Merge branch 'master' into renovate/containernetworking-azure-cni-1.4.x

Azure · Jan 15, 2025 · d8f0c12 · d8f0c12
2 parents 5eb8715 + 2fec2d9
commit d8f0c12
Show file tree

Hide file tree

Showing 177 changed files with 273 additions and 87 deletions.
diff --git a/parts/linux/cloud-init/artifacts/cse_config.sh b/parts/linux/cloud-init/artifacts/cse_config.sh
@@ -406,6 +406,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/datamodel/types.go b/pkg/agent/datamodel/types.go
@@ -625,6 +625,7 @@ type KubernetesAddon struct {
 // EbpfDataplane controls the eBPF networking dataplane.
 type EbpfDataplane int32
 
+//nolint:stylecheck // underscores in constant names are used for clarity in this context
 const (
 	// none means don't install an eBPF dataplane.
 	EbpfDataplane_none EbpfDataplane = 0

diff --git a/pkg/agent/testdata/AKSUbuntu1604+Containerd/CustomData b/pkg/agent/testdata/AKSUbuntu1604+Containerd/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+Containerd/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+Containerd/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+CustomLinuxOSConfig/CustomData b/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+CustomLinuxOSConfig/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+CustomLinuxOSConfig/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+CustomLinuxOSConfig/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+DynamicKubeletConfig/CustomData b/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+DynamicKubeletConfig/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+DynamicKubeletConfig/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+CustomKubeletConfig+DynamicKubeletConfig/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=false/CustomData b/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=false/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=false/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=false/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=true/CustomData b/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=true/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=true/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+Disable1804SystemdResolved=true/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+Docker/CustomData b/pkg/agent/testdata/AKSUbuntu1604+Docker/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+Docker/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+Docker/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+DynamicKubeletConfig/CustomData b/pkg/agent/testdata/AKSUbuntu1604+DynamicKubeletConfig/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+DynamicKubeletConfig/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+DynamicKubeletConfig/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+EnablePrivateClusterHostsConfigAgent/CustomData b/pkg/agent/testdata/AKSUbuntu1604+EnablePrivateClusterHostsConfigAgent/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+EnablePrivateClusterHostsConfigAgent/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+EnablePrivateClusterHostsConfigAgent/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+GPUDedicatedVHD/CustomData b/pkg/agent/testdata/AKSUbuntu1604+GPUDedicatedVHD/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+GPUDedicatedVHD/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+GPUDedicatedVHD/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+K8S115/CustomData b/pkg/agent/testdata/AKSUbuntu1604+K8S115/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+K8S115/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+K8S115/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+K8S117/CustomData b/pkg/agent/testdata/AKSUbuntu1604+K8S117/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+K8S117/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+K8S117/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+K8S118/CustomData b/pkg/agent/testdata/AKSUbuntu1604+K8S118/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+K8S118/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+K8S118/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+KubeletConfigFile/CustomData b/pkg/agent/testdata/AKSUbuntu1604+KubeletConfigFile/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+KubeletConfigFile/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+KubeletConfigFile/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+OSKubeletDisk/CustomData b/pkg/agent/testdata/AKSUbuntu1604+OSKubeletDisk/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+OSKubeletDisk/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+OSKubeletDisk/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+TempDisk+Containerd/CustomData b/pkg/agent/testdata/AKSUbuntu1604+TempDisk+Containerd/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+TempDisk+Containerd/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+TempDisk+Containerd/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+TempDiskExplicit/CustomData b/pkg/agent/testdata/AKSUbuntu1604+TempDiskExplicit/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+TempDiskExplicit/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+TempDiskExplicit/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1604+TempDiskToggle/CustomData b/pkg/agent/testdata/AKSUbuntu1604+TempDiskToggle/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1604+TempDiskToggle/line70.sh b/pkg/agent/testdata/AKSUbuntu1604+TempDiskToggle/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+ArtifactStreaming/CustomData b/pkg/agent/testdata/AKSUbuntu1804+ArtifactStreaming/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+ArtifactStreaming/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+ArtifactStreaming/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd++GPU+runcshimv2/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd++GPU+runcshimv2/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd++GPU+runcshimv2/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd++GPU+runcshimv2/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Certsd/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Certsd/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Certsd/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Certsd/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+ContainerdVersion/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+ContainerdVersion/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+ContainerdVersion/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+ContainerdVersion/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPAddress+FQDN/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPAddress+FQDN/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPAddress+FQDN/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPAddress+FQDN/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPMasqAgent/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPMasqAgent/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPMasqAgent/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+IPMasqAgent/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+Calico/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+Calico/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+Calico/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+Calico/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+FIPSEnabled/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+FIPSEnabled/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+FIPSEnabled/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet+FIPSEnabled/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+Kubenet/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG+NoFabricManager/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG+NoFabricManager/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG+NoFabricManager/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG+NoFabricManager/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+MIG/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"
 

diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+MotD/CustomData b/pkg/agent/testdata/AKSUbuntu1804+Containerd+MotD/CustomData
diff --git a/pkg/agent/testdata/AKSUbuntu1804+Containerd+MotD/line70.sh b/pkg/agent/testdata/AKSUbuntu1804+Containerd+MotD/line70.sh
@@ -396,6 +396,8 @@ getPrimaryNicIP() {
 }
 
 generateSelfSignedKubeletServingCertificate() {
+    mkdir -p "/etc/kubernetes/certs"
+
     KUBELET_SERVER_PRIVATE_KEY_PATH="/etc/kubernetes/certs/kubeletserver.key"
     KUBELET_SERVER_CERT_PATH="/etc/kubernetes/certs/kubeletserver.crt"