Skip to content

Commit ded1309

Browse files
Merge pull request #721 from mumesan/OSPRH-27737
Set TLS 1.3 as minimum version for operator webhook and metrics servers <JIRA:OSPRH-27737>
2 parents 5fa67fa + d583a16 commit ded1309

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

cmd/main.go

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -115,6 +115,10 @@ func main() {
115115

116116
ctrl.SetLogger(zap.New(zap.UseFlagOptions(&opts)))
117117

118+
tlsOpts = append(tlsOpts, func(c *tls.Config) {
119+
c.MinVersion = tls.VersionTLS13
120+
})
121+
118122
// if the enable-http2 flag is false (the default), http/2 should be disabled
119123
// due to its vulnerabilities. More specifically, disabling http/2 will
120124
// prevent from being vulnerable to the HTTP/2 Stream Cancellation and

0 commit comments

Comments
 (0)