Skip to content

Commit 20d4303

Browse files
committed
fix min max TLS version configuration
1 parent edeb8e2 commit 20d4303

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

modules/ossm-security-mtls.adoc

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -66,16 +66,16 @@ spec:
6666
[id="ossm-security-min-max-tls_{context}"]
6767
== Setting the minimum and maximum protocol versions
6868

69-
If your environment has specific requirements for encrypted traffic in your service mesh, you can control the cryptographic functions that are allowed by setting the `spec.istio.global.tls.minProtocolVersion` or `spec.istio.global.tls.maxProtocolVersion` in your `ServiceMeshControlPlane` resource. Those values, configured in your control plane resource, define the minimum and maximum TLS version used by mesh components when communicating securely over TLS.
69+
If your environment has specific requirements for encrypted traffic in your service mesh, you can control the cryptographic functions that are allowed by setting the `spec.security.controlPlane.tls.minProtocolVersion` or `spec.security.controlPlane.tls.maxProtocolVersion` in your `ServiceMeshControlPlane` resource. Those values, configured in your control plane resource, define the minimum and maximum TLS version used by mesh components when communicating securely over TLS.
7070

7171
[source,yaml]
7272
----
7373
kind: ServiceMeshControlPlane
7474
spec:
75-
istio:
76-
global:
75+
security:
76+
controlPlane:
7777
tls:
78-
minProtocolVersion: TLSv1_0
78+
minProtocolVersion: TLSv1_2
7979
----
8080

8181
The default is `TLS_AUTO` and does not specify a version of TLS.

0 commit comments

Comments
 (0)