Document defining ciphers in example etcd config file.

Signed-off-by: James Blair <[email protected]>
etcd-io · Mar 29, 2023 · d9068cd · d9068cd
1 parent 8b93e0e
commit d9068cd
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/etcd.conf.yml.sample b/etcd.conf.yml.sample
@@ -138,3 +138,9 @@ force-new-cluster: false
 
 auto-compaction-mode: periodic
 auto-compaction-retention: "1"
+
+# Limit etcd to a specific set of tls cipher suites
+cipher-suites: [
+  TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+  TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+]