webhook server use TLS 1.2 as minimum version (#2394)

kubernetes-sigs · Dec 3, 2021 · 0b5c5bd · 0b5c5bd
1 parent f25c48f
commit 0b5c5bd
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 3 deletions.
diff --git a/main.go b/main.go
@@ -91,7 +91,7 @@ func main() {
 		setupLog.Error(err, "unable to start manager")
 		os.Exit(1)
 	}
-	config.ConfigureWebhookServerCert(controllerCFG.RuntimeConfig, mgr)
+	config.ConfigureWebhookServer(controllerCFG.RuntimeConfig, mgr)
 	clientSet, err := kubernetes.NewForConfig(mgr.GetConfig())
 	if err != nil {
 		setupLog.Error(err, "unable to obtain clientSet")

diff --git a/pkg/config/runtime_config.go b/pkg/config/runtime_config.go
@@ -124,8 +124,9 @@ func BuildRuntimeOptions(rtCfg RuntimeConfig, scheme *runtime.Scheme) ctrl.Optio
 	}
 }
 
-// ConfigureWebhookServerCert set up the server cert for the webhook server.
-func ConfigureWebhookServerCert(rtCfg RuntimeConfig, mgr ctrl.Manager) {
+// ConfigureWebhookServer set up the server cert for the webhook server.
+func ConfigureWebhookServer(rtCfg RuntimeConfig, mgr ctrl.Manager) {
 	mgr.GetWebhookServer().CertName = rtCfg.WebhookCertName
 	mgr.GetWebhookServer().KeyName = rtCfg.WebhookKeyName
+	mgr.GetWebhookServer().TLSMinVersion = "1.2"
 }