tls

package

v0.0.0-...-8ca6b25 Latest Latest Go to latest Published: Oct 9, 2026 License: Apache-2.0 Imports: 11 Imported by: 0

Documentation ¶

Index ¶

func HasTLSOverrides(tlsMinVersion string, tlsCipherSuites []string, tlsCurvePreferences []int32) bool
type TLSConfigResult
- func ResolveTLSConfig(ctx context.Context, restConfig *rest.Config, tlsMinVersion string, ...) (TLSConfigResult, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func HasTLSOverrides ¶

func HasTLSOverrides(tlsMinVersion string, tlsCipherSuites []string, tlsCurvePreferences []int32) bool

HasTLSOverrides reports whether CLI values override the entire cluster TLS profile. The resolver and serving endpoint watcher must use the same decision.

Types ¶

type TLSConfigResult ¶

type TLSConfigResult struct {
	// TLSConfig is a function that applies TLS settings to a tls.Config.
	TLSConfig func(*tls.Config)
	// TLSAdherencePolicy is the cluster-wide TLS adherence policy.
	// Only populated when CLI flags are not set.
	TLSAdherencePolicy configv1.TLSAdherencePolicy
	// TLSProfileSpec is the cluster-wide TLS profile spec.
	// Only populated when CLI flags are not set.
	TLSProfileSpec configv1.TLSProfileSpec
}

TLSConfigResult holds the resolved TLS configuration along with the cluster-wide TLS profile metadata needed by the SecurityProfileWatcher.

func ResolveTLSConfig ¶

func ResolveTLSConfig(ctx context.Context, restConfig *rest.Config, tlsMinVersion string, tlsCipherSuites []string, tlsCurvePreferences []int32) (TLSConfigResult, error)

ResolveTLSConfig builds the TLS configuration. When CLI flags are set, they take precedence over the cluster-wide TLS profile. When not set, the profile from apiservers.config.openshift.io/cluster is fetched and applied if the adherence policy requires it. A curve-only override uses a TLS 1.2 minimum and Go's default cipher suites, without fetching the cluster profile.

Source Files ¶

View all Source files

tls.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL