minProtocolVersion via IstioOperator

1

Hi folks,

we need to disable TLS v1.0.
I found some articles (e.g.
Minimum TLS version? - #3 by framled) showing that is is possible to do it in Gateway level.
But is it possible to set it centrally (for all istio-ingress-gateways) via IstioOperator?
I was searching documentation but I was not able to find such configuration option.

Best regards
Daniel.

2

Hey Daniel,

Did you ever find an answer?

We need to set a global minProtocolVersion as well to disable everything below TLSV1_2.

It’s not really a good solution to set it on every gateway because it will surely be forgotten at some point.

Best regards
Jesper Berggren