From 430f69f2cc0dfe42c2f0d06e801344f9d6a75409 Mon Sep 17 00:00:00 2001
From: Daniel Fernandes Martins <daniel.martins@descomplica.com.br>
Date: Thu, 27 Apr 2017 15:33:24 -0300
Subject: [PATCH] Fix certs path when TLS bootstrapping is enabled

---
 core/controlplane/config/templates/cloud-config-worker | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/core/controlplane/config/templates/cloud-config-worker b/core/controlplane/config/templates/cloud-config-worker
index fc84dd984..bab06f2ce 100644
--- a/core/controlplane/config/templates/cloud-config-worker
+++ b/core/controlplane/config/templates/cloud-config-worker
@@ -818,8 +818,13 @@ write_files:
           "policy": {
             "type": "k8s",
             "k8s_api_root": "{{.APIEndpointURL}}/api/v1/",
+            {{- if .Experimental.TLSBootstrap.Enabled }}
+            "k8s_client_key": "/etc/kubernetes/ssl/kubelet-client.key",
+            "k8s_client_certificate": "/etc/kubernetes/ssl/kubelet-client.crt",
+            {{- else }}
             "k8s_client_key": "/etc/kubernetes/ssl/worker-key.pem",
             "k8s_client_certificate": "/etc/kubernetes/ssl/worker.pem",
+            {{- end }}
             "k8s_certificate_authority": "/etc/kubernetes/ssl/ca.pem"
           }
         }