keda-docs
keda-docs copied to clipboard
Incorrect documentation regarding minimum version of TLS used
https://keda.sh/docs/2.15/operate/cluster/#http-tls-min-version states that
By default, KEDA uses TLS1.2 as a minimum TLS version given it is the lowest version without vulnerabilities
whereas, https://keda.sh/docs/2.15/reference/faq/#how-do-i-run-keda-with-tls-v1.3-only states that
By default, Keda listens on TLS v1.1 and TLSv1.2, with the default Golang ciphersuites.
As per the code, the former (minimum TLS v1.2) is correct https://github.com/kedacore/keda/blob/09a4951478746ba0d95521b786439e58aeda179b/pkg/util/tls_config.go#L91-L110
Expected Behavior
Documentation should correctly state that a minimum version of TLSv1.2 is used
Actual Behavior
Documentation states that TLSv1.1 and v1.2 are used