webhook server use TLS 1.2 as minimum version (#2394)

Author: kishorj

main.go

@@ -91,7 +91,7 @@ func main() {
 		setupLog.Error(err, "unable to start manager")
 		os.Exit(1)
 	}
-	config.ConfigureWebhookServerCert(controllerCFG.RuntimeConfig, mgr)
+	config.ConfigureWebhookServer(controllerCFG.RuntimeConfig, mgr)
 	clientSet, err := kubernetes.NewForConfig(mgr.GetConfig())
 	if err != nil {
 		setupLog.Error(err, "unable to obtain clientSet")

pkg/config/runtime_config.go

@@ -124,8 +124,9 @@ func BuildRuntimeOptions(rtCfg RuntimeConfig, scheme *runtime.Scheme) ctrl.Optio
 	}
 }
 
-// ConfigureWebhookServerCert set up the server cert for the webhook server.
-func ConfigureWebhookServerCert(rtCfg RuntimeConfig, mgr ctrl.Manager) {
+// ConfigureWebhookServer set up the server cert for the webhook server.
+func ConfigureWebhookServer(rtCfg RuntimeConfig, mgr ctrl.Manager) {
 	mgr.GetWebhookServer().CertName = rtCfg.WebhookCertName
 	mgr.GetWebhookServer().KeyName = rtCfg.WebhookKeyName
+	mgr.GetWebhookServer().TLSMinVersion = "1.2"
 }