Loading...

XML

Word

Printable

Type: Feature
Resolution: Done
Priority: Major
Fix Version/s: openshift-4.15
Affects Version/s: None
Component/s: None
Labels:

Blocked:
False
Blocked Reason:

Hide

None

Show
None
Ready:
False
Parent Link:
OCPSTRAT-16OpenShift - Kubernetes and Core Platform
Hierarchy Progress Bar:

0% To Do, 0% In Progress, 100% Done
Target Version:

openshift-4.15

Risk Score:
0

Discussion Needed:

Program Call

SFDC Cases Links:
SFDC Cases Counter:
SFDC Cases Open:

PX Priority Data:
PX Technical Impact:
PX Impact Range:
PX Scheduling Request:
PX Review Complete:

Intelligence Requested:
Market:

Customer has escalated the following issues where ports don't have TLS support. This Feature request lists all the components port raised by the customer.

Details here https://docs.google.com/document/d/1zB9vUGB83xlQnoM-ToLUEBtEGszQrC7u-hmhCnrhuXM/edit

https://access.redhat.com/solutions/5437491

depends on

MON-3466 secure port 9100 with TLS

Closed

OCPCLOUD-2271 Port 9258:Ensure Cloud Controller Manager Operator metrics are only available via HTTPS

Closed

OCPCLOUD-2272 Port 9191:Ensure Cluster Machine Approver metrics are only available via HTTPS

Closed

OCPCLOUD-2277 Ensure Cluster Machine Approver metrics are only available via HTTPS

Closed

is cloned by

OCPSTRAT-1011 Ports used by OCP should have TLS supports - phase 2

In Progress

is related to

RFE-4665 Is there any plan to secure ports 9099 and 9258 with TLS in the 4.15 timeframe.

Backlog

links to

[KCS] Opening ports in range 9000-9999 and 30000-32767 for RHOCP 4 UPI installation

[OCP 4.14 Docs] Machine Config Operator certificates - Provisioning Details

CVE-2021-20238 (Public on 4-Feb-2021) regarding Port 22623

https://issues.redhat.com/browse/OCPCLOUD-2272

openshift/openshift-docs#69884: OSDOCS-8490: TLS support for metrics ports (OCPSTRAT-970)

SFDC Case 03665508

(1 is related to, 6 links to)

Assignee:: Subin M

Reporter:: Subin M

Contributors:: Joel Speed, Subin M, Sumeet Karve, Zhaohua Sun

Developer:: Joel Speed

QA Contact:: Zhaohua Sun

Doc Contact:: Stephanie Stout

Architect:: Joel Speed

Product Manager:: Subin M

Product Experience Engineering Contact:: Eric Rich

Votes:: 0 Vote for this issue

Watchers:: 8 Start watching this issue

Created:: 2023/11/06 7:06 PM

Updated:: 2024/02/29 6:21 PM

Resolved:: 2023/12/11 5:26 PM

Details

Description

Attachments

Issue Links

Activity

People

Dates