Skip to content

Conversation

@lennardk
Copy link
Contributor

These are the recommended values from CIS 0.12 guidelines

Pull Request

What?

Update the tls cipher suites for the API server to the cis 0.12 guidelines

Why?

To follow latest security guidelines and to allow users to remain compliant with cis benchmarks. Due to the additive nature of tls-cipher-suites processing, users cannot otherwise remove ciphers marked as insecure in the benchmark (TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_GCM_SHA256).

Acceptance

Please use the following checklist:

  • you linked an issue (if applicable)
  • you included tests (if applicable)
  • you ran conformance (make conformance)
  • you formatted your code (make fmt)
  • you linted your code (make lint)
  • you generated documentation (make docs)
  • you ran unit-tests (make unit-tests)

See make help for a description of the available targets.

@github-project-automation github-project-automation bot moved this to To Do in Planning Nov 19, 2025
@talos-bot talos-bot moved this from To Do to In Review in Planning Nov 19, 2025
These are the recommended values from CIS 0.12 guidelines

Signed-off-by: Lennard Klein <[email protected]>
@shanduur shanduur self-assigned this Nov 20, 2025
@shanduur shanduur self-requested a review November 20, 2025 20:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: In Review

Development

Successfully merging this pull request may close these issues.

2 participants