Files
nexus/knowledgebase/csd-wiki/ICSD/Enable-TLS-1.3-in-AWS-ALB_688996484.md
2026-04-18 17:09:43 +08:00

2.5 KiB

Enable-TLS-1.3-in-AWS-ALB_688996484

To enable TLS 1.3 in AWS Application Load Balancer, you will need to modify the following Ingress files to include the TLS 1.3 annotations.

Product File Name Helpful Links
SMAX suite-ingress.yaml Deploy the suite
OMT management-portal-ingress.yaml Deploy the infrastructure services
Containerized OO oo-ingress.yaml oo-internal-ingress.yaml smax-integration-ingress.yaml Configure load balancers for OO
Containerized CMS cms-ingress.yaml cms-integration-ingress.yaml smax-integration-ingress.yaml Configure load balancers for CMS and Create Application Load Balancer for integration
Audit audit-service-internal-ingress.yaml audit-service-public-ingress.yaml Configure load balancer for Audit service and Create application load balancer for Audit service

Perform the following steps in each Ingress file:

  1. Add the ssl-policy command under annotations.
    alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS13-1-2-Res-2021-06
    
    If the file already contains an ssl-policy, confirm its value is the same as above.
  2. Run the following command to apply the updated Ingress file.
    kubectl apply -f xxx-ingress.yaml
    
    Replace xxx-ingress.yaml with the appropriate name of the Ingress file.

Related pages