fix: add kube ca back to cloud init

Azure · Feb 24, 2023 · 42a95a6 · 42a95a6
1 parent bce59f5
commit 42a95a6
Show file tree

Hide file tree

Showing 106 changed files with 378 additions and 0 deletions.
diff --git a/parts/linux/cloud-init/nodecustomdata.yml b/parts/linux/cloud-init/nodecustomdata.yml
@@ -382,6 +382,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+    {{GetParameter "caCertificate"}}
+
 - path: {{GetCustomSearchDomainsCSEScriptFilepath}}
   permissions: "0744"
   encoding: gzip

diff --git a/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+CustomLinuxOSConfig/CustomData b/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+CustomLinuxOSConfig/CustomData
@@ -327,6 +327,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/.../AKSUbuntu1604+GPUDedicatedVHD/line342.sh → ...eletConfig+CustomLinuxOSConfig/line342.sh b/.../AKSUbuntu1604+GPUDedicatedVHD/line342.sh → ...eletConfig+CustomLinuxOSConfig/line342.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+DynamicKubeletConfig/CustomData b/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+DynamicKubeletConfig/CustomData
@@ -327,6 +327,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...untu1804+Containerd+NSeriesSku/line342.sh → ...letConfig+DynamicKubeletConfig/line342.sh b/...untu1804+Containerd+NSeriesSku/line342.sh → ...letConfig+DynamicKubeletConfig/line342.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=false/CustomData b/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=false/CustomData
@@ -327,6 +327,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...eletConfig+CustomLinuxOSConfig/line335.sh → ...sable1804SystemdResolved=false/line342.sh b/...eletConfig+CustomLinuxOSConfig/line335.sh → ...sable1804SystemdResolved=false/line342.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=true/CustomData b/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=true/CustomData
@@ -327,6 +327,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...letConfig+DynamicKubeletConfig/line335.sh → ...isable1804SystemdResolved=true/line342.sh b/...letConfig+DynamicKubeletConfig/line335.sh → ...isable1804SystemdResolved=true/line342.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+DynamicKubeletConfig/CustomData b/pkg/agent/testdata/AKSUbuntu1604+DynamicKubeletConfig/CustomData
@@ -327,6 +327,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...sable1804SystemdResolved=false/line335.sh → ...buntu1604+DynamicKubeletConfig/line342.sh b/...sable1804SystemdResolved=false/line335.sh → ...buntu1604+DynamicKubeletConfig/line342.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+EnablePrivateClusterHostsConfigAgent/CustomData b/pkg/agent/testdata/AKSUbuntu1604+EnablePrivateClusterHostsConfigAgent/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...804+Containerd++GPU+runcshimv2/line341.sh → ...PrivateClusterHostsConfigAgent/line341.sh b/...804+Containerd++GPU+runcshimv2/line341.sh → ...PrivateClusterHostsConfigAgent/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+GPUDedicatedVHD/CustomData b/pkg/agent/testdata/AKSUbuntu1604+GPUDedicatedVHD/CustomData
@@ -334,6 +334,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...isable1804SystemdResolved=true/line335.sh → .../AKSUbuntu1604+GPUDedicatedVHD/line349.sh b/...isable1804SystemdResolved=true/line335.sh → .../AKSUbuntu1604+GPUDedicatedVHD/line349.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+K8S115/CustomData b/pkg/agent/testdata/AKSUbuntu1604+K8S115/CustomData
@@ -327,6 +327,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...buntu1604+DynamicKubeletConfig/line335.sh → .../testdata/AKSUbuntu1604+K8S115/line342.sh b/...buntu1604+DynamicKubeletConfig/line335.sh → .../testdata/AKSUbuntu1604+K8S115/line342.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+K8S117/CustomData b/pkg/agent/testdata/AKSUbuntu1604+K8S117/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...Containerd+MIG+NoFabricManager/line341.sh → .../testdata/AKSUbuntu1604+K8S117/line341.sh b/...Containerd+MIG+NoFabricManager/line341.sh → .../testdata/AKSUbuntu1604+K8S117/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+K8S118/CustomData b/pkg/agent/testdata/AKSUbuntu1604+K8S118/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...a/AKSUbuntu1804+Containerd+MIG/line341.sh → .../testdata/AKSUbuntu1604+K8S118/line341.sh b/...a/AKSUbuntu1804+Containerd+MIG/line341.sh → .../testdata/AKSUbuntu1604+K8S118/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+KubeletConfigFile/CustomData b/pkg/agent/testdata/AKSUbuntu1604+KubeletConfigFile/CustomData
@@ -327,6 +327,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...PrivateClusterHostsConfigAgent/line334.sh → ...KSUbuntu1604+KubeletConfigFile/line342.sh b/...PrivateClusterHostsConfigAgent/line334.sh → ...KSUbuntu1604+KubeletConfigFile/line342.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+OSKubeletDisk/CustomData b/pkg/agent/testdata/AKSUbuntu1604+OSKubeletDisk/CustomData
@@ -327,6 +327,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/.../testdata/AKSUbuntu1604+K8S115/line335.sh → ...ta/AKSUbuntu1604+OSKubeletDisk/line342.sh b/.../testdata/AKSUbuntu1604+K8S115/line335.sh → ...ta/AKSUbuntu1604+OSKubeletDisk/line342.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+TempDisk+Containerd/CustomData b/pkg/agent/testdata/AKSUbuntu1604+TempDisk+Containerd/CustomData
@@ -328,6 +328,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/.../testdata/AKSUbuntu1604+K8S117/line334.sh → ...Ubuntu1604+TempDisk+Containerd/line343.sh b/.../testdata/AKSUbuntu1604+K8S117/line334.sh → ...Ubuntu1604+TempDisk+Containerd/line343.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+TempDiskExplicit/CustomData b/pkg/agent/testdata/AKSUbuntu1604+TempDiskExplicit/CustomData
@@ -328,6 +328,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/.../testdata/AKSUbuntu1604+K8S118/line334.sh → ...AKSUbuntu1604+TempDiskExplicit/line343.sh b/.../testdata/AKSUbuntu1604+K8S118/line334.sh → ...AKSUbuntu1604+TempDiskExplicit/line343.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1604+TempDiskToggle/CustomData b/pkg/agent/testdata/AKSUbuntu1604+TempDiskToggle/CustomData
@@ -328,6 +328,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...KSUbuntu1604+KubeletConfigFile/line335.sh → ...a/AKSUbuntu1604+TempDiskToggle/line343.sh b/...KSUbuntu1604+KubeletConfigFile/line335.sh → ...a/AKSUbuntu1604+TempDiskToggle/line343.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd++GPU+runcshimv2/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd++GPU+runcshimv2/CustomData
@@ -333,6 +333,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...ta/AKSUbuntu1604+OSKubeletDisk/line335.sh → ...804+Containerd++GPU+runcshimv2/line348.sh b/...ta/AKSUbuntu1604+OSKubeletDisk/line335.sh → ...804+Containerd++GPU+runcshimv2/line348.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Certsd/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Certsd/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...Ubuntu1604+TempDisk+Containerd/line336.sh → ...KSUbuntu1804+Containerd+Certsd/line341.sh b/...Ubuntu1604+TempDisk+Containerd/line336.sh → ...KSUbuntu1804+Containerd+Certsd/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+ContainerdVersion/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+ContainerdVersion/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...AKSUbuntu1604+TempDiskExplicit/line336.sh → ...4+Containerd+ContainerdVersion/line341.sh b/...AKSUbuntu1604+TempDiskExplicit/line336.sh → ...4+Containerd+ContainerdVersion/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPAddress+FQDN/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPAddress+FQDN/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...a/AKSUbuntu1604+TempDiskToggle/line336.sh → ...1804+Containerd+IPAddress+FQDN/line341.sh b/...a/AKSUbuntu1604+TempDiskToggle/line336.sh → ...1804+Containerd+IPAddress+FQDN/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPMasqAgent/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPMasqAgent/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...KSUbuntu1804+Containerd+Certsd/line334.sh → ...ntu1804+Containerd+IPMasqAgent/line341.sh b/...KSUbuntu1804+Containerd+Certsd/line334.sh → ...ntu1804+Containerd+IPMasqAgent/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+Calico/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+Calico/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...4+Containerd+ContainerdVersion/line334.sh → ...1804+Containerd+Kubenet+Calico/line341.sh b/...4+Containerd+ContainerdVersion/line334.sh → ...1804+Containerd+Kubenet+Calico/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+FIPSEnabled/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+FIPSEnabled/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...1804+Containerd+IPAddress+FQDN/line334.sh → ...Containerd+Kubenet+FIPSEnabled/line341.sh b/...1804+Containerd+IPAddress+FQDN/line334.sh → ...Containerd+Kubenet+FIPSEnabled/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...ntu1804+Containerd+IPMasqAgent/line334.sh → ...SUbuntu1804+Containerd+Kubenet/line341.sh b/...ntu1804+Containerd+IPMasqAgent/line334.sh → ...SUbuntu1804+Containerd+Kubenet/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG+NoFabricManager/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG+NoFabricManager/CustomData
@@ -333,6 +333,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...1804+Containerd+Kubenet+Calico/line334.sh → ...Containerd+MIG+NoFabricManager/line348.sh b/...1804+Containerd+Kubenet+Calico/line334.sh → ...Containerd+MIG+NoFabricManager/line348.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG/CustomData
@@ -333,6 +333,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...Containerd+Kubenet+FIPSEnabled/line334.sh → ...a/AKSUbuntu1804+Containerd+MIG/line348.sh b/...Containerd+Kubenet+FIPSEnabled/line334.sh → ...a/AKSUbuntu1804+Containerd+MIG/line348.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+MotD/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+MotD/CustomData
@@ -326,6 +326,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/...SUbuntu1804+Containerd+Kubenet/line334.sh → .../AKSUbuntu1804+Containerd+MotD/line341.sh b/...SUbuntu1804+Containerd+Kubenet/line334.sh → .../AKSUbuntu1804+Containerd+MotD/line341.sh
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+NSeriesSku/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+NSeriesSku/CustomData
@@ -334,6 +334,13 @@ write_files:
     # for DNS.
     iptables -I FORWARD -d 168.63.129.16 -p tcp --dport 80 -j DROP
 
+- path: /etc/kubernetes/certs/ca.crt
+  permissions: "0600"
+  encoding: base64
+  owner: root
+  content: |
+
+
 - path: /opt/azure/containers/setup-custom-search-domains.sh
   permissions: "0744"
   encoding: gzip

diff --git a/.../AKSUbuntu1804+Containerd+MotD/line334.sh → ...untu1804+Containerd+NSeriesSku/line349.sh b/.../AKSUbuntu1804+Containerd+MotD/line334.sh → ...untu1804+Containerd+NSeriesSku/line349.sh