Files
e903cc6604 fix: always set NextProtos regardless of enableHTTP2 flag (#2990)
Both branches of the enableHTTP2 conditional in SetupTLS() were setting
the same NextProtos value ["h2", "http/1.1"], making the conditional
dead code. Remove it and always set NextProtos unconditionally.

Also remove the enableHTTP2 CLI flag, variable, and parameter from
controller and webhook start commands. The flag was a workaround for
CVE-2023-44487 (HTTP/2 rapid reset) which is fixed in Go 1.21.3+.
A user-facing flag that silently does nothing is misleading.

Signed-off-by: Ugo Giordano <[email protected]>

Co-authored-by: Hanzo Dev <[email protected]>
2026-06-25 16:57:00 +00:00
..