webhook server use TLS 1.2 as minimum version (kubernetes-sigs#2394)

Author: kishorj

main.go

@@ -91,7 +91,7 @@ func main() {
 setupLog.Error(err, "unable to start manager")
 os.Exit(1)
 }
-config.ConfigureWebhookServerCert(controllerCFG.RuntimeConfig, mgr)
+config.ConfigureWebhookServer(controllerCFG.RuntimeConfig, mgr)
 clientSet, err := kubernetes.NewForConfig(mgr.GetConfig())
 if err != nil {
 setupLog.Error(err, "unable to obtain clientSet")

pkg/config/runtime_config.go

@@ -124,8 +124,9 @@ func BuildRuntimeOptions(rtCfg RuntimeConfig, scheme *runtime.Scheme) ctrl.Optio
 }
 }
 
-// ConfigureWebhookServerCert set up the server cert for the webhook server.
-func ConfigureWebhookServerCert(rtCfg RuntimeConfig, mgr ctrl.Manager) {
+// ConfigureWebhookServer set up the server cert for the webhook server.
+func ConfigureWebhookServer(rtCfg RuntimeConfig, mgr ctrl.Manager) {
 mgr.GetWebhookServer().CertName = rtCfg.WebhookCertName
 mgr.GetWebhookServer().KeyName = rtCfg.WebhookKeyName
+mgr.GetWebhookServer().TLSMinVersion = "1.2"
 }