Merge pull request #1977 from vrutkovs/feature-short-cert-rotation

openshift-merge-bot[bot] · web-flow · commit 14a17c7009c4 · 2025-03-11T08:57:00.000Z
API-1689: features: add ShortCertRotation
diff --git a/features.md b/features.md
@@ -11,6 +11,7 @@
 | NewOLMCatalogdAPIV1Metas| | | | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span>  |
 | SELinuxChangePolicy| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | |  |
 | SELinuxMount| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | |  |
+| ShortCertRotation| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | |  |
 | SigstoreImageVerificationPKI| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | |  |
 | NewOLM| | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span> | | <span style="background-color: #519450">Enabled</span>  |
 | AWSClusterHostedDNS| | | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span> | <span style="background-color: #519450">Enabled</span>  |
diff --git a/features/features.go b/features/features.go
@@ -809,4 +809,12 @@ var (
 		enhancementPR("https://github.com/openshift/enhancements/pull/1756").
 		enableIn(configv1.DevPreviewNoUpgrade, configv1.TechPreviewNoUpgrade).
 		mustRegister()
+
+	FeatureShortCertRotation = newFeatureGate("ShortCertRotation").
+					reportProblemsToJiraComponent("kube-apiserver").
+					contactPerson("vrutkovs").
+					productScope(ocpSpecific).
+					enableIn(configv1.DevPreviewNoUpgrade).
+					enhancementPR("https://github.com/openshift/enhancements/pull/1670").
+					mustRegister()
 )
diff --git a/payload-manifests/featuregates/featureGate-Hypershift-Default.yaml b/payload-manifests/featuregates/featureGate-Hypershift-Default.yaml
@@ -169,6 +169,9 @@
                     {
                         "name": "ServiceAccountTokenNodeBinding"
                     },
+                    {
+                        "name": "ShortCertRotation"
+                    },
                     {
                         "name": "SignatureStores"
                     },
diff --git a/payload-manifests/featuregates/featureGate-Hypershift-DevPreviewNoUpgrade.yaml b/payload-manifests/featuregates/featureGate-Hypershift-DevPreviewNoUpgrade.yaml
@@ -254,6 +254,9 @@
                     {
                         "name": "SetEIPForNLBIngressController"
                     },
+                    {
+                        "name": "ShortCertRotation"
+                    },
                     {
                         "name": "SignatureStores"
                     },
diff --git a/payload-manifests/featuregates/featureGate-Hypershift-TechPreviewNoUpgrade.yaml b/payload-manifests/featuregates/featureGate-Hypershift-TechPreviewNoUpgrade.yaml
@@ -51,6 +51,9 @@
                     {
                         "name": "SELinuxMount"
                     },
+                    {
+                        "name": "ShortCertRotation"
+                    },
                     {
                         "name": "SigstoreImageVerificationPKI"
                     }
diff --git a/payload-manifests/featuregates/featureGate-SelfManagedHA-Default.yaml b/payload-manifests/featuregates/featureGate-SelfManagedHA-Default.yaml
@@ -169,6 +169,9 @@
                     {
                         "name": "ServiceAccountTokenNodeBinding"
                     },
+                    {
+                        "name": "ShortCertRotation"
+                    },
                     {
                         "name": "SignatureStores"
                     },
diff --git a/payload-manifests/featuregates/featureGate-SelfManagedHA-DevPreviewNoUpgrade.yaml b/payload-manifests/featuregates/featureGate-SelfManagedHA-DevPreviewNoUpgrade.yaml
@@ -254,6 +254,9 @@
                     {
                         "name": "SetEIPForNLBIngressController"
                     },
+                    {
+                        "name": "ShortCertRotation"
+                    },
                     {
                         "name": "SignatureStores"
                     },
diff --git a/payload-manifests/featuregates/featureGate-SelfManagedHA-TechPreviewNoUpgrade.yaml b/payload-manifests/featuregates/featureGate-SelfManagedHA-TechPreviewNoUpgrade.yaml
@@ -45,6 +45,9 @@
                     {
                         "name": "SELinuxMount"
                     },
+                    {
+                        "name": "ShortCertRotation"
+                    },
                     {
                         "name": "SigstoreImageVerificationPKI"
                     }

Original file line number	Diff line number	Diff line change
`@@ -169,6 +169,9 @@`
`169`	`169`	`{`
`170`	`170`	`"name": "ServiceAccountTokenNodeBinding"`
`171`	`171`	`},`
	`172`	`+ {`
	`173`	`+ "name": "ShortCertRotation"`
	`174`	`+ },`
`172`	`175`	`{`
`173`	`176`	`"name": "SignatureStores"`
`174`	`177`	`},`
Original file line number	Diff line number	Diff line change
`@@ -254,6 +254,9 @@`
`254`	`254`	`{`
`255`	`255`	`"name": "SetEIPForNLBIngressController"`
`256`	`256`	`},`
	`257`	`+ {`
	`258`	`+ "name": "ShortCertRotation"`
	`259`	`+ },`
`257`	`260`	`{`
`258`	`261`	`"name": "SignatureStores"`
`259`	`262`	`},`
Original file line number	Diff line number	Diff line change
`@@ -51,6 +51,9 @@`
`51`	`51`	`{`
`52`	`52`	`"name": "SELinuxMount"`
`53`	`53`	`},`
	`54`	`+ {`
	`55`	`+ "name": "ShortCertRotation"`
	`56`	`+ },`
`54`	`57`	`{`
`55`	`58`	`"name": "SigstoreImageVerificationPKI"`
`56`	`59`	`}`
Original file line number	Diff line number	Diff line change
`@@ -45,6 +45,9 @@`
`45`	`45`	`{`
`46`	`46`	`"name": "SELinuxMount"`
`47`	`47`	`},`
	`48`	`+ {`
	`49`	`+ "name": "ShortCertRotation"`
	`50`	`+ },`
`48`	`51`	`{`
`49`	`52`	`"name": "SigstoreImageVerificationPKI"`
`50`	`53`	`}`