tls: server selected unsupported protocol version 301

Question

I have local kubernetes cluster on vm. I use containerd as a CRI. and when i install calico, have the next error with calico-kube-controllers

"Warning FailedCreatePodSandBox 2m41s (x638 over 140m) kubelet, serverhostname (combined from similar events): Failed to create pod sandbox: rpc error: code = Unknown desc = failed to setup network for sandbox "a46b6b0c52c2adec7749fff781401e481ca911a198e0406d7fa646c6d5d5e781": error getting ClusterInformation: Get https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: tls: server selected unsupported protocol version 301"

P.S with docker as a CRI, works fine

OS version Red Hat Enterprise Linux Server release 7.7 (Maipo)

Openssl version OpenSSL 1.1.1 11 Sep 2018

Configuring tls-min-version for kubelet and kube-api-server didn't help.

Answer 1

solve the promlem. my cluster works behind corp proxy, and containerd sent requests to 10.96.0.1 through the proxy. i just add IP 10.96.0.1 to non proxy list to containerd proxy conf.