported profile types (Old, Intermediate, Modern, Custom)
2. Configuration options:
- Cluster-wide configuration via APIServer
- Operator-specific override via Kueue CRD
- Precedence order (CRD > APIServer > Intermediate default)
3. Examples:
# Example: Set TLS profile in Kueue CRD apiVersion: kueue.openshift.io/v1 kind: Kueue metadata: name: cluster spec: tlsSecurityProfile: type: Intermediate
# Example: Custom TLS profile spec: tlsSecurityProfile: type: Custom custom: minTLSVersion: VersionTLS12 ciphers: - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
4. Troubleshooting:
- How to verify TLS settings
- Common issues and solutions
Acceptance Criteria:
- Documentation covers all configuration options
- Examples are tested and working
- Documentation is reviewed and published
Depends on: OCPKUEUE-465 (E2E tests complete)