Skip to content
Snippets Groups Projects
Commit 79712b6b authored by Frederic Branczyk's avatar Frederic Branczyk
Browse files

kube-prometheus: Remove duplicate TLS cipher suites config

parent 63746f59
No related branches found
No related tags found
No related merge requests found
...@@ -4,31 +4,6 @@ local k = import 'ksonnet/ksonnet.beta.3/k.libsonnet'; ...@@ -4,31 +4,6 @@ local k = import 'ksonnet/ksonnet.beta.3/k.libsonnet';
_config+:: { _config+:: {
namespace: 'default', namespace: 'default',
tlsCipherSuites: [
// 'TLS_RSA_WITH_RC4_128_SHA', // insecure: https://access.redhat.com/security/cve/cve-2013-2566
// 'TLS_RSA_WITH_3DES_EDE_CBC_SHA', // insecure: https://access.redhat.com/articles/2548661
'TLS_RSA_WITH_AES_128_CBC_SHA',
'TLS_RSA_WITH_AES_256_CBC_SHA',
'TLS_RSA_WITH_AES_128_CBC_SHA256',
'TLS_RSA_WITH_AES_128_GCM_SHA256',
'TLS_RSA_WITH_AES_256_GCM_SHA384',
// 'TLS_ECDHE_ECDSA_WITH_RC4_128_SHA', // insecure: https://access.redhat.com/security/cve/cve-2013-2566
'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA',
'TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA',
// 'TLS_ECDHE_RSA_WITH_RC4_128_SHA', // insecure: https://access.redhat.com/security/cve/cve-2013-2566
// 'TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA', // insecure: https://access.redhat.com/articles/2548661
'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA',
'TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA',
'TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256',
'TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256',
'TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256',
'TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256',
'TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384',
'TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384',
'TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305',
'TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305',
],
kubeStateMetrics+:: { kubeStateMetrics+:: {
collectors: '', // empty string gets a default set collectors: '', // empty string gets a default set
scrapeInterval: '30s', scrapeInterval: '30s',
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment