introduce Curves configuration to Ingress

[eslutsky]

To support new PQC key exchanges add option to set configure ingress ssl curves.

• related changes - which needs to be merged first

  • API specs change NE-2334: Implement enhancement in OpenShift API to support for TLS curves in TLSProfile api#2583

  • curves ingress support Add support for configurable SSL curves in HAProxy configuration router#678

  • example providing custom curves in MicroShift config:

  •  ingress:
       tlsSecurityProfile:
         type: Custom
         custom:
           curves:
             - ecdh_x25519
             - secp256r1
             - secp384r1
               
    

in case curves configuration is not provided, then ROUTER_CURVES wont be passed to the ingress deployment, and OpenSSL defaults curves will be used ( as it is in previous versions).

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: eslutsky

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [eslutsky]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

The OWNERS file contains untrusted users, which makes it INVALID. The following users are mentioned in OWNERS file(s) but are untrusted for the following reasons. One way to make the user trusted is to add them as members of the openshift org. You can then trigger verification by writing /verify-owners in a comment.

• soltysh
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.
• dcbw
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.
  • deps/github.com/openshift/api-curves/network/OWNERS
  • deps/github.com/openshift/api-curves/networkoperator/OWNERS
• dmage
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.
• legionus
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.
• miminar
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.
• alexander-demichev
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.
• pravisankar
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.
• coreydaley
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.
• mfojtik
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.
  • deps/github.com/openshift/api-curves/project/OWNERS
  • deps/github.com/openshift/api-curves/quota/OWNERS
• jim-minter
  • User is not a member of the org. User is not a collaborator. Satisfy at least one of these conditions to make the user trusted.