Only offer TLS 1.3 in kubelet server

sapcc · Mar 6, 2024 · 13e1701 · 13e1701
1 parent 4fdd798
commit 13e1701
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/charts/seed/templates/kubeadm.yaml b/charts/seed/templates/kubeadm.yaml
@@ -258,6 +258,7 @@ data:
     streamingConnectionIdleTimeout: 0s
     syncFrequency: 0s
     volumeStatsAggPeriod: 0s
+    tlsMinVersion: VersionTLS13
 kind: ConfigMap
 metadata:
   name: kubelet-config

diff --git a/pkg/api/handlers/get_cluster_bootstrap.go b/pkg/api/handlers/get_cluster_bootstrap.go
@@ -46,6 +46,7 @@ authentication:
     enabled: true
 rotateCertificates: true
 nodeLeaseDurationSeconds: 20
+tlsMinVersion: VersionTLS13
 featureGates:
 `))
 

diff --git a/pkg/templates/node_1.27.go b/pkg/templates/node_1.27.go
@@ -297,6 +297,7 @@ storage:
           rotateCertificates: true
           nodeLeaseDurationSeconds: 20
           cgroupDriver: systemd
+          tlsMinVersion: VersionTLS13
     - path: /etc/flatcar/update.conf
       filesystem: root
       mode: 0644