From 0802f4a137071b334d5e1b5b416b63cebeaba635 Mon Sep 17 00:00:00 2001
From: budimanjojo <budimanjojo@gmail.com>
Date: Wed, 25 Jan 2023 14:07:33 +0700
Subject: [PATCH] feat(genconfig): don't remove AESCBC key for older cluster

ref: https://github.com/budimanjojo/talhelper/issues/81
---
 pkg/talos/nodeconfig.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkg/talos/nodeconfig.go b/pkg/talos/nodeconfig.go
index 3af6e01f..7a9bb702 100644
--- a/pkg/talos/nodeconfig.go
+++ b/pkg/talos/nodeconfig.go
@@ -37,6 +37,12 @@ func generateNodeConfig(node *config.Nodes, input *generate.Input) (*v1alpha1.Co
 			return nil, err
 		}
 	}
+
+	// https://github.com/budimanjojo/talhelper/issues/81
+	if input.VersionContract.SecretboxEncryptionSupported() && input.Secrets.AESCBCEncryptionSecret != "" {
+		c.ClusterConfig.ClusterAESCBCEncryptionSecret = input.Secrets.AESCBCEncryptionSecret
+	}
+
 	cfg := applyNodeOverride(node, c)
 
 	return cfg, nil