From 89b1accf4d22f558ff284c2d8ede47a2e4390541 Mon Sep 17 00:00:00 2001 From: Davanum Srinivas Date: Mon, 28 Mar 2022 18:55:06 -0400 Subject: [PATCH] switch owner for CERT_DIR Signed-off-by: Davanum Srinivas --- hack/local-up-cluster.sh | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/hack/local-up-cluster.sh b/hack/local-up-cluster.sh index c8a1da630de..25312e6ffcd 100755 --- a/hack/local-up-cluster.sh +++ b/hack/local-up-cluster.sh @@ -613,7 +613,6 @@ EOF if [[ -z "${AUTH_ARGS}" ]]; then AUTH_ARGS="--client-key=${CERT_DIR}/client-admin.key --client-certificate=${CERT_DIR}/client-admin.crt" fi - set -x # Grant apiserver permission to speak to the kubelet ${KUBECTL} --kubeconfig "${CERT_DIR}/admin.kubeconfig" create clusterrolebinding kube-apiserver-kubelet-admin --clusterrole=system:kubelet-api-admin --user=kube-apiserver @@ -621,9 +620,8 @@ EOF ${KUBECTL} --kubeconfig "${CERT_DIR}/admin.kubeconfig" create clusterrolebinding kubelet-csr --clusterrole=system:certificates.k8s.io:certificatesigningrequests:selfnodeclient --group=system:nodes ${CONTROLPLANE_SUDO} cp "${CERT_DIR}/admin.kubeconfig" "${CERT_DIR}/admin-kube-aggregator.kubeconfig" - ${CONTROLPLANE_SUDO} chown "$(whoami)" "${CERT_DIR}/admin-kube-aggregator.kubeconfig" + ${CONTROLPLANE_SUDO} chown -R "$(whoami)" "${CERT_DIR}" ${KUBECTL} config set-cluster local-up-cluster --kubeconfig="${CERT_DIR}/admin-kube-aggregator.kubeconfig" --server="https://${API_HOST_IP}:31090" - set +x echo "use 'kubectl --kubeconfig=${CERT_DIR}/admin-kube-aggregator.kubeconfig' to use the aggregated API server" }