Retrieve TLS config from apiserver for OpenShift - #1695

Merged

dkwon17 merged 17 commits into

devfile:mainfrom

dkwon17:tls-adherence

Sep 30, 2026

Commits on Sep 30, 2026

Honor cluster TLS profile only when tlsAdherence policy requires it

dkwon17
and
claude
committed
2561df3
Set up TLS profile watcher even when adherence policy is legacy

dkwon17
and
claude
committed
c33c202
Simplify TLS setup to fall back to Go defaults on errors, restrict apiserver RBAC

dkwon17
and
claude
committed
f22f574
Add BuildServerTLSOptions tests and scope APIServer RBAC to cluster resource

dkwon17
and
claude
committed
a95917a
Regenerate OLM bundle CSV to add apiservers RBAC permissions
dkwon17
committed
749906a
Remove TLS adherence test plan
dkwon17
committed
ba5231f
Split APIServer RBAC into separate rules for get vs list/watch since resourceNames restriction blocks list/watch verbs but works correctly for get
dkwon17
committed
2fba68b
Change formating, rerun make generate_all
dkwon17
committed
2f910b9
Update github.com/openshift/library-go
dkwon17
committed
095288d
Update test name
dkwon17
committed
75fef88
Return errors from TLS profile fetch instead of silently degrading

dkwon17
and
claude
committed
eff5794
Update TLS setup, use library-go defaults as fallback

dkwon17
and
claude
committed
b61e044
Rebase main, run go mod tidy
dkwon17
committed
3d90aed
Remove duplicate imports
dkwon17
committed
17ed3f5
Run RegisterSecurityProfileWatcher only on OpenShift platform
dkwon17
committed
c8da6a8
Update webhook RBAC to add get/list/watch for apiserver resource
dkwon17
committed
406b6dd
Update go.sum
dkwon17
committed
eb51348