kubedadm super-admin.conf

[ralgozino]

starting from kubernetes 1.29, kubeadm creates two kubeconfig files for administrators:

• admin.conf: this is a NEW user that has a rolebinding for the role kubeadm:cluster-admins and not masters as before.
• super-admin.conf: this is the equivalent to the admin.conf created in previous versions. It is a member of the system:masters group, so RBAC does not apply.

Our roles (and furyctl) are not considering this new file.

References:

• https://raesene.github.io/blog/2024/01/06/when-is-admin-not-admin/
• kubeadm: add support for separate super-admin.conf kubeconfig file kubernetes/kubernetes#121305
• Feature Reqest: Don't bind the admin.conf user to system:masters kubernetes/kubeadm#2414