Skip to content

Conversation

@osmontero
Copy link
Member

This pull request updates the TLS configuration and error handling in the agent-manager/updates/updates.go file to improve security and reliability. It also removes gzip middleware from the Gin server setup.

TLS configuration improvements:

  • Expanded the list of supported cipher suites to include both RSA and ECDSA key exchanges, added support for TLS 1.3, and set preferred elliptic curves for better security. (agent-manager/updates/updates.go)
  • Set both minimum and maximum TLS versions (MinVersion: tls.VersionTLS12, MaxVersion: tls.VersionTLS13) for stricter protocol enforcement. (agent-manager/updates/updates.go)

Error handling improvements:

  • Updated error logging to ignore the return value from catcher.Error and added a 5-second delay before exiting if TLS credentials fail to load, which may help with debugging or orchestrator restarts. (agent-manager/updates/updates.go) [1] [2]

Middleware changes:

  • Removed the gzip middleware from the Gin server, so HTTP responses are no longer compressed with gzip by default. (agent-manager/updates/updates.go) [1] [2]

@osmontero osmontero requested a review from mjabascal10 January 22, 2026 19:50
@osmontero osmontero merged commit adb3a70 into v11 Jan 22, 2026
20 checks passed
@osmontero osmontero deleted the release/v11.2.1 branch January 22, 2026 19:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants