Skip to content

Commit 79db347

Browse files
committed
Update ciphers in ingress controller remediation
Since we're updating the recommended OCIL, we can also update the remediation shipped with the content so that it matches. This will allow users to apply a remediation that updates their TLS ciphers so their either Recommended or Secure. This commit has a dependency on a permission change to the operator cluster role so that it can actually apply the remediation at runtime: ComplianceAsCode/compliance-operator#558
1 parent dc7c6ba commit 79db347

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

  • applications/openshift/kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller/kubernetes

applications/openshift/kubelet/kubelet_configure_tls_cipher_suites_ingresscontroller/kubernetes/shared.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,12 @@ spec:
1111
ciphers:
1212
- ECDHE-ECDSA-AES128-GCM-SHA256
1313
- ECDHE-RSA-AES128-GCM-SHA256
14+
- ECDHE-ECDSA-CHACHA20-POLY1305
1415
- ECDHE-RSA-AES256-GCM-SHA384
16+
- ECDHE-RSA-CHACHA20-POLY1305
17+
- ECDHE-ECDSA-AES256-GCM-SHA384
18+
- TLS_AES_128_GCM_SHA256
19+
- TLS_AES_256_GCM_SHA384
20+
- TLS_CHACHA20_POLY1305_SHA256
1521
minTLSVersion: VersionTLS12
1622
type: Custom

0 commit comments

Comments
 (0)