Skip to content

K
k3s
Commit d8bf802b authored by Dr. Stefan Schimanski's avatar Dr. Stefan Schimanski
Browse files
Options

kube-apiserver: create always configmap/extension-apiserver-authentication

Other components read the configmap and fail if it does not exist. Possibly not every cluster has a client-ca or a request-header-ca.
parent 4c5e6156
Hide whitespace changes
Inline Side-by-side
Showing with 0 additions and 6 deletions
pkg/master/client_ca_hook.go
View file @ d8bf802b
...@@ -41,11 +41,6 @@ type ClientCARegistrationHook struct { ...@@ -41,11 +41,6 @@ type ClientCARegistrationHook struct {
} }
func (h ClientCARegistrationHook) PostStartHook(hookContext genericapiserver.PostStartHookContext) error { func (h ClientCARegistrationHook) PostStartHook(hookContext genericapiserver.PostStartHookContext) error {
// no work to do
if len(h.ClientCA) == 0 && len(h.RequestHeaderCA) == 0 {
return nil
}
// initializing CAs is important so that aggregated API servers can come up with "normal" config. // initializing CAs is important so that aggregated API servers can come up with "normal" config.
// We've seen lagging etcd before, so we want to retry this a few times before we decide to crashloop // We've seen lagging etcd before, so we want to retry this a few times before we decide to crashloop
// the API server on it. // the API server on it.
...@@ -68,7 +63,6 @@ func (h ClientCARegistrationHook) PostStartHook(hookContext genericapiserver.Pos ...@@ -68,7 +63,6 @@ func (h ClientCARegistrationHook) PostStartHook(hookContext genericapiserver.Pos
} }
return nil return nil
} }
// tryToWriteClientCAs is here for unit testing with a fake client. This is a wait.ConditionFunc so the bool // tryToWriteClientCAs is here for unit testing with a fake client. This is a wait.ConditionFunc so the bool
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment