Skip to content

IR-350: make metrics server tls configuration file-based#1297

Open
ricardomaraschini wants to merge 2 commits intoopenshift:mainfrom
ricardomaraschini:ir-350-operator
Open

IR-350: make metrics server tls configuration file-based#1297
ricardomaraschini wants to merge 2 commits intoopenshift:mainfrom
ricardomaraschini:ir-350-operator

Conversation

@ricardomaraschini
Copy link
Contributor

updates the metrics server to read tls and serving configuration from a controller config file instead of using hardcoded values. this allows for dynamic configuration of bind address, minimum tls version, and cipher suites.

@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Feb 20, 2026
@openshift-ci-robot
Copy link
Contributor

openshift-ci-robot commented Feb 20, 2026

@ricardomaraschini: This pull request references IR-350 which is a valid jira issue.

Details

In response to this:

updates the metrics server to read tls and serving configuration from a controller config file instead of using hardcoded values. this allows for dynamic configuration of bind address, minimum tls version, and cipher suites.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci openshift-ci bot requested a review from flavianmissi February 20, 2026 11:31
@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Feb 20, 2026
@ricardomaraschini ricardomaraschini force-pushed the ir-350-operator branch 2 times, most recently from a36fb9c to 783b2c7 Compare February 20, 2026 11:59
@flavianmissi
Copy link
Member

nicely done!

/retest-required
/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Feb 23, 2026
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Feb 23, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: flavianmissi, ricardomaraschini

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:
  • OWNERS [flavianmissi,ricardomaraschini]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Feb 23, 2026
@openshift-ci
Copy link
Contributor

openshift-ci bot commented Feb 23, 2026

New changes are detected. LGTM label has been removed.

@ricardomaraschini
Copy link
Contributor Author

/hold

This PR depends on openshift/cluster-version-operator#1322

@openshift-ci openshift-ci bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Feb 23, 2026
include.release.openshift.io/self-managed-high-availability: "true"
release.openshift.io/create-only: "true"
include.release.openshift.io/single-node-developer: "true"
config.openshift.io/inject-tls: "true"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Currently still WIP annotation

@ricardomaraschini
Copy link
Contributor Author

/retest

@ricardomaraschini
Copy link
Contributor Author

/retest

@ricardomaraschini
Copy link
Contributor Author

We want to use this to test openshift/cluster-version-operator#1322 so let's unhold it.

/unhold

@openshift-ci openshift-ci bot removed the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Feb 26, 2026
@ricardomaraschini
Copy link
Contributor Author

Nevermind, this may cause IPv6 issues. Putting it back on hold.

/hold

@openshift-ci openshift-ci bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Feb 26, 2026
@ricardomaraschini
Copy link
Contributor Author

@kaleemsiddiqu Can we try to test this one on IPv6 ? What we want to guarantee is that this will deploy on an IPv6 cluster and that the metrics endpoint on the operator works.

I did some investigations and I believe we are good with this one but we better to be 100% sure.

@ricardomaraschini
Copy link
Contributor Author

/retest

1 similar comment
@ricardomaraschini
Copy link
Contributor Author

/retest

@ricardomaraschini
Copy link
Contributor Author

/retest

updates the metrics server to read tls and serving configuration from a
controller config file instead of using hardcoded values. this allows
for dynamic configuration of bind address, minimum tls version, and
cipher suites.

this new flag is optional for now. by making it optional hypershift
tests pass. to make it required a patch in hypershift is needed (to be
done).
the aws bootstrap test was flaky, the test has a concurency issue with
the operator sync(). this commit fixes.
@ricardomaraschini
Copy link
Contributor Author

/retest

1 similar comment
@ricardomaraschini
Copy link
Contributor Author

/retest

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Mar 3, 2026

@ricardomaraschini: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/hypershift-e2e-aks 6f53820 link true /test hypershift-e2e-aks
ci/prow/e2e-hypershift-conformance 6f53820 link true /test e2e-hypershift-conformance

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants