feat(genconfig): don't remove AESCBC key for older cluster

ref: #81
budimanjojo · Jan 25, 2023 · 0802f4a · 0802f4a
1 parent eb142f3
commit 0802f4a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/pkg/talos/nodeconfig.go b/pkg/talos/nodeconfig.go
@@ -37,6 +37,12 @@ func generateNodeConfig(node *config.Nodes, input *generate.Input) (*v1alpha1.Co
 			return nil, err
 		}
 	}
+
+	// https://github.com/budimanjojo/talhelper/issues/81
+	if input.VersionContract.SecretboxEncryptionSupported() && input.Secrets.AESCBCEncryptionSecret != "" {
+		c.ClusterConfig.ClusterAESCBCEncryptionSecret = input.Secrets.AESCBCEncryptionSecret
+	}
+
 	cfg := applyNodeOverride(node, c)
 
 	return cfg, nil