[FEATURE]: Restrict the version of TLS to v1.2 for all requests to CSM authorization proxy server

[bharathsreekanth]

Restrict the version of TLS to v1.2 for all requests to CSM auth proxy server.

Additionally:

• Update K3S version, Cert-manager version
• Configure Traefik to only use the signed or self-signed certificate generated for the proxy server and not to return the default Traefik cert ([https://doc.traefik.io/traefik/https/tls/#default-certificate)]
• During install of Traefik load balancer service, set NodePorts to static ports so they can be blocked by iptables. If not explicitly set, these are randomized and difficult to block. This could be done as part of a post-install process (k3s kubectl patch svc/traefik ...)
• Option to set Nodeports for the ingress controller during CSM authorization install/upgrade.
• Restrict CSM authorization requests to use either signed or self-signed certificate generated for the proxy server.

[csmbot]

@bharathsreekanth: Thank you for submitting this issue!

The issue is currently awaiting triage. Please make sure you have given us as much context as possible.

If the maintainers determine this is a relevant issue, they will remove the needs-triage label and assign an appropriate priority label.

---

We want your feedback! If you have any questions or suggestions regarding our contributing process/workflow, please reach out to us at ses.csm.engineering@dell.com.