From e405d24f8c8cf3cdbb28ba253f496541c070a344 Mon Sep 17 00:00:00 2001
From: John Gardiner Myers <jgmyers@proofpoint.com>
Date: Fri, 14 Aug 2020 11:57:56 -0700
Subject: [PATCH] Default kubelet authenticationTokenWebhook to true for k8s
 1.19+

---
 nodeup/pkg/model/kubelet.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nodeup/pkg/model/kubelet.go b/nodeup/pkg/model/kubelet.go
index d897f1b5ea..bf6d01788a 100644
--- a/nodeup/pkg/model/kubelet.go
+++ b/nodeup/pkg/model/kubelet.go
@@ -517,6 +517,10 @@ func (b *KubeletBuilder) buildKubeletConfigSpec() (*kops.KubeletConfigSpec, erro
 		c.AuthorizationMode = "Webhook"
 	}
 
+	if c.AuthenticationTokenWebhook == nil && b.Cluster.IsKubernetesGTE("1.19") {
+		c.AuthenticationTokenWebhook = fi.Bool(true)
+	}
+
 	return &c, nil
 }