mirror of
https://github.com/hanzo-ml/spark-operator.git
synced 2026-10-30 20:39:07 +00:00
Both branches of the enableHTTP2 conditional in SetupTLS() were setting the same NextProtos value ["h2", "http/1.1"], making the conditional dead code. Remove it and always set NextProtos unconditionally. Also remove the enableHTTP2 CLI flag, variable, and parameter from controller and webhook start commands. The flag was a workaround for CVE-2023-44487 (HTTP/2 rapid reset) which is fixed in Go 1.21.3+. A user-facing flag that silently does nothing is misleading. Signed-off-by: Ugo Giordano <[email protected]> Co-authored-by: Hanzo Dev <[email protected]>