Merge pull request #9294 from johngmyers/refactor-nodeup-context

Remove InstanceGroup from NodeupModelContext

cmd/kops-controller/pkg/server/node_config.go

@@ -61,6 +61,16 @@ func (s *Server) getNodeConfig(ctx context.Context, req *nodeup.BootstrapRequest
 		nodeConfig.InstanceGroupConfig = string(b)
 	}
 
+	{
+		p := s.configBase.Join("igconfig", "node", instanceGroupName, "auxconfig.yaml")
+
+		b, err := p.ReadFile()
+		if err != nil {
+			return nil, fmt.Errorf("error loading AuxConfig %q: %v", p, err)
+		}
+		nodeConfig.AuxConfig = string(b)
+	}
+
 	// We populate some certificates that we know the node will need.
 	for _, name := range []string{"ca"} {
 		cert, _, _, err := s.keystore.FindKeypair(name)

nodeup/pkg/model/context.go

@@ -48,16 +48,16 @@ const (
 
 // NodeupModelContext is the context supplied the nodeup tasks
 type NodeupModelContext struct {
-	Cloud         fi.Cloud
-	Architecture  architectures.Architecture
-	Assets        *fi.AssetStore
-	Cluster       *kops.Cluster
-	ConfigBase    vfs.Path
-	Distribution  distributions.Distribution
-	InstanceGroup *kops.InstanceGroup
-	KeyStore      fi.CAStore
-	NodeupConfig  *nodeup.Config
-	SecretStore   fi.SecretStore
+	Cloud           fi.Cloud
+	Architecture    architectures.Architecture
+	Assets          *fi.AssetStore
+	Cluster         *kops.Cluster
+	ConfigBase      vfs.Path
+	Distribution    distributions.Distribution
+	KeyStore        fi.CAStore
+	NodeupConfig    *nodeup.Config
+	NodeupAuxConfig *nodeup.AuxConfig
+	SecretStore     fi.SecretStore
 
 	// IsMaster is true if the InstanceGroup has a role of master (populated by Init)
 	IsMaster bool

nodeup/pkg/model/convenience.go

@@ -23,7 +23,6 @@ import (
 
 	v1 "k8s.io/api/core/v1"
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
-	"k8s.io/kops/pkg/apis/kops"
 	"k8s.io/kops/upup/pkg/fi"
 )
 
@@ -37,17 +36,6 @@ func b(v bool) *bool {
 	return fi.Bool(v)
 }
 
-// containsRole checks if a collection roles contains role v
-func containsRole(v kops.InstanceGroupRole, list []kops.InstanceGroupRole) bool {
-	for _, x := range list {
-		if v == x {
-			return true
-		}
-	}
-
-	return false
-}
-
 // buildDockerEnvironmentVars just converts a series of keypairs to docker environment variables switches
 func buildDockerEnvironmentVars(env map[string]string) []string {
 	var list []string

nodeup/pkg/model/file_assets.go

@@ -45,28 +45,12 @@ func (f *FileAssetsBuilder) Build(c *fi.ModelBuilderContext) error {
 		Mode: s("0755"),
 	})
 
-	// do we have any instanceGroup file assets
-	if f.InstanceGroup.Spec.FileAssets != nil {
-		if err := f.buildFileAssets(c, f.InstanceGroup.Spec.FileAssets, tracker); err != nil {
-			return err
-		}
-	}
-	if f.Cluster.Spec.FileAssets != nil {
-		if err := f.buildFileAssets(c, f.Cluster.Spec.FileAssets, tracker); err != nil {
-			return err
-		}
-	}
-
-	return nil
+	return f.buildFileAssets(c, f.NodeupAuxConfig.FileAssets, tracker)
 }
 
 // buildFileAssets is responsible for rendering the file assets to disk
 func (f *FileAssetsBuilder) buildFileAssets(c *fi.ModelBuilderContext, assets []kops.FileAssetSpec, tracker map[string]bool) error {
 	for _, asset := range assets {
-		// @check if the file asset applies to us. If no roles applied we assume its applied to all roles
-		if len(asset.Roles) > 0 && !containsRole(f.NodeupConfig.InstanceGroupRole, asset.Roles) {
-			continue
-		}
 		// @check if e have a path and if not use the default path
 		assetPath := asset.Path
 		if assetPath == "" {

nodeup/pkg/model/hooks.go

@@ -40,13 +40,9 @@ var _ fi.ModelBuilder = &HookBuilder{}
 func (h *HookBuilder) Build(c *fi.ModelBuilderContext) error {
 	// we keep a list of hooks name so we can allow local instanceGroup hooks override the cluster ones
 	hookNames := make(map[string]bool)
-	for i, spec := range []*[]kops.HookSpec{&h.InstanceGroup.Spec.Hooks, &h.Cluster.Spec.Hooks} {
-		for j, hook := range *spec {
+	for i, spec := range h.NodeupAuxConfig.Hooks {
+		for j, hook := range spec {
 			isInstanceGroup := i == 0
-			// filter roles if required
-			if len(hook.Roles) > 0 && !containsRole(h.NodeupConfig.InstanceGroupRole, hook.Roles) {
-				continue
-			}
 
 			// I don't want to affect those whom are already using the hooks, so I'm going to try to keep the name for now
 			// i.e. use the default naming convention - kops-hook-<index>, only those using the Name or hooks in IG should alter

nodeup/pkg/model/kubelet.go

@@ -306,10 +306,6 @@ func (b *KubeletBuilder) buildSystemdService() *nodetasks.Service {
 
 // buildKubeletConfig is responsible for creating the kubelet configuration
 func (b *KubeletBuilder) buildKubeletConfig() (*kops.KubeletConfigSpec, error) {
-	if b.InstanceGroup == nil {
-		klog.Fatalf("InstanceGroup was not set")
-	}
-
 	kubeletConfigSpec, err := b.buildKubeletConfigSpec()
 	if err != nil {
 		return nil, fmt.Errorf("error building kubelet config: %v", err)
@@ -429,7 +425,7 @@ func (b *KubeletBuilder) addContainerizedMounter(c *fi.ModelBuilderContext) erro
 // buildKubeletConfigSpec returns the kubeletconfig for the specified instanceGroup
 func (b *KubeletBuilder) buildKubeletConfigSpec() (*kops.KubeletConfigSpec, error) {
 	isMaster := b.IsMaster
-	isAPIServer := b.InstanceGroup.Spec.Role == kops.InstanceGroupRoleAPIServer
+	isAPIServer := b.NodeupConfig.InstanceGroupRole == kops.InstanceGroupRoleAPIServer
 
 	// Merge KubeletConfig for NodeLabels
 	c := b.NodeupConfig.KubeletConfig

nodeup/pkg/model/kubelet_test.go

@@ -44,11 +44,12 @@ func Test_InstanceGroupKubeletMerge(t *testing.T) {
 	instanceGroup.Spec.Kubelet.NvidiaGPUs = 1
 	instanceGroup.Spec.Role = kops.InstanceGroupRoleNode
 
+	config, auxConfig := nodeup.NewConfig(cluster, instanceGroup)
 	b := &KubeletBuilder{
 		&NodeupModelContext{
-			Cluster:       cluster,
-			InstanceGroup: instanceGroup,
-			NodeupConfig:  nodeup.NewConfig(cluster, instanceGroup),
+			Cluster:         cluster,
+			NodeupConfig:    config,
+			NodeupAuxConfig: auxConfig,
 		},
 	}
 	if err := b.Init(); err != nil {
@@ -89,11 +90,12 @@ func TestTaintsApplied(t *testing.T) {
 		cluster := &kops.Cluster{Spec: kops.ClusterSpec{KubernetesVersion: g.version}}
 		ig := &kops.InstanceGroup{Spec: kops.InstanceGroupSpec{Role: kops.InstanceGroupRoleMaster, Taints: g.taints}}
 
+		config, auxConfig := nodeup.NewConfig(cluster, ig)
 		b := &KubeletBuilder{
 			&NodeupModelContext{
-				Cluster:       cluster,
-				InstanceGroup: ig,
-				NodeupConfig:  nodeup.NewConfig(cluster, ig),
+				Cluster:         cluster,
+				NodeupConfig:    config,
+				NodeupAuxConfig: auxConfig,
 			},
 		}
 		if err := b.Init(); err != nil {
@@ -238,8 +240,7 @@ func BuildNodeupModelContext(basedir string) (*NodeupModelContext, error) {
 	if len(model.InstanceGroups) == 0 {
 		// We tolerate this - not all tests need an instance group
 	} else if len(model.InstanceGroups) == 1 {
-		nodeUpModelContext.InstanceGroup = model.InstanceGroups[0]
-		nodeUpModelContext.NodeupConfig = nodeup.NewConfig(model.Cluster, nodeUpModelContext.InstanceGroup)
+		nodeUpModelContext.NodeupConfig, nodeUpModelContext.NodeupAuxConfig = nodeup.NewConfig(model.Cluster, model.InstanceGroups[0])
 	} else {
 		return nil, fmt.Errorf("unexpected number of instance groups in %s, found %d", basedir, len(model.InstanceGroups))
 	}

nodeup/pkg/model/update_service.go

@@ -49,20 +49,12 @@ func (b *UpdateServiceBuilder) Build(c *fi.ModelBuilderContext) error {
 }
 
 func (b *UpdateServiceBuilder) buildFlatcarSystemdService(c *fi.ModelBuilderContext) {
-	if b.InstanceGroup.Spec.UpdatePolicy != nil {
-		switch *b.InstanceGroup.Spec.UpdatePolicy {
-		case kops.UpdatePolicyAutomatic:
-			klog.Infof("UpdatePolicy set in InstanceGroup %q spec requests automatic updates; skipping creation of systemd unit %q", b.InstanceGroup.GetName(), flatcarServiceName)
-			return
-		case kops.UpdatePolicyExternal:
-			// Carry on with creating this systemd unit.
-		}
-	} else if fi.StringValue(b.Cluster.Spec.UpdatePolicy) != kops.UpdatePolicyExternal {
-		klog.Infof("UpdatePolicy in Cluster spec requests automatic updates; skipping creation of systemd unit %q", flatcarServiceName)
+	if b.NodeupConfig.UpdatePolicy != kops.UpdatePolicyExternal {
+		klog.Infof("UpdatePolicy requests automatic updates; skipping creation of systemd unit %q", flatcarServiceName)
 		return
 	}
 
-	for _, spec := range [][]kops.HookSpec{b.InstanceGroup.Spec.Hooks, b.Cluster.Spec.Hooks} {
+	for _, spec := range b.NodeupAuxConfig.Hooks {
 		for _, hook := range spec {
 			if hook.Name == flatcarServiceName || hook.Name == flatcarServiceName+".service" {
 				klog.Infof("Detected kops Hook for '%s'; skipping creation", flatcarServiceName)
@@ -93,16 +85,8 @@ func (b *UpdateServiceBuilder) buildFlatcarSystemdService(c *fi.ModelBuilderCont
 }
 
 func (b *UpdateServiceBuilder) buildDebianPackage(c *fi.ModelBuilderContext) {
-	if b.InstanceGroup.Spec.UpdatePolicy != nil {
-		switch *b.InstanceGroup.Spec.UpdatePolicy {
-		case kops.UpdatePolicyAutomatic:
-			klog.Infof("UpdatePolicy set in InstanceGroup %q spec requests automatic updates; skipping installation of packagk %q", b.InstanceGroup.GetName(), debianPackageName)
-			return
-		case kops.UpdatePolicyExternal:
-			// Carry on with creating this systemd unit.
-		}
-	} else if fi.StringValue(b.Cluster.Spec.UpdatePolicy) != kops.UpdatePolicyExternal {
-		klog.Infof("UpdatePolicy in Cluster spec requests automatic updates; skipping installation of package %q", debianPackageName)
+	if b.NodeupConfig.UpdatePolicy != kops.UpdatePolicyExternal {
+		klog.Infof("UpdatePolicy requests automatic updates; skipping installation of package %q", debianPackageName)
 		return
 	}
 

pkg/apis/nodeup/bootstrap.go

@@ -47,6 +47,9 @@ type NodeConfig struct {
 	// ClusterFullConfig holds the configuration for the cluster
 	ClusterFullConfig string `json:"clusterFullConfig,omitempty"`
 
+	// AuxConfig holds the nodeup.AuxConfig for the node's instance group.
+	AuxConfig string `json:"auxConfig,omitempty"`
+
 	// Certificates holds certificates that are already issued
 	Certificates []*NodeConfigCertificate `json:"certificates,omitempty"`
 }

pkg/apis/nodeup/config.go

@@ -53,6 +53,8 @@ type Config struct {
 
 	// DefaultMachineType is the first-listed instance machine type, used if querying instance metadata fails.
 	DefaultMachineType *string `json:",omitempty"`
+	// EnableLifecycleHook defines whether we need to complete a lifecycle hook.
+	EnableLifecycleHook bool `json:",omitempty"`
 	// StaticManifests describes generic static manifests
 	// Using this allows us to keep complex logic out of nodeup
 	StaticManifests []*StaticManifest `json:"staticManifests,omitempty"`
@@ -62,11 +64,23 @@ type Config struct {
 	// specified, each parameter must follow the form variable=value, the way
 	// it would appear in sysctl.conf.
 	SysctlParameters []string `json:",omitempty"`
+	// UpdatePolicy determines the policy for applying upgrades automatically.
+	UpdatePolicy string
 	// VolumeMounts are a collection of volume mounts.
 	VolumeMounts []kops.VolumeMountSpec `json:",omitempty"`
 
 	// ConfigServer holds the configuration for the configuration server
 	ConfigServer *ConfigServerOptions `json:"configServer,omitempty"`
+	// AuxConfigHash holds a secure hash of the nodeup.AuxConfig.
+	AuxConfigHash string
+}
+
+// AuxConfig is the configuration for the nodeup binary that might be too big to fit in userdata.
+type AuxConfig struct {
+	// FileAssets are a collection of file assets for this instance group.
+	FileAssets []kops.FileAssetSpec `json:",omitempty"`
+	// Hooks are for custom actions, for example on first installation.
+	Hooks [][]kops.HookSpec
 }
 
 type ConfigServerOptions struct {
@@ -97,7 +111,7 @@ type StaticManifest struct {
 	Path string `json:"path,omitempty"`
 }
 
-func NewConfig(cluster *kops.Cluster, instanceGroup *kops.InstanceGroup) *Config {
+func NewConfig(cluster *kops.Cluster, instanceGroup *kops.InstanceGroup) (*Config, *AuxConfig) {
 	role := instanceGroup.Spec.Role
 	isMaster := role == kops.InstanceGroupRoleMaster
 
@@ -107,6 +121,19 @@ func NewConfig(cluster *kops.Cluster, instanceGroup *kops.InstanceGroup) *Config
 		VolumeMounts:      instanceGroup.Spec.VolumeMounts,
 	}
 
+	clusterHooks := filterHooks(cluster.Spec.Hooks, instanceGroup.Spec.Role)
+	igHooks := filterHooks(instanceGroup.Spec.Hooks, instanceGroup.Spec.Role)
+
+	auxConfig := AuxConfig{
+		FileAssets: append(filterFileAssets(instanceGroup.Spec.FileAssets, role), filterFileAssets(cluster.Spec.FileAssets, role)...),
+		Hooks:      [][]kops.HookSpec{igHooks, clusterHooks},
+	}
+
+	warmPool := cluster.Spec.WarmPool.ResolveDefaults(instanceGroup)
+	if warmPool.IsEnabled() && warmPool.EnableLifecycleHook {
+		config.EnableLifecycleHook = true
+	}
+
 	if isMaster {
 		reflectutils.JSONMergeStruct(&config.KubeletConfig, cluster.Spec.MasterKubelet)
 
@@ -134,9 +161,51 @@ func NewConfig(cluster *kops.Cluster, instanceGroup *kops.InstanceGroup) *Config
 
 	config.KubeletConfig.Taints = append(config.KubeletConfig.Taints, instanceGroup.Spec.Taints...)
 
+	if instanceGroup.Spec.UpdatePolicy != nil {
+		config.UpdatePolicy = *instanceGroup.Spec.UpdatePolicy
+	} else if cluster.Spec.UpdatePolicy != nil {
+		config.UpdatePolicy = *cluster.Spec.UpdatePolicy
+	} else {
+		config.UpdatePolicy = kops.UpdatePolicyAutomatic
+	}
+
 	if cluster.Spec.Networking != nil && cluster.Spec.Networking.AmazonVPC != nil {
 		config.DefaultMachineType = fi.String(strings.Split(instanceGroup.Spec.MachineType, ",")[0])
 	}
 
-	return &config
+	return &config, &auxConfig
+}
+
+func filterFileAssets(f []kops.FileAssetSpec, role kops.InstanceGroupRole) []kops.FileAssetSpec {
+	var fileAssets []kops.FileAssetSpec
+	for _, fileAsset := range f {
+		if len(fileAsset.Roles) > 0 && !containsRole(role, fileAsset.Roles) {
+			continue
+		}
+		fileAsset.Roles = nil
+		fileAssets = append(fileAssets, fileAsset)
+	}
+	return fileAssets
+}
+
+func filterHooks(h []kops.HookSpec, role kops.InstanceGroupRole) []kops.HookSpec {
+	var hooks []kops.HookSpec
+	for _, hook := range h {
+		if len(hook.Roles) > 0 && !containsRole(role, hook.Roles) {
+			continue
+		}
+		hook.Roles = nil
+		hooks = append(hooks, hook)
+	}
+	return hooks
+}
+
+func containsRole(v kops.InstanceGroupRole, list []kops.InstanceGroupRole) bool {
+	for _, x := range list {
+		if v == x {
+			return true
+		}
+	}
+
+	return false
 }

pkg/client/simple/vfsclientset/clientset.go

@@ -161,6 +161,9 @@ func DeleteAllClusterState(basePath vfs.Path) error {
 		if strings.HasPrefix(relativePath, "instancegroup/") {
 			continue
 		}
+		if strings.HasPrefix(relativePath, "igconfig/") {
+			continue
+		}
 		if strings.HasPrefix(relativePath, "manifests/") {
 			continue
 		}

pkg/model/awsmodel/autoscalinggroup_test.go

@@ -68,6 +68,9 @@ func TestRootVolumeOptimizationFlag(t *testing.T) {
 				InstanceGroups:  igs,
 			},
 		},
+		BootstrapScriptBuilder: &model.BootstrapScriptBuilder{
+			Lifecycle: fi.LifecycleSync,
+		},
 		Cluster: cluster,
 	}
 
@@ -154,6 +157,9 @@ func TestAPIServerAdditionalSecurityGroupsWithNLB(t *testing.T) {
 				InstanceGroups:  igs,
 			},
 		},
+		BootstrapScriptBuilder: &model.BootstrapScriptBuilder{
+			Lifecycle: fi.LifecycleSync,
+		},
 		Cluster: cluster,
 	}
 

pkg/model/azuremodel/BUILD.bazel

@@ -40,6 +40,7 @@ go_test(
     embed = [":go_default_library"],
     deps = [
         "//pkg/apis/kops:go_default_library",
+        "//pkg/model:go_default_library",
         "//pkg/model/defaults:go_default_library",
         "//upup/pkg/fi:go_default_library",
         "//upup/pkg/fi/cloudup/azuretasks:go_default_library",

pkg/model/azuremodel/vmscaleset_test.go

@@ -24,6 +24,7 @@ import (
 	"github.com/Azure/azure-sdk-for-go/services/compute/mgmt/2020-06-01/compute"
 	"github.com/Azure/go-autorest/autorest/to"
 	"k8s.io/kops/pkg/apis/kops"
+	"k8s.io/kops/pkg/model"
 	"k8s.io/kops/pkg/model/defaults"
 	"k8s.io/kops/upup/pkg/fi"
 	"k8s.io/kops/upup/pkg/fi/fitasks"
@@ -32,6 +33,9 @@ import (
 func TestVMScaleSetModelBuilder_Build(t *testing.T) {
 	b := VMScaleSetModelBuilder{
 		AzureModelContext: newTestAzureModelContext(),
+		BootstrapScriptBuilder: &model.BootstrapScriptBuilder{
+			Lifecycle: fi.LifecycleSync,
+		},
 	}
 	c := &fi.ModelBuilderContext{
 		Tasks: make(map[string]fi.Task),

pkg/model/bootstrapscript.go

@@ -19,7 +19,7 @@ package model
 import (
 	"bytes"
 	"compress/gzip"
-	"crypto/sha1"
+	"crypto/sha256"
 	"encoding/base64"
 	"fmt"
 	"os"
@@ -43,11 +43,12 @@ import (
 )
 
 type NodeUpConfigBuilder interface {
-	BuildConfig(ig *kops.InstanceGroup, apiserverAdditionalIPs []string, ca fi.Resource) (*nodeup.Config, error)
+	BuildConfig(ig *kops.InstanceGroup, apiserverAdditionalIPs []string, ca fi.Resource) (*nodeup.Config, *nodeup.AuxConfig, error)
 }
 
 // BootstrapScriptBuilder creates the bootstrap script
 type BootstrapScriptBuilder struct {
+	Lifecycle           fi.Lifecycle
 	NodeUpAssets        map[architectures.Architecture]*mirrors.MirroredAsset
 	NodeUpConfigBuilder NodeUpConfigBuilder
 }
@@ -65,6 +66,9 @@ type BootstrapScript struct {
 
 	// caTask holds the CA task, for dependency analysis.
 	caTask fi.Task
+
+	// auxConfig contains the nodeup auxiliary config.
+	auxConfig fi.TaskDependentResource
 }
 
 var _ fi.Task = &BootstrapScript{}
@@ -89,11 +93,19 @@ func (b *BootstrapScript) kubeEnv(ig *kops.InstanceGroup, c *fi.Context, ca fi.R
 	}
 
 	sort.Strings(alternateNames)
-	config, err := b.builder.NodeUpConfigBuilder.BuildConfig(ig, alternateNames, ca)
+	config, auxConfig, err := b.builder.NodeUpConfigBuilder.BuildConfig(ig, alternateNames, ca)
 	if err != nil {
 		return "", err
 	}
 
+	auxData, err := utils.YamlMarshal(auxConfig)
+	if err != nil {
+		return "", fmt.Errorf("error converting nodeup auxiliary config to yaml: %v", err)
+	}
+	sum256 := sha256.Sum256(auxData)
+	config.AuxConfigHash = base64.StdEncoding.EncodeToString(sum256[:])
+	b.auxConfig.Resource = fi.NewBytesResource(auxData)
+
 	data, err := utils.YamlMarshal(config)
 	if err != nil {
 		return "", fmt.Errorf("error converting nodeup config to yaml: %v", err)
@@ -222,7 +234,15 @@ func (b *BootstrapScriptBuilder) ResourceNodeUp(c *fi.ModelBuilderContext, ig *k
 		ca:      caTask.Certificate(),
 	}
 	task.resource.Task = task
+	task.auxConfig.Task = task
 	c.AddTask(task)
+
+	c.AddTask(&fitasks.ManagedFile{
+		Name:      fi.String("auxconfig-" + ig.Name),
+		Lifecycle: b.Lifecycle,
+		Location:  fi.String("igconfig/" + strings.ToLower(string(ig.Spec.Role)) + "/" + ig.Name + "/auxconfig.yaml"),
+		Contents:  &task.auxConfig,
+	})
 	return &task.resource, nil
 }
 
@@ -246,6 +266,11 @@ func (b *BootstrapScript) GetDependencies(tasks map[string]fi.Task) []fi.Task {
 }
 
 func (b *BootstrapScript) Run(c *fi.Context) error {
+	config, err := b.kubeEnv(b.ig, c, b.ca)
+	if err != nil {
+		return err
+	}
+
 	functions := template.FuncMap{
 		"NodeUpSourceAmd64": func() string {
 			if b.builder.NodeUpAssets[architectures.ArchitectureAmd64] != nil {
@@ -271,8 +296,8 @@ func (b *BootstrapScript) Run(c *fi.Context) error {
 			}
 			return ""
 		},
-		"KubeEnv": func() (string, error) {
-			return b.kubeEnv(b.ig, c, b.ca)
+		"KubeEnv": func() string {
+			return config
 		},
 
 		"EnvironmentVariables": func() (string, error) {
@@ -345,22 +370,6 @@ func (b *BootstrapScript) Run(c *fi.Context) error {
 				}
 			}
 
-			hooks, err := b.getRelevantHooks(cs.Hooks, b.ig.Spec.Role)
-			if err != nil {
-				return "", err
-			}
-			if len(hooks) > 0 {
-				spec["hooks"] = hooks
-			}
-
-			fileAssets, err := b.getRelevantFileAssets(cs.FileAssets, b.ig.Spec.Role)
-			if err != nil {
-				return "", err
-			}
-			if len(fileAssets) > 0 {
-				spec["fileAssets"] = fileAssets
-			}
-
 			content, err := yaml.Marshal(spec)
 			if err != nil {
 				return "", fmt.Errorf("error converting cluster spec to yaml for inclusion within bootstrap script: %v", err)
@@ -368,32 +377,6 @@ func (b *BootstrapScript) Run(c *fi.Context) error {
 			return string(content), nil
 		},
 
-		"IGSpec": func() (string, error) {
-			spec := make(map[string]interface{})
-
-			hooks, err := b.getRelevantHooks(b.ig.Spec.Hooks, b.ig.Spec.Role)
-			if err != nil {
-				return "", err
-			}
-			if len(hooks) > 0 {
-				spec["hooks"] = hooks
-			}
-
-			fileAssets, err := b.getRelevantFileAssets(b.ig.Spec.FileAssets, b.ig.Spec.Role)
-			if err != nil {
-				return "", err
-			}
-			if len(fileAssets) > 0 {
-				spec["fileAssets"] = fileAssets
-			}
-
-			content, err := yaml.Marshal(spec)
-			if err != nil {
-				return "", fmt.Errorf("error converting instancegroup spec to yaml for inclusion within bootstrap script: %v", err)
-			}
-			return string(content), nil
-		},
-
 		"CompressUserData": func() *bool {
 			return b.ig.Spec.CompressUserData
 		},
@@ -423,103 +406,6 @@ func (b *BootstrapScript) Run(c *fi.Context) error {
 	return nil
 }
 
-// getRelevantHooks returns a list of hooks to be applied to the instance group,
-// with the Manifest and ExecContainer Commands fingerprinted to reduce size
-func (b *BootstrapScript) getRelevantHooks(allHooks []kops.HookSpec, role kops.InstanceGroupRole) ([]kops.HookSpec, error) {
-	relevantHooks := []kops.HookSpec{}
-	for _, hook := range allHooks {
-		if len(hook.Roles) == 0 {
-			relevantHooks = append(relevantHooks, hook)
-			continue
-		}
-		for _, hookRole := range hook.Roles {
-			if role == hookRole {
-				relevantHooks = append(relevantHooks, hook)
-				break
-			}
-		}
-	}
-
-	hooks := []kops.HookSpec{}
-	if len(relevantHooks) > 0 {
-		for _, hook := range relevantHooks {
-			if hook.Manifest != "" {
-				manifestFingerprint, err := b.computeFingerprint(hook.Manifest)
-				if err != nil {
-					return nil, err
-				}
-				hook.Manifest = manifestFingerprint + " (fingerprint)"
-			}
-
-			if hook.ExecContainer != nil && hook.ExecContainer.Command != nil {
-				execContainerCommandFingerprint, err := b.computeFingerprint(strings.Join(hook.ExecContainer.Command[:], " "))
-				if err != nil {
-					return nil, err
-				}
-
-				execContainerAction := &kops.ExecContainerAction{
-					Command:     []string{execContainerCommandFingerprint + " (fingerprint)"},
-					Environment: hook.ExecContainer.Environment,
-					Image:       hook.ExecContainer.Image,
-				}
-				hook.ExecContainer = execContainerAction
-			}
-
-			hook.Roles = nil
-			hooks = append(hooks, hook)
-		}
-	}
-
-	return hooks, nil
-}
-
-// getRelevantFileAssets returns a list of file assets to be applied to the
-// instance group, with the Content fingerprinted to reduce size
-func (b *BootstrapScript) getRelevantFileAssets(allFileAssets []kops.FileAssetSpec, role kops.InstanceGroupRole) ([]kops.FileAssetSpec, error) {
-	relevantFileAssets := []kops.FileAssetSpec{}
-	for _, fileAsset := range allFileAssets {
-		if len(fileAsset.Roles) == 0 {
-			relevantFileAssets = append(relevantFileAssets, fileAsset)
-			continue
-		}
-		for _, fileAssetRole := range fileAsset.Roles {
-			if role == fileAssetRole {
-				relevantFileAssets = append(relevantFileAssets, fileAsset)
-				break
-			}
-		}
-	}
-
-	fileAssets := []kops.FileAssetSpec{}
-	if len(relevantFileAssets) > 0 {
-		for _, fileAsset := range relevantFileAssets {
-			if fileAsset.Content != "" {
-				contentFingerprint, err := b.computeFingerprint(fileAsset.Content)
-				if err != nil {
-					return nil, err
-				}
-				fileAsset.Content = contentFingerprint + " (fingerprint)"
-			}
-
-			fileAsset.Roles = nil
-			fileAssets = append(fileAssets, fileAsset)
-		}
-	}
-
-	return fileAssets, nil
-}
-
-// computeFingerprint takes a string and returns a base64 encoded fingerprint
-func (b *BootstrapScript) computeFingerprint(content string) (string, error) {
-	hasher := sha1.New()
-
-	if _, err := hasher.Write([]byte(content)); err != nil {
-		return "", fmt.Errorf("error computing fingerprint hash: %v", err)
-	}
-
-	return base64.StdEncoding.EncodeToString(hasher.Sum(nil)), nil
-}
-
 func (b *BootstrapScript) createProxyEnv(ps *kops.EgressProxySpec) string {
 	var buffer bytes.Buffer
 

pkg/model/bootstrapscript_test.go

@@ -17,6 +17,7 @@ limitations under the License.
 package model
 
 import (
+	"fmt"
 	"strings"
 	"testing"
 
@@ -63,62 +64,63 @@ type nodeupConfigBuilder struct {
 	cluster *kops.Cluster
 }
 
-func (n *nodeupConfigBuilder) BuildConfig(ig *kops.InstanceGroup, apiserverAdditionalIPs []string, ca fi.Resource) (*nodeup.Config, error) {
-	return nodeup.NewConfig(n.cluster, ig), nil
+func (n *nodeupConfigBuilder) BuildConfig(ig *kops.InstanceGroup, apiserverAdditionalIPs []string, ca fi.Resource) (*nodeup.Config, *nodeup.AuxConfig, error) {
+	config, auxConfig := nodeup.NewConfig(n.cluster, ig)
+	return config, auxConfig, nil
 }
 
 func TestBootstrapUserData(t *testing.T) {
 	cs := []struct {
 		Role               kops.InstanceGroupRole
-		ExpectedFilePath   string
+		ExpectedFileIndex  int
 		HookSpecRoles      []kops.InstanceGroupRole
 		FileAssetSpecRoles []kops.InstanceGroupRole
 	}{
 		{
 			Role:               "Master",
-			ExpectedFilePath:   "tests/data/bootstrapscript_0.txt",
+			ExpectedFileIndex:  0,
 			HookSpecRoles:      []kops.InstanceGroupRole{""},
 			FileAssetSpecRoles: []kops.InstanceGroupRole{""},
 		},
 		{
 			Role:               "Master",
-			ExpectedFilePath:   "tests/data/bootstrapscript_0.txt",
+			ExpectedFileIndex:  0,
 			HookSpecRoles:      []kops.InstanceGroupRole{"Node"},
 			FileAssetSpecRoles: []kops.InstanceGroupRole{"Node"},
 		},
 		{
 			Role:               "Master",
-			ExpectedFilePath:   "tests/data/bootstrapscript_1.txt",
+			ExpectedFileIndex:  1,
 			HookSpecRoles:      []kops.InstanceGroupRole{"Master"},
 			FileAssetSpecRoles: []kops.InstanceGroupRole{"Master"},
 		},
 		{
 			Role:               "Master",
-			ExpectedFilePath:   "tests/data/bootstrapscript_2.txt",
+			ExpectedFileIndex:  2,
 			HookSpecRoles:      []kops.InstanceGroupRole{"Master", "Node"},
 			FileAssetSpecRoles: []kops.InstanceGroupRole{"Master", "Node"},
 		},
 		{
 			Role:               "Node",
-			ExpectedFilePath:   "tests/data/bootstrapscript_3.txt",
+			ExpectedFileIndex:  3,
 			HookSpecRoles:      []kops.InstanceGroupRole{""},
 			FileAssetSpecRoles: []kops.InstanceGroupRole{""},
 		},
 		{
 			Role:               "Node",
-			ExpectedFilePath:   "tests/data/bootstrapscript_4.txt",
+			ExpectedFileIndex:  4,
 			HookSpecRoles:      []kops.InstanceGroupRole{"Node"},
 			FileAssetSpecRoles: []kops.InstanceGroupRole{"Node"},
 		},
 		{
 			Role:               "Node",
-			ExpectedFilePath:   "tests/data/bootstrapscript_3.txt",
+			ExpectedFileIndex:  3,
 			HookSpecRoles:      []kops.InstanceGroupRole{"Master"},
 			FileAssetSpecRoles: []kops.InstanceGroupRole{"Master"},
 		},
 		{
 			Role:               "Node",
-			ExpectedFilePath:   "tests/data/bootstrapscript_5.txt",
+			ExpectedFileIndex:  5,
 			HookSpecRoles:      []kops.InstanceGroupRole{"Master", "Node"},
 			FileAssetSpecRoles: []kops.InstanceGroupRole{"Master", "Node"},
 		},
@@ -168,7 +170,16 @@ func TestBootstrapUserData(t *testing.T) {
 			continue
 		}
 
-		golden.AssertMatchesFile(t, actual, x.ExpectedFilePath)
+		golden.AssertMatchesFile(t, actual, fmt.Sprintf("tests/data/bootstrapscript_%d.txt", x.ExpectedFileIndex))
+
+		require.Contains(t, c.Tasks, "ManagedFile/auxconfig-testIG")
+		actual, err = fi.ResourceAsString(c.Tasks["ManagedFile/auxconfig-testIG"].(*fitasks.ManagedFile).Contents)
+		if err != nil {
+			t.Errorf("case %d failed to render auxconfig resource. error: %s", i, err)
+			continue
+		}
+
+		golden.AssertMatchesFile(t, actual, fmt.Sprintf("tests/data/auxconfig_%d.txt", x.ExpectedFileIndex))
 	}
 }
 

pkg/model/iam/iam_builder.go

@@ -588,6 +588,7 @@ func ReadableStatePaths(cluster *kops.Cluster, role Subject) ([]string, error) {
 			"/addons/*",
 			"/cluster.spec",
 			"/config",
+			"/igconfig/node/*",
 			"/instancegroup/*",
 			"/pki/issued/*",
 			"/pki/ssh/*",

pkg/model/iam/tests/iam_builder_node_strict.json

@@ -26,6 +26,7 @@
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/addons/*",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/cluster.spec",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/config",
+        "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/igconfig/node/*",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/instancegroup/*",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/pki/issued/*",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/pki/private/kube-proxy/*",

pkg/model/iam/tests/iam_builder_node_strict_ecr.json

@@ -26,6 +26,7 @@
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/addons/*",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/cluster.spec",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/config",
+        "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/igconfig/node/*",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/instancegroup/*",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/pki/issued/*",
         "arn:aws:s3:::kops-tests/iam-builder-test.k8s.local/pki/private/kube-proxy/*",

pkg/model/openstackmodel/servergroup_test.go

@@ -1012,8 +1012,8 @@ func createBuilderForCluster(cluster *kops.Cluster, instanceGroups []*kops.Insta
 type nodeupConfigBuilder struct {
 }
 
-func (n *nodeupConfigBuilder) BuildConfig(ig *kops.InstanceGroup, apiserverAdditionalIPs []string, ca fi.Resource) (*nodeup.Config, error) {
-	return &nodeup.Config{}, nil
+func (n *nodeupConfigBuilder) BuildConfig(ig *kops.InstanceGroup, apiserverAdditionalIPs []string, ca fi.Resource) (*nodeup.Config, *nodeup.AuxConfig, error) {
+	return &nodeup.Config{}, &nodeup.AuxConfig{}, nil
 }
 
 func TestServerGroupBuilder(t *testing.T) {

pkg/model/openstackmodel/tests/servergroup/adds-additional-security-groups.yaml

@@ -76,6 +76,15 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups:
 - additional-sg
 ID: null

pkg/model/openstackmodel/tests/servergroup/adds-cloud-labels-from-ClusterSpec.yaml

@@ -75,6 +75,15 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/adds-cloud-labels-from-InstanceGroupSpec.yaml

@@ -75,6 +75,15 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/configures-server-group-affinity-with-annotations.yaml

@@ -74,6 +74,15 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/multizone-setup-3-masters-3-nodes-without-bastion-auto-zone-distribution.yaml

@@ -511,6 +511,24 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: master
+Lifecycle: ""
+Location: igconfig/master/master/auxconfig.yaml
+Name: auxconfig-master
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/multizone-setup-3-masters-3-nodes-without-bastion-with-API-loadbalancer.yaml

@@ -537,6 +537,60 @@ Loadbalancer:
   VipSubnet: null
 Name: master-public-name-https
 ---
+Base: null
+Contents:
+  task:
+    Name: master-a
+Lifecycle: ""
+Location: igconfig/master/master-a/auxconfig.yaml
+Name: auxconfig-master-a
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: master-b
+Lifecycle: ""
+Location: igconfig/master/master-b/auxconfig.yaml
+Name: auxconfig-master-b
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: master-c
+Lifecycle: ""
+Location: igconfig/master/master-c/auxconfig.yaml
+Name: auxconfig-master-c
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node-a
+Lifecycle: ""
+Location: igconfig/node/node-a/auxconfig.yaml
+Name: auxconfig-node-a
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node-b
+Lifecycle: ""
+Location: igconfig/node/node-b/auxconfig.yaml
+Name: auxconfig-node-b
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node-c
+Lifecycle: ""
+Location: igconfig/node/node-c/auxconfig.yaml
+Name: auxconfig-node-c
+Public: null
+---
 ID: null
 InterfaceName: cluster
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/multizone-setup-3-masters-3-nodes-without-bastion.yaml

@@ -519,6 +519,60 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: master-a
+Lifecycle: ""
+Location: igconfig/master/master-a/auxconfig.yaml
+Name: auxconfig-master-a
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: master-b
+Lifecycle: ""
+Location: igconfig/master/master-b/auxconfig.yaml
+Name: auxconfig-master-b
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: master-c
+Lifecycle: ""
+Location: igconfig/master/master-c/auxconfig.yaml
+Name: auxconfig-master-c
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node-a
+Lifecycle: ""
+Location: igconfig/node/node-a/auxconfig.yaml
+Name: auxconfig-node-a
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node-b
+Lifecycle: ""
+Location: igconfig/node/node-b/auxconfig.yaml
+Name: auxconfig-node-b
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node-c
+Lifecycle: ""
+Location: igconfig/node/node-c/auxconfig.yaml
+Name: auxconfig-node-c
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/multizone-setup-3-masters-3-nodes-without-external-router.yaml

@@ -441,6 +441,60 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: master-a
+Lifecycle: ""
+Location: igconfig/master/master-a/auxconfig.yaml
+Name: auxconfig-master-a
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: master-b
+Lifecycle: ""
+Location: igconfig/master/master-b/auxconfig.yaml
+Name: auxconfig-master-b
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: master-c
+Lifecycle: ""
+Location: igconfig/master/master-c/auxconfig.yaml
+Name: auxconfig-master-c
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node-a
+Lifecycle: ""
+Location: igconfig/node/node-a/auxconfig.yaml
+Name: auxconfig-node-a
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node-b
+Lifecycle: ""
+Location: igconfig/node/node-b/auxconfig.yaml
+Name: auxconfig-node-b
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node-c
+Lifecycle: ""
+Location: igconfig/node/node-c/auxconfig.yaml
+Name: auxconfig-node-c
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/one-master-one-node-one-bastion-2.yaml

@@ -218,6 +218,33 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: bastion
+Lifecycle: ""
+Location: igconfig/bastion/bastion/auxconfig.yaml
+Name: auxconfig-bastion
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: master
+Lifecycle: ""
+Location: igconfig/master/master/auxconfig.yaml
+Name: auxconfig-master
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/one-master-one-node-one-bastion.yaml

@@ -244,6 +244,33 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: bastion
+Lifecycle: ""
+Location: igconfig/bastion/bastion/auxconfig.yaml
+Name: auxconfig-bastion
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: master
+Lifecycle: ""
+Location: igconfig/master/master/auxconfig.yaml
+Name: auxconfig-master
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/one-master-one-node-without-bastion-no-public-ip-association.yaml

@@ -151,6 +151,24 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: master
+Lifecycle: ""
+Location: igconfig/master/master/auxconfig.yaml
+Name: auxconfig-master
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/one-master-one-node.yaml

@@ -177,6 +177,24 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: master
+Lifecycle: ""
+Location: igconfig/master/master/auxconfig.yaml
+Name: auxconfig-master
+Public: null
+---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups: null
 ID: null
 Lifecycle: Sync

pkg/model/openstackmodel/tests/servergroup/uses-instance-group-subnet-as-availability-zones-fallback.yaml

@@ -76,6 +76,15 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups:
 - additional-sg
 ID: null

pkg/model/openstackmodel/tests/servergroup/uses-instance-group-zones-as-availability-zones.yaml

@@ -76,6 +76,15 @@ oldFormat: false
 subject: cn=kubernetes
 type: ca
 ---
+Base: null
+Contents:
+  task:
+    Name: node
+Lifecycle: ""
+Location: igconfig/node/node/auxconfig.yaml
+Name: auxconfig-node
+Public: null
+---
 AdditionalSecurityGroups:
 - additional-sg
 ID: null

pkg/model/resources/nodeup.go

@@ -153,14 +153,6 @@ cat > conf/cluster_spec.yaml << '__EOF_CLUSTER_SPEC'
 __EOF_CLUSTER_SPEC
 {{- end }}
 
-{{ if CompressUserData -}}
-echo "{{ GzipBase64 IGSpec }}" | base64 -d | gzip -d > conf/ig_spec.yaml
-{{- else -}}
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{{ IGSpec }}
-__EOF_IG_SPEC
-{{- end }}
-
 {{ if CompressUserData -}}
 echo "{{ GzipBase64 KubeEnv }}" | base64 -d | gzip -d > conf/kube_env.yaml
 {{- else -}}

pkg/model/tests/data/auxconfig_0.txt

@@ -0,0 +1,10 @@
+FileAssets:
+- content: user,token
+  name: tokens
+  path: /kube/tokens.csv
+Hooks:
+- - manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl start apply-to-all.service
+    name: apply-to-all.service
+- null

pkg/model/tests/data/auxconfig_1.txt

@@ -0,0 +1,28 @@
+FileAssets:
+- content: blah blah
+  name: iptables-restore
+  path: /var/lib/iptables/rules-save
+- content: user,token
+  name: tokens
+  path: /kube/tokens.csv
+- content: blah blah
+  name: iptables-restore
+  path: /var/lib/iptables/rules-save
+Hooks:
+- - before:
+    - update-engine.service
+    - kubelet.service
+    manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl stop update-engine.service
+    name: disable-update-engine.service
+  - manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl start apply-to-all.service
+    name: apply-to-all.service
+- - execContainer:
+      command:
+      - sh
+      - -c
+      - apt-get update
+      image: busybox

pkg/model/tests/data/auxconfig_2.txt

@@ -0,0 +1,28 @@
+FileAssets:
+- content: blah blah
+  name: iptables-restore
+  path: /var/lib/iptables/rules-save
+- content: user,token
+  name: tokens
+  path: /kube/tokens.csv
+- content: blah blah
+  name: iptables-restore
+  path: /var/lib/iptables/rules-save
+Hooks:
+- - before:
+    - update-engine.service
+    - kubelet.service
+    manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl stop update-engine.service
+    name: disable-update-engine.service
+  - manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl start apply-to-all.service
+    name: apply-to-all.service
+- - execContainer:
+      command:
+      - sh
+      - -c
+      - apt-get update
+      image: busybox

pkg/model/tests/data/auxconfig_3.txt

@@ -0,0 +1,10 @@
+FileAssets:
+- content: user,token
+  name: tokens
+  path: /kube/tokens.csv
+Hooks:
+- - manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl start apply-to-all.service
+    name: apply-to-all.service
+- null

pkg/model/tests/data/auxconfig_4.txt

@@ -0,0 +1,28 @@
+FileAssets:
+- content: blah blah
+  name: iptables-restore
+  path: /var/lib/iptables/rules-save
+- content: user,token
+  name: tokens
+  path: /kube/tokens.csv
+- content: blah blah
+  name: iptables-restore
+  path: /var/lib/iptables/rules-save
+Hooks:
+- - before:
+    - update-engine.service
+    - kubelet.service
+    manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl stop update-engine.service
+    name: disable-update-engine.service
+  - manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl start apply-to-all.service
+    name: apply-to-all.service
+- - execContainer:
+      command:
+      - sh
+      - -c
+      - apt-get update
+      image: busybox

pkg/model/tests/data/auxconfig_5.txt

@@ -0,0 +1,28 @@
+FileAssets:
+- content: blah blah
+  name: iptables-restore
+  path: /var/lib/iptables/rules-save
+- content: user,token
+  name: tokens
+  path: /kube/tokens.csv
+- content: blah blah
+  name: iptables-restore
+  path: /var/lib/iptables/rules-save
+Hooks:
+- - before:
+    - update-engine.service
+    - kubelet.service
+    manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl stop update-engine.service
+    name: disable-update-engine.service
+  - manifest: |-
+      Type=oneshot
+      ExecStart=/usr/bin/systemctl start apply-to-all.service
+    name: apply-to-all.service
+- - execContainer:
+      command:
+      - sh
+      - -c
+      - apt-get update
+      image: busybox

pkg/model/tests/data/bootstrapscript_0.txt

@@ -170,18 +170,8 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-fileAssets:
-- content: xYagtQLwBAAi3V8Wc2Jrojz28I0= (fingerprint)
-  name: tokens
-  path: /kube/tokens.csv
-hooks:
-- manifest: 8BN3anFUyDlkVF/JnaJqbwpq8ME= (fingerprint)
-  name: apply-to-all.service
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
+AuxConfigHash: /0fgYG0lsuxVGuNdtGBZA0RYxOfvLD/xOFg1eJwyfcw=
 InstanceGroupRole: Master
 KubeletConfig:
   kubeconfigPath: /etc/kubernetes/igconfig.txt
@@ -196,6 +186,7 @@ KubeletConfig:
   taints:
   - key1=value1:NoSchedule
   - key2=value2:NoExecute
+UpdatePolicy: automatic
 
 __EOF_KUBE_ENV
 

pkg/model/tests/data/bootstrapscript_1.txt

@@ -150,15 +150,6 @@ etcdClusters:
     version: 3.1.11
   main:
     version: 3.1.11
-fileAssets:
-- content: E1oeAbrnQsSldrIP1BpoP2SDykM= (fingerprint)
-  name: iptables-restore
-  path: /var/lib/iptables/rules-save
-hooks:
-- execContainer:
-    command:
-    - pkF7ytM3ENpYWZF36FoHJsqXP5Y= (fingerprint)
-    image: busybox
 kubeAPIServer:
   image: CoreOS
 kubeControllerManager:
@@ -179,26 +170,8 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-fileAssets:
-- content: E1oeAbrnQsSldrIP1BpoP2SDykM= (fingerprint)
-  name: iptables-restore
-  path: /var/lib/iptables/rules-save
-- content: xYagtQLwBAAi3V8Wc2Jrojz28I0= (fingerprint)
-  name: tokens
-  path: /kube/tokens.csv
-hooks:
-- before:
-  - update-engine.service
-  - kubelet.service
-  manifest: /uSPh015xYXh8dAVqXjP/ePkbrM= (fingerprint)
-  name: disable-update-engine.service
-- manifest: 8BN3anFUyDlkVF/JnaJqbwpq8ME= (fingerprint)
-  name: apply-to-all.service
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
+AuxConfigHash: F6TisBT9tDbuqBlzMVgEkEvAa7tdDahjQ9pW4X5S49M=
 InstanceGroupRole: Master
 KubeletConfig:
   kubeconfigPath: /etc/kubernetes/igconfig.txt
@@ -213,6 +186,7 @@ KubeletConfig:
   taints:
   - key1=value1:NoSchedule
   - key2=value2:NoExecute
+UpdatePolicy: automatic
 
 __EOF_KUBE_ENV
 

pkg/model/tests/data/bootstrapscript_2.txt

@@ -150,15 +150,6 @@ etcdClusters:
     version: 3.1.11
   main:
     version: 3.1.11
-fileAssets:
-- content: E1oeAbrnQsSldrIP1BpoP2SDykM= (fingerprint)
-  name: iptables-restore
-  path: /var/lib/iptables/rules-save
-hooks:
-- execContainer:
-    command:
-    - pkF7ytM3ENpYWZF36FoHJsqXP5Y= (fingerprint)
-    image: busybox
 kubeAPIServer:
   image: CoreOS
 kubeControllerManager:
@@ -179,26 +170,8 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-fileAssets:
-- content: E1oeAbrnQsSldrIP1BpoP2SDykM= (fingerprint)
-  name: iptables-restore
-  path: /var/lib/iptables/rules-save
-- content: xYagtQLwBAAi3V8Wc2Jrojz28I0= (fingerprint)
-  name: tokens
-  path: /kube/tokens.csv
-hooks:
-- before:
-  - update-engine.service
-  - kubelet.service
-  manifest: /uSPh015xYXh8dAVqXjP/ePkbrM= (fingerprint)
-  name: disable-update-engine.service
-- manifest: 8BN3anFUyDlkVF/JnaJqbwpq8ME= (fingerprint)
-  name: apply-to-all.service
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
+AuxConfigHash: F6TisBT9tDbuqBlzMVgEkEvAa7tdDahjQ9pW4X5S49M=
 InstanceGroupRole: Master
 KubeletConfig:
   kubeconfigPath: /etc/kubernetes/igconfig.txt
@@ -213,6 +186,7 @@ KubeletConfig:
   taints:
   - key1=value1:NoSchedule
   - key2=value2:NoExecute
+UpdatePolicy: automatic
 
 __EOF_KUBE_ENV
 

pkg/model/tests/data/bootstrapscript_3.txt

@@ -155,18 +155,8 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-fileAssets:
-- content: xYagtQLwBAAi3V8Wc2Jrojz28I0= (fingerprint)
-  name: tokens
-  path: /kube/tokens.csv
-hooks:
-- manifest: 8BN3anFUyDlkVF/JnaJqbwpq8ME= (fingerprint)
-  name: apply-to-all.service
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
+AuxConfigHash: /0fgYG0lsuxVGuNdtGBZA0RYxOfvLD/xOFg1eJwyfcw=
 InstanceGroupRole: Node
 KubeletConfig:
   kubeconfigPath: /etc/kubernetes/igconfig.txt
@@ -178,6 +168,7 @@ KubeletConfig:
   taints:
   - key1=value1:NoSchedule
   - key2=value2:NoExecute
+UpdatePolicy: automatic
 
 __EOF_KUBE_ENV
 

pkg/model/tests/data/bootstrapscript_4.txt

@@ -143,15 +143,6 @@ containerd:
   logLevel: info
 docker:
   logLevel: INFO
-fileAssets:
-- content: E1oeAbrnQsSldrIP1BpoP2SDykM= (fingerprint)
-  name: iptables-restore
-  path: /var/lib/iptables/rules-save
-hooks:
-- execContainer:
-    command:
-    - pkF7ytM3ENpYWZF36FoHJsqXP5Y= (fingerprint)
-    image: busybox
 kubeProxy:
   cpuLimit: 30m
   cpuRequest: 30m
@@ -164,26 +155,8 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-fileAssets:
-- content: E1oeAbrnQsSldrIP1BpoP2SDykM= (fingerprint)
-  name: iptables-restore
-  path: /var/lib/iptables/rules-save
-- content: xYagtQLwBAAi3V8Wc2Jrojz28I0= (fingerprint)
-  name: tokens
-  path: /kube/tokens.csv
-hooks:
-- before:
-  - update-engine.service
-  - kubelet.service
-  manifest: /uSPh015xYXh8dAVqXjP/ePkbrM= (fingerprint)
-  name: disable-update-engine.service
-- manifest: 8BN3anFUyDlkVF/JnaJqbwpq8ME= (fingerprint)
-  name: apply-to-all.service
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
+AuxConfigHash: F6TisBT9tDbuqBlzMVgEkEvAa7tdDahjQ9pW4X5S49M=
 InstanceGroupRole: Node
 KubeletConfig:
   kubeconfigPath: /etc/kubernetes/igconfig.txt
@@ -195,6 +168,7 @@ KubeletConfig:
   taints:
   - key1=value1:NoSchedule
   - key2=value2:NoExecute
+UpdatePolicy: automatic
 
 __EOF_KUBE_ENV
 

pkg/model/tests/data/bootstrapscript_5.txt

@@ -143,15 +143,6 @@ containerd:
   logLevel: info
 docker:
   logLevel: INFO
-fileAssets:
-- content: E1oeAbrnQsSldrIP1BpoP2SDykM= (fingerprint)
-  name: iptables-restore
-  path: /var/lib/iptables/rules-save
-hooks:
-- execContainer:
-    command:
-    - pkF7ytM3ENpYWZF36FoHJsqXP5Y= (fingerprint)
-    image: busybox
 kubeProxy:
   cpuLimit: 30m
   cpuRequest: 30m
@@ -164,26 +155,8 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-fileAssets:
-- content: E1oeAbrnQsSldrIP1BpoP2SDykM= (fingerprint)
-  name: iptables-restore
-  path: /var/lib/iptables/rules-save
-- content: xYagtQLwBAAi3V8Wc2Jrojz28I0= (fingerprint)
-  name: tokens
-  path: /kube/tokens.csv
-hooks:
-- before:
-  - update-engine.service
-  - kubelet.service
-  manifest: /uSPh015xYXh8dAVqXjP/ePkbrM= (fingerprint)
-  name: disable-update-engine.service
-- manifest: 8BN3anFUyDlkVF/JnaJqbwpq8ME= (fingerprint)
-  name: apply-to-all.service
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
+AuxConfigHash: F6TisBT9tDbuqBlzMVgEkEvAa7tdDahjQ9pW4X5S49M=
 InstanceGroupRole: Node
 KubeletConfig:
   kubeconfigPath: /etc/kubernetes/igconfig.txt
@@ -195,6 +168,7 @@ KubeletConfig:
   taints:
   - key1=value1:NoSchedule
   - key2=value2:NoExecute
+UpdatePolicy: automatic
 
 __EOF_KUBE_ENV
 

tests/integration/update_cluster/apiservernodes/cloudformation.json.extracted.yaml

@@ -171,11 +171,6 @@ Resources.AWSEC2LaunchTemplateapiserverapiserversminimalexamplecom.Properties.La
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -188,6 +183,7 @@ Resources.AWSEC2LaunchTemplateapiserverapiserversminimalexamplecom.Properties.La
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal.example.com
   ConfigBase: memfs://clusters.example.com/minimal.example.com
   InstanceGroupName: apiserver
@@ -210,6 +206,7 @@ Resources.AWSEC2LaunchTemplateapiserverapiserversminimalexamplecom.Properties.La
       node-role.kubernetes.io/api-server: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
   staticManifests:
@@ -475,11 +472,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -496,6 +488,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal.example.com
   ConfigBase: memfs://clusters.example.com/minimal.example.com
   InstanceGroupName: master-us-test-1a
@@ -523,6 +516,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -709,11 +703,6 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -726,6 +715,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal.example.com
   ConfigBase: memfs://clusters.example.com/minimal.example.com
   InstanceGroupName: nodes
@@ -748,6 +738,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/aws-lb-controller/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal.example.com
 ConfigBase: memfs://clusters.example.com/minimal.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/aws-lb-controller/data/aws_launch_template_nodes.minimal.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal.example.com
 ConfigBase: memfs://clusters.example.com/minimal.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/bastionadditional_user-data/data/aws_launch_template_master-us-test-1a.masters.bastionuserdata.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: bastionuserdata.example.com
 ConfigBase: memfs://clusters.example.com/bastionuserdata.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/bastionuserdata.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/bastionadditional_user-data/data/aws_launch_template_nodes.bastionuserdata.example.com_user_data

@@ -179,11 +179,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -196,6 +191,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: bastionuserdata.example.com
 ConfigBase: memfs://clusters.example.com/bastionuserdata.example.com
 InstanceGroupName: nodes
@@ -218,6 +214,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/bastionuserdata.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/complex/cloudformation.json.extracted.yaml

@@ -268,11 +268,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amasterscomplexexamplecom.Properties.
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -289,6 +284,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amasterscomplexexamplecom.Properties.
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: complex.example.com
   ConfigBase: memfs://clusters.example.com/complex.example.com
   InstanceGroupName: master-us-test-1a
@@ -315,6 +311,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amasterscomplexexamplecom.Properties.
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/complex.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -521,11 +518,6 @@ Resources.AWSEC2LaunchTemplatenodescomplexexamplecom.Properties.LaunchTemplateDa
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -538,6 +530,7 @@ Resources.AWSEC2LaunchTemplatenodescomplexexamplecom.Properties.LaunchTemplateDa
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: complex.example.com
   ConfigBase: memfs://clusters.example.com/complex.example.com
   InstanceGroupName: nodes
@@ -560,6 +553,7 @@ Resources.AWSEC2LaunchTemplatenodescomplexexamplecom.Properties.LaunchTemplateDa
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/complex.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/complex/data/aws_launch_template_master-us-test-1a.masters.complex.example.com_user_data

@@ -267,11 +267,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -288,6 +283,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: complex.example.com
 ConfigBase: memfs://clusters.example.com/complex.example.com
 InstanceGroupName: master-us-test-1a
@@ -314,6 +310,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/complex.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/complex/data/aws_launch_template_nodes.complex.example.com_user_data

@@ -179,11 +179,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -196,6 +191,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: complex.example.com
 ConfigBase: memfs://clusters.example.com/complex.example.com
 InstanceGroupName: nodes
@@ -218,6 +214,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/complex.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/compress/data/aws_launch_template_master-us-test-1a.masters.compress.example.com_user_data

@@ -130,9 +130,7 @@ ensure-install-dir
 
 echo "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" | base64 -d | gzip -d > conf/cluster_spec.yaml
 
-echo "H4sIAAAAAAAA/6qu5QIAAAD//wEAAP//BrCh3QMAAAA=" | base64 -d | gzip -d > conf/ig_spec.yaml
-
-echo "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" | base64 -d | gzip -d > conf/kube_env.yaml
+echo "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" | base64 -d | gzip -d > conf/kube_env.yaml
 
 download-release
 echo "== nodeup node config done =="

tests/integration/update_cluster/compress/data/aws_launch_template_nodes.compress.example.com_user_data

@@ -130,9 +130,7 @@ ensure-install-dir
 
 echo "H4sIAAAAAAAA/6RUbWvbMBD+7l9xFEq/dLIdurKZFrYlGy2sXUg+jjIU66KKyDpXL84C+/FDchInGYy9+Iut5950zz3nWlMQYzJLJasMgK/dxw/z8fx+YlWHNkIAaPhCo6hgybXDDKDhhkuce7Jc4lhz59BV4G3ArCbjuTJoZ8F41WAFe0QMRhET16nqlw6tVQIr+JGKdWidIgO3MMoS8LXVQSrjnvrjALAzRWxIyaRta9aVrLbqbO/8Z+4H+EHkX8cy2zftjpL8e5r4UT8dpQLYGr/5TYtwCycpYwTrRmfZSdR/XYFR6xXFEcDJM984j40YS0uhhdteAwCa5GfsUFegzJKy/VQrKNkVu84E1ateXW6l2nvjPNd6q6BVWODU0vdN0ogOzqMd309mFZRFwd5es4IVeVlGYxtm+BLQ+WRrMoBnct7wBgdVXbzja3eRAaiGS6xg9cYxWVumKI+VXrWpVFeyUcmKo6uP0lU0+rQYhsymoeDeB/88bEKdGt8uC7iejT0+I/IV5KkPCmJqqVMiOvK1G5qbPM773q6vWMHK4sBCDVem2h2ZpprrbLeQE1wEKZWRd9wIjXa3ggDYqToO7I5bUUGDDdkN4x1XOsbdlEXxoC4NCVy6I/h8B6r4dp8s4s3r88vE3C+uO/TI9/cjiHz2Wz/lkcW84zbXapFvic4Hh5NJABj0a7KraZLxI09/FqOigcwDdy8BLRc4CCWRWeSJzpbEAzdqic5vC6OvUzFr0KPLm63VZT8BAAD//wEAAP//hSaFDxAFAAA=" | base64 -d | gzip -d > conf/cluster_spec.yaml
 
-echo "H4sIAAAAAAAA/6qu5QIAAAD//wEAAP//BrCh3QMAAAA=" | base64 -d | gzip -d > conf/ig_spec.yaml
-
-echo "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" | base64 -d | gzip -d > conf/kube_env.yaml
+echo "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" | base64 -d | gzip -d > conf/kube_env.yaml
 
 download-release
 echo "== nodeup node config done =="

tests/integration/update_cluster/containerd-custom/cloudformation.json.extracted.yaml

@@ -271,11 +271,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amasterscontainerdexamplecom.Properti
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -292,6 +287,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amasterscontainerdexamplecom.Properti
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: containerd.example.com
   ConfigBase: memfs://clusters.example.com/containerd.example.com
   InstanceGroupName: master-us-test-1a
@@ -318,6 +314,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amasterscontainerdexamplecom.Properti
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/containerd.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -522,11 +519,6 @@ Resources.AWSEC2LaunchTemplatenodescontainerdexamplecom.Properties.LaunchTemplat
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -539,6 +531,7 @@ Resources.AWSEC2LaunchTemplatenodescontainerdexamplecom.Properties.LaunchTemplat
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: containerd.example.com
   ConfigBase: memfs://clusters.example.com/containerd.example.com
   InstanceGroupName: nodes
@@ -561,6 +554,7 @@ Resources.AWSEC2LaunchTemplatenodescontainerdexamplecom.Properties.LaunchTemplat
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/containerd.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/containerd/cloudformation.json.extracted.yaml

@@ -253,11 +253,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amasterscontainerdexamplecom.Properti
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -274,6 +269,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amasterscontainerdexamplecom.Properti
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: containerd.example.com
   ConfigBase: memfs://clusters.example.com/containerd.example.com
   InstanceGroupName: master-us-test-1a
@@ -300,6 +296,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amasterscontainerdexamplecom.Properti
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/containerd.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -486,11 +483,6 @@ Resources.AWSEC2LaunchTemplatenodescontainerdexamplecom.Properties.LaunchTemplat
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -503,6 +495,7 @@ Resources.AWSEC2LaunchTemplatenodescontainerdexamplecom.Properties.LaunchTemplat
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: containerd.example.com
   ConfigBase: memfs://clusters.example.com/containerd.example.com
   InstanceGroupName: nodes
@@ -525,6 +518,7 @@ Resources.AWSEC2LaunchTemplatenodescontainerdexamplecom.Properties.LaunchTemplat
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/containerd.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/docker-custom/cloudformation.json.extracted.yaml

@@ -255,11 +255,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersdockerexamplecom.Properties.L
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -276,6 +271,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersdockerexamplecom.Properties.L
     - 000000000000000000000000000000000000000000000000000000000000000b@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.1.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: docker.example.com
   ConfigBase: memfs://clusters.example.com/docker.example.com
   InstanceGroupName: master-us-test-1a
@@ -303,6 +299,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersdockerexamplecom.Properties.L
     podInfraContainerImage: k8s.gcr.io/pause:3.2
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/docker.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -490,11 +487,6 @@ Resources.AWSEC2LaunchTemplatenodesdockerexamplecom.Properties.LaunchTemplateDat
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -507,6 +499,7 @@ Resources.AWSEC2LaunchTemplatenodesdockerexamplecom.Properties.LaunchTemplateDat
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - 000000000000000000000000000000000000000000000000000000000000000b@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.1.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: docker.example.com
   ConfigBase: memfs://clusters.example.com/docker.example.com
   InstanceGroupName: nodes
@@ -530,6 +523,7 @@ Resources.AWSEC2LaunchTemplatenodesdockerexamplecom.Properties.LaunchTemplateDat
     nonMasqueradeCIDR: 100.64.0.0/10
     podInfraContainerImage: k8s.gcr.io/pause:3.2
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/docker.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/existing_iam/data/aws_launch_template_master-us-test-1a.masters.existing-iam.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: existing-iam.example.com
 ConfigBase: memfs://tests/existing-iam.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/existing-iam.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/existing_iam/data/aws_launch_template_master-us-test-1b.masters.existing-iam.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: existing-iam.example.com
 ConfigBase: memfs://tests/existing-iam.example.com
 InstanceGroupName: master-us-test-1b
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/existing-iam.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/existing_iam/data/aws_launch_template_master-us-test-1c.masters.existing-iam.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: existing-iam.example.com
 ConfigBase: memfs://tests/existing-iam.example.com
 InstanceGroupName: master-us-test-1c
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/existing-iam.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/existing_iam/data/aws_launch_template_nodes.existing-iam.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: existing-iam.example.com
 ConfigBase: memfs://tests/existing-iam.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://tests/existing-iam.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/existing_iam_cloudformation/cloudformation.json.extracted.yaml

@@ -253,11 +253,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -274,6 +269,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal.example.com
   ConfigBase: memfs://clusters.example.com/minimal.example.com
   InstanceGroupName: master-us-test-1a
@@ -300,6 +296,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -486,11 +483,6 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -503,6 +495,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal.example.com
   ConfigBase: memfs://clusters.example.com/minimal.example.com
   InstanceGroupName: nodes
@@ -525,6 +518,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/existing_sg/data/aws_launch_template_master-us-test-1a.masters.existingsg.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: existingsg.example.com
 ConfigBase: memfs://clusters.example.com/existingsg.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/existingsg.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/existing_sg/data/aws_launch_template_master-us-test-1b.masters.existingsg.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: existingsg.example.com
 ConfigBase: memfs://clusters.example.com/existingsg.example.com
 InstanceGroupName: master-us-test-1b
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/existingsg.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/existing_sg/data/aws_launch_template_master-us-test-1c.masters.existingsg.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: existingsg.example.com
 ConfigBase: memfs://clusters.example.com/existingsg.example.com
 InstanceGroupName: master-us-test-1c
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/existingsg.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/existing_sg/data/aws_launch_template_nodes.existingsg.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: existingsg.example.com
 ConfigBase: memfs://clusters.example.com/existingsg.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/existingsg.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/externallb/cloudformation.json.extracted.yaml

@@ -253,11 +253,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersexternallbexamplecom.Properti
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -274,6 +269,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersexternallbexamplecom.Properti
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: externallb.example.com
   ConfigBase: memfs://clusters.example.com/externallb.example.com
   InstanceGroupName: master-us-test-1a
@@ -300,6 +296,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersexternallbexamplecom.Properti
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/externallb.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -486,11 +483,6 @@ Resources.AWSEC2LaunchTemplatenodesexternallbexamplecom.Properties.LaunchTemplat
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -503,6 +495,7 @@ Resources.AWSEC2LaunchTemplatenodesexternallbexamplecom.Properties.LaunchTemplat
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: externallb.example.com
   ConfigBase: memfs://clusters.example.com/externallb.example.com
   InstanceGroupName: nodes
@@ -525,6 +518,7 @@ Resources.AWSEC2LaunchTemplatenodesexternallbexamplecom.Properties.LaunchTemplat
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/externallb.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/externallb/data/aws_launch_template_master-us-test-1a.masters.externallb.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: externallb.example.com
 ConfigBase: memfs://clusters.example.com/externallb.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/externallb.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/externallb/data/aws_launch_template_nodes.externallb.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: externallb.example.com
 ConfigBase: memfs://clusters.example.com/externallb.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/externallb.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/externalpolicies/data/aws_launch_template_master-us-test-1a.masters.externalpolicies.example.com_user_data

@@ -254,11 +254,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -275,6 +270,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: externalpolicies.example.com
 ConfigBase: memfs://clusters.example.com/externalpolicies.example.com
 InstanceGroupName: master-us-test-1a
@@ -301,6 +297,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/externalpolicies.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/externalpolicies/data/aws_launch_template_nodes.externalpolicies.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: externalpolicies.example.com
 ConfigBase: memfs://clusters.example.com/externalpolicies.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/externalpolicies.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/ha/data/aws_launch_template_master-us-test-1a.masters.ha.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: ha.example.com
 ConfigBase: memfs://tests/ha.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/ha.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/ha/data/aws_launch_template_master-us-test-1b.masters.ha.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: ha.example.com
 ConfigBase: memfs://tests/ha.example.com
 InstanceGroupName: master-us-test-1b
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/ha.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/ha/data/aws_launch_template_master-us-test-1c.masters.ha.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: ha.example.com
 ConfigBase: memfs://tests/ha.example.com
 InstanceGroupName: master-us-test-1c
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/ha.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/ha/data/aws_launch_template_nodes.ha.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: ha.example.com
 ConfigBase: memfs://tests/ha.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://tests/ha.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/ha_gce/data/google_compute_instance_template_master-us-test1-a-ha-gce-example-com_metadata_startup-script

@@ -253,11 +253,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -276,6 +271,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: ha-gce.example.com
 ConfigBase: memfs://tests/ha-gce.example.com
 InstanceGroupName: master-us-test1-a
@@ -303,6 +299,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/ha-gce.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/ha_gce/data/google_compute_instance_template_master-us-test1-b-ha-gce-example-com_metadata_startup-script

@@ -253,11 +253,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -276,6 +271,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: ha-gce.example.com
 ConfigBase: memfs://tests/ha-gce.example.com
 InstanceGroupName: master-us-test1-b
@@ -303,6 +299,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/ha-gce.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/ha_gce/data/google_compute_instance_template_master-us-test1-c-ha-gce-example-com_metadata_startup-script

@@ -253,11 +253,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -276,6 +271,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: ha-gce.example.com
 ConfigBase: memfs://tests/ha-gce.example.com
 InstanceGroupName: master-us-test1-c
@@ -303,6 +299,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/ha-gce.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/ha_gce/data/google_compute_instance_template_nodes-ha-gce-example-com_metadata_startup-script

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -189,6 +184,7 @@ Assets:
   - 50c7e22cfbc3dbb4dde80840645c1482259ab25a13cfe821c7380446e6997e54@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/mounter
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: ha-gce.example.com
 ConfigBase: memfs://tests/ha-gce.example.com
 InstanceGroupName: nodes
@@ -212,6 +208,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://tests/ha-gce.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/irsa/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal.example.com
 ConfigBase: memfs://clusters.example.com/minimal.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/irsa/data/aws_launch_template_nodes.minimal.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - 25e4465870c99167e6c466623ed8f05a1d20fbcb48cab6688109389b52d87623@https://storage.googleapis.com/kubernetes-release/release/v1.20.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal.example.com
 ConfigBase: memfs://clusters.example.com/minimal.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal-etcd/cloudformation.json.extracted.yaml

@@ -269,11 +269,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimaletcdexamplecom.Propert
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -290,6 +285,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimaletcdexamplecom.Propert
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal-etcd.example.com
   ConfigBase: memfs://clusters.example.com/minimal-etcd.example.com
   InstanceGroupName: master-us-test-1a
@@ -316,6 +312,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimaletcdexamplecom.Propert
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal-etcd.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -502,11 +499,6 @@ Resources.AWSEC2LaunchTemplatenodesminimaletcdexamplecom.Properties.LaunchTempla
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -519,6 +511,7 @@ Resources.AWSEC2LaunchTemplatenodesminimaletcdexamplecom.Properties.LaunchTempla
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal-etcd.example.com
   ConfigBase: memfs://clusters.example.com/minimal-etcd.example.com
   InstanceGroupName: nodes
@@ -541,6 +534,7 @@ Resources.AWSEC2LaunchTemplatenodesminimaletcdexamplecom.Properties.LaunchTempla
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal-etcd.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal-gp3/cloudformation.json.extracted.yaml

@@ -259,11 +259,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -280,6 +275,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal.example.com
   ConfigBase: memfs://clusters.example.com/minimal.example.com
   InstanceGroupName: master-us-test-1a
@@ -306,6 +302,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -492,11 +489,6 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -509,6 +501,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal.example.com
   ConfigBase: memfs://clusters.example.com/minimal.example.com
   InstanceGroupName: nodes
@@ -531,6 +524,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal-gp3/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data

@@ -258,11 +258,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -279,6 +274,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal.example.com
 ConfigBase: memfs://clusters.example.com/minimal.example.com
 InstanceGroupName: master-us-test-1a
@@ -305,6 +301,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/minimal-gp3/data/aws_launch_template_nodes.minimal.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal.example.com
 ConfigBase: memfs://clusters.example.com/minimal.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal-ipv6/cloudformation.json.extracted.yaml

@@ -253,11 +253,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalipv6examplecom.Propert
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -274,6 +269,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalipv6examplecom.Propert
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal-ipv6.example.com
   ConfigBase: memfs://clusters.example.com/minimal-ipv6.example.com
   InstanceGroupName: master-us-test-1a
@@ -300,6 +296,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalipv6examplecom.Propert
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal-ipv6.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -486,11 +483,6 @@ Resources.AWSEC2LaunchTemplatenodesminimalipv6examplecom.Properties.LaunchTempla
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -503,6 +495,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalipv6examplecom.Properties.LaunchTempla
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal-ipv6.example.com
   ConfigBase: memfs://clusters.example.com/minimal-ipv6.example.com
   InstanceGroupName: nodes
@@ -525,6 +518,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalipv6examplecom.Properties.LaunchTempla
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal-ipv6.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal-ipv6/data/aws_launch_template_master-us-test-1a.masters.minimal-ipv6.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal-ipv6.example.com
 ConfigBase: memfs://clusters.example.com/minimal-ipv6.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal-ipv6.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/minimal-ipv6/data/aws_launch_template_nodes.minimal-ipv6.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal-ipv6.example.com
 ConfigBase: memfs://clusters.example.com/minimal-ipv6.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal-ipv6.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal-json/data/aws_launch_template_master-us-test-1a.masters.minimal-json.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal-json.example.com
 ConfigBase: memfs://clusters.example.com/minimal-json.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal-json.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/minimal-json/data/aws_launch_template_nodes.minimal-json.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal-json.example.com
 ConfigBase: memfs://clusters.example.com/minimal-json.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal-json.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal/cloudformation.json.extracted.yaml

@@ -253,11 +253,6 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -274,6 +269,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
     - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
     - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal.example.com
   ConfigBase: memfs://clusters.example.com/minimal.example.com
   InstanceGroupName: master-us-test-1a
@@ -300,6 +296,7 @@ Resources.AWSEC2LaunchTemplatemasterustest1amastersminimalexamplecom.Properties.
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
     registerSchedulable: false
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
   etcdManifests:
@@ -486,11 +483,6 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
 
   __EOF_CLUSTER_SPEC
 
-  cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-  {}
-
-  __EOF_IG_SPEC
-
   cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
   Assets:
     amd64:
@@ -503,6 +495,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
     - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
     - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
     - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+  AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
   ClusterName: minimal.example.com
   ConfigBase: memfs://clusters.example.com/minimal.example.com
   InstanceGroupName: nodes
@@ -525,6 +518,7 @@ Resources.AWSEC2LaunchTemplatenodesminimalexamplecom.Properties.LaunchTemplateDa
       node-role.kubernetes.io/node: ""
     nonMasqueradeCIDR: 100.64.0.0/10
     podManifestPath: /etc/kubernetes/manifests
+  UpdatePolicy: automatic
   channels:
   - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal/data/aws_launch_template_master-us-test-1a.masters.minimal.example.com_user_data

@@ -252,11 +252,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -273,6 +268,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal.example.com
 ConfigBase: memfs://clusters.example.com/minimal.example.com
 InstanceGroupName: master-us-test-1a
@@ -299,6 +295,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/minimal/data/aws_launch_template_nodes.minimal.example.com_user_data

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -187,6 +182,7 @@ Assets:
   - a4dd7100f547a40d3e2f83850d0bab75c6ea5eb553f0a80adcf73155bef1fd0d@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/kubectl
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal.example.com
 ConfigBase: memfs://clusters.example.com/minimal.example.com
 InstanceGroupName: nodes
@@ -209,6 +205,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://clusters.example.com/minimal.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal_gce/data/google_compute_instance_template_master-us-test1-a-minimal-gce-example-com_metadata_startup-script

@@ -253,11 +253,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -276,6 +271,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal-gce.example.com
 ConfigBase: memfs://tests/minimal-gce.example.com
 InstanceGroupName: master-us-test1-a
@@ -303,6 +299,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/minimal-gce.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/minimal_gce/data/google_compute_instance_template_nodes-minimal-gce-example-com_metadata_startup-script

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -189,6 +184,7 @@ Assets:
   - 50c7e22cfbc3dbb4dde80840645c1482259ab25a13cfe821c7380446e6997e54@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/mounter
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal-gce.example.com
 ConfigBase: memfs://tests/minimal-gce.example.com
 InstanceGroupName: nodes
@@ -212,6 +208,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://tests/minimal-gce.example.com/addons/bootstrap-channel.yaml
 

tests/integration/update_cluster/minimal_gce_private/data/google_compute_instance_template_master-us-test1-a-minimal-gce-private-example-com_metadata_startup-script

@@ -253,11 +253,6 @@ masterKubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -276,6 +271,7 @@ Assets:
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
   - 2f599c3d54f4c4bdbcc95aaf0c7b513a845d8f9503ec5b34c9f86aa1bc34fc0c@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/protokube,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/protokube-linux-arm64
   - 9d842e3636a95de2315cdea2be7a282355aac0658ef0b86d5dc2449066538f13@https://artifacts.k8s.io/binaries/kops/1.21.0-alpha.1/linux/arm64/channels,https://github.com/kubernetes/kops/releases/download/v1.21.0-alpha.1/channels-linux-arm64
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal-gce-private.example.com
 ConfigBase: memfs://tests/minimal-gce-private.example.com
 InstanceGroupName: master-us-test1-a
@@ -303,6 +299,7 @@ KubeletConfig:
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
   registerSchedulable: false
+UpdatePolicy: automatic
 channels:
 - memfs://tests/minimal-gce-private.example.com/addons/bootstrap-channel.yaml
 etcdManifests:

tests/integration/update_cluster/minimal_gce_private/data/google_compute_instance_template_nodes-minimal-gce-private-example-com_metadata_startup-script

@@ -170,11 +170,6 @@ kubelet:
 
 __EOF_CLUSTER_SPEC
 
-cat > conf/ig_spec.yaml << '__EOF_IG_SPEC'
-{}
-
-__EOF_IG_SPEC
-
 cat > conf/kube_env.yaml << '__EOF_KUBE_ENV'
 Assets:
   amd64:
@@ -189,6 +184,7 @@ Assets:
   - 50c7e22cfbc3dbb4dde80840645c1482259ab25a13cfe821c7380446e6997e54@https://storage.googleapis.com/kubernetes-release/release/v1.21.0/bin/linux/arm64/mounter
   - ae13d7b5c05bd180ea9b5b68f44bdaa7bfb41034a2ef1d68fd8e1259797d642f@https://storage.googleapis.com/k8s-artifacts-cni/release/v0.8.7/cni-plugins-linux-arm64-v0.8.7.tgz
   - be8c9a5a06ebec8fb1d36e867cd00fb5777746a9812a0cae2966778ff899c525@https://download.docker.com/linux/static/stable/aarch64/docker-20.10.7.tgz
+AuxConfigHash: /O5IS/dGo83lv2DbWn4k91OYfuOqtO79vjf5pD1DQlI=
 ClusterName: minimal-gce-private.example.com
 ConfigBase: memfs://tests/minimal-gce-private.example.com
 InstanceGroupName: nodes
@@ -212,6 +208,7 @@ KubeletConfig:
     node-role.kubernetes.io/node: ""
   nonMasqueradeCIDR: 100.64.0.0/10
   podManifestPath: /etc/kubernetes/manifests
+UpdatePolicy: automatic
 channels:
 - memfs://tests/minimal-gce-private.example.com/addons/bootstrap-channel.yaml