• Kubernetes Submit Queue's avatar
    Merge pull request #30798 from smarterclayton/fix_kubeconfig · ec4d645d
    Kubernetes Submit Queue authored
    Automatic merge from submit-queue
    
    Allow a flag that forces kubelet to have a valid kubeconfig
    
    `--require-kubeconfig` forces the kubelet to use the kubeconfig for all
    APIserver communication, and exit cleanly.  Allows cluster lifecycle to loop waiting for config to be available.
    
    Fixes #30515
    
    A follow up PR will handle the issue discovered where the DefaultCluster rules applied to kubeconfig allow a malicious party who can bind to localhost:8080 to take advantage of an admin misconfiguration.
    
    @lukemarsden @mikedanese
    
    
    
    ```release-note
    The Kubelet now supports the `--force-kubeconfig` option which reads all client config from the provided `--kubeconfig` file and will cause the Kubelet to exit with error code 1 on error.  It also forces the Kubelet to use the server URL from the kubeconfig file rather than the  `--api-servers` flag.  Without this flag set, a failure to read the kubeconfig file would only result in a warning message.
    
    In a future release, the value of this flag will be defaulted to `true`.
    ```
    ec4d645d
Name
Last commit
Last update
..
gendocs Loading commit data...
genkubedocs Loading commit data...
genman Loading commit data...
genswaggertypedocs Loading commit data...
genutils Loading commit data...
genyaml Loading commit data...
hyperkube Loading commit data...
kube-apiserver Loading commit data...
kube-controller-manager Loading commit data...
kube-dns Loading commit data...
kube-proxy Loading commit data...
kubectl Loading commit data...
kubelet Loading commit data...
kubemark Loading commit data...
kubernetes-discovery Loading commit data...
libs/go2idl Loading commit data...
linkcheck Loading commit data...
mungedocs Loading commit data...
OWNERS Loading commit data...