HIVE-2212 made hiveadmission restrict to minimum TLS version 1.3 to satisfy a security audit from ACM driven by ACM-5192 => ACM-5216.

Today when testing via ACM2.8/MCE2.3 on OCP4.11, the ACM team discovered that the hiveadmission pods were unhealthy:

  Warning  Unhealthy  2m25s (x7509 over 18h)  kubelet, o4-ibmvm-02-n7jl5-worker-bgd56  Readiness probe failed: Get "https://10.131.0.89:9443/healthz": remote error: tls: protocol version not supported

This is because this particular env was using TLS1.2.

Due to time considerations, we're going to roll back the change in mce-2.3 and then figure out how to move forward.

More context in slack