Doesn't include the chacha2020_poly1305 ciphers since they're missing from the golang used to build kubernetes.
TLS1.2 ciphers have been listed first, to avoid problems with gRPC clients bailing if they don't match a support cipher (kubernetes actually warns about this).
Set's min TLS version to 1.2
Adds missing TLS ciphers to kubernetes components that don't have the configuration set.
Ideally we would go with mozilla modern recommendations and TLS1.3 only, but that configuration needs more thorough testing and may not be safe to backport.
On backport, need to verify that all listed ciphers are supported, older golang might be missing some.
Uses mozilla intermediate compatibility list as a reference: https://wiki.mozilla.org/Security/Server_Side_TLS
Notes: