Skip to content

Commit 3d00491

Browse files
authored
Merge pull request #9347 from zalando-incubator/security/update/ssl-policy-control-plane
security: update Control Plane default ssl policy to `ELBSecurityPolicy-TLS13-1-2-2021-06`
2 parents f4cce43 + 3ec5c34 commit 3d00491

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

cluster/cluster.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -614,7 +614,7 @@ Resources:
614614
Properties:
615615
AlpnPolicy:
616616
- {{ if eq .Cluster.ConfigItems.experimental_nlb_alpn_h2_enabled "true" }}HTTP2Preferred{{else}}None{{end}}
617-
SslPolicy: "ELBSecurityPolicy-TLS-1-2-2017-01"
617+
SslPolicy: "ELBSecurityPolicy-TLS13-1-2-2021-06"
618618
Certificates:
619619
- CertificateArn: "{{.Values.load_balancer_certificate}}"
620620
DefaultActions:
@@ -681,7 +681,7 @@ Resources:
681681
Properties:
682682
AlpnPolicy:
683683
- {{ if eq .Cluster.ConfigItems.experimental_nlb_alpn_h2_enabled "true" }}HTTP2Preferred{{else}}None{{end}}
684-
SslPolicy: "ELBSecurityPolicy-TLS-1-2-2017-01"
684+
SslPolicy: "ELBSecurityPolicy-TLS13-1-2-2021-06"
685685
Certificates:
686686
- CertificateArn: "{{.Values.load_balancer_certificate}}"
687687
DefaultActions:

0 commit comments

Comments
 (0)