41 lines
2.5 KiB
Markdown
41 lines
2.5 KiB
Markdown
# Enable-TLS-1.3-in-AWS-ALB_688996484
|
|
To enable TLS 1.3 in AWS Application Load Balancer, you will need to modify the following Ingress files to include the TLS 1.3 annotations.
|
|
|
|
| Product | File Name | Helpful Links |
|
|
| --- | --- | --- |
|
|
| SMAX | suite-ingress.yaml | [Deploy the suite](https://staging.docs.microfocus.com/itom/SMAX:23.4/EKSDeploySuite) |
|
|
| OMT | management-portal-ingress.yaml | [Deploy the infrastructure services](https://staging.docs.microfocus.com/itom/SMAX:23.4/EKSDeployInfra) |
|
|
| Containerized OO | oo-ingress.yaml oo-internal-ingress.yaml smax-integration-ingress.yaml | [Configure load balancers for OO](https://staging.docs.microfocus.com/itom/SMAX:23.4/ConfigureALBEKSOOC) |
|
|
| Containerized CMS | cms-ingress.yaml cms-integration-ingress.yaml smax-integration-ingress.yaml | [Configure load balancers for CMS](https://staging.docs.microfocus.com/itom/SMAX:23.4/ConfigureALBEksCms) and [Create Application Load Balancer for integration](https://staging.docs.microfocus.com/itom/SMAX:23.4/IntegrationALBCms) |
|
|
| Audit | audit-service-internal-ingress.yaml audit-service-public-ingress.yaml | [Configure load balancer for Audit service](https://staging.docs.microfocus.com/itom/SMAX:23.4/ConfigureALBEksAudit) and [Create application load balancer for Audit service](https://staging.docs.microfocus.com/itom/SMAX:23.4/IntegrationALBAudit) |
|
|
|
|
Perform the following steps in each Ingress file:
|
|
|
|
1. Add the `ssl-policy` command under annotations.
|
|
```
|
|
alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS13-1-2-Res-2021-06
|
|
```
|
|
If the file already contains an `ssl-policy`, confirm its value is the same as above.
|
|
2. Run the following command to apply the updated Ingress file.
|
|
```
|
|
kubectl apply -f xxx-ingress.yaml
|
|
```
|
|
Replace `xxx-ingress.yaml` with the appropriate name of the Ingress file.
|
|
|
|
**Related pages**
|
|
|
|
- Page:
|
|
[ESM Cloud Farm Version Tracking](/display/ICSD/ESM+Cloud+Farm+Version+Tracking)
|
|
- Page:
|
|
[How to get an Opentext Confluence account](/display/ICSD/How+to+get+an+Opentext+Confluence+account)
|
|
- Page:
|
|
[ITOM APM AppPluse Cloud Farm Information](/display/ICSD/ITOM+APM+AppPluse+Cloud+Farm+Information)
|
|
- Page:
|
|
[ITOM Cloud Service Ops Doc Management Process](/display/ICSD/ITOM+Cloud+Service+Ops+Doc+Management+Process)
|
|
- Page:
|
|
[ITOM ESM Cloud Service Catalog](/display/ICSD/ITOM+ESM+Cloud+Service+Catalog)
|
|
- Page:
|
|
[ITOM OpsB NOM Cloud Service Catalog](/display/ICSD/ITOM+OpsB+NOM+Cloud+Service+Catalog)
|
|
- Page:
|
|
[OpsB and NOM Cloud Deployments Version Tracking](/display/ICSD/OpsB+and+NOM+Cloud+Deployments+Version+Tracking)
|