Skip to content

Commit 68d6549

Browse files
authored
Merge pull request #38110 from skrthomas/GH#38029
2 parents 69f1871 + b22cee8 commit 68d6549

File tree

2 files changed

+8
-3
lines changed

2 files changed

+8
-3
lines changed

modules/nw-ingress-controller-configuration-parameters.adoc

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -99,6 +99,11 @@ The minimum TLS version for Ingress Controllers is `1.1`, and the maximum TLS ve
9999
Ciphers and the minimum TLS version of the configured security profile are reflected in the `TLSProfile` status.
100100
====
101101

102+
[IMPORTANT]
103+
====
104+
The Ingress Operator converts the TLS `1.0` of an `Old` or `Custom` profile to `1.1`.
105+
====
106+
102107
|`clientTLS`
103108
|`clientTLS` authenticates client access to the cluster and services; as a result, mutual TLS authentication is enabled. If not set, then client TLS is not enabled.
104109

modules/tls-profiles-ingress-configuring.adoc

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,11 @@ The TLS security profile defines the minimum TLS version and the TLS ciphers for
2424

2525
You can see the ciphers and the minimum TLS version of the configured TLS security profile in the `IngressController` custom resource (CR) under `Status.Tls Profile` and the configured TLS security profile under `Spec.Tls Security Profile`. For the `Custom` TLS security profile, the specific ciphers and minimum TLS version are listed under both parameters.
2626

27-
[IMPORTANT]
27+
[NOTE]
2828
====
29-
The HAProxy Ingress Controller image does not support TLS `1.3` and because the `Modern` profile requires TLS `1.3`, it is not supported. The Ingress Operator converts the `Modern` profile to `Intermediate`.
29+
The HAProxy Ingress Controller image supports TLS `1.3` and the `Modern` profile.
3030
31-
The Ingress Operator also converts the TLS `1.0` of an `Old` or `Custom` profile to `1.1`, and TLS `1.3` of a `Custom` profile to `1.2`.
31+
The Ingress Operator also converts the TLS `1.0` of an `Old` or `Custom` profile to `1.1`.
3232
====
3333

3434
.Prerequisites

0 commit comments

Comments
 (0)