Document defining ciphers in example etcd config file.

Signed-off-by: James Blair <[email protected]>
etcd-io · Mar 27, 2023 · 89282f3 · 89282f3
1 parent 8b93e0e
commit 89282f3
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/etcd.conf.yml.sample b/etcd.conf.yml.sample
@@ -138,3 +138,11 @@ force-new-cluster: false
 
 auto-compaction-mode: periodic
 auto-compaction-retention: "1"
+
+# Limit etcd to a specific set of tls cipher suites
+cipher-suites: [
+  TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
+  TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
+  TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
+  TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
+]