Fall back to basic/bearer auth when node identity auth is rejected

[brandond]

Proposed Changes

Fall back to basic/bearer auth if client cert auth is rejected

Types of Changes

bugfix

Verification

See linked issue

Testing

Linked Issues

• Nodes joined with kubeadm-style bootstrap tokens cannot automatically rejoin when the node object is deleted. #7797

User-Facing Change

Resolved an issue that caused agents joined with kubeadm-style bootstrap tokens to fail to rejoin the cluster when their node object is deleted.

Further Comments

[codecov]

Codecov Report

Patch coverage: 18.18% and project coverage change: +4.30 🎉

Comparison is base (70691a9) 47.12% compared to head (96ed549) 51.43%.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #7836      +/-   ##
==========================================
+ Coverage   47.12%   51.43%   +4.30%     
==========================================
  Files         143      143              
  Lines       14509    14524      +15     
==========================================
+ Hits         6837     7470     +633     
+ Misses       6581     5864     -717     
- Partials     1091     1190      +99     

Flag	Coverage Δ
e2etests	49.30% <0.00%> (?)
inttests	44.42% <18.18%> (-0.06%)	⬇️
unittests	19.85% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
pkg/clientaccess/token.go	78.96% <ø> (ø)
pkg/agent/config/config.go	53.60% <18.18%> (+2.84%)	⬆️

... and 45 files with indirect coverage changes

☔ View full report in Codecov by Sentry.
📢 Do you have feedback about the report comment? Let us know in this issue.