CM-966: Implement centralized TLS profile fetching and application without istio-csr changes#416

Merged

openshift-merge-bot[bot] merged 14 commits into

openshift:masterfrom

arun717:tls_impl_without_istio-csr

Jun 15, 2026

Commits on May 20, 2026

feat: apply cluster TLS security profile to cert-manager operands

Super User
and
cursoragent
committed
deps: bump OpenShift and Kubernetes deps for tlsAdherence support

Super User
and
cursoragent
committed
test: add TLS profile coverage and address review feedback

Super User
and
cursoragent
committed
refactor: move TLS profile deployment hook into controller/common, along with some PR comments addressed.
Arun Maurya
committed

Commits on May 26, 2026

e2e: use dedicated vaultSetupTimeout for Vault issuer setup

Super User
and
cursoragent
committed
e2e: extend Vault pod wait and improve setup failure diagnostics
Arun Maurya
committed

Commits on Jun 9, 2026

fix: resolve TLS profile only when tlsAdherence requires it

Super User
and
cursoragent
committed
Addressed PR review comments.
Arun Maurya
committed

Commits on Jun 10, 2026

fix(istiocsr): recreate deleted RBAC with stable names from status

Super User
and
cursoragent
committed
test: add library-go as direct dependency in test module

Super User
and
cursoragent
committed
fix: let unsupportedConfigOverrides override cluster TLS args

Super User
and
cursoragent
committed

Commits on Jun 11, 2026

fix(e2e): use restricted security context for Vault Helm installer pod

Arun Maurya
and
cursoragent
committed
test(e2e): patch apiserver TLS profile and label TechPreview suite

Arun Maurya
and
cursoragent
committed
fix(e2e): set runAsUser on Vault Helm installer pod

Arun Maurya
and
cursoragent
committed