Uploaded image for project: 'OpenShift Container Platform (OCP) Strategy'
  1. OpenShift Container Platform (OCP) Strategy
  2. OCPSTRAT-970

Ports used by OCP should have TLS supports

    XMLWordPrintable

Details

    • False
    • Hide

      None

      Show
      None
    • False
    • OCPSTRAT-16OpenShift - Kubernetes and Core Platform
    • 100
    • 100% 100%
    • 0
    • 0
    • Program Call

    Description

      Customer has escalated the following issues where ports don't have TLS support. This Feature request lists all the components port raised by the customer.

      Details here https://docs.google.com/document/d/1zB9vUGB83xlQnoM-ToLUEBtEGszQrC7u-hmhCnrhuXM/edit

      https://access.redhat.com/solutions/5437491

      Attachments

        Issue Links

          depends on

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. MON-3466 secure port 9100 with TLS

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. OCPCLOUD-2271 Port 9258:Ensure Cloud Controller Manager Operator metrics are only available via HTTPS

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Epic - Created by Jira Software - do not edit or delete. Issue type for a big user story that needs to be broken down. OCPCLOUD-2272 Port 9191:Ensure Cluster Machine Approver metrics are only available via HTTPS

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. OCPCLOUD-2277 Ensure Cluster Machine Approver metrics are only available via HTTPS

          • Critical - To be worked on immediately following BLOCKER issues.
          • Closed
          is cloned by

          Feature - Capability or a well-defined set of functionality that delivers business value. Features can include additions or changes to existing functionality. Features can easily span multiple teams, and potentially multiple releases. OCPSTRAT-1011 Ports used by OCP should have TLS supports - phase 2

          • Critical - To be worked on immediately following BLOCKER issues.
          • In Progress
          is related to

          Feature Request - Feature requests from customers and/or users RFE-4665 Is there any plan to secure ports 9099 and 9258 with TLS in the 4.15 timeframe.

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Backlog
          links to

          Web Link [KCS] Opening ports in range 9000-9999 and 30000-32767 for RHOCP 4 UPI installation

          Web Link [OCP 4.14 Docs] Machine Config Operator certificates - Provisioning Details

          Web Link CVE-2021-20238 (Public on 4-Feb-2021) regarding Port 22623

          Web Link https://issues.redhat.com/browse/OCPCLOUD-2272

          GitHub openshift/openshift-docs#69884: OSDOCS-8490: TLS support for metrics ports (OCPSTRAT-970)

          Web Link SFDC Case 03665508

          Activity

            People

              rh-ee-smodeel Subin MM
              rh-ee-smodeel Subin MM
              Joel Speed, Subin MM, Sumeet Karve, Zhaohua Sun
              Joel Speed Joel Speed
              Zhaohua Sun Zhaohua Sun
              Stephanie Stout Stephanie Stout
              Joel Speed Joel Speed
              Subin MM Subin MM
              Eric Rich Eric Rich
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: