Merge "Disable weak tls ciphers for kube-apiserver"
This commit is contained in:
commit
bdd8bf0d9d
|
@ -123,6 +123,11 @@ data:
|
||||||
apiserver:
|
apiserver:
|
||||||
etcd:
|
etcd:
|
||||||
endpoints: https://127.0.0.1:2378
|
endpoints: https://127.0.0.1:2378
|
||||||
|
tls:
|
||||||
|
tls-cipher-suites: "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA"
|
||||||
|
# https://kubernetes.io/docs/reference/command-line-tools-reference/kube-apiserver/
|
||||||
|
# Possible values: VersionTLS10, VersionTLS11, VersionTLS12
|
||||||
|
tls-min-version: 'VersionTLS12'
|
||||||
command_prefix:
|
command_prefix:
|
||||||
- /apiserver
|
- /apiserver
|
||||||
- --service-cluster-ip-range=SERVICE_CIDR
|
- --service-cluster-ip-range=SERVICE_CIDR
|
||||||
|
|
Loading…
Reference in New Issue