github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-07-26 21:17:23 +00:00
Code Issues Projects Releases Wiki Activity

kubeadm: delete boostrap-kubelet.conf after TLS bootstrap on init

Browse Source
This commit is contained in:
Lubomir I. Ivanov 2019-09-30 23:52:01 +03:00
parent 2dedfddf81
commit 71cb27836d
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cmd/kubeadm/app/cmd/phases/init/waitcontrolplane.go
View File

@ -19,6 +19,7 @@ package phases
import ( import (
"fmt" "fmt"
"io" "io"
"os"
"path/filepath" "path/filepath"
"text/template" "text/template"
"time" "time"
@ -100,6 +101,13 @@ func runWaitControlPlanePhase(c workflow.RunData) error {
return errors.New("couldn't initialize a Kubernetes cluster") return errors.New("couldn't initialize a Kubernetes cluster")
} }
// Deletes the kubelet boostrap kubeconfig file, so the credential used for TLS bootstrap is removed from disk
// This is done only on success.
bootstrapKubeConfigFile := kubeadmconstants.GetBootstrapKubeletKubeConfigPath()
if err := os.Remove(bootstrapKubeConfigFile); err != nil {
klog.Warningf("[wait-control-plane] could not delete the file %q: %v", bootstrapKubeConfigFile, err)
}
return nil return nil
} }