Skip to content
This repository has been archived by the owner on Jun 29, 2022. It is now read-only.

Cluster with TLS bootstrap disabled fails to start self-hosted Kubelet #1525

Open
surajssd opened this issue Jul 9, 2021 · 1 comment
Open
Labels
area/kubernetes Core Kubernetes stuff area/updates Items related to updates bug Something isn't working platform/aws AWS-related platform/bare-metal Bare-metal-related platform/packet Packet-related

Comments

@surajssd
Copy link
Member

surajssd commented Jul 9, 2021

The self-hosted kubelet has a dependency on a file to exist at /var/lib/kubelet/kubeconfig. This was added during the cert rotation feature.

On a cluster that has TLS bootstrap disabled there is no file at /var/lib/kubelet/kubeconfig so the self-hosted kubelet fails to come up. The current workaround is to create an empty file at /var/lib/kubelet/kubeconfig. The ideal solution is that we create a empty file by default if enable_tls_bootstrap is set to false.

And the best solution is to deprecate enable_tls_bootstrap with an upgrade paths that have disabled enable_tls_bootstrap.

@surajssd surajssd added bug Something isn't working area/kubernetes Core Kubernetes stuff area/updates Items related to updates platform/aws AWS-related platform/packet Packet-related platform/bare-metal Bare-metal-related proposed/next-sprint Issues proposed for next sprint labels Jul 9, 2021
@surajssd
Copy link
Member Author

Related: #1468

@iaguis iaguis removed the proposed/next-sprint Issues proposed for next sprint label Aug 13, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
area/kubernetes Core Kubernetes stuff area/updates Items related to updates bug Something isn't working platform/aws AWS-related platform/bare-metal Bare-metal-related platform/packet Packet-related
Projects
None yet
Development

No branches or pull requests

2 participants