Skip to content

Commit a493517

Browse files
committed
kubeadm: add note about a bug in the PublicKeysECDSA FG
The PublicKeysECDSA has been poorly tested and supported and apparently it had a bug where keys in kubeconfig files were using RSA even if the FG was true. Add note about that in the FG section of the kubeadm init doc.
1 parent d49f823 commit a493517

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

content/en/docs/reference/setup-tools/kubeadm/kubeadm-init.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -174,7 +174,9 @@ as a learner and promoted to a voting member only after the etcd data are fully
174174
`PublicKeysECDSA`
175175
: Can be used to create a cluster that uses ECDSA certificates instead of the default RSA algorithm.
176176
Renewal of existing ECDSA certificates is also supported using `kubeadm certs renew`, but you cannot
177-
switch between the RSA and ECDSA algorithms on the fly or during upgrades.
177+
switch between the RSA and ECDSA algorithms on the fly or during upgrades. Kubernetes
178+
{{< skew currentVersion >}} has a bug where keys in generated kubeconfig files are set use RSA
179+
despite the feature gate being enabled.
178180

179181
`RootlessControlPlane`
180182
: Setting this flag configures the kubeadm deployed control plane component static Pod containers

0 commit comments

Comments
 (0)