-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Adds an option to make HTTP2 configurable #5232
Copy link
Copy link
Closed
Labels
kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.track/coreCaptures issues that are related to Core controller workCaptures issues that are related to Core controller work
Description
Is your feature request related to a problem? Please describe.
Provide an option to choose http2 for the server created by the operator. This is required because not using http/2 will prevent from being vulnerable to the HTTP/2 Stream Cancellation and Rapid Reset CVEs. For more information see:
GHSA-qppj-fm5r-hxr3
GHSA-4374-p667-p6c8
Describe the solution you'd like
Provide an argument 'enable-http2' to allow user to opt for http2 if required, when the enable-http2 flag is false (the default), http/2 would be disabled due to its vulnerabilities.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.track/coreCaptures issues that are related to Core controller workCaptures issues that are related to Core controller work
Type
Projects
Status
Done