| commit | fda26c52376dcd93953a5e2232fe5ee4dd4d3dc6 | [log] [tgz] |
|---|---|---|
| author | Andrey Shestakov <ashestakov@mirantis.com> | Mon Jan 22 23:45:24 2018 +0200 |
| committer | Andrey Shestakov <ashestakov@mirantis.com> | Mon Jan 22 23:45:24 2018 +0200 |
| tree | 80cc9eb1b8d444f7387d87f88c5ff43cee9c04dd | |
| parent | 9f2f2c2e48f3c259fdcb3d73c390a1606af109ad [diff] |
Change SSL check options in haproxy for k8s apiserver. Haproxy option ssl-hello-chk provides simple SSLv3 check for https backend, SSLv3 is not supported by k8s apiserver, which causes a lot of errors in log like: "http: TLS handshake error from ...: tls:client offered an unsupported, maximum protocol version of 300". This patch chenges check type in haproxy to "check-ssl". Change-Id: Ib30251593fe64a377781ebabc9a7fd3e71df4254