weak ciphers (3DES) on port 10250 (kubelet)

[Heverton]

Hello!We are performing vulnerability scans on the Kubernetes cluster environment and are receiving alerts that weak ciphers (3DES) on port 10250 (kubelet) are supported. If I'm not mistaken, this port is used for communication between the client (node) and the Kubernetes API Server (control plane) and as this communication is internal to the GKE cluster, it is managed by GCP.I would like to know if you can adjust the accepted ciphers to remove the 3DES.

[garisingh]

Actually, as far as I know, there's no way to set/change this on the kubelet.  There was an open issue for this:  https://github.com/kubernetes/kubernetes/issues/114316