[cern] Set a fixed cipher suite set for Traefik (!92) · Merge requests · kubernetes / magnum

Ricardo Rocha requested to merge 8863traefikciphers into cern-rocky Apr 09, 2019

Explicitly set the support cipher suite for Ingress TLS using Traefik, following Mozilla intermediate minus DES3: https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29

Move the Traefik configuration to a ConfigMap for more flexbility than provided by command line arguments.

Change-Id: I5a5a95385c4143cce21c60073ae168336c4b2f27 Story: 2005326 Task: 30254

[cern] Set a fixed cipher suite set for Traefik