<def-group oval_version="5.11">
  <definition class="compliance" id="ingress_controller_tls_security_profile" version="1">
    {{{ oval_metadata("TLS security profile configured for IngressController must use secure protocols", rule_title=rule_title) }}}

    <criteria operator="AND">
      <extend_definition comment="IngressController tlsSecurityProfile=Old is not configured" definition_ref="ingress_controller_tls_security_profile_not_old" />
      <extend_definition comment="IngressController tlsSecurityProfile=Custom(TLS1.2) is configured" definition_ref="ingress_controller_tls_security_profile_custom_min_tls_version" />
    </criteria>

  </definition>
</def-group>
