Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Relax tls limitation on UI that blocks encryption if not enabled #2192

Closed
wants to merge 2 commits into from

Conversation

cesnietor
Copy link
Contributor

@cesnietor cesnietor commented Jul 2, 2024

fixes: #2191

CRD still allows you to disable tls while having encryption as well as the Edit UI.
Seems that Operator already takes care of the TLS creation if encryption is enabled for KES regardless of whether it's enabled for the tenant or not see here.

This limitation was added on https://github.com/minio/console/pull/540/files#diff-3b60b0a032620e5fa1a8b8dc39485f0f82aef9356f58e5160734851c568c60c9R1168 but there doesn't seem to be a reason on why this was added.
Same limitation is done in backend.

Test Steps:

@cesnietor cesnietor self-assigned this Jul 2, 2024
@cesnietor cesnietor requested a review from cniackz July 2, 2024 22:28
@cesnietor cesnietor marked this pull request as draft July 2, 2024 22:57
@pjuarezd
Copy link
Member

pjuarezd commented Jul 3, 2024

failing test might be fixed in #2194

@cesnietor cesnietor marked this pull request as ready for review July 3, 2024 20:12
@pjuarezd
Copy link
Member

pjuarezd commented Jul 3, 2024

🔥

@cesnietor cesnietor force-pushed the relax-tls-limitation branch from 1de181a to 5bd805b Compare July 3, 2024 20:14
@pjuarezd
Copy link
Member

pjuarezd commented Jul 4, 2024

this PR is on review, @r-scheele will be doing the validation

@harshavardhana harshavardhana requested a review from r-scheele July 4, 2024 15:33
@r-scheele
Copy link
Contributor

@cesnietor the UI still is not allowing to disable TLS

These are the steps i followed to test the pr

To regenerated the console javascripts

$ make assets

Building frontend static assets to 'build'
Creating an optimized production build...
Compiled successfully.

Export the operator image.

$ make install

And then installed the operator/console

@harshavardhana
Copy link
Member

Please rebase with master @cesnietor

@cesnietor
Copy link
Contributor Author

closing due to #2205

@cesnietor cesnietor closed this Jul 8, 2024
@harshavardhana
Copy link
Member

closing due to #2205

🍨

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Allow enable at-rest Encryption without request for in-transit TLS in Operator UI
4 participants