Eventing TLS: support creating TLS server for mt-broker-ingress

[pierDipi]

Problem

After #6837, we have the foundation bits to enabled the mt-broker-ingress to create a TLS server when the transport-encryption feature flag is set to Permissive or Strict.

We need to make sure that the broker-ingress is creating such TLS server on the fly without restarts by watching the config-features ConfigMap.

Exit Criteria

mt-broker-ingress accepts TLS connections when the transport-encryption feature flag is set to Permissive or Strict.

Additional context (optional)

• We can use the library to watch and re-new TLS key pair added in: Eventing TLS: support K_CA_CERTS in adapter/v2 #6848
• This issue is similar to Eventing TLS: support creating TLS server for InMemoryChannel dispatcher #6874 but for mt-broker-ingress

/help

[knative-prow]

@pierDipi:
This request has been marked as needing help from a contributor.

Please ensure the request meets the requirements listed here.

If this request no longer meets these requirements, the label can be removed
by commenting with the /remove-help command.

Details

In response to this:

Problem

After #6837, we have the foundation bits to enabled the mt-broker-ingress to create a TLS server when the transport-encryption feature flag is set to Permissive or Strict.

We need to make sure that the broker-ingress is creating such TLS server on the fly without restarts by watching the config-features ConfigMap.

Exit Criteria

mt-broker-ingress accepts TLS connections when the transport-encryption feature flag is set to Permissive or Strict.

Additional context (optional)

• We can use the library to watch and re-new TLS key pair added in: Eventing TLS: support K_CA_CERTS in adapter/v2 #6848
• This issue is similar to Eventing TLS: support creating TLS server for InMemoryChannel dispatcher #6874 but for mt-broker-ingress

/help

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[gabo1208]

/assign