From d6f1dff1cefd6dd17991903c66e2f108ec3f80d3 Mon Sep 17 00:00:00 2001 From: "Lubomir I. Ivanov" Date: Thu, 30 May 2019 22:35:41 +0300 Subject: [PATCH] kubeadm: disallow the mixture of --config and --certificate-key Similar to --token, do not allow the mixture of --config and --certificate-key. If the user has fed a config, it is expected that the certificate key should also be provided in the config and not from the command line. --- cmd/kubeadm/app/apis/kubeadm/validation/validation.go | 1 - 1 file changed, 1 deletion(-) diff --git a/cmd/kubeadm/app/apis/kubeadm/validation/validation.go b/cmd/kubeadm/app/apis/kubeadm/validation/validation.go index f1a30a21086..56efee812d8 100644 --- a/cmd/kubeadm/app/apis/kubeadm/validation/validation.go +++ b/cmd/kubeadm/app/apis/kubeadm/validation/validation.go @@ -433,7 +433,6 @@ func isAllowedFlag(flagName string) bool { kubeadmcmdoptions.KubeconfigDir, kubeadmcmdoptions.UploadCerts, kubeadmcmdoptions.ExperimentalUploadCerts, - kubeadmcmdoptions.CertificateKey, "print-join-command", "rootfs", "v") if knownFlags.Has(flagName) { return true