OCPBUGS-66898: Implement mTLS authentication and authorization for CVO metrics endpoint#1271

Open

DavidHurta wants to merge 21 commits intoopenshift:mainfrom

DavidHurta:metrics-mtls

Commits on Jan 27, 2026

Run `go mod tidy & go mod vendor`
DavidHurta
committed
pkg/cvo/metrics: Utilize dynamiccertificates package for certificate updates

DavidHurta
and
claude
committed
pkg/cvo/metrics: Authenticate clients using mTLS

DavidHurta
and
claude
committed
install/servicemonitor: Instruct Prometheus to use mTLS instead of bearer token
DavidHurta
committed
pkg/cvo/metrics: Authorize using CN verification

DavidHurta
and
claude
committed
pkg/cvo/metrics_test: Test CN verification authorization handler

DavidHurta
and
claude
committed
pkg/start/start: Use directly HyperShift flag
DavidHurta
committed
pkg: Introduce options to disable granularly authn/authz for metrics
DavidHurta
committed
pkg/cvo/metrics: Authorize during TLS handshake

DavidHurta
and
claude
committed
Revert "pkg/cvo/metrics: Authorize during TLS handshake"
DavidHurta
committed
pkg/cvo/metrics: Add auth handler description

DavidHurta
and
claude
committed
pkg/cvo/metrics: Clarify shutdown requested logging
DavidHurta
committed
pkg/cvo/metrics: Simplify code
DavidHurta
committed
pkg/cvo/metrics: Fix error returned when listen address is empty
DavidHurta
committed
pkg/cvo/metrics: Use full name instead of abbreviation of common name
DavidHurta
committed
pkg/cvo/metrics: Update RunMetrics description

DavidHurta
and
claude
committed
pkg/cvo/metrics: Log certificate controller events into stdout
DavidHurta
committed
pkg/cvo/metrics: Move client CN value to function
DavidHurta
committed
pkg/cvo/metrics: Add more fields to MetricsOptions
DavidHurta
committed
pkg/cvo/metrics: Shorten RunMetrics description
DavidHurta
committed
metrics: Populate MetricsOptions at startup
DavidHurta
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

OCPBUGS-66898: Implement mTLS authentication and authorization for CVO metrics endpoint#1271

OCPBUGS-66898: Implement mTLS authentication and authorization for CVO metrics endpoint#1271
DavidHurta wants to merge 21 commits intoopenshift:mainfrom
DavidHurta:metrics-mtls

Commits on Jan 27, 2026

Run `go mod tidy & go mod vendor`

pkg/cvo/metrics: Utilize dynamiccertificates package for certificate updates

pkg/cvo/metrics: Authenticate clients using mTLS

install/servicemonitor: Instruct Prometheus to use mTLS instead of bearer token

pkg/cvo/metrics: Authorize using CN verification

pkg/cvo/metrics_test: Test CN verification authorization handler

pkg/start/start: Use directly HyperShift flag

pkg: Introduce options to disable granularly authn/authz for metrics

pkg/cvo/metrics: Authorize during TLS handshake

Revert "pkg/cvo/metrics: Authorize during TLS handshake"

pkg/cvo/metrics: Add auth handler description

pkg/cvo/metrics: Clarify shutdown requested logging

pkg/cvo/metrics: Simplify code

pkg/cvo/metrics: Fix error returned when listen address is empty

pkg/cvo/metrics: Use full name instead of abbreviation of common name

pkg/cvo/metrics: Update RunMetrics description

pkg/cvo/metrics: Log certificate controller events into stdout

pkg/cvo/metrics: Move client CN value to function

pkg/cvo/metrics: Add more fields to MetricsOptions

pkg/cvo/metrics: Shorten RunMetrics description

metrics: Populate MetricsOptions at startup