• Kubernetes Submit Queue's avatar
    Merge pull request #30798 from smarterclayton/fix_kubeconfig · ec4d645d
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue
    
    Allow a flag that forces kubelet to have a valid kubeconfig
    
    `--require-kubeconfig` forces the kubelet to use the kubeconfig for all
    APIserver communication, and exit cleanly.  Allows cluster lifecycle to loop waiting for config to be available.
    
    Fixes #30515
    
    A follow up PR will handle the issue discovered where the DefaultCluster rules applied to kubeconfig allow a malicious party who can bind to localhost:8080 to take advantage of an admin misconfiguration.
    
    @lukemarsden @mikedanese
    
    
    
    ```release-note
    The Kubelet now supports the `--force-kubeconfig` option which reads all client config from the provided `--kubeconfig` file and will cause the Kubelet to exit with error code 1 on error.  It also forces the Kubelet to use the server URL from the kubeconfig file rather than the  `--api-servers` flag.  Without this flag set, a failure to read the kubeconfig file would only result in a warning message.
    
    In a future release, the value of this flag will be defaulted to `true`.
    ```
    ec4d645d
Name
Last commit
Last update
.github Loading commit data...
Godeps Loading commit data...
api/swagger-spec Loading commit data...
build Loading commit data...
cluster Loading commit data...
cmd Loading commit data...
contrib Loading commit data...
docs Loading commit data...
examples Loading commit data...
federation Loading commit data...
hack Loading commit data...
hooks Loading commit data...
logo Loading commit data...
pkg Loading commit data...
plugin Loading commit data...
release Loading commit data...
staging/src/k8s.io/client-go Loading commit data...
test Loading commit data...
third_party Loading commit data...
vendor Loading commit data...
www Loading commit data...
.generated_docs Loading commit data...
.gitignore Loading commit data...
CHANGELOG.md Loading commit data...
CONTRIB.md Loading commit data...
CONTRIBUTING.md Loading commit data...
DESIGN.md Loading commit data...
LICENSE Loading commit data...
Makefile Loading commit data...
Makefile.generated_files Loading commit data...
OWNERS Loading commit data...
README.md Loading commit data...
Vagrantfile Loading commit data...
code-of-conduct.md Loading commit data...
labels.yaml Loading commit data...