Eventing TLS: support creating TLS server for mt-broker-filter

[pierDipi]

Problem

After #6837, we have the foundation bits to enabled the mt-broker-filer to create a TLS server when the transport-encryption feature flag is set to Permissive or Strict.

We need to make sure that the broker-filter is creating such TLS server on the fly without restarts by watching the config-features ConfigMap.

Exit Criteria

mt-broker-filter accepts TLS connections when the transport-encryption feature flag is set to Permissive or Strict.

Additional context (optional)

• We can use the library to watch and re-new TLS key pair added in: Eventing TLS: support K_CA_CERTS in adapter/v2 #6848
• This issue is similar to:
  • Eventing TLS: support creating TLS server for InMemoryChannel dispatcher #6874
  • Eventing TLS: support creating TLS server for mt-broker-ingress #6876

/help

[knative-prow]

@pierDipi:
This request has been marked as needing help from a contributor.

Please ensure the request meets the requirements listed here.

If this request no longer meets these requirements, the label can be removed
by commenting with the /remove-help command.

Details

In response to this:

Problem

After #6837, we have the foundation bits to enabled the mt-broker-filer to create a TLS server when the transport-encryption feature flag is set to Permissive or Strict.

We need to make sure that the broker-filter is creating such TLS server on the fly without restarts by watching the config-features ConfigMap.

Exit Criteria

mt-broker-filter accepts TLS connections when the transport-encryption feature flag is set to Permissive or Strict.

Additional context (optional)

• We can use the library to watch and re-new TLS key pair added in: Eventing TLS: support K_CA_CERTS in adapter/v2 #6848
• This issue is similar to:
• Eventing TLS: support creating TLS server for InMemoryChannel dispatcher #6874
• Eventing TLS: support creating TLS server for mt-broker-ingress #6876

/help

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

[creydr]

/assign

[creydr]

As discussed, putting it on-hold, until we have the shared library for creating the http&https servers #6899
/hold