From 3552031c87653018994cc5d02195513de29134a1 Mon Sep 17 00:00:00 2001 From: Roman Bednar Date: Wed, 22 Jul 2026 08:37:14 +0200 Subject: [PATCH] Add TLS 1.3 adherence parameters to csi-operator TLS scanner job Add TLS_13_ENABLE_TLS_ADHERENCE, TLS_13_TLS_ADHERENCE_POLICY env vars and tls-13 step ref to tls-scanner-aws-ebs test in csi-operator configs for main, release-4.23, release-5.0, and release-5.1. This follows the pattern established in PR #81917 for GCP Filestore and is a followup to PR #82134 which added the base TLS scanner test. --- .../openshift/csi-operator/openshift-csi-operator-main.yaml | 3 +++ .../csi-operator/openshift-csi-operator-release-4.23.yaml | 3 +++ .../csi-operator/openshift-csi-operator-release-5.0.yaml | 3 +++ .../csi-operator/openshift-csi-operator-release-5.1.yaml | 3 +++ 4 files changed, 12 insertions(+) diff --git a/ci-operator/config/openshift/csi-operator/openshift-csi-operator-main.yaml b/ci-operator/config/openshift/csi-operator/openshift-csi-operator-main.yaml index a3c8d3f5563c2..2a240e2662678 100644 --- a/ci-operator/config/openshift/csi-operator/openshift-csi-operator-main.yaml +++ b/ci-operator/config/openshift/csi-operator/openshift-csi-operator-main.yaml @@ -180,7 +180,10 @@ tests: SCAN_NAMESPACE: openshift-cluster-csi-drivers SCANNER_CPU: "1" SCANNER_MEMORY: 1Gi + TLS_13_ENABLE_TLS_ADHERENCE: "true" + TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents test: + - ref: tls-13 - ref: tls-scanner-run workflow: openshift-e2e-aws-csi - as: aws-efs-operator-e2e diff --git a/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-4.23.yaml b/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-4.23.yaml index 838135614e998..8aba491a113b3 100644 --- a/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-4.23.yaml +++ b/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-4.23.yaml @@ -180,7 +180,10 @@ tests: SCAN_NAMESPACE: openshift-cluster-csi-drivers SCANNER_CPU: "1" SCANNER_MEMORY: 1Gi + TLS_13_ENABLE_TLS_ADHERENCE: "true" + TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents test: + - ref: tls-13 - ref: tls-scanner-run workflow: openshift-e2e-aws-csi - as: aws-efs-operator-e2e diff --git a/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-5.0.yaml b/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-5.0.yaml index 919315a65c662..cc2020a1038c7 100644 --- a/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-5.0.yaml +++ b/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-5.0.yaml @@ -181,7 +181,10 @@ tests: SCAN_NAMESPACE: openshift-cluster-csi-drivers SCANNER_CPU: "1" SCANNER_MEMORY: 1Gi + TLS_13_ENABLE_TLS_ADHERENCE: "true" + TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents test: + - ref: tls-13 - ref: tls-scanner-run workflow: openshift-e2e-aws-csi - as: aws-efs-operator-e2e diff --git a/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-5.1.yaml b/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-5.1.yaml index 9db0f255e1aa5..78250986c76df 100644 --- a/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-5.1.yaml +++ b/ci-operator/config/openshift/csi-operator/openshift-csi-operator-release-5.1.yaml @@ -180,7 +180,10 @@ tests: SCAN_NAMESPACE: openshift-cluster-csi-drivers SCANNER_CPU: "1" SCANNER_MEMORY: 1Gi + TLS_13_ENABLE_TLS_ADHERENCE: "true" + TLS_13_TLS_ADHERENCE_POLICY: StrictAllComponents test: + - ref: tls-13 - ref: tls-scanner-run workflow: openshift-e2e-aws-csi - as: aws-efs-operator-e2e