search

bottlerocket-os / bottlerocket-core-kit

A kit with core software packaged for Bottlerocket
Other
16 stars 24 forks source link

kubelet warns about insecure ciphers #238

Closed bcressey closed 23 hours ago

bcressey commented 5 days ago

Platform I'm building on: x86_64

What I expected to happen: kubelet should not warn about insecure ciphers.

What actually happened:

Nov 01 21:19:23 i-0331aa1899658f2f7.us-west-2.compute.internal kubelet[3749]: I1101 21:19:23.690122    3749 server.go:1143] "Use of insecure cipher detected." cipher="TLS_RSA_WITH_AES_256_GCM_SHA384"
Nov 01 21:19:23 i-0331aa1899658f2f7.us-west-2.compute.internal kubelet[3749]: I1101 21:19:23.690136    3749 server.go:1143] "Use of insecure cipher detected." cipher="TLS_RSA_WITH_AES_128_GCM_SHA256"

How to reproduce the problem: Build a k8s variant with the changes from #230 applied.