Set specific TLS version and ciphersv2.9+
Set specific TLS version and ciphers
Set specific TLS version and ciphers
apiVersion: kuma.io/v1alpha1
kind: MeshTLS
metadata:
name: set-version-and-ciphers
namespace: kong-mesh-system
labels:
kuma.io/mesh: default
spec:
targetRef:
kind: Mesh
rules:
- default:
tlsVersion:
min: TLS13
max: TLS13
tlsCiphers:
- ECDHE-ECDSA-AES256-GCM-SHA384
type: MeshTLS
name: set-version-and-ciphers
mesh: default
spec:
targetRef:
kind: Mesh
rules:
- default:
tlsVersion:
min: TLS13
max: TLS13
tlsCiphers:
- ECDHE-ECDSA-AES256-GCM-SHA384
Adjust konnect_mesh_control_plane.my_meshcontrolplane.id and konnect_mesh.my_mesh.name according to your current configuration.
resource "konnect_mesh_tls" "set_version_and_ciphers" {
provider = konnect-beta
type = "MeshTLS"
name = "set-version-and-ciphers"
spec = {
target_ref = {
kind = "Mesh"
}
rules = [
{
default = {
tls_version = {
min = "TLS13"
max = "TLS13"
}
tls_ciphers = [
= "ECDHE-ECDSA-AES256-GCM-SHA384"
]
}
}
]
}
labels = {
"kuma.io/mesh" = konnect_mesh.my_mesh.name
}
cp_id = konnect_mesh_control_plane.my_meshcontrolplane.id
mesh = konnect_mesh.my_mesh.name
}