• k8s-merge-robot's avatar
    Merge pull request #23550 from luxas/fix_hyperkube_certs · 1521aa8a
    k8s-merge-robot authored
    Automatic merge from submit-queue
    
    Fix so setup-files don't recreate/invalidate certificates that already exist
    
    Fixes: #23197 and a lot of other DNS and dashboard issues
    
    This is quite critical for `docker`-based users and should be considered as a **cherrypick-candidate** as it makes a lot of people wonder why Dashboard and/or DNS doesn't work. Example: https://github.com/kubernetes/dashboard/issues/374
    
    Earlier when you shut your `docker.md` cluster down and started it again, all ServiceAccounts became invalidated by `setup-files` that happily ran once again and replaced all files. That made `apiserver` and `controller-manager` pick up the new certs (or there was a race condition, they _could_ have picked up the old certs too, but that's unlikely) and the old certs were put into `/var/run/secrets` because the ServiceAccount's Secrets were stored in etcd, which `setup-files` didn't touch.
    
    @fgrzadkowski @huggsboson @thockin @mikedanese @vishh @pwittrock @eparis @bgrant0607 
    1521aa8a
Name
Last commit
Last update
..
addons Loading commit data...
aws Loading commit data...
azure Loading commit data...
centos Loading commit data...
cloudimages Loading commit data...
gce Loading commit data...
gke Loading commit data...
images Loading commit data...
juju Loading commit data...
kubemark Loading commit data...
lib Loading commit data...
libvirt-coreos Loading commit data...
mesos/docker Loading commit data...
ovirt Loading commit data...
rackspace Loading commit data...
saltbase Loading commit data...
ubuntu Loading commit data...
vagrant Loading commit data...
vsphere Loading commit data...
OWNERS Loading commit data...
README.md Loading commit data...
common.sh Loading commit data...
get-kube-local.sh Loading commit data...
get-kube.sh Loading commit data...
kube-down.sh Loading commit data...
kube-push.sh Loading commit data...
kube-up.sh Loading commit data...
kube-util.sh Loading commit data...
kubectl.sh Loading commit data...
log-dump.sh Loading commit data...
options.md Loading commit data...
test-e2e.sh Loading commit data...
test-network.sh Loading commit data...
test-smoke.sh Loading commit data...
update-storage-objects.sh Loading commit data...
validate-cluster.sh Loading commit data...