anchorlytics / k8s

Config for Kubernetes container orchestration
MIT License
0 stars 0 forks source link

Copy k3s certs to haproxy #30

Open seanho00 opened 2 years ago

seanho00 commented 2 years ago

HAProxy liveness checks currently only establish TCP connection, resulting in log spam on k3s API servers:

Cluster-Http-Server 2021/08/24 06:06:41 http: TLS handshake error from 10.90.5.1:38486: tls: client offered only unsupported versions: []

Copy client cert to HAProxy host (i.e., OPNSense router) and use https check.