---
apiVersion: v1
kind: Config
clusters:
- cluster:
{{#if settings.kubernetes.api-server}}
    certificate-authority: "/etc/kubernetes/pki/ca.crt"
    server: "{{settings.kubernetes.api-server}}"
{{/if}}
  name: kubernetes
contexts:
- context:
    cluster: kubernetes
    user: kubelet
  name: kubelet
current-context: kubelet
users:
- name: kubelet
{{#if (eq settings.kubernetes.authentication-mode "aws")}}
{{#if settings.kubernetes.cluster-name}}
  user:
    exec:
      apiVersion: client.authentication.k8s.io/v1beta1
      command: "/usr/bin/aws-iam-authenticator"
      args:
      - token
      - "-i"
      - "{{settings.kubernetes.cluster-name}}"
      {{#if settings.aws.region}}
      - "--region"
      - "{{settings.aws.region}}"
      {{/if}}
{{/if}}
{{/if}}
{{#if (eq settings.kubernetes.authentication-mode "tls")}}
  user:
    client-certificate: "/var/lib/kubelet/pki/kubelet-client-current.pem"
    client-key: "/var/lib/kubelet/pki/kubelet-client-current.pem"
{{/if}}