Title
#fleet
n

nick fury

08/23/2022, 7:31 PM
im trying to move my fleet environment to k8s and my pod of the fleet web server logs i see that message : "Tls: client offered only unsupported versions: [301]" and this msg is repeating every second when i do not even trying to connect to the fleet webeserver.
Michal Nicpon

Michal Nicpon

08/23/2022, 8:27 PM
Did you change the
server_tls_compatibility
by any chance? https://fleetdm.com/docs/deploying/configuration#server-tls-compatibility
8:31 PM
by default, TLS 1.2 or 1.3 is required
8:53 PM
I was able to reproduce the issue using curl by specifying
--tls-max 1.0
.
n

nick fury

08/24/2022, 7:03 AM
yes, I changed: "server_tls_compatibility" and tls to falseat the past but i reretrive the changes to tls to true and server_tls_compatibility to intermediate.
7:04 AM
when I think about it I think that problem really happened after I changed this settings
7:04 AM
do you know what can i do?
Michal Nicpon

Michal Nicpon

08/24/2022, 4:22 PM
Do you have any kind of proxy or load balancer in front of fleet? Are there any liveness/readiness probes set up in k8s? Do you mind sharing your config?