OCPBUGS-66898: Implement mTLS authentication and authorization for CVO metrics endpoint#1271

Draft

DavidHurta wants to merge 9 commits intoopenshift:mainfrom

DavidHurta:metrics-mtls

Commits on Dec 11, 2025

Run `go mod tidy & go mod vendor`
DavidHurta
committed

Commits on Jan 5, 2026

pkg/cvo/metrics: Utilize dynamiccertificates package for certificate updates

DavidHurta
and
claude
committed
pkg/cvo/metrics: Authenticate clients using mTLS

DavidHurta
and
claude
committed
install/servicemonitor: Instruct Prometheus to use mTLS instead of bearer token
DavidHurta
committed
pkg/cvo/metrics: Authorize using CN verification

DavidHurta
and
claude
committed
pkg/cvo/metrics_test: Test CN verification authorization handler

DavidHurta
and
claude
committed
pkg/start/start: Use directly HyperShift flag
DavidHurta
committed
pkg: Introduce options to disable granularly authn/authz for metrics
DavidHurta
committed

Commits on Jan 6, 2026

pkg/cvo/metrics: Authorize during TLS handshake

DavidHurta
and
claude
committed