diff --git a/cmd/kubelet/app/server.go b/cmd/kubelet/app/server.go index 12c641048cd..aba7e500542 100644 --- a/cmd/kubelet/app/server.go +++ b/cmd/kubelet/app/server.go @@ -1060,6 +1060,12 @@ func InitializeTLS(kf *options.KubeletFlags, kc *kubeletconfiginternal.KubeletCo return nil, err } + if minTLSVersion == tls.VersionTLS13 { + if len(tlsCipherSuites) != 0 { + klog.Warning("TLS 1.3 cipher suites are not configurable, ignoring --tls-cipher-suites") + } + } + tlsOptions := &server.TLSOptions{ Config: &tls.Config{ MinVersion: minTLSVersion,