允许 Envoy 后端协商 TLS 1.3 以接入 Incus

2026-09-25 21:08:51 +00:00
parent 7137426e8f
commit ce0b0ddf6d
4 changed files with 24 additions and 0 deletions
@@ -0,0 +1,10 @@
+# Incus 只接受 TLS 1.3；显式允许后端协商 1.2–1.3，保留其他后端兼容性。
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: EnvoyProxy
+metadata:
+  name: eg
+  namespace: envoy-gateway-system
+spec:
+  backendTLS:
+    minVersion: '1.2'
+    maxVersion: '1.3'