Channels
android_tests
apple-silicon
arm-architecture
auditing-warroom
aws
carving
code-review
community-feeds
core
darkbytes
doorman
ebpf
eclecticiq-polylogyx-extension
extensions
file-carving
fim
fleet
fleet-dev
fleetosquery
foundation
fuzzing
general
golang
goquery
infrastructure
jobs
kolide
linen-dev
linux
macos
officehours
osctrl
plugins
process-auditing
querycon
queryhub
random
selfgroup
sql
tls
uptycs
vendor-feeds
website
windows
zeek
zentral
zercurity
Title
n
nick fury
08/23/2022, 7:31 PMim trying to move my fleet environment to k8s and my pod of the fleet web server logs i see that message : "Tls: client offered only unsupported versions: [301]"
and this msg is repeating every second when i do not even trying to connect to the fleet webeserver.
m
Michal Nicpon
08/23/2022, 8:27 PMDid you change the
server_tls_compatibilityby default, TLS 1.2 or 1.3 is required
I was able to reproduce the issue using curl by specifying
--tls-max 1.0n
nick fury
08/24/2022, 7:03 AMyes, I changed: "server_tls_compatibility" and tls to falseat the past but i reretrive the changes to tls to true and server_tls_compatibility to intermediate.
when I think about it I think that problem really happened after I changed this settings
do you know what can i do?
m
Michal Nicpon
08/24/2022, 4:22 PMDo you have any kind of proxy or load balancer in front of fleet? Are there any liveness/readiness probes set up in k8s? Do you mind sharing your config?