feat: disable kubelet serving certificate rotation on windows via nodepool tags (#4971)

Co-authored-by: Cameron Meissner <cameissner@microsoft.com>
This commit is contained in:
Cameron Meissner 2024-09-19 09:08:09 -07:00 коммит произвёл GitHub
Родитель cfef78e2c5
Коммит f2afece231
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: B5690EEEBB952194
16 изменённых файлов: 48 добавлений и 32 удалений

Просмотреть файл

@ -294,8 +294,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp

Просмотреть файл

@ -290,8 +290,9 @@ try
Get-ProvisioningScripts
Get-LogCollectionScripts
# TODO(cameissner): uncomment once next CSE package is rolled out to all regions
# Disable-KubeletServingCertificateRotationForTags
# NOTE: this function MUST be called before Write-KubeClusterConfig since it has the potential
# to mutate both kubelet config args and kubelet node labels.
Disable-KubeletServingCertificateRotationForTags
Write-KubeClusterConfig -MasterIP $MasterIP -KubeDnsServiceIp $KubeDnsServiceIp