Issue kubelet cert on apiserver nodes for k8s before 1.19

This commit is contained in:
John Gardiner Myers 2021-07-16 10:13:20 -07:00
parent 378a3781a5
commit 3282549577
1 changed files with 9 additions and 2 deletions

View File

@ -117,8 +117,15 @@ func (b *KubeletBuilder) Build(c *fi.ModelBuilderContext) error {
if b.HasAPIServer || !b.UseBootstrapTokens() {
var kubeconfig fi.Resource
if b.HasAPIServer && (b.IsKubernetesGTE("1.19") || b.UseBootstrapTokens()) {
kubeconfig, err = b.buildMasterKubeletKubeconfig(c)
if b.HasAPIServer {
if b.IsKubernetesGTE("1.19") || b.UseBootstrapTokens() {
kubeconfig, err = b.buildMasterKubeletKubeconfig(c)
} else {
kubeconfig = b.BuildIssuedKubeconfig("kubelet", nodetasks.PKIXName{
CommonName: "kubelet",
Organization: []string{rbac.NodesGroup},
}, c)
}
} else {
kubeconfig, err = b.BuildBootstrapKubeconfig("kubelet", c)
}