Skip to content

Commit d9e956c

Browse files
committed
Adds webhook TLS config info to the migration doc
Signed-off-by: Sagar Muchhal <[email protected]>
1 parent 5b986d8 commit d9e956c

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

docs/book/src/developer/providers/v1.2-to-v1.3.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,3 +66,7 @@ The default value is 0, meaning that the volume can be detached without any time
6666
The variable `SkipUpgrade` could be set to revert to the old behaviour by making use of the `KUBERNETES_VERSION` variable and skipping the kubernetes upgrade.
6767
- cert-manager upgraded from v1.9.1 to v1.10.0.
6868
- Machine `providerID` is now being strictly checked for equality when compared against Kubernetes node `providerID` data. This is the expected criteria for correlating a Cluster API machine to its corresponding Kubernetes node, but historically this comparison was not strict, and instead compared only against the `ID` substring part of the full `providerID` string. Because different providers construct `providerID` strings differently, the `ID` substring is not uniformly defined and implemented across providers, and thus the existing `providerID` equality can not guarantee the correct Machine-Node correlation. It is very unlikely that this new behavior will break existing providers, but FYI: if strict `providerID` equality will degrade expected behaviors, you may need to update your provider implementation prior to adopting Cluster API v1.3.
69+
- The default minimum TLS version in use by the webhook servers is 1.2.
70+
71+
### Suggested changes for providers
72+
- Provider can expose the configuration of the TLS Options for the webhook server; it is recommended to use utility functions under the `util/flags` package to ensure consistency across CAPI and other providers.

0 commit comments

Comments
 (0)