CMP-2196: Update instructions for ingresscontroller TLS ciphers

[rhmdnd]

We can update the instructions so they tell the user what to check for,
instead of copy/pasting in a remediation for TLS ciphers, which may not
be what they want.

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:12355
This image was built from commit: 2a29bac

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:12355

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:12355 make deploy-local

[xiaojiey]

Verification pass with ghcr.io/complianceascode/k8scontent:12355:

 % oc get rule upstream-ocp4-kubelet-configure-tls-cipher-suites-ingresscontroller  -o=jsonpath={.instructions}
Run the following command on the kubelet nodes(s):
oc get ingresscontrollers/default -n openshift-ingress-operator -o=jsonpath='{.status.tlsProfile.ciphers[:]}'
Is it the case that TLS cipher suite configuration is not configured?%                                                                                                                                         

% oc get ingresscontrollers/default -n openshift-ingress-operator -o=jsonpath='{.status.tlsProfile.ciphers[:]}'
ECDHE-ECDSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-GCM-SHA256 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-GCM-SHA384 ECDHE-ECDSA-CHACHA20-POLY1305 ECDHE-RSA-CHACHA20-POLY1305 DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 TLS_AES_128_GCM_SHA256 TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256

[xiaojiey]

/lgtm

[yuumasato]

/lgtm

[codeclimate]

Code Climate has analyzed commit 2a29bac and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.5% (0.0% change).

View more on Code Climate.

[yuumasato]

/packit retest-failed