Skip to content

Commit 9dcbe99

Browse files
committed
make tlsv1.2 minimum for webhook server
1 parent ad60f2c commit 9dcbe99

File tree

1 file changed

+10
-1
lines changed

1 file changed

+10
-1
lines changed

pkg/server/server.go

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@ package server
1111

1212
import (
1313
"context"
14+
"crypto/tls"
1415
"net/http"
1516
"os"
1617

@@ -187,7 +188,15 @@ func setupClient(ctx context.Context, opts types.IngressOpts, k8client clientset
187188
func SetupWebhookServer(ingressInformer networkinginformers.IngressInformer, serviceInformer v1.ServiceInformer, client *clientset.Clientset, ctx context.Context) {
188189
klog.Info("setting up webhook server")
189190

190-
server := &webhook.DefaultServer{}
191+
server := &webhook.DefaultServer{
192+
Options: webhook.Options{
193+
TLSOpts: []func(*tls.Config){
194+
func(config *tls.Config) {
195+
config.MinVersion = tls.VersionTLS12
196+
},
197+
},
198+
},
199+
}
191200
server.Register("/mutate-v1-pod", &webhook.Admission{Handler: podreadiness.NewWebhook(ingressInformer.Lister(), serviceInformer.Lister(), client)})
192201

193202
go func() {

0 commit comments

Comments
 (0)