remove predefined TLS ciphers (#18864)

Signed-off-by: Janusz Bialy <janusz.bialy@qlik.com>
This commit is contained in:
Janusz Bialy
2019-11-15 01:15:42 -08:00
committed by Kubernetes Prow Robot
parent 397ef22fbf
commit 3d51a3dabb
2 changed files with 1 additions and 3 deletions
+1 -1
View File
@@ -1,7 +1,7 @@
apiVersion: v1
description: A Helm chart for Vault, a tool for managing secrets
name: vault
version: 0.23.0
version: 0.23.1
appVersion: 1.2.3
home: https://www.vaultproject.io/
icon: https://www.vaultproject.io/assets/images/mega-nav/logo-vault-0f83e3d2.svg
-2
View File
@@ -255,8 +255,6 @@ vault:
address: '[::]:8200'
cluster_address: '[::]:8201'
tls_disable: true
tls_prefer_server_cipher_suites: true
tls_cipher_suites: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_RSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_256_GCM_SHA384,TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA
# tls_cert_file: /vault/tls/server.crt
# tls_key_file: /vault/tls/server.key
# See https://www.vaultproject.io/docs/configuration/storage/ for storage backends