Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-43748

etcd pod containers do not start when tls min version is 1.3

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Major Major
    • None
    • 4.18.0
    • Etcd
    • Important
    • None
    • Rejected
    • False
    • Hide

      None

      Show
      None
    • Release Note Not Required
    • In Progress

      If we try to enable a Modern TLS profile:

      EnvVarControllerDegraded: no supported cipherSuites not found in observedConfig

      also, if we do manage to pass along the Modern TLS profile cipher suit, we see:

      http2: TLSConfig.CipherSuites is missing an HTTP/2-required AES_128_GCM_SHA256 cipher (need at least one of TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 or TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256)

              lusanche@redhat.com Luis Sanchez
              lusanche@redhat.com Luis Sanchez
              Ge Liu Ge Liu
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

                Created:
                Updated: