From ed8faa7c7d4eacac391c73365a01639bed475cab Mon Sep 17 00:00:00 2001
From: DangPeng Liu <daliu@redhat.com>
Date: Wed, 16 Nov 2022 11:45:23 +0800
Subject: [PATCH] set min tls version (#284)

Signed-off-by: ldpliu <daliu@redhat.com>

Signed-off-by: ldpliu <daliu@redhat.com>
---
 pkg/cmd/webhook/start.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkg/cmd/webhook/start.go b/pkg/cmd/webhook/start.go
index e4ca50d81..3e6fe2946 100644
--- a/pkg/cmd/webhook/start.go
+++ b/pkg/cmd/webhook/start.go
@@ -18,6 +18,7 @@ import (
 
 	ctrl "sigs.k8s.io/controller-runtime"
 	"sigs.k8s.io/controller-runtime/pkg/healthz"
+	"sigs.k8s.io/controller-runtime/pkg/webhook"
 )
 
 var (
@@ -37,6 +38,7 @@ func (c *Options) RunWebhookServer() error {
 		Port:                   c.Port,
 		HealthProbeBindAddress: ":8000",
 		CertDir:                c.CertDir,
+		WebhookServer:          &webhook.Server{TLSMinVersion: "1.2"},
 	})
 
 	if err != nil {