update defaults.yaml for strong crypto support

Netcracker · Dec 28, 2023 · ab5f918 · ab5f918
1 parent 4276469
commit ab5f918
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/kubemarine/resources/configurations/defaults.yaml b/kubemarine/resources/configurations/defaults.yaml
@@ -55,6 +55,7 @@ services:
     apiServer:
       certSANs: []
       extraArgs:
+        tls-cipher-suites: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
         enable-admission-plugins: NodeRestriction
         profiling: "false"
         audit-log-path: /var/log/kubernetes/audit/audit.log