my installed ancher is not applying the cloud-prov...
# general
p
my installed ancher is not applying the cloud-provider changes in the cluster! hello, Im using Rancher 2.6.5 with a custome k8s cluster 1.19.16, when i tried to update my cloud provider secrets I figure out that it doesnt apply on the cluster using the UI in the cluster mangement => edit config, cloud provider. as my cluster is built in azure VM and it consume Azuredisks for PV, I was able to apply the change on the kube-api containers by editing the cloud-config file directly, in /etc/kubernetes/cloud-config in each kube-api container in each master node. this solved my problem for joinning azure disk, but i figure out that i have some strange kubelet issues on the logs and even my worker was not posting kubelet after a restart for an hour, bellow the logs i found on my workers kubelet: azure\_instances.go:55\] NodeAddresses(my-worker-node) abort backoff: timed out waiting for the condition cloud\_request\_manager.go:115\] Node addresses from cloud provider for node "my-worker-node" not collected: timed out waiting for the condition kubelet\_node\_status.go:362\] Setting node annotation to enable volume controller attach/detach kubelet\_node\_status.go:67\] Unable to construct v1.Node object for kubelet: failed to get instance ID from cloud provider: Retriable: false, RetryAfter: 0s, HTTPStatusCode: 401, RawError: Retriable: false, RetryAfter: 0s, HTTPStatusCode: 401, RawError: azure.BearerAuthorizer#WithAuthorization: Failed to refresh the Token for request to xxxxx: StatusCode=401 -- Original Error: adal: Refresh request failed. Status Code = '401'. Response body: {"error":"invalid\_client","error\_description":"AADSTS7000222: The provided client secret keys for app 'xxxxxx' are expired. Visit the Azure portal to create new keys for your app: [*https://aka.ms/NewClientSecret*](https://aka.ms/NewClientSecret)*, or consider using certificate credentials for added security:* [*https://aka.ms/certCreds*](https://aka.ms/certCreds)*....* kubelet\_node\_status.go:362\] Setting node annotation to enable volume controller attach/detach so i tried to add the key manually in the /etc/kubernetes/cloud-config and it did'nt work as after the restart of the kubelet container it regenerates a new cloud-config file with the old. could you guys help!