Skip to content

Commit ecac27e

Browse files
damdodamdo
committed
deployments: pass down webhook TLS config, re-enable secure-port
1 parent f298637 commit ecac27e

9 files changed

Lines changed: 54 additions & 7 deletions

File tree

‎pkg/cloud/aws/assets/deployment.yaml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,12 @@ spec:
4949
{{- if .tlsMinVersion }}
5050
--tls-min-version={{ .tlsMinVersion }} \
5151
{{- end }}
52-
--secure-port=0 \
52+
{{- if .tlsCipherSuites }}
53+
--webhook-tls-cipher-suites={{ .tlsCipherSuites }} \
54+
{{- end }}
55+
{{- if .tlsMinVersion }}
56+
--webhook-tls-min-version={{ .tlsMinVersion }} \
57+
{{- end }}
5358
-v=2
5459
env:
5560
- name: CLOUD_CONFIG

‎pkg/cloud/azure/assets/cloud-controller-manager-deployment.yaml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -128,7 +128,12 @@ spec:
128128
{{- if .tlsMinVersion }}
129129
--tls-min-version={{ .tlsMinVersion }} \
130130
{{- end }}
131-
--secure-port=0
131+
{{- if .tlsCipherSuites }}
132+
--webhook-tls-cipher-suites={{ .tlsCipherSuites }} \
133+
{{- end }}
134+
{{- if .tlsMinVersion }}
135+
--webhook-tls-min-version={{ .tlsMinVersion }}
136+
{{- end }}
132137
terminationMessagePolicy: FallbackToLogsOnError
133138
volumeMounts:
134139
- name: host-etc-kube

‎pkg/cloud/azurestack/assets/cloud-controller-manager-deployment.yaml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,12 @@ spec:
120120
{{- if .tlsMinVersion }}
121121
--tls-min-version={{ .tlsMinVersion }} \
122122
{{- end }}
123-
--secure-port=0
123+
{{- if .tlsCipherSuites }}
124+
--webhook-tls-cipher-suites={{ .tlsCipherSuites }} \
125+
{{- end }}
126+
{{- if .tlsMinVersion }}
127+
--webhook-tls-min-version={{ .tlsMinVersion }}
128+
{{- end }}
124129
terminationMessagePolicy: FallbackToLogsOnError
125130
volumeMounts:
126131
- name: host-etc-kube

‎pkg/cloud/gcp/assets/cloud-controller-manager.yaml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -102,7 +102,12 @@ spec:
102102
{{- if .tlsMinVersion }}
103103
--tls-min-version={{ .tlsMinVersion }} \
104104
{{- end }}
105-
--secure-port=0
105+
{{- if .tlsCipherSuites }}
106+
--webhook-tls-cipher-suites={{ .tlsCipherSuites }} \
107+
{{- end }}
108+
{{- if .tlsMinVersion }}
109+
--webhook-tls-min-version={{ .tlsMinVersion }}
110+
{{- end }}
106111
terminationMessagePolicy: FallbackToLogsOnError
107112
volumeMounts:
108113
- name: host-etc-kube

‎pkg/cloud/ibm/assets/deployment.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -90,6 +90,12 @@ spec:
9090
{{- if .tlsMinVersion }}
9191
--tls-min-version={{ .tlsMinVersion }} \
9292
{{- end }}
93+
{{- if .tlsCipherSuites }}
94+
--webhook-tls-cipher-suites={{ .tlsCipherSuites }} \
95+
{{- end }}
96+
{{- if .tlsMinVersion }}
97+
--webhook-tls-min-version={{ .tlsMinVersion }} \
98+
{{- end }}
9399
--v=2
94100
livenessProbe:
95101
failureThreshold: 3

‎pkg/cloud/nutanix/assets/cloud-controller-manager-deployment.yaml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,12 @@ spec:
104104
{{- if .tlsMinVersion }}
105105
--tls-min-version={{ .tlsMinVersion }} \
106106
{{- end }}
107-
--secure-port=0
107+
{{- if .tlsCipherSuites }}
108+
--webhook-tls-cipher-suites={{ .tlsCipherSuites }} \
109+
{{- end }}
110+
{{- if .tlsMinVersion }}
111+
--webhook-tls-min-version={{ .tlsMinVersion }}
112+
{{- end }}
108113
terminationMessagePolicy: FallbackToLogsOnError
109114
volumeMounts:
110115
- name: nutanix-config

‎pkg/cloud/openstack/assets/deployment.yaml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -85,7 +85,12 @@ spec:
8585
{{- if .tlsMinVersion }}
8686
--tls-min-version={{ .tlsMinVersion }} \
8787
{{- end }}
88-
--secure-port=0
88+
{{- if .tlsCipherSuites }}
89+
--webhook-tls-cipher-suites={{ .tlsCipherSuites }} \
90+
{{- end }}
91+
{{- if .tlsMinVersion }}
92+
--webhook-tls-min-version={{ .tlsMinVersion }}
93+
{{- end }}
8994
ports:
9095
- containerPort: 10258
9196
name: https

‎pkg/cloud/powervs/assets/deployment.yaml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,12 @@ spec:
8989
{{- if .tlsMinVersion }}
9090
--tls-min-version={{ .tlsMinVersion }} \
9191
{{- end }}
92+
{{- if .tlsCipherSuites }}
93+
--webhook-tls-cipher-suites={{ .tlsCipherSuites }} \
94+
{{- end }}
95+
{{- if .tlsMinVersion }}
96+
--webhook-tls-min-version={{ .tlsMinVersion }} \
97+
{{- end }}
9298
--v=2
9399
livenessProbe:
94100
httpGet:

‎pkg/cloud/vsphere/assets/cloud-controller-manager-deployment.yaml‎

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -111,7 +111,12 @@ spec:
111111
{{- if .tlsMinVersion }}
112112
--tls-min-version={{ .tlsMinVersion }} \
113113
{{- end }}
114-
--secure-port=0
114+
{{- if .tlsCipherSuites }}
115+
--webhook-tls-cipher-suites={{ .tlsCipherSuites }} \
116+
{{- end }}
117+
{{- if .tlsMinVersion }}
118+
--webhook-tls-min-version={{ .tlsMinVersion }}
119+
{{- end }}
115120
terminationMessagePolicy: FallbackToLogsOnError
116121
volumeMounts:
117122
- name: host-etc-kube

0 commit comments

Comments
 (0)