fix: support minimum TLS v1.2 for webhook admission server

CHANGELOG.md

@@ -46,6 +46,12 @@
  until the resource has been corrected.
  [#550](https:/Kong/kubernetes-ingress-controller/issues/550)
 
+#### Breaking changes
+
+- TLS v1.2+ compatible clients are required now going forward in order
+ to do SSL negotiations with the webhook admission server.
+ [#1065](https:/Kong/kubernetes-ingress-controller/issues/1065)
+
 ## [2.0.0-alpha.3] - 2021/08/02
 
 #### Breaking changes

internal/admission/server.go

@@ -79,7 +79,8 @@ func (sc *ServerConfig) toTLSConfig() (*tls.Config, error) {
  if err != nil {
  return nil, fmt.Errorf("X509KeyPair error: %w", err)
  }
- return &tls.Config{ //nolint:gosec
+ return &tls.Config{
+ MinVersion: tls.VersionTLS12,
  Certificates: []tls.Certificate{keyPair},
  }, nil
 }