Skip to content

Include ssl.conf in httpd configuration - #969

Open
fmount wants to merge 1 commit into
openstack-k8s-operators:mainfrom
fmount:include_sslconf
Open

Include ssl.conf in httpd configuration#969
fmount wants to merge 1 commit into
openstack-k8s-operators:mainfrom
fmount:include_sslconf

Conversation

@fmount

@fmount fmount commented Aug 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

The ssl.conf rendered by lib-common was placed by kolla into conf.d/ but never loaded because the Include conf.d/*.conf directive was commented out. This left global SSL hardening settings (cipher suite, protocol restrictions, session cache) at mod_ssl defaults instead of the operator-managed values.

Jira: https://redhat.atlassian.net/browse/OSPRH-34152

@fmount @claude
Include ssl.conf in httpd configuration
562ebef 
The ssl.conf rendered by lib-common was placed by kolla into conf.d/
but never loaded. This left global SSL hardening settings (cipher suite,
protocol restrictions, session cache) at mod_ssl defaults instead of
the operator-managed values.

Add an explicit Include of conf.d/ssl.conf alongside the existing
wsgi/proxypass conditional includes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Francesco Pantano <fpantano@redhat.com>
@fmount
fmount requested a review from stuggi August 3, 2026 07:31
@openshift-ci openshift-ci Bot added the approved label Aug 3, 2026
@openshift-ci
openshift-ci Bot requested review from dprince and konan-abhi August 3, 2026 07:32
@centosinfra-prod-github-app

centosinfra-prod-github-app Bot commented Aug 3, 2026

Copy link
Copy Markdown

Build failed (check pipeline). Post recheck (without leading slash)
to rerun all jobs. Make sure the failure cause has been resolved before
you rerun jobs.

https://gateway-cloud-softwarefactory.apps.ocp.cloud.ci.centos.org/zuul/t/rdoproject.org/buildset/b2673d31f26c431b90df6f1034fbd303

❌ openstack-k8s-operators-content-provider FAILURE in 15m 06s
⚠️ glance-operator-kuttl SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider
⚠️ glance-operator-tempest SKIPPED Skipped due to failed job openstack-k8s-operators-content-provider

@stuggi

stuggi commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

recheck

stuggi
stuggi approved these changes Aug 3, 2026
View reviewed changes

@stuggi stuggi left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@openshift-ci openshift-ci Bot added the lgtm label Aug 3, 2026
@openshift-ci

openshift-ci Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: fmount, stuggi

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@stuggi stuggi stuggi approved these changes
@dprince dprince Awaiting requested review from dprince
@konan-abhi konan-abhi Awaiting requested review from konan-abhi

Assignees

@stuggi stuggi

Labels

approved lgtm

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@fmount @stuggi