Lubomir I. Ivanov 847b2e1085 kubeadm: avoid requiring a CA key during kubeconfig expiration checks ... When the "kubeadm certs check-expiration" command is used and if the ca.key is not present, regular on disk certificate reads pass fine, but fail for kubeconfig files. The reason for the failure is that reading of kubeconfig files currently requires reading both the CA key and cert from disk. Reading the CA is done to ensure that the CA cert in the kubeconfig is not out of date during renewal. Instead of requiring both a CA key and cert to be read, only read the CA cert from disk, as only the cert is needed for kubeconfig files. This fixes printing the cert expiration table even if the ca.key is missing on a host (i.e. the CA is considered external).		2021-12-07 20:48:45 +02:00
..
app	kubeadm: avoid requiring a CA key during kubeconfig expiration checks	2021-12-07 20:48:45 +02:00
test	cleanup: DualStack GA for kubeadm	2021-09-04 22:38:14 +08:00
.import-restrictions	add kube-openapi/pkg/schemaconv to kubeadm import-restrictions	2021-07-28 01:06:15 +00:00
kubeadm.go	alias kubeadmutil for k8s.io/kubernetes/cmd/kubeadm/app/util	2019-12-27 17:57:04 +08:00
OWNERS	kubeadm: Add RA489 as reviewer	2021-04-06 21:45:39 +05:30