apiext: set minimum tls version to 1.3

Signed-off-by: TJ Miller <[email protected]>
kastenhq · Aug 18, 2023 · 5c5325f · 5c5325f
1 parent 60867c4
commit 5c5325f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/pkg/apiext/internal/serve.go b/pkg/apiext/internal/serve.go
@@ -92,6 +92,7 @@ func ServeHTTPS(ctx context.Context, port int, ca *CA, scheme *k8sRuntime.Scheme
 	sc := &dhttp.ServerConfig{
 		Handler: mux,
 		TLSConfig: &tls.Config{
+			MinVersion: tls.VersionTLS13,
 			GetCertificate: func(clientHello *tls.ClientHelloInfo) (*tls.Certificate, error) {
 				return ca.GenServerCert(ctx, clientHello.ServerName)
 			},