Add default cipher suites configuration for webhook server

[kangsheng89]

Currently the webhook server default cipher suite from crypto/tls package.
There are 2 cipher is vulnerable on SWEET32 attack
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, TLS_RSA_WITH_3DES_EDE_CBC_SHA

Since webhook server is default to TLSv1.2, we can add configure to default disable cipher suite of the above, and allow the strong cipher suite.

The one in yellow is medium strength cipher suite
https://www.openssl.org/blog/blog/2016/08/24/sweet32/

[kangsheng89]

the ciphersuite from crypto/tls provide list of cipher suite which are safe to use
https://cs.opensource.google/go/go/+/refs/tags/go1.19.3:src/crypto/tls/cipher_suites.go;l=53

[kangsheng89]

Currently the #1244 only fix operator on port 9443, port 8443 need further investigation

[kangsheng89]

@pavolloffay as i understand port 8443 is kube-rbac-proxy, do u mind to point me where is the entrypoint for setting the server?

[pavolloffay]

what is using 8443? Is it for metrics 8443?

Are you looking to configure rbac proxy https://github.com/brancz/kube-rbac-proxy? The requests from the proxy are proxied to 8080 on the operator.

[kangsheng89]

what is using 8443? Is it for metrics 8443?

Are you looking to configure rbac proxy https://github.com/brancz/kube-rbac-proxy? The requests from the proxy are proxied to 8080 on the operator.
I have created this to fix it from helm-chart
open-telemetry/opentelemetry-helm-charts#501