Merge pull request #2029 from fultonj/OSPRH-27313

Set TLS 1.3 as minimum version for webhook/metrics servers

Author: openshift-merge-bot[bot]

cmd/main.go

@@ -178,6 +178,10 @@ func main() {
 
 	ctrl.SetLogger(zap.New(zap.UseFlagOptions(&opts)))
 
+	tlsOpts = append(tlsOpts, func(c *tls.Config) {
+		c.MinVersion = tls.VersionTLS13
+	})
+
 	// if the enable-http2 flag is false (the default), http/2 should be disabled
 	// due to its vulnerabilities. More specifically, disabling http/2 will
 	// prevent from being vulnerable to the HTTP/2 Stream Cancellation and