允许 Envoy 后端协商 TLS 1.3 以接入 Incus

Co-authored-by: panxiao81 <[email protected]>
2026-09-25 21:12:10 +00:00
parent 7137426e8f
commit f5c8c09f96
4 changed files with 24 additions and 0 deletions
@@ -0,0 +1,10 @@
+# Incus 只接受 TLS 1.3；显式允许后端协商 1.2–1.3，保留其他后端兼容性。
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: EnvoyProxy
+metadata:
+  name: eg
+  namespace: envoy-gateway-system
+spec:
+  backendTLS:
+    minVersion: '1.2'
+    maxVersion: '1.3'