CMO should ensure that prometheus-adapter is configured with the minimum TLS version and ciphers defined in the global apiservers configuration. If this configuration is empty, CMO should use the intermediate profile. CMO should also watch for config changes and react accordingly.

DoD:

• prometheus-adapter pods are configured according to the TLS profile defined in the global apiservers resource.