Skip to content

Commit 2371796

Browse files
joelanfordjoelanford
committed
apiservers.config.openshift.io: remove spec.tlsSecurityProfile GoDoc caveats
The apiserver component was updated in OCP 4.19 to support the Modern TLS profile and TLS 1.3 Signed-off-by: Joe Lanford <[email protected]>
1 parent a638ff2 commit 2371796

14 files changed

+25
-36
lines changed

‎config/v1/types_apiserver.go

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -58,9 +58,8 @@ type APIServerSpec struct {
5858
Encryption APIServerEncryption `json:"encryption"`
5959
// tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.
6060
//
61-
// If unset, a default (which may change between releases) is chosen. Note that only Old,
62-
// Intermediate and Custom profiles are currently supported, and the maximum available
63-
// minTLSVersion is VersionTLS12.
61+
// When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.
62+
// The current default is the Intermediate profile.
6463
// +optional
6564
TLSSecurityProfile *TLSSecurityProfile `json:"tlsSecurityProfile,omitempty"`
6665
// audit specifies the settings for audit configuration to be applied to all OpenShift-provided

‎config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-CustomNoUpgrade.crd.yaml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -296,9 +296,8 @@ spec:
296296
description: |-
297297
tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.
298298
299-
If unset, a default (which may change between releases) is chosen. Note that only Old,
300-
Intermediate and Custom profiles are currently supported, and the maximum available
301-
minTLSVersion is VersionTLS12.
299+
When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.
300+
The current default is the Intermediate profile.
302301
properties:
303302
custom:
304303
description: |-

‎config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-Default.crd.yaml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -227,9 +227,8 @@ spec:
227227
description: |-
228228
tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.
229229
230-
If unset, a default (which may change between releases) is chosen. Note that only Old,
231-
Intermediate and Custom profiles are currently supported, and the maximum available
232-
minTLSVersion is VersionTLS12.
230+
When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.
231+
The current default is the Intermediate profile.
233232
properties:
234233
custom:
235234
description: |-

‎config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-DevPreviewNoUpgrade.crd.yaml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -296,9 +296,8 @@ spec:
296296
description: |-
297297
tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.
298298
299-
If unset, a default (which may change between releases) is chosen. Note that only Old,
300-
Intermediate and Custom profiles are currently supported, and the maximum available
301-
minTLSVersion is VersionTLS12.
299+
When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.
300+
The current default is the Intermediate profile.
302301
properties:
303302
custom:
304303
description: |-

‎config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-TechPreviewNoUpgrade.crd.yaml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -296,9 +296,8 @@ spec:
296296
description: |-
297297
tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.
298298
299-
If unset, a default (which may change between releases) is chosen. Note that only Old,
300-
Intermediate and Custom profiles are currently supported, and the maximum available
301-
minTLSVersion is VersionTLS12.
299+
When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.
300+
The current default is the Intermediate profile.
302301
properties:
303302
custom:
304303
description: |-

‎config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/AAA_ungated.yaml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -227,9 +227,8 @@ spec:
227227
description: |-
228228
tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.
229229
230-
If unset, a default (which may change between releases) is chosen. Note that only Old,
231-
Intermediate and Custom profiles are currently supported, and the maximum available
232-
minTLSVersion is VersionTLS12.
230+
When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.
231+
The current default is the Intermediate profile.
233232
properties:
234233
custom:
235234
description: |-

‎config/v1/zz_generated.featuregated-crd-manifests/apiservers.config.openshift.io/KMSEncryptionProvider.yaml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -296,9 +296,8 @@ spec:
296296
description: |-
297297
tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.
298298
299-
If unset, a default (which may change between releases) is chosen. Note that only Old,
300-
Intermediate and Custom profiles are currently supported, and the maximum available
301-
minTLSVersion is VersionTLS12.
299+
When omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time.
300+
The current default is the Intermediate profile.
302301
properties:
303302
custom:
304303
description: |-

‎config/v1/zz_generated.swagger_doc_generated.go

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎openapi/generated_openapi/zz_generated.openapi.go

Lines changed: 1 addition & 1 deletion
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎openapi/openapi.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4137,7 +4137,7 @@
41374137
"$ref": "#/definitions/com.github.openshift.api.config.v1.APIServerServingCerts"
41384138
},
41394139
"tlsSecurityProfile": {
4140-
"description": "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nIf unset, a default (which may change between releases) is chosen. Note that only Old, Intermediate and Custom profiles are currently supported, and the maximum available minTLSVersion is VersionTLS12.",
4140+
"description": "tlsSecurityProfile specifies settings for TLS connections for externally exposed servers.\n\nWhen omitted, this means no opinion and the platform is left to choose a reasonable default, which is subject to change over time. The current default is the Intermediate profile.",
41414141
"$ref": "#/definitions/com.github.openshift.api.config.v1.TLSSecurityProfile"
41424142
}
41434143
}

0 commit comments

Comments
 (0)