Unverified Commit 6a11b7a7 authored by Joris Bolsens's avatar Joris Bolsens Committed by GitHub
Browse files

nixos/kubernetes: don't delete the apitoken after its created 

This was breaking the nixos-kubernetes-node-join script
the token gets copied, and then immediately overridden with /dev/null when certmgr restarts.
parent ed8b568d

nixos/modules/services/cluster/kubernetes/pki.nix

+2 −1
Original line number Diff line number Diff line
@@ -192,7 +192,8 @@ in 
        mkdir -p "$(dirname "${certmgrAPITokenPath}")"

        if [ -f "${cfsslAPITokenPath}" ]; then

          ln -fs "${cfsslAPITokenPath}" "${certmgrAPITokenPath}"

        else

        elif [ ! -f "${certmgrAPITokenPath}" ]; then

          # Don't remove the token if it already exists

          install -m 600 /dev/null "${certmgrAPITokenPath}"

        fi

      ''