Retrieve TLS config from apiserver for OpenShift - #1695

Open

dkwon17 wants to merge 15 commits into

devfile:mainfrom

dkwon17:tls-adherence

Commits on Sep 24, 2026

Honor cluster TLS profile only when tlsAdherence policy requires it

dkwon17
and
claude
committed
43b7239
Set up TLS profile watcher even when adherence policy is legacy

dkwon17
and
claude
committed
cc99dd7
Simplify TLS setup to fall back to Go defaults on errors, restrict apiserver RBAC

dkwon17
and
claude
committed
733998a
Add BuildServerTLSOptions tests and scope APIServer RBAC to cluster resource

dkwon17
and
claude
committed
5f7b81a
Regenerate OLM bundle CSV to add apiservers RBAC permissions
dkwon17
committed
f98de5d
Remove TLS adherence test plan
dkwon17
committed
2276e3d
Split APIServer RBAC into separate rules for get vs list/watch since resourceNames restriction blocks list/watch verbs but works correctly for get
dkwon17
committed
92a1e63
Change formating, rerun make generate_all
dkwon17
committed
9075b99
Update github.com/openshift/library-go
dkwon17
committed
edf5179
Update test name
dkwon17
committed
f78439e
Return errors from TLS profile fetch instead of silently degrading

dkwon17
and
claude
committed
115e923
Update TLS setup, use library-go defaults as fallback

dkwon17
and
claude
committed
624ef1b
Small update to templates to include ---
dkwon17
committed
86a89af
Rebase main, run go mod tidy
dkwon17
committed
1e8f946

Commits on Sep 25, 2026

Remove duplicate imports
dkwon17
committed
aba8f22