Brad Davidson ade6203aad Add support for kubeadm token and client certificate auth ... Allow bootstrapping with kubeadm bootstrap token strings or existing Kubelet certs. This allows agents to join the cluster using kubeadm bootstrap tokens, as created with the `k3s token create` command. When the token expires or is deleted, agents can successfully restart by authenticating with their kubelet certificate via node authentication. If the token is gone and the node is deleted from the cluster, node auth will fail and they will be prevented from rejoining the cluster until provided with a valid token. Servers still must be bootstrapped with the static cluster token, as they will need to know it to decrypt the bootstrap data. Signed-off-by: Brad Davidson <brad.davidson@rancher.com> (cherry picked from commit 992e64993d)		2023-02-10 09:33:55 -08:00
..
secrets_encrypt.go	Add support for kubeadm token and client certificate auth	2023-02-10 09:33:55 -08:00