autoscaler icon indicating copy to clipboard operation
autoscaler copied to clipboard

TLS Version Control

Open RobHooper opened this issue 2 years ago • 0 comments

Which component are you using?: Cluster Autoscaler

Is your feature request designed to solve a problem? If so describe the problem this feature should solve.: On the 28 June 2023 AWS will remove TLS support for anything older than 1.2 on all of their api endpoints. If the Cluster Autoscaler isn't using TLS 1.2 (or newer) requests to the AWS API will fail (for example AssumeRoleWithWebIdentity), this will break the autoscaling completely.

Describe the solution you'd like.: Increase the default TLS version to 1.2 (TLS 1 and 1.1 are considered outdated and as a security issue) Adding a flag to the application to control this directly. Or if this is already resolved, written confirmation that this isn't a problem.

Additional context.: AWS Blogpost on TLS 1.2 depreciation

RobHooper avatar Aug 03 '22 12:08 RobHooper