From ab5f9186e01084e032f69c682902f7c0074c0459 Mon Sep 17 00:00:00 2001 From: nikhil1697 Date: Thu, 28 Dec 2023 13:54:52 +0530 Subject: [PATCH] update defaults.yaml for strong crypto support --- kubemarine/resources/configurations/defaults.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/kubemarine/resources/configurations/defaults.yaml b/kubemarine/resources/configurations/defaults.yaml index cf67aee23..7cd493403 100644 --- a/kubemarine/resources/configurations/defaults.yaml +++ b/kubemarine/resources/configurations/defaults.yaml @@ -55,6 +55,7 @@ services: apiServer: certSANs: [] extraArgs: + tls-cipher-suites: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 enable-admission-plugins: NodeRestriction profiling: "false" audit-log-path: /var/log/kubernetes/audit/audit.log