k3s/pkg/agent/config
Brad Davidson 73460e28bf Add support for kubeadm token and client certificate auth
Allow bootstrapping with kubeadm bootstrap token strings or existing
Kubelet certs. This allows agents to join the cluster using kubeadm
bootstrap tokens, as created with the `k3s token create` command.

When the token expires or is deleted, agents can successfully restart by
authenticating with their kubelet certificate via node authentication.
If the token is gone and the node is deleted from the cluster, node auth
will fail and they will be prevented from rejoining the cluster until
provided with a valid token.

Servers still must be bootstrapped with the static cluster token, as
they will need to know it to decrypt the bootstrap data.

Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit 992e64993d)
2023-02-10 09:34:10 -08:00
..
config.go Add support for kubeadm token and client certificate auth 2023-02-10 09:34:10 -08:00
config_linux.go Add cri-dockerd support as backend for --docker flag 2022-08-05 02:39:25 -07:00
config_windows.go Add cri-dockerd support as backend for --docker flag 2022-08-05 02:39:25 -07:00