Skip to content

add config cm and set safer cipherSuites for operator #449

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
lance5890 wants to merge 1 commit into
base: main
Choose a base branch
from
Open

add config cm and set safer cipherSuites for operator #449

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 23 additions & 0 deletions manifests/0000_10_config-operator_02_configmap.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
apiVersion: v1
kind: ConfigMap
metadata:
namespace: openshift-config-operator
name: openshift-config-operator-config
annotations:
include.release.openshift.io/hypershift: "true"
include.release.openshift.io/ibm-cloud-managed: "true"
include.release.openshift.io/self-managed-high-availability: "true"
include.release.openshift.io/single-node-developer: "true"
data:
config.yaml: |
apiVersion: operator.openshift.io/v1alpha1
kind: GenericOperatorConfig
servingInfo:
cipherSuites:
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
minTLSVersion: VersionTLS12
6 changes: 6 additions & 0 deletions manifests/0000_10_config-operator_07_deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,9 @@ spec:
- name: available-featuregates
emptyDir:
sizeLimit: 100Mi
- name: config
configMap:
name: openshift-config-operator-config
initContainers:
- name: openshift-api
securityContext:
Expand Down Expand Up @@ -77,6 +80,7 @@ spec:
- operator
- --operator-version=$(OPERATOR_IMAGE_VERSION)
- --authoritative-feature-gate-dir=/available-featuregates
- --config=/var/run/configmaps/config/config.yaml
ports:
- containerPort: 8443
name: metrics
Expand Down Expand Up @@ -104,6 +108,8 @@ spec:
name: serving-cert
- mountPath: /available-featuregates
name: available-featuregates
- mountPath: /var/run/configmaps/config
name: config
env:
- name: IMAGE
value: quay.io/openshift/origin-cluster-config-operator:v4.0
Expand Down