In Rancher v2.1.7, the default TLS configuration changed to only accept TLS 1.2 and secure TLS cipher suites. TLS 1.3 and TLS 1.3 exclusive cipher suites are not supported.
Configuring TLS settings
The Audit Log is enabled and configured by passing environment variables to the Rancher server container. See the following to enable on your installation.
TLS Environment Variables
|Minimum TLS version|
|Allowed TLS cipher suites||See Golang tls constants|
If you need to configure TLS the same way as it was before Rancher v2.1.7, please use the following settings: