type ControllerWebhook struct {
    // ... existing fields ...
    // MinTLSVersion is the minimum TLS version supported.
    // Valid values are: "1.0", "1.1", "1.2", "1.3"
    // Defaults to "1.2"
    MinTLSVersion string `json:"minTLSVersion,omitempty"`
    
    // CipherSuites is the list of allowed cipher suites.
    // Uses IANA cipher suite names.
    CipherSuites []string `json:"cipherSuites,omitempty"`
    
    // CurvePreferences is the list of elliptic curves for key exchange.
    // Valid values: "X25519", "P-256", "P-384", "P-521"
    // Defaults to Go's default curve preferences.
    CurvePreferences []string `json:"curvePreferences,omitempty"`
}

type ControllerMetrics struct {
    // ... existing fields ...
    MinTLSVersion    string   `json:"minTLSVersion,omitempty"`
    CipherSuites     []string `json:"cipherSuites,omitempty"`
    CurvePreferences []string `json:"curvePreferences,omitempty"`
}

metricsServerOptions.TLSOpts = append(metricsServerOptions.TLSOpts, func(config *tls.Config) {
    config.MinVersion = tlsVersionFromConfig(cfg.Metrics.MinTLSVersion)
    config.CipherSuites = cipherSuitesFromConfig(cfg.Metrics.CipherSuites)
    config.CurvePreferences = curvesFromConfig(cfg.Metrics.CurvePreferences)
})