apiVersion: v1
kind: Secret
metadata:
  name: bootstrap-token-{{ openssl_token_id.stdout }}
  namespace: kube-system
type: bootstrap.kubernetes.io/token
stringData:
  token-id: "{{ openssl_token_id.stdout }}"
  token-secret: "{{ openssl_token_secret.stdout }}"
  usage-bootstrap-authentication: "true"
  usage-bootstrap-signing: "true"
  auth-extra-groups: "system:bootstrappers:default-node-token"