Uploaded image for project: 'Project Quay'
  1. Project Quay
  2. PROJQUAY-5236

Quay Config Editor should make sure latest SSL_PROTOCOLS are applied in configuration

XMLWordPrintable

    • Icon: Feature Feature
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • config-tool
    • BU Product Work
    • False
    • None
    • False
    • Not Selected

      Problem :

      • If SSL_PROTOCOLS was manually set to TLSv1.2 in the past, in the latest versions of quay, config-editor will not add TLSv1.3 unless old configurations are changed manually.
      • Quay config-editor tool does not add ssl related configurations to config.yaml or add latest available values to those configuration fields.
      $ grep SSL config.yaml 
      $ grep -i SSL config.yaml 
      $ grep -i TLS config.yaml 
      EXTERNAL_TLS_TERMINATION: true
      MAIL_USE_TLS: false
      REPO_MIRROR_TLS_VERIFY: true
      

      Expectations:

      • Set default value of SSL_PROTOCOL to latest protocol available. Eg: TLSv1.3
      • Option to set SSL_PROTOCOL from quay-config-editor. Give customer an option to use TLSv1.2 or TLSv1.3
      • Editor-tool should add SSL configurations + default values to its generated config.yaml file
      • Have a warning message and inform the user that TLSv1.3 latest protocol is not being used and they can add it.

              Unassigned Unassigned
              rhn-support-sbhavsar Sayali Bhavsar
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: