Skip to content

Commit 16a5ecc

Browse files
davidesalernodavidesalerno
committed
Add support for TLS curves in TLSProfile
Signed-off-by: Davide Salerno <[email protected]>
1 parent 50e2ece commit 16a5ecc

20 files changed

+339
-0
lines changed

‎config/v1/types_tlssecurityprofile.go‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -213,6 +213,15 @@ type TLSProfileSpec struct {
213213
//
214214
// +listType=atomic
215215
Ciphers []string `json:"ciphers"`
216+
// curves is used to specify the elliptic curves that are used during
217+
// the TLS handshake. Operators may remove entries their operands do
218+
// not support. For example, to use X25519 and P-256 (yaml):
219+
//
220+
// curves:
221+
// - X25519
222+
// - P-256
223+
// +optional
224+
Curves []string `json:"curves,omitempty"`
216225
// minTLSVersion is used to specify the minimal version of the TLS protocol
217226
// that is negotiated during the TLS handshake. For example, to use TLS
218227
// versions 1.1, 1.2 and 1.3 (yaml):

‎config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -330,6 +330,18 @@ spec:
330330
type: string
331331
type: array
332332
x-kubernetes-list-type: atomic
333+
curves:
334+
description: |-
335+
curves is used to specify the elliptic curves that are used during
336+
the TLS handshake. Operators may remove entries their operands do
337+
not support. For example, to use X25519 and P-256 (yaml):
338+
339+
curves:
340+
- X25519
341+
- P-256
342+
items:
343+
type: string
344+
type: array
333345
minTLSVersion:
334346
description: |-
335347
minTLSVersion is used to specify the minimal version of the TLS protocol

‎config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-Default.crd.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -261,6 +261,18 @@ spec:
261261
type: string
262262
type: array
263263
x-kubernetes-list-type: atomic
264+
curves:
265+
description: |-
266+
curves is used to specify the elliptic curves that are used during
267+
the TLS handshake. Operators may remove entries their operands do
268+
not support. For example, to use X25519 and P-256 (yaml):
269+
270+
curves:
271+
- X25519
272+
- P-256
273+
items:
274+
type: string
275+
type: array
264276
minTLSVersion:
265277
description: |-
266278
minTLSVersion is used to specify the minimal version of the TLS protocol

‎config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -330,6 +330,18 @@ spec:
330330
type: string
331331
type: array
332332
x-kubernetes-list-type: atomic
333+
curves:
334+
description: |-
335+
curves is used to specify the elliptic curves that are used during
336+
the TLS handshake. Operators may remove entries their operands do
337+
not support. For example, to use X25519 and P-256 (yaml):
338+
339+
curves:
340+
- X25519
341+
- P-256
342+
items:
343+
type: string
344+
type: array
333345
minTLSVersion:
334346
description: |-
335347
minTLSVersion is used to specify the minimal version of the TLS protocol

‎config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -330,6 +330,18 @@ spec:
330330
type: string
331331
type: array
332332
x-kubernetes-list-type: atomic
333+
curves:
334+
description: |-
335+
curves is used to specify the elliptic curves that are used during
336+
the TLS handshake. Operators may remove entries their operands do
337+
not support. For example, to use X25519 and P-256 (yaml):
338+
339+
curves:
340+
- X25519
341+
- P-256
342+
items:
343+
type: string
344+
type: array
333345
minTLSVersion:
334346
description: |-
335347
minTLSVersion is used to specify the minimal version of the TLS protocol

‎config/v1/zz_generated.deepcopy.go‎

Lines changed: 5 additions & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/AAA_ungated.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -261,6 +261,18 @@ spec:
261261
type: string
262262
type: array
263263
x-kubernetes-list-type: atomic
264+
curves:
265+
description: |-
266+
curves is used to specify the elliptic curves that are used during
267+
the TLS handshake. Operators may remove entries their operands do
268+
not support. For example, to use X25519 and P-256 (yaml):
269+
270+
curves:
271+
- X25519
272+
- P-256
273+
items:
274+
type: string
275+
type: array
264276
minTLSVersion:
265277
description: |-
266278
minTLSVersion is used to specify the minimal version of the TLS protocol

‎config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/KMSEncryptionProvider.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -330,6 +330,18 @@ spec:
330330
type: string
331331
type: array
332332
x-kubernetes-list-type: atomic
333+
curves:
334+
description: |-
335+
curves is used to specify the elliptic curves that are used during
336+
the TLS handshake. Operators may remove entries their operands do
337+
not support. For example, to use X25519 and P-256 (yaml):
338+
339+
curves:
340+
- X25519
341+
- P-256
342+
items:
343+
type: string
344+
type: array
333345
minTLSVersion:
334346
description: |-
335347
minTLSVersion is used to specify the minimal version of the TLS protocol

‎config/v1/zz_generated.swagger_doc_generated.go‎

Lines changed: 1 addition & 0 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎machineconfiguration/v1/zz_generated.crd-manifests/0000_80_machine-config_01_kubeletconfigs.crd.yaml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -144,6 +144,18 @@ spec:
144144
type: string
145145
type: array
146146
x-kubernetes-list-type: atomic
147+
curves:
148+
description: |-
149+
curves is used to specify the elliptic curves that are used during
150+
the TLS handshake. Operators may remove entries their operands do
151+
not support. For example, to use X25519 and P-256 (yaml):
152+
153+
curves:
154+
- X25519
155+
- P-256
156+
items:
157+
type: string
158+
type: array
147159
minTLSVersion:
148160
description: |-
149161
minTLSVersion is used to specify the minimal version of the TLS protocol

0 commit comments

Comments
 (0)