Skip to content

Provide the ability to configure TLS settings like TLSMinVersion and Ciphersuites on kueue servers #8190

@kannon92

Description

@kannon92

What would you like to be added:

All kueue apiservers (webhooks, metrics, controller, visibility) should provide an ability to set tls min versions and cipher suite.

There should be a configuration that allows one to set minTLSVersion and ciphersuites for servers that we pass into the TLSOpts for apiservers.

Why is this needed:

In a Go project, explicitly configuring the accepted TLS ciphers and the minimum TLS version, typically using a tls.Config struct, is crucial for security, compatibility, and compliance.

Completion requirements:

This enhancement requires the following artifacts:

  • Design doc
  • API change
  • Docs update

The artifacts should be linked in subsequent comments.

Metadata

Metadata

Assignees

No one assigned

    Labels

    kind/featureCategorizes issue or PR as related to a new feature.priority/important-soonMust be staffed and worked on either currently, or very soon, ideally in time for the next release.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions