im trying to move my fleet environment to k8s and ...
# fleet
n
im trying to move my fleet environment to k8s and my pod of the fleet web server logs i see that message : "Tls: client offered only unsupported versions: [301]" and this msg is repeating every second when i do not even trying to connect to the fleet webeserver.
m
Did you change the
server_tls_compatibility
by any chance? https://fleetdm.com/docs/deploying/configuration#server-tls-compatibility
by default, TLS 1.2 or 1.3 is required
I was able to reproduce the issue using curl by specifying
--tls-max 1.0
.
n
yes, I changed: "server_tls_compatibility" and tls to falseat the past but i reretrive the changes to tls to true and server_tls_compatibility to intermediate.
when I think about it I think that problem really happened after I changed this settings
do you know what can i do?
m
Do you have any kind of proxy or load balancer in front of fleet? Are there any liveness/readiness probes set up in k8s? Do you mind sharing your config?