Use a more recent security policy for https listener (#346)

Co-authored-by: Yevhen Ivantsov <[email protected]>
atlassian-labs · Nov 21, 2023 · 8f3adfe · 8f3adfe
1 parent b33ed3a
commit 8f3adfe
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/modules/AWS/ingress/locals.tf b/modules/AWS/ingress/locals.tf
@@ -19,6 +19,7 @@ locals {
       service = {
         annotations = {
           "service.beta.kubernetes.io/aws-load-balancer-ssl-cert" : module.ingress_certificate[0].this_acm_certificate_arn
+          "service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy": "ELBSecurityPolicy-TLS-1-2-2017-01"
         }
       }
     }