Skip to content

Add support for Strimzi-native Configurable RSA Keys - #13121

Draft
kyguy wants to merge 1 commit into
strimzi:mainfrom
kyguy:configurable-rsa-keys
Draft

Add support for Strimzi-native Configurable RSA Keys#13121
kyguy wants to merge 1 commit into
strimzi:mainfrom
kyguy:configurable-rsa-keys

Conversation

@kyguy

@kyguy kyguy commented Sep 2, 2026

Copy link
Copy Markdown
Member

Type of change

  • Enhancement / new feature

Description

Adds a keySize field to CertificateAuthority allowing users to configure the RSA key size for both root and leaf certificates, defaulting to 4096 bits. This addresses compliance requirements (BSI, eIDAS, NIST) that mandate RSA keys larger than the previously hardcoded 2048-bit leaf key size.

Implements: https://github.com/strimzi/proposals/blob/main/153-configurable-ca-key-size.md

Addresses: #12769

Checklist

  • Update documentation
  • Update CHANGELOG.md (if present)
  • Reference relevant issue(s) and close them after merging
  • Write tests
  • Make sure all tests pass
  • Try your changes inside a Kubernetes cluster, not just from unit tests
  • AI assistance was used to create this PR (see the Strimzi AI policy)

Signed-off-by: Kyle Liberti <kliberti@redhat.com>
@snyk-io

snyk-io Bot commented Sep 2, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant