If you have enabled SSL on Sisense side, the Nginx controller will be deployed in the default namespace.
To check the currently configured ciphers run the following command and check the "nginx.ingress.kubernetes.io/ssl-ciphers:" row:
<em>kubectl -n sisense describe ingress</em>
<span>Name: sisense-ingress</span><br/><br/><span>Labels: app=api-gateway</span><br/><br/><span> app.kubernetes.io/managed-by=Helm</span><br/><br/><span> chart=api-gateway-2024.2.077</span><br/><br/><span> release=sisense</span><br/><br/><span> sisense-version=2024.2.077</span><br/><br/><span>Namespace: sisense</span><br/><br/><span>Address:</span><br/><br/><span>Ingress Class: <none></span><br/><br/><span>Default backend: <default></span><br/><br/><span>TLS:</span><br/><br/><span> sisense-tls terminates</span><br/><br/><span>Rules:</span><br/><br/><span> Host Path Backends</span><br/><br/><span> ---- ---- --------</span><br/><br/><span> paragoninsgroup.sisense.com</span><br/><br/><span> / api-gateway-external:8456 (10.42.140.227:8456)</span><br/><br/><span>Annotations: kubernetes.io/ingress.class: nginx</span><br/><br/><span> kubernetes.io/tls-acme: true</span><br/><br/><span> meta.helm.sh/release-name: sisense</span><br/><br/><span> meta.helm.sh/release-namespace: sisense</span><br/><br/><span> nginx.ingress.kubernetes.io/configuration-snippet: more_clear_headers Server;</span><br/><br/><span> nginx.ingress.kubernetes.io/proxy-body-size: 0m</span><br/><br/><span> nginx.ingress.kubernetes.io/proxy-read-timeout: 300</span><br/><br/><span> nginx.ingress.kubernetes.io/ssl-ciphers:</span><br/><br/><span> </span><strong>ECDH+AESGCM:ECDH+CHACHA20:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS:!AESCCM</strong><br/><br/><span> nginx.ingress.kubernetes.io/ssl-prefer-server-ciphers: true</span>
To decrypt the full list of the currently used ciphers use the string from the mentioned row with the following command:
<span>openssl ciphers -v 'ECDH+AESGCM:ECDH+CHACHA20:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS:!AESCCM' | column -t</span>
<span>ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD</span><br/><br/><span>ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(256) Mac=AEAD</span><br/><br/><span>ECDH-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AESGCM(256) Mac=AEAD</span><br/><br/><span>ECDH-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH/ECDSA Au=ECDH Enc=AESGCM(256) Mac=AEAD</span><br/><br/><span>ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(128) Mac=AEAD</span><br/><br/><span>ECDHE-ECDSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(128) Mac=AEAD</span><br/><br/><span>ECDH-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AESGCM(128) Mac=AEAD</span><br/><br/><span>ECDH-ECDSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH/ECDSA Au=ECDH Enc=AESGCM(128) Mac=AEAD</span><br/><br/><span>DH-DSS-AES256-GCM-SHA384 TLSv1.2 Kx=DH/DSS Au=DH Enc=AESGCM(256) Mac=AEAD</span><br/><br/><span>DH-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH/RSA Au=DH Enc=AESGCM(256) Mac=AEAD</span><br/><br/><span>DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD</span><br/><br/><span>DH-DSS-AES128-GCM-SHA256 TLSv1.2 Kx=DH/DSS Au=DH Enc=AESGCM(128) Mac=AEAD</span><br/><br/><span>DH-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH/RSA Au=DH Enc=AESGCM(128) Mac=AEAD</span><br/><br/><span>DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(128) Mac=AEAD</span><br/><br/><span>ECDHE-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA384</span><br/><br/><span>ECDHE-ECDSA-AES256-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AES(256) Mac=SHA384</span><br/><br/><span>ECDHE-RSA-AES256-SHA SSLv3 Kx=ECDH Au=RSA Enc=AES(256) Mac=SHA1</span><br/><br/><span>ECDHE-ECDSA-AES256-SHA SSLv3 Kx=ECDH Au=ECDSA Enc=AES(256) Mac=SHA1</span><br/><br/><span>ECDH-RSA-AES256-SHA384 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AES(256) Mac=SHA384</span><br/><br/><span>ECDH-ECDSA-AES256-SHA384 TLSv1.2 Kx=ECDH/ECDSA Au=ECDH Enc=AES(256) Mac=SHA384</span><br/><br/><span>ECDH-RSA-AES256-SHA SSLv3 Kx=ECDH/RSA Au=ECDH Enc=AES(256) Mac=SHA1</span><br/><br/><span>ECDH-ECDSA-AES256-SHA SSLv3 Kx=ECDH/ECDSA Au=ECDH Enc=AES(256) Mac=SHA1</span><br/><br/><span>DHE-RSA-AES256-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AES(256) Mac=SHA256</span><br/><br/><span>DH-RSA-AES256-SHA256 TLSv1.2 Kx=DH/RSA Au=DH Enc=AES(256) Mac=SHA256</span><br/><br/><span>DH-DSS-AES256-SHA256 TLSv1.2 Kx=DH/DSS Au=DH Enc=AES(256) Mac=SHA256</span><br/><br/><span>DHE-RSA-AES256-SHA SSLv3 Kx=DH Au=RSA Enc=AES(256) Mac=SHA1</span><br/><br/><span>DH-RSA-AES256-SHA SSLv3 Kx=DH/RSA Au=DH Enc=AES(256) Mac=SHA1</span><br/><br/><span>DH-DSS-AES256-SHA SSLv3 Kx=DH/DSS Au=DH Enc=AES(256) Mac=SHA1</span><br/><br/><span>ECDHE-RSA-AES128-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AES(128) Mac=SHA256</span><br/><br/><span>ECDHE-ECDSA-AES128-SHA256 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AES(128) Mac=SHA256</span><br/><br/><span>ECDHE-RSA-AES128-SHA SSLv3 Kx=ECDH Au=RSA Enc=AES(128) Mac=SHA1</span><br/><br/><span>ECDHE-ECDSA-AES128-SHA SSLv3 Kx=ECDH Au=ECDSA Enc=AES(128) Mac=SHA1</span><br/><br/><span>ECDH-RSA-AES128-SHA256 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AES(128) Mac=SHA256</span><br/><br/><span>ECDH-ECDSA-AES128-SHA256 TLSv1.2 Kx=ECDH/ECDSA Au=ECDH Enc=AES(128) Mac=SHA256</span><br/><br/><span>ECDH-RSA-AES128-SHA SSLv3 Kx=ECDH/RSA Au=ECDH Enc=AES(128) Mac=SHA1</span><br/><br/><span>ECDH-ECDSA-AES128-SHA SSLv3 Kx=ECDH/ECDSA Au=ECDH Enc=AES(128) Mac=SHA1</span><br/><br/><span>DHE-RSA-AES128-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AES(128) Mac=SHA256</span><br/><br/><span>DH-RSA-AES128-SHA256 TLSv1.2 Kx=DH/RSA Au=DH Enc=AES(128) Mac=SHA256</span><br/><br/><span>DH-DSS-AES128-SHA256 TLSv1.2 Kx=DH/DSS Au=DH Enc=AES(128) Mac=SHA256</span><br/><br/><span>DHE-RSA-AES128-SHA SSLv3 Kx=DH Au=RSA Enc=AES(128) Mac=SHA1</span><br/><br/><span>DH-RSA-AES128-SHA SSLv3 Kx=DH/RSA Au=DH Enc=AES(128) Mac=SHA1</span><br/><br/><span>DH-DSS-AES128-SHA SSLv3 Kx=DH/DSS Au=DH Enc=AES(128) Mac=SHA1</span><br/><br/><span>AES256-GCM-SHA384 TLSv1.2 Kx=RSA Au=RSA Enc=AESGCM(256) Mac=AEAD</span><br/><br/><span>AES128-GCM-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AESGCM(128) Mac=AEAD</span><br/><br/><span>AES256-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA256</span><br/><br/><span>AES256-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(256) Mac=SHA1</span><br/><br/><span>AES128-SHA256 TLSv1.2 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA256</span><br/><br/><span>AES128-SHA SSLv3 Kx=RSA Au=RSA Enc=AES(128) Mac=SHA1</span>
