SchSeba / sriov-network-operator-1 / 28382451172 / 1
64%
master: 64%

LAST BUILD BRANCH: conditions/operator-config-v2
DEFAULT BRANCH: master
Ran
Files 110
Run time 7s
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 63.885% (+0.3%) from 63.603%
28382451172.1

push

github

SchSeba 
Add TLS group/curve preferences support from OpenShift API TLSProfileSpec

Bump openshift/api to release-5.0 which adds the Groups field to
TLSProfileSpec (openshift/api#2583). This allows configuring TLS
supported groups (formerly elliptic curves) for the TLS handshake,
including post-quantum hybrid groups like X25519MLKEM768.

Changes:
- Add CurvePreferences field to consts.TLSConfig and wire it through
  the full TLS configuration pipeline (orchestrator, controller,
  templates, webhook)
- Extract Groups from the OpenShift APIServer TLS profile and propagate
  to operand DaemonSets via --tls-curve-preferences flag
- Operator converts group names to numeric CurveID values before
  passing to the webhook, matching the Kubernetes apiserver pattern
  (fs.Int32SliceVar for --tls-curve-preferences)
- Webhook accepts numeric Go crypto/tls CurveID values directly
  (e.g. 29,23,24) without hardcoded validation; supported values
  depend on the Go version used
- Add TLS_CURVE_PREFERENCES env var for vanilla Kubernetes (Helm values
  and deploy manifest)
- Add CurveNamesToIDs() to convert group names to numeric IDs in the
  operator controller before rendering webhook manifests
- Add ParseCurvePreferencesFromIDs() for the webhook to parse numeric
  CurveID values into []tls.CurveID
- Add TODO for kube-rbac-proxy curve preferences support (blocked on
  kube-rbac-proxy/kube-rbac-proxy#414)
- Update test CRD to CustomNoUpgrade variant with groups field
- Refactor conformance tests: extract operandTLSTarget list and
  assertAllOperandsHaveTLSArgs helper to reduce duplication
- Add unit tests for curve preferences in utils, orchestrator, and
  controller packages

Signed-off-by: Sebastian Sch <sebassch@gmail.com>

9729 of 15229 relevant lines covered (63.88%)

0.71 hits per line

Source Files on job 28382451172.1