Kubespray: Change default ingress-nginx config and replace the default "SSLv2" protocol

[supabibz]

What would you like to be added: In file "inventory/sample/group_vars/k8s-cluster/addons.yml", l102 (in the quick start, you use this file to deploy an ingress controller), the SSL protocol is SSLv2. This protocol is so old that with an client using openssl 1.0.1 version you can't even get to see a certificate. Can you please replace this default configuration with something more up to date ? (I used "TLSv1.2 TLSv1.3" but you could extend to "TLSv1.1 TLSv1.2 TLSv1.3"). Or add a comment just above? Or add a dedicated chapter in the documentation ?

Why is this needed: If you don't pay attention to this "detail", leave it with the default value and put your ingress-controllers behind an httpd as a reverse proxy, httpd can't communicate with the server.

Thanks for all the great work !

[floryut]

@supabibz Indeed, thanks for pointing it out, default value are TLSv1.2 TLSv1.3 (from nginx doc) so maybe this would be enough.
Would you care to open a PR ?

[supabibz]

@floryut PR #6912 submitted.

[oomichi]

Thanks for writing the detail here.
This is really helpful to review the PR.