AKS Flex Node CA Certificate Initialization Issue

This repository documents a reproduction case for an issue encountered while deploying AKS Flex Nodes with bootstrap-token authentication.

Issue Summary

CA certificate file at /etc/kubernetes/pki/apiserver-client-ca.crt is not automatically initialized during node bootstrap, despite caCertData being present and valid in the node configuration.

Status: Reported to Azure AKS Flex Node engineering team for investigation.

Contents

• ISSUE_CA_CERT_INITIALIZATION.md — Detailed reproduction steps, observed behavior, and diagnostic information
• LICENSE.md — MIT License

Background

This issue was encountered while setting up a multi-region AI workload lab on AKS Flex Nodes. The lab documentation and related infrastructure code can be found at:

• AKS Flex Node + Anyscale Multi-Region Lab
• AKS Labs
• AKS Flex Node Official Docs

Contributing

This repository is maintained as a public issue reproduction case. If you have encountered similar behavior or have insights into the root cause, please open an issue or discussion.

License

This project is licensed under the MIT License - see the LICENSE.md file for details.