From e8a7d96e1534c4ff27fd47a66075245bb7cf67c2 Mon Sep 17 00:00:00 2001 From: huangyanfeng Date: Sun, 29 Oct 2023 18:47:29 +0800 Subject: [PATCH] set MinVersion to VersionTLS13 for tlsconfig in karmada-search and karmada-metrics-adapter Signed-off-by: huangyanfeng --- pkg/karmadactl/addons/metricsadapter/manifests.go | 1 + pkg/karmadactl/addons/search/manifests.go | 1 + 2 files changed, 2 insertions(+) diff --git a/pkg/karmadactl/addons/metricsadapter/manifests.go b/pkg/karmadactl/addons/metricsadapter/manifests.go index beed0d84b..f245e579d 100644 --- a/pkg/karmadactl/addons/metricsadapter/manifests.go +++ b/pkg/karmadactl/addons/metricsadapter/manifests.go @@ -43,6 +43,7 @@ spec: - --audit-log-path=- - --audit-log-maxage=0 - --audit-log-maxbackup=0 + - --tls-min-version=VersionTLS13 readinessProbe: httpGet: path: /readyz diff --git a/pkg/karmadactl/addons/search/manifests.go b/pkg/karmadactl/addons/search/manifests.go index 264e22714..19d544efb 100644 --- a/pkg/karmadactl/addons/search/manifests.go +++ b/pkg/karmadactl/addons/search/manifests.go @@ -45,6 +45,7 @@ spec: - --etcd-keyfile=/etc/karmada/pki/etcd-client.key - --tls-cert-file=/etc/karmada/pki/karmada.crt - --tls-private-key-file=/etc/karmada/pki/karmada.key + - --tls-min-version=VersionTLS13 - --audit-log-path=- - --feature-gates=APIPriorityAndFairness=false - --audit-log-maxage=0