1
0
mirror of https://github.com/rancher/rke.git synced 2025-08-19 15:27:35 +00:00

set EncryptionConfig on DesiredState when using CustomCerts

This commit is contained in:
Faisal Chaudhry 2021-07-02 10:01:32 -04:00
parent 0b27ba619f
commit 441d06df32

View File

@ -182,6 +182,11 @@ func RebuildState(ctx context.Context, kubeCluster *Cluster, oldState *FullState
} }
newState.DesiredState.CertificatesBundle = certBundle newState.DesiredState.CertificatesBundle = certBundle
newState.CurrentState = oldState.CurrentState newState.CurrentState = oldState.CurrentState
err = updateEncryptionConfig(kubeCluster, oldState, newState)
if err != nil {
return nil, err
}
return newState, nil return newState, nil
} }
@ -341,7 +346,12 @@ func rebuildExistingState(ctx context.Context, kubeCluster *Cluster, oldState, n
return err return err
} }
newState.DesiredState.CertificatesBundle = pkiCertBundle newState.DesiredState.CertificatesBundle = pkiCertBundle
if isEncryptionEnabled(rkeConfig) { err := updateEncryptionConfig(kubeCluster, oldState, newState)
return err
}
func updateEncryptionConfig(kubeCluster *Cluster, oldState *FullState, newState *FullState) error {
if isEncryptionEnabled(&kubeCluster.RancherKubernetesEngineConfig) {
if oldState.DesiredState.EncryptionConfig != "" { if oldState.DesiredState.EncryptionConfig != "" {
newState.DesiredState.EncryptionConfig = oldState.DesiredState.EncryptionConfig newState.DesiredState.EncryptionConfig = oldState.DesiredState.EncryptionConfig
} else { } else {
@ -351,6 +361,5 @@ func rebuildExistingState(ctx context.Context, kubeCluster *Cluster, oldState, n
} }
} }
} }
return nil return nil
} }