Skip to content

🌱 OPRUN-4644: Update curves for golang 1.26 - #2754

Merged
openshift-merge-bot[bot] merged 1 commit into
operator-framework:mainfrom
tmshort:tls-add-curves
Jun 10, 2026
Merged

🌱 OPRUN-4644: Update curves for golang 1.26#2754
openshift-merge-bot[bot] merged 1 commit into
operator-framework:mainfrom
tmshort:tls-add-curves

Conversation

@tmshort

Copy link
Copy Markdown
Contributor

tlsprofiles: add SecP256r1MLKEM768, SecP384r1MLKEM1024, and secp256r1 alias

Add the two NIST-curve ML-KEM post-quantum hybrids introduced in Go 1.26 to the custom curve map and local constants. Also add "secp256r1" as an alias for "prime256v1" using the IANA name for P-256.

Description

Reviewer Checklist

  • API Go Documentation
  • Tests: Unit Tests (and E2E Tests, if appropriate)
  • Comprehensive Commit Messages
  • Links to related GitHub Issue(s)

CopilotAI review requested due to automatic review settings June 8, 2026 19:54

CopilotAI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the tlsprofiles utility’s custom curve name→tls.CurveID mapping to recognize new Go 1.26 post-quantum hybrid curves, and adds an additional alias for P-256 using its IANA/OpenSSL name.

Changes:

  • Add Go 1.26 hybrid curve IDs SecP256r1MLKEM768 and SecP384r1MLKEM1024 to local constants and the custom curve lookup map.
  • Add "secp256r1" as an alias for "prime256v1" (both resolving to tls.CurveP256).
  • Extend tests to cover the new curves and the secp256r1 alias behavior.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

FileDescription
internal/shared/util/tlsprofiles/tlsprofiles.goExtends the custom curve ID mapping with Go 1.26 hybrid curves and adds secp256r1 aliasing to P-256.
internal/shared/util/tlsprofiles/tlsprofiles_test.goAdds/updates unit tests validating the new curve names and the secp256r1→P-256 alias behavior.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

{"secp256r1", true}, // IANA alias for prime256v1
{"secp384r1", true},
{"secp521r1", true},
{"unknown-cuve", false},
@codecov

codecovBot commented Jun 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 66.96%. Comparing base (ef1f979) to head (3f9540d).
⚠️ Report is 6 commits behind head on main.

Additional details and impacted files
@@ Coverage Diff @@## main #2754 +/- ##
==========================================
+ Coverage 66.95% 66.96% +0.01% 
==========================================
Files 149 149 Lines 11341 11341 ==========================================
+ Hits 7593 7595 +2 + Misses 3191 3190 -1 + Partials 557 556 -1 
FlagCoverage Δ
e2e35.17% <ø> (-0.18%)⬇️
experimental-e2e52.57% <ø> (+0.02%)⬆️
unit52.25% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@netlify

netlifyBot commented Jun 8, 2026

Copy link
Copy Markdown

Deploy Preview for olmv1 ready!

NameLink
🔨 Latest commit3f9540d
🔍 Latest deploy loghttps://app.netlify.com/projects/olmv1/deploys/6a273fc85f7ea500086b8f9d
😎 Deploy Previewhttps://deploy-preview-2754--olmv1.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.
🤖 Make changesRun an agent on this branch

To edit notification comments on pull requests, go to your Netlify project configuration.

… alias
Add the two NIST-curve ML-KEM post-quantum hybrids introduced in Go 1.26
to the custom curve map and local constants. Also add "secp256r1" as an
alias for "prime256v1" using the IANA name for P-256.
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Todd Short <tshort@redhat.com>
CopilotAI review requested due to automatic review settings June 8, 2026 22:18

CopilotAI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 5 out of 5 changed files in this pull request and generated no new comments.

@dtfranz

Copy link
Copy Markdown
Contributor

/lgtm

@openshift-ciopenshift-ciBot added the lgtm Indicates that a PR is ready to be merged. label Jun 10, 2026

@rashmigottipatirashmigottipati left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@perdasilva

Copy link
Copy Markdown
Contributor

/approve

@openshift-ci

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: perdasilva, rashmigottipati

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ciopenshift-ciBot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 10, 2026
@openshift-merge-bot
openshift-merge-botBot merged commit f96144f into operator-framework:mainJun 10, 2026
26 checks passed
@tmshort
tmshort deleted the tls-add-curves branch June 10, 2026 13:11
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approvedIndicates a PR has been approved by an approver from all required OWNERS files.lgtmIndicates that a PR is ready to be merged.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants

@tmshort@dtfranz@perdasilva@rashmigottipati