How to change tls ciphers for kubeapi , etcd and kubelet

Kubernetes
#1

In recent CKS exam there was one question to set give TLS ciphers for kubeapi, etcd & kubelet.
Can anyone help me with the steps to be done to achive this ?

#2

Hello @devops4uss
Due to NDA, we can’t discuss the exam questions.

#3

HI Team,

I am not asking you to disclose anythng u need to just answer my query for how to change TLS cipher for kubeapi server , etcd and kubelet ?
I hope this platform is for answering queries for and doubts of question which we are not able to get ?

#4

We added a slide to the course for this some months ago:

#5

Where I can find it?

#6

I’m not sure where that link was supposed to go – it no longer goes there :frowning:

These items are arguments to kube-apiserver, to etcd, and to kubelet. Examples:

# for kube-apiserver
--tls-min-version=VersionTLS12
--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

# for etcd
--cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

There’s also a page in the CKS course repo.

#7

@rob_kodekloud The link was valid on the old site, 10 months ago when I pasted it :wink:

The article link which has the same content as the github page is this. I wrote the article originally :slight_smile: