MeshTLSes: Set specific TLS version and ciphers - Policy

Set specific TLS version and ciphersv2.9+

Set specific TLS version and ciphers

Configuration

apiVersion: kuma.io/v1alpha1
kind: MeshTLS
metadata:
  name: set-version-and-ciphers
  namespace: kong-mesh-system
  labels:
    kuma.io/mesh: default
spec:
  targetRef:
    kind: Mesh
  rules:
  - default:
      tlsVersion:
        min: TLS13
        max: TLS13
      tlsCiphers:
      - ECDHE-ECDSA-AES256-GCM-SHA384

type: MeshTLS
name: set-version-and-ciphers
mesh: default
spec:
  targetRef:
    kind: Mesh
  rules:
  - default:
      tlsVersion:
        min: TLS13
        max: TLS13
      tlsCiphers:
      - ECDHE-ECDSA-AES256-GCM-SHA384

Please adjust konnect_mesh_control_plane.my_meshcontrolplane.id and konnect_mesh.my_mesh.name according to your current configuration.

resource "konnect_mesh_tls" "set_version_and_ciphers" {
  provider = konnect-beta
  type = "MeshTLS"
  name = "set-version-and-ciphers"
  spec = {
    target_ref = {
      kind = "Mesh"
    }
    rules = [
      {
        default = {
          tls_version = {
            min = "TLS13"
            max = "TLS13"
          }
          tls_ciphers = [
             = "ECDHE-ECDSA-AES256-GCM-SHA384"
          ]
        }
      }
    ]
  }
  labels   = {
  "kuma.io/mesh" = konnect_mesh.my_mesh.name
  }
  cp_id    = konnect_mesh_control_plane.my_meshcontrolplane.id
  mesh     = konnect_mesh.my_mesh.name
}

MeshTLS

Set specific TLS version and ciphersv2.9+

Configuration

Help us make these docs great!

Still need help