Update cmd/webhook/app/options/options.go

Co-authored-by: Hongcai Ren <[email protected]>
Signed-off-by: carlory <[email protected]>

cmd/webhook/app/options/options.go

@@ -23,8 +23,10 @@ type Options struct {
 	// if not set, webhook server would look up the server key and certificate in {TempDir}/k8s-webhook-server/serving-certs.
 	// The server key and certificate must be named `tls.key` and `tls.crt`, respectively.
 	CertDir string
-	// TLSMinVersion contains the minimum TLS version that is acceptable. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13.
-	// Default is VersionTLS13.
+	// TLSMinVersion is the minimum version of TLS supported. Possible values: VersionTLS10, VersionTLS11, VersionTLS12, VersionTLS13.
+	// Some environments have automated security scans that trigger on TLS versions or insecure cipher suites, and
+	// setting TLS to 1.3 would solve both problems.
+	// Defaults to VersionTLS13.
 	TLSMinVersion string
 	// KubeAPIQPS is the QPS to use while talking with karmada-apiserver.
 	KubeAPIQPS float32