OSDOCS-15209:tlsSecurityProfileParmFix

Author: Ted Avery

modules/microshift-default-settings.adoc

@@ -33,7 +33,15 @@ apiServer:
   subjectAltNames: []
   tls:
     cipherSuites:
-            - ""
+    - TLS_AES_128_GCM_SHA256
+    - TLS_AES_256_GCM_SHA384
+    - TLS_CHACHA20_POLY1305_SHA256
+    - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+    - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+    - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+    - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+    - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
+    - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
     minVersion: VersionTLS12
 debugging:
   logLevel: "Normal"
@@ -65,14 +73,7 @@ ingress:
     wildcardPolicy: WildcardPolicyAllowed
   status: Managed
   tlsSecurityProfile:
-    type: Custom
-    custom:
-      ciphers:
-        - ECDHE-ECDSA-CHACHA20-POLY1305
-        - ECDHE-RSA-CHACHA20-POLY1305
-        - ECDHE-RSA-AES128-GCM-SHA256
-        - ECDHE-ECDSA-AES128-GCM-SHA256
-      minTLSVersion: VersionTLS12
+    type: Intermediate
   tuningOptions:
       clientFinTimeout: "1s"
       clientTimeout: "30s"

modules/microshift-ingress-controller-config.adoc

@@ -69,7 +69,6 @@ ingress:
       minTLSVersion:""
     intermediate: {}
     old: {}
-    type: ""
   tuningOptions:
     clientFinTimeout: 1s
     clientTimeout: 30s