Andrey Smirnov 41430e72d2 fix: handle case when kubelet serving certificates are issued ...

If kubelet is configured to issue certificates from the control plane,
`/var/lib/kubelet/pki/kubelet.crt` file is never created, and cluster CA
canv be used to verify the TLS connection.

Use k8s `RESTClient` instead of a custom client, this also results in
much more descriptive error messages if API call fails.

Fix a problem in apid on worker nodes with issued serving certificates:
`/var/lib/kubelet/pki` doesn't exist by the time `apid` starts.

First write static pods, then try to build kubelet client: for issued
serving kubelet certificates, control plane should be up first.

Signed-off-by: Andrey Smirnov <smirnov.andrey@gmail.com>

2021-02-19 13:21:26 -08:00

..

kubelet

fix: handle case when kubelet serving certificates are issued

2021-02-19 13:21:26 -08:00

kubernetes.go

fix: move versions to annotations in control plane static pods

2021-02-16 14:57:17 -08:00