With the global tlsSecurityProfile available in renderconfig(or some other local store), the operator can now inject these as new "templated" arguments into the MCC & MCD deployment manifests. These are the standard kube rbac proxy containers launched alongside the MCO containers. This would mean that the MCC/MCS will redeployed if there is an update to the global tlsSecurityProfile.

Done when:

• The tls-ciperhsuites and tls-min-version arguments of kube-rbac-proxy sidecars are dynamically updated when the APIServer object is updated with new tlsSecurityProfile settings