Octavia added support to define tls versions for loadbalancer listeners: https://github.com/openstack/octavia/blob/master/octavia/api/root_controller.py#L118 Related downstream issue: https://github.com/terraform-provider-openstack/terraform-provider-openstack/issues/1194