OCPBUGS-105321: pki: switch to ECDSA defaults and thread PKI profile to leaf certs - #10743

Open

sanchezl wants to merge 9 commits into

openshift:mainfrom

sanchezl:pki-ecdsa-defaults

Commits on Aug 12, 2026

vendor: add library-go pkg/pki to vendor
sanchezl
committed
2627753
pki: replace local DefaultPKIProfile with library-go and add EffectiveProfile
sanchezl
committed
65dd627
pki: extend SignerKeyParams to carry PKIProfile and ConfigurablePKIEnabled
sanchezl
committed
3b11130
tls: add resolveKeyGen helpers for library-go PKI profile resolution
sanchezl
committed
4638c2f
tls: add library-go code path to SelfSignedCertKey and SignedCertKey
sanchezl
committed
7f1adfe
tls: wire feature-gate branches for library-go cert generation
sanchezl
committed
3e5ca22
tls: fix cert types for library-go path and clean up dead code
sanchezl
committed
132e614

Commits on Aug 19, 2026

unit tests: add SignedCertKey.Generate library-go path coverage
sanchezl
committed
0494fa7
pki: remove unused EffectiveSignerPKIConfig
sanchezl
committed
2b2e041