[Release-1.29] - Cannot start k3s with authorization-config apiserver flag set

[brandond]

Backport fix for Cannot start k3s with authorization-config apiserver flag set

• Cannot start k3s with authorization-config apiserver flag set #12017

[fmoral2]

Master

Validated on Version:

-$ k3s version v1.29.15+k3s-5aac2aaf (5aac2aaf) 

 

Environment Details

Infrastructure
Cloud EC2 instance

Node(s) CPU architecture, OS, and Version:
sle 15
AMD

Cluster Configuration:

• 1 node server

Steps to validate the fix

1. Install k3s with flag --kube-apiserver-arg=authorization-config=
2. Make sure the cluster is up and running

Reproduction Issue:

Details

curl -fL https://get.k3s.io | INSTALL_K3S_COMMIT=5aac2aafc6770cd10c6322c93bb3c66d76927b0a    sh -s - server  -kube-apiserver-arg=authorization-config=/etc/rancher/k3s/auth-config.yaml   --write-kubeconfig-mode=644  

   $ k3s -v
k3s version v1.32.1+k3s-a858412c (a858412c)

   ="apiserver exited: --authorization-config can not be specified when --authoriz>
Apr 09 11:09:38 ip-172-31-17-92 systemd[1]: k3s.service: Main process exited, code=exited, status=1/FAILURE


 

Validation Results:

curl -fL https://get.k3s.io | INSTALL_K3S_COMMIT=5aac2aafc6770cd10c6322c93bb3c66d76927b0a   sh -s - server  -

kube-apiserver-arg=authorization-config=/etc/rancher/k3s/auth-config.yaml   --write-kubeconfig-mode=644  

 
$ k3s -v
k3s version v1.29.15+k3s-5aac2aaf (5aac2aaf)
go version go1.23.6


$ cat /etc/rancher/k3s/auth-config.yaml
apiVersion: apiserver.config.k8s.io/v1
kind: AuthorizationConfiguration
authorizers:
  - name: rbac
    type: RBAC
  - name: node
    type: Node


$ k get nodes,pods -A
NAME                   STATUS   ROLES                  AGE   VERSION
node/    Ready    control-plane,master   87s   v1.29.15+k3s-5aac2aaf

NAMESPACE     NAME                                          READY   STATUS      RESTARTS   AGE
kube-system   pod/coredns-747b9856f5-8vj5v                  1/1     Running     0          72s
kube-system   pod/helm-install-traefik-crd-9q9rc            0/1     Completed   0          73s
kube-system   pod/helm-install-traefik-fgkv7                0/1     Completed   1          73s
kube-system   pod/local-path-provisioner-84b6bbcd49-9q4gd   1/1     Running     0          72s
kube-system   pod/metrics-server-548c5694dd-7qgt5           1/1     Running     0          72s
kube-system   pod/svclb-traefik-a08f0f70-bhpls              2/2     Running     0          60s
kube-system   pod/traefik-6b5c97f79c-2fp5k                  1/1     Running     0          60s