hyperconverged-cluster-operator icon indicating copy to clipboard operation
hyperconverged-cluster-operator copied to clipboard

Expose the webhook with configured TLS config

Open tiraboschi opened this issue 3 years ago • 78 comments

Properly expose the the validating webhook with TLS as configured on HCO CR or at cluster level. The configuration is cached in the webhook and refreshed each time the cluster admin tries to create or refresh the HCO CR.

Test it e2e on plain k8s and OCP/OKD. Please also notice that with FIPS enabled golang builders we can get only a subset of allowed ciphers for the same TLS profile.

Signed-off-by: Simone Tiraboschi [email protected]

Reviewer Checklist

Reviewers are supposed to review the PR for every aspect below one by one. To check an item means the PR is either "OK" or "Not Applicable" in terms of that item. All items are supposed to be checked before merging a PR.

  • [ ] PR Message
  • [ ] Commit Messages
  • [ ] How to test
  • [ ] Unit Tests
  • [ ] Functional Tests
  • [ ] User Documentation
  • [ ] Developer Documentation
  • [ ] Upgrade Scenario
  • [ ] Uninstallation Scenario
  • [ ] Backward Compatibility
  • [ ] Troubleshooting Friendly

Release note:

Expose the webhook with configured TLS config

tiraboschi avatar Aug 05 '22 15:08 tiraboschi

Pull Request Test Coverage Report for Build 2998249899

  • 117 of 152 (76.97%) changed or added relevant lines in 3 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage increased (+0.3%) to 85.271%

Changes Missing Coverage Covered Lines Changed/Added Lines %
controllers/webhooks/controller.go 26 30 86.67%
pkg/webhooks/validator/validator.go 84 115 73.04%
<!-- Total: 117 152
Totals Coverage Status
Change from base Build 2997768106: 0.3%
Covered Lines: 4585
Relevant Lines: 5377

💛 - Coveralls

coveralls avatar Aug 05 '22 16:08 coveralls

okd-hco-e2e-upgrade-index-gcp lane succeeded. /override ci/prow/okd-hco-e2e-upgrade-index-aws

hco-bot avatar Aug 10 '22 13:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/okd-hco-e2e-upgrade-index-aws

In response to this:

okd-hco-e2e-upgrade-index-gcp lane succeeded. /override ci/prow/okd-hco-e2e-upgrade-index-aws

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 10 '22 13:08 kubevirt-bot

okd-hco-e2e-upgrade-index-gcp lane succeeded. /override ci/prow/okd-hco-e2e-upgrade-index-aws

hco-bot avatar Aug 11 '22 10:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/okd-hco-e2e-upgrade-index-aws

In response to this:

okd-hco-e2e-upgrade-index-gcp lane succeeded. /override ci/prow/okd-hco-e2e-upgrade-index-aws

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 11 '22 10:08 kubevirt-bot

hco-e2e-upgrade-index-sno-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-index-sno-azure

hco-bot avatar Aug 11 '22 10:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-upgrade-index-sno-azure

In response to this:

hco-e2e-upgrade-index-sno-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-index-sno-azure

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 11 '22 10:08 kubevirt-bot

hco-e2e-kv-smoke-azure lane succeeded. /override ci/prow/hco-e2e-kv-smoke-gcp

hco-bot avatar Aug 11 '22 11:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-kv-smoke-gcp

In response to this:

hco-e2e-kv-smoke-azure lane succeeded. /override ci/prow/hco-e2e-kv-smoke-gcp

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 11 '22 11:08 kubevirt-bot

hco-e2e-upgrade-prev-index-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-azure hco-e2e-upgrade-prev-index-sno-azure lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-sno-aws

hco-bot avatar Aug 11 '22 17:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-upgrade-prev-index-azure, ci/prow/hco-e2e-upgrade-prev-index-sno-aws

In response to this:

hco-e2e-upgrade-prev-index-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-azure hco-e2e-upgrade-prev-index-sno-azure lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-sno-aws

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 11 '22 17:08 kubevirt-bot

hco-e2e-upgrade-prev-index-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-azure hco-e2e-upgrade-prev-index-sno-azure lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-sno-aws hco-e2e-upgrade-index-sno-azure lane succeeded. /override ci/prow/hco-e2e-upgrade-index-sno-aws

hco-bot avatar Aug 23 '22 12:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-upgrade-index-sno-aws, ci/prow/hco-e2e-upgrade-prev-index-azure, ci/prow/hco-e2e-upgrade-prev-index-sno-aws

In response to this:

hco-e2e-upgrade-prev-index-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-azure hco-e2e-upgrade-prev-index-sno-azure lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-sno-aws hco-e2e-upgrade-index-sno-azure lane succeeded. /override ci/prow/hco-e2e-upgrade-index-sno-aws

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 23 '22 12:08 kubevirt-bot

hco-e2e-kv-smoke-gcp lane succeeded. /override ci/prow/hco-e2e-kv-smoke-azure

hco-bot avatar Aug 23 '22 14:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-kv-smoke-azure

In response to this:

hco-e2e-kv-smoke-gcp lane succeeded. /override ci/prow/hco-e2e-kv-smoke-azure

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 23 '22 14:08 kubevirt-bot

hco-e2e-upgrade-prev-index-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-azure

hco-bot avatar Aug 23 '22 18:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-upgrade-prev-index-azure

In response to this:

hco-e2e-upgrade-prev-index-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-azure

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 23 '22 18:08 kubevirt-bot

hco-e2e-upgrade-prev-index-sno-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-sno-azure

hco-bot avatar Aug 23 '22 18:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-upgrade-prev-index-sno-azure

In response to this:

hco-e2e-upgrade-prev-index-sno-aws lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-sno-azure

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 23 '22 18:08 kubevirt-bot

hco-e2e-kv-smoke-gcp lane succeeded. /override ci/prow/hco-e2e-kv-smoke-azure

hco-bot avatar Aug 23 '22 20:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-kv-smoke-azure

In response to this:

hco-e2e-kv-smoke-gcp lane succeeded. /override ci/prow/hco-e2e-kv-smoke-azure

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 23 '22 20:08 kubevirt-bot

hco-e2e-kv-smoke-gcp lane succeeded. /override ci/prow/hco-e2e-kv-smoke-azure

hco-bot avatar Aug 24 '22 15:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-kv-smoke-azure

In response to this:

hco-e2e-kv-smoke-gcp lane succeeded. /override ci/prow/hco-e2e-kv-smoke-azure

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 24 '22 15:08 kubevirt-bot

okd-hco-e2e-upgrade-index-gcp lane succeeded. /override ci/prow/okd-hco-e2e-upgrade-index-aws

hco-bot avatar Aug 24 '22 18:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/okd-hco-e2e-upgrade-index-aws

In response to this:

okd-hco-e2e-upgrade-index-gcp lane succeeded. /override ci/prow/okd-hco-e2e-upgrade-index-aws

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 24 '22 18:08 kubevirt-bot

hco-e2e-upgrade-prev-index-azure lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-aws hco-e2e-image-index-gcp lane succeeded. /override ci/prow/hco-e2e-image-index-aws hco-e2e-image-index-gcp lane succeeded. /override ci/prow/hco-e2e-image-index-azure

hco-bot avatar Aug 24 '22 18:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-image-index-aws, ci/prow/hco-e2e-image-index-azure, ci/prow/hco-e2e-upgrade-prev-index-aws

In response to this:

hco-e2e-upgrade-prev-index-azure lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-aws hco-e2e-image-index-gcp lane succeeded. /override ci/prow/hco-e2e-image-index-aws hco-e2e-image-index-gcp lane succeeded. /override ci/prow/hco-e2e-image-index-azure

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 24 '22 18:08 kubevirt-bot

hco-e2e-kv-smoke-gcp lane succeeded. /override ci/prow/hco-e2e-kv-smoke-azure

hco-bot avatar Aug 24 '22 19:08 hco-bot

@hco-bot: Overrode contexts on behalf of hco-bot: ci/prow/hco-e2e-kv-smoke-azure

In response to this:

hco-e2e-kv-smoke-gcp lane succeeded. /override ci/prow/hco-e2e-kv-smoke-azure

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

kubevirt-bot avatar Aug 24 '22 19:08 kubevirt-bot

hco-e2e-upgrade-prev-index-sno-azure lane succeeded. /override ci/prow/hco-e2e-upgrade-prev-index-sno-aws

hco-bot avatar Aug 24 '22 23:08 hco-bot