<p>I have local kubernetes cluster on vm.
I use containerd as a CRI.
and when i install calico, have the next error with calico-kube-controllers</p>
<blockquote>
<p>&quot;Warning  FailedCreatePodSandBox  2m41s (x638 over 140m)  kubelet,
serverhostname  (combined from similar events): Failed to create pod
sandbox: rpc error: code = Unknown desc = failed to setup network for
sandbox
&quot;a46b6b0c52c2adec7749fff781401e481ca911a198e0406d7fa646c6d5d5e781&quot;:
error getting ClusterInformation: Get
https://[10.96.0.1]:443/apis/crd.projectcalico.org/v1/clusterinformations/default: tls: server selected unsupported protocol version 301&quot;</p>
</blockquote>
<p>P.S with docker as a CRI, works fine</p>
<p>OS version Red Hat Enterprise Linux Server release 7.7 (Maipo)</p>
<p>Openssl version OpenSSL 1.1.1  11 Sep 2018</p>
<p>Configuring tls-min-version for kubelet and kube-api-server didn't help.</p>

MAGuire
<p>solve the promlem.
my cluster works behind corp proxy, and containerd sent requests to 10.96.0.1 through the proxy.
i just add IP 10.96.0.1 to non proxy list to containerd proxy conf.</p>
