From babb13c8e2daf177858a057bec809f5fd4be3089 Mon Sep 17 00:00:00 2001
From: Ole Markus With <o.with@sportradar.com>
Date: Sun, 12 Jun 2022 08:05:26 +0200
Subject: [PATCH] Fix broken node selector for node termination handler

---
 .../node-termination-handler.aws/k8s-1.11.yaml.template     | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/upup/models/cloudup/resources/addons/node-termination-handler.aws/k8s-1.11.yaml.template b/upup/models/cloudup/resources/addons/node-termination-handler.aws/k8s-1.11.yaml.template
index 775a100b38..f71cf876e2 100644
--- a/upup/models/cloudup/resources/addons/node-termination-handler.aws/k8s-1.11.yaml.template
+++ b/upup/models/cloudup/resources/addons/node-termination-handler.aws/k8s-1.11.yaml.template
@@ -117,20 +117,18 @@ spec:
         kubernetes.io/os: linux
     spec:
       nodeSelector: null
+      {{ if not UseServiceAccountExternalPermissions }}
       affinity:
         nodeAffinity:
           requiredDuringSchedulingIgnoredDuringExecution:
             nodeSelectorTerms:
             - matchExpressions:
-              {{ if not UseServiceAccountExternalPermissions }}
               - key: node-role.kubernetes.io/control-plane
                 operator: Exists
-              {{ end }}
             - matchExpressions:
-              {{ if not UseServiceAccountExternalPermissions }}
               - key: node-role.kubernetes.io/master
                 operator: Exists
-              {{ end }}
+      {{ end }}
       priorityClassName: system-cluster-critical
       serviceAccountName: aws-node-termination-handler
       securityContext: