The lokistack-gateway deployment should ensure to use the minimum TLS version and TLS cipher suites provided by the operator via command-line flags for:

• observatorium-api container
• opa-openshift container

Acceptance criteria

• The lokistack-gateway api container is configured via command line arguments to accept:

  -tls.min-version
  -tls.cipher-suites

• The opa-openshift  container is configured via command line arguments to accept:

  -tls.min-version
  -tls.cipher-suites

Developer Notes

• The observatorium-api already supports the above parameters. Thus we need to ensure only that the operator passes them down.
• The opa-openshift does not expose the above parameters. Thus we need to add support for them.
• We need for both address that these parameters are used for both TLS listeners (server, internal).