All Hops Encrypted: Activator serving TLS

[nak3]

This patch fixes #12501.

TODO:

• All Hops Encrypted: alpha Kourier support for encrypted backends knative-extensions/net-kourier#761
• Add HTTPS port variables networking#640
• Add unit tests
• Clean up test scripts
• Set activator always in the path. - Force activator always in path when activator CA is specified #12790
• Fix net-kourier HTTP2 issue Use HTTP2 when service has HTTP2 port in the ports knative-extensions/net-kourier#813
• Use config-network to specify server certs Add certificates config keys in config-network networking#648

Fixes #12501

[knative-prow-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: nak3

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [nak3]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[knative-prow-robot]

@nak3: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
pull-knative-serving-unit-tests	91385e9	link	true	/test pull-knative-serving-unit-tests
pull-knative-serving-build-tests	91385e9	link	true	/test pull-knative-serving-build-tests
pull-knative-serving-kourier-stable	91385e9	link	true	/test pull-knative-serving-kourier-stable
pull-knative-serving-kourier-stable-tls	91385e9	link	true	/test pull-knative-serving-kourier-stable-tls
pull-knative-serving-istio-latest-no-mesh-tls	91385e9	link	true	/test pull-knative-serving-istio-latest-no-mesh-tls
pull-knative-serving-istio-latest-no-mesh	91385e9	link	true	/test pull-knative-serving-istio-latest-no-mesh
pull-knative-serving-upgrade-tests	91385e9	link	true	/test pull-knative-serving-upgrade-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. I understand the commands that are listed here.

[codecov]

Codecov Report

Merging #12770 (a7254bc) into main (ad15a85) will increase coverage by 0.04%.
The diff coverage is 80.95%.

❗ Current head a7254bc differs from pull request most recent head 248eb28. Consider uploading reports for the commit 248eb28 to get more accurate results

@@            Coverage Diff             @@
##             main   #12770      +/-   ##
==========================================
+ Coverage   87.44%   87.49%   +0.04%     
==========================================
  Files         196      197       +1     
  Lines        9782    14334    +4552     
==========================================
+ Hits         8554    12541    +3987     
- Misses        938     1503     +565     
  Partials      290      290              

Impacted Files	Coverage Δ
cmd/activator/main.go	0.00% <0.00%> (ø)
pkg/reconciler/domainmapping/reconciler.go	93.62% <33.33%> (+1.52%)	⬆️
pkg/networking/util.go	88.00% <88.00%> (ø)
pkg/reconciler/autoscaling/hpa/hpa.go	91.66% <88.88%> (+0.49%)	⬆️
pkg/reconciler/autoscaling/config/store.go	100.00% <100.00%> (ø)
pkg/reconciler/autoscaling/kpa/kpa.go	95.18% <100.00%> (+0.06%)	⬆️
pkg/reconciler/route/resources/ingress.go	96.18% <100.00%> (+3.04%)	⬆️
...reconciler/serverlessservice/resources/services.go	100.00% <100.00%> (ø)
pkg/queue/handler.go	90.24% <0.00%> (-3.31%)	⬇️
pkg/autoscaler/statforwarder/leases.go	72.39% <0.00%> (-3.15%)	⬇️
... and 194 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update e75bcf0...248eb28. Read the comment docs.

[nak3]

/cc @evankanderson @skonto @rhuss

[skonto]

/retest

[nak3]

Thank you @evankanderson @skonto I think this is ready now.

[evankanderson]

/lgtm