Skip to content

Conversation

@mletalie
Copy link
Contributor

@mletalie mletalie commented Sep 24, 2025

@mletalie mletalie changed the title Osdocs 8305 [OSDOCS-8305]Document which specific components and traffic flows are encrypted in OSD Sep 24, 2025
@openshift-ci openshift-ci bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Sep 24, 2025
@ocpdocs-previewbot
Copy link

ocpdocs-previewbot commented Sep 24, 2025

=== Component and traffic flow encryption
OpenShift Dedicated (OSD) components are configured to use Transport Layer Security (TLS) for secure communication, prioritizing TLS 1.3 for its performance and security enhancements. For components not yet supporting TLS 1.3, robust TLS 1.2 cipher suites are configured. This comprehensive TLS configuration ensures the encryption of various traffic flows within and to the OpenShift Dedicated environment. For more information, refer TLS configuration on OpenShift and Appendix 4 of the Red Hat Enterprise Agreement Appendix 4 (Online Subscription Services).

** Specific components like the API server (port 6443), kube-controller (port 10257), and kube-scheduler (port 10259) in OpenShift 4.7 and later versions utilize TLS 1.3 and a reduced set of secure cipher suites.
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 [error] RedHat.TermsErrors: Use 'use' rather than 'utilize'. For more information, see RedHat.TermsErrors.

@mletalie mletalie force-pushed the OSDOCS-8305 branch 2 times, most recently from 1b0dee9 to fbb18dd Compare September 25, 2025 17:01
@jaybeeunix
Copy link
Member

/lgtm

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Oct 8, 2025
@openshift-ci openshift-ci bot removed the lgtm Indicates that a PR is ready to be merged. label Oct 8, 2025
@openshift-ci
Copy link

openshift-ci bot commented Oct 8, 2025

New changes are detected. LGTM label has been removed.

@openshift-ci
Copy link

openshift-ci bot commented Oct 8, 2025

@mletalie: all tests passed!

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@mletalie mletalie merged commit e32b88d into openshift:main Oct 8, 2025
2 checks passed
@mletalie
Copy link
Contributor Author

mletalie commented Oct 8, 2025

/cherrypick enterprise-4.19
/cherrypick enterprise-4.20

@openshift-cherrypick-robot

@mletalie: new pull request created: #100226

In response to this:

/cherrypick enterprise-4.19
/cherrypick enterprise-4.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-cherrypick-robot

@mletalie: new pull request created: #100227

In response to this:

/cherrypick enterprise-4.19
/cherrypick enterprise-4.20

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/S Denotes a PR that changes 10-29 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants