🐛 Bump the postgres SSL min protocol version from 1.2 to 1.3

[yanmxa]

Summary

Fix the warning "vulnerable cipher usage in service/multicluster-global-hub-postgres"

Related issue(s)

Fixes # https://issues.redhat.com/browse/ACM-14622

Tests

• Unit/function tests have been added and incorporated into make unit-tests.
• Integration tests have been added and incorporated into make integration-test.
• E2E tests have been added and incorporated into make e2e-test-all.
• List other manual tests you have done.

$ oc port-forward service/multicluster-global-hub-postgres 8123:5432
...
$ nmap -Pn -sV --script ssl-enum-ciphers -p 8123 localhost
Starting Nmap 7.95 ( https://nmap.org ) at 2024-10-11 11:29 CST
Nmap scan report for localhost (127.0.0.1)
Host is up (0.00033s latency).
Other addresses for localhost (not scanned): ::1

PORT     STATE SERVICE    VERSION
8123/tcp open  postgresql PostgreSQL DB 9.6.0 or later
| ssl-enum-ciphers:
|   TLSv1.3:
|     ciphers:
|       TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A
|       TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
|       TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A
|       TLS_AKE_WITH_AES_128_CCM_SHA256 (secp256r1) - A
|     cipher preference: server
|_  least strength: A

Service detection performed. Please report any incorrect results at https://nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 38.35 seconds

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[yanmxa]

/cc @clyang82 @ldpliu

[clyang82]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: clyang82, yanmxa

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [clyang82,yanmxa]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[clyang82]

/cherry-pick release-2.12

[openshift-cherrypick-robot]

@clyang82: new pull request created: #1207

In response to this:

/cherry-pick release-2.12

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.