github/containerized-data-importer
7
0
Fork 0
mirror of https://github.com/kubevirt/containerized-data-importer.git synced 2025-06-03 06:30:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix 'ocp4-moderate-routes-protected-by-tls' Compliance failure (#2374)

Browse Source 
According to:
https://github.com/ComplianceAsCode/content/blob/master/applications/openshift/networking/routes_protected_by_tls/rule.yml
The ocp4-moderate profile of the compliance operator expects that all Routes on the cluster should have either None or Redirect setting under their .spec.tls.insecureEdgeTerminationPolicy
We chose Redirect, to be aligned with all other default routes on an OCP cluster, and not to fail HTTP requests but redirect them to HTTPS requests.
This PR adds the expected field to the cdi-uploadproxy route deployed by CDI.

https://bugzilla.redhat.com/show_bug.cgi?id=2110562
Signed-off-by: Oren Cohen <ocohen@redhat.com>
This commit is contained in:
Oren Cohen 2022-07-28 05:19:13 +03:00 committed by GitHub
parent 57fc2639ae
commit 14ad5454d6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
pkg/operator/controller/route.go
View File

@ -89,8 +89,9 @@ func ensureUploadProxyRouteExists(logger logr.Logger, c client.Client, scheme *r
Name: uploadProxyServiceName,
},
TLS: &routev1.TLSConfig{
Termination: routev1.TLSTerminationReencrypt,
DestinationCACertificate: string(cert),
Termination: routev1.TLSTerminationReencrypt,
InsecureEdgeTerminationPolicy: routev1.InsecureEdgeTerminationPolicyRedirect,
DestinationCACertificate: string(cert),
},
},
}