tree 80cc9eb1b8d444f7387d87f88c5ff43cee9c04dd
parent 9f2f2c2e48f3c259fdcb3d73c390a1606af109ad
author Andrey Shestakov <ashestakov@mirantis.com> 1516657524 +0200
committer Andrey Shestakov <ashestakov@mirantis.com> 1516657524 +0200

Change SSL check options in haproxy for k8s apiserver.

Haproxy option ssl-hello-chk provides simple SSLv3 check for https backend,
SSLv3 is not supported by k8s apiserver, which causes a lot of errors in log
like: "http: TLS handshake error from ...:
tls:client offered an unsupported, maximum protocol version of 300".

This patch chenges check type in haproxy to "check-ssl".

Change-Id: Ib30251593fe64a377781ebabc9a7fd3e71df4254