-
Notifications
You must be signed in to change notification settings - Fork 49
docs/concepts/aws.md: document TLS handshake errors in kube-apiserver #599
docs/concepts/aws.md: document TLS handshake errors in kube-apiserver #599
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A couple of suggestions.
docs/concepts/aws.md
Outdated
I0408 05:35:22.865279 1 log.go:172] http: TLS handshake error from 127.0.0.1:45516: read tcp 127.53.210.227:7443->127.0.0.1:45516: read: connection reset by peer | ||
``` | ||
|
||
Those logs are harmless and are caused by AWS ELB probing `kube-apiserver` for availability. Unfortunately, AWS ELB does not support authentication for probe requests, so we must use TCP probes, which causes exactly those errors. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Those logs are harmless and are caused by AWS ELB probing `kube-apiserver` for availability. Unfortunately, AWS ELB does not support authentication for probe requests, so we must use TCP probes, which causes exactly those errors. | |
These errors are harmless and are caused by an AWS ELB probing `kube-apiserver` for availability. The probe succeeds but AWS ELBs do not support authentication for probe requests so `kube-apiserver` complains with error logs. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This does not seem logical to me to mention authentication if we change it like this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Rephrased. Is it better now?
6b67d4d
to
d2ea6a7
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Closes #438. Signed-off-by: Mateusz Gozdek <mateusz@kinvolk.io>
d2ea6a7
to
243459f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Changed a couple of small language details. LGTM.
Closes #438.
Signed-off-by: Mateusz Gozdek mateusz@kinvolk.io