:_mod-docs-content-type: ASSEMBLY
[id="tls-security-profiles"]
= Configuring TLS security profiles
include::_attributes/common-attributes.adoc[]
:context: tls-security-profiles

toc::[]

[role="_abstract"]

To enforce secure cryptographic libraries for the {product-title} components, cluster administrators can configure TLS security profiles to control cipher usage when the client connects to the Ingress Controller, the control plane, or the kubelet.

The control plane includes the following components:

* Kubernetes API server
* Kubernetes controller manager
* Kubernetes scheduler
* OpenShift API server
* OpenShift OAuth API server
* OpenShift OAuth server
* etcd
* Machine Config Operator
* Machine Config Server.

// NOTE: OpenShift controller manager are not included

// Understanding TLS security profiles
include::modules/tls-profiles-understanding.adoc[leveloffset=+1]

// Viewing TLS security profile details
include::modules/tls-profiles-view-details.adoc[leveloffset=+1]

// Configuring for ingress
include::modules/tls-profiles-ingress-configuring.adoc[leveloffset=+1]

// Configuring for the control plane
include::modules/tls-profiles-kubernetes-configuring.adoc[leveloffset=+1]

// Configuring for kubelet
include::modules/tls-profiles-kubelet-configuring.adoc[leveloffset=+1]
