mirror of
https://github.com/optim-enterprises-bv/kubernetes.git
synced 2025-12-15 20:37:39 +00:00
2413713c4e
The existing logic already creates a proper "tree" where a CA is always generated before the certs that are signed by this CA, however the tree is not deterministic. Always use the default list of certs when generating the "kubeadm init phase certs" phases. Add a unit test that makes sure that CA always precede signed certs in the default lists. This solves the problem where the help screen for "kubeadm init" cert sub-phases can have a random order.