From 4faed699053fdfedb9bcd4b27767cbd040a7cad3 Mon Sep 17 00:00:00 2001 From: Bjørn Christian Seime Date: Thu, 21 Jul 2022 17:32:56 +0200 Subject: Add feature flag for capability enforcement mode --- flags/src/main/java/com/yahoo/vespa/flags/Flags.java | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/flags/src/main/java/com/yahoo/vespa/flags/Flags.java b/flags/src/main/java/com/yahoo/vespa/flags/Flags.java index 0a8733fb124..c6238149be1 100644 --- a/flags/src/main/java/com/yahoo/vespa/flags/Flags.java +++ b/flags/src/main/java/com/yahoo/vespa/flags/Flags.java @@ -471,6 +471,14 @@ public class Flags { "Takes effect on next tick", HOSTNAME); + public static final UnboundStringFlag TLS_CAPABILITIES_ENFORCEMENT_MODE = defineStringFlag( + "tls-capabilities-enforcement-mode", "disable", + List.of("bjorncs", "vekterli"), "2022-07-21", "2024-01-01", + "Configure Vespa TLS capability enforcement mode", + "Takes effect on restart of Docker container", + APPLICATION_ID,HOSTNAME,NODE_TYPE,TENANT_ID,VESPA_VERSION + ); + /** WARNING: public for testing: All flags should be defined in {@link Flags}. */ public static UnboundBooleanFlag defineFeatureFlag(String flagId, boolean defaultValue, List owners, String createdAt, String expiresAt, String description, -- cgit v1.2.3