From bb4ac01af48c286a98dcc97b883aa8d2ca1d73d5 Mon Sep 17 00:00:00 2001
From: Colby Swandale <996377+colby-swandale@users.noreply.github.com>
Date: Fri, 1 Nov 2024 14:47:10 +1100
Subject: [PATCH] update ALB security policy to latest default

---
 config/deploy/production/ingress.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/config/deploy/production/ingress.yaml b/config/deploy/production/ingress.yaml
index 77f9dff..97e7357 100644
--- a/config/deploy/production/ingress.yaml
+++ b/config/deploy/production/ingress.yaml
@@ -7,6 +7,7 @@ metadata:
     alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:us-west-2:048268392960:certificate/4631b699-ff31-461e-84b4-4260cac038d1
     alb.ingress.kubernetes.io/scheme: internet-facing
     alb.ingress.kubernetes.io/target-type: ip
+    alb.ingress.kubernetes.io/ssl-policy: ELBSecurityPolicy-TLS13-1-2-2021-06
 spec:
   rules:
     - host: shipit.rubygems.org