diff --git a/controllers/quay/tls_test.go b/controllers/quay/tls_test.go index 6165ab0f2..7c6f9be61 100644 --- a/controllers/quay/tls_test.go +++ b/controllers/quay/tls_test.go @@ -36,6 +36,7 @@ func TestTranslateTLSProfile(t *testing.T) { Type: configv1.TLSProfileOldType, }, expectedProtocols: "TLSv1 TLSv1.1 TLSv1.2 TLSv1.3", + expectedCiphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA256:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA", expectedCiphersuites: "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256", }, { @@ -109,7 +110,9 @@ func TestTranslateTLSProfile(t *testing.T) { profile: &configv1.TLSSecurityProfile{ Type: configv1.TLSProfileCustomType, }, - expectedProtocols: "TLSv1.2 TLSv1.3", + expectedProtocols: "TLSv1.2 TLSv1.3", + expectedCiphers: "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384", + expectedCiphersuites: "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256", }, } { t.Run(tt.name, func(t *testing.T) {