commit ae20ef5fd27d2dc4371443c00e795b2bf9417650
Author: Karla Felix <email address hidden>
Date: Thu Nov 2 16:51:23 2023 -0300
Add var for minimum tls version and cipher suites
This commit will add variables to minimum tls version and the
allowed specific cipher suites in the bootstrap playbook. This
variables will be added to
/etc/kubernetes/manifests/kube-apiserver.yaml.
The yamline disable-line is used because during the parse to
kube-apiserver.yaml the string could not have any blank spaces
or kubelet service will not start.
Test Plan:
PASS: Run build-image.
PASS: Run build-pkgs -c -p playbookconfig.
PASS: Verify if the flags "--tls-min-version" and "tls-cipher-suites" are present in /etc/kubernetes/manifests/kube-apiserver.yaml.
PASS: Verify if port 6443 is blocking tls version 1.0,
1.1 and weak cipher suites.
Closes-Bug: 2043217
Change-Id: I2af86387dc14ec89f9c3d652dfc4983c8fc06e5c
Signed-off-by: Karla Felix <email address hidden>
Reviewed: https:/ /review. opendev. org/c/starlingx /ansible- playbooks/ +/899984 /opendev. org/starlingx/ ansible- playbooks/ commit/ ae20ef5fd27d2dc 4371443c00e795b 2bf9417650
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit ae20ef5fd27d2dc 4371443c00e795b 2bf9417650
Author: Karla Felix <email address hidden>
Date: Thu Nov 2 16:51:23 2023 -0300
Add var for minimum tls version and cipher suites
This commit will add variables to minimum tls version and the kubernetes/ manifests/ kube-apiserver. yaml.
allowed specific cipher suites in the bootstrap playbook. This
variables will be added to
/etc/
The yamline disable-line is used because during the parse to apiserver. yaml the string could not have any blank spaces
kube-
or kubelet service will not start.
Test Plan:
PASS: Run build-image.
"tls- cipher- suites" are present in
/etc/ kubernetes/ manifests/ kube-apiserver. yaml.
PASS: Run build-pkgs -c -p playbookconfig.
PASS: Verify if the flags "--tls-min-version" and
PASS: Verify if port 6443 is blocking tls version 1.0,
1.1 and weak cipher suites.
Closes-Bug: 2043217
Change-Id: I2af86387dc14ec 89f9c3d652dfc49 83c8fc06e5c
Signed-off-by: Karla Felix <email address hidden>