kubeconfig-in-cluster is not a secret

e2e/checkpointer_test.go

@@ -367,16 +367,16 @@ func waitCluster(t *testing.T) *Cluster {
 }
 
 func setupTestCheckpointerRole(namespace string) error {
-	// Copy special kubeconfig-in-cluster secret from kube-system namespace.
-	kc, err := client.CoreV1().Secrets(metav1.NamespaceSystem).Get("kubeconfig-in-cluster", metav1.GetOptions{})
+	// Copy special kubeconfig-in-cluster configmap from kube-system namespace.
+	kc, err := client.CoreV1().ConfigMaps(metav1.NamespaceSystem).Get("kubeconfig-in-cluster", metav1.GetOptions{})
 	if err != nil {
 		return err
 	}
 	kc.ObjectMeta = metav1.ObjectMeta{
 		Name:      kc.ObjectMeta.Name,
 		Namespace: namespace,
 	}
-	if _, err := client.CoreV1().Secrets(namespace).Create(kc); err != nil {
+	if _, err := client.CoreV1().ConfigMaps(namespace).Create(kc); err != nil {
 		return err
 	}
 
@@ -476,8 +476,8 @@ spec:
       restartPolicy: Always
       volumes:
       - name: kubeconfig
-        secret:
-          secretName: kubeconfig-in-cluster
+        configMap:
+          name: kubeconfig-in-cluster
       - name: etc-kubernetes
         hostPath:
           path: /etc/kubernetes

pkg/asset/internal/templates.go

@@ -311,8 +311,8 @@ spec:
         effect: NoSchedule
       volumes:
       - name: kubeconfig
-        secret:
-          secretName: kubeconfig-in-cluster
+        configMap:
+          name: kubeconfig-in-cluster
       - name: etc-kubernetes
         hostPath:
           path: /etc/kubernetes
@@ -652,8 +652,8 @@ spec:
         hostPath:
           path: /usr/share/ca-certificates
       - name: kubeconfig
-        secret:
-          secretName: kubeconfig-in-cluster
+        configMap:
+          name: kubeconfig-in-cluster
   updateStrategy:
     rollingUpdate:
       maxUnavailable: 1
@@ -690,11 +690,11 @@ subjects:
 // (chicken and egg), and the checkpointer, which needs to run as a static pod
 // even if the API server isn't available.
 var KubeConfigInClusterTemplate = []byte(`apiVersion: v1
-kind: Secret
+kind: ConfigMap
 metadata:
   name: kubeconfig-in-cluster
   namespace: kube-system
-stringData:
+data:
   kubeconfig: |
     apiVersion: v1
     clusters: