#!/bin/sh
# kubeadm on an exam host. The packaged binary is /usr/bin/kubeadm.real (a dpkg diversion, see
# images/node-cks/Containerfile). `kubeadm upgrade` checks the node first and stops when the cpuset
# cgroup controller is missing - which it always is on a rootless container node, and never on a
# real one. This wrapper lets that one check pass and changes nothing else.
if [ "$1" = upgrade ]; then
  case "$2" in
    plan|apply|node) exec /usr/bin/kubeadm.real "$@" --ignore-preflight-errors=SystemVerification ;;
  esac
fi
exec /usr/bin/kubeadm.real "$@"