Page MenuHomePhabricator

Make maintain-kubeusers run on first attempt
Closed, DeclinedPublic

Description

Right now, to have maintain-kubeusers run, you need to:

  1. touch /etc/kubernetes/tokenauth manually
  2. Start it manually, since the systemd unit expects /data/project and /etc/kubernetes to exist.

maintain-kubeusers running is required for a new api server to start, since it reads /etc/kubernetes/tokenauth for user accounts - including client-infrastructure (kubelet and kube-proxy)