updating powershell

windows/ako/ako-toleration-overlay.yml

@@ -0,0 +1,11 @@
+#@ load("@ytt:overlay", "overlay")
+#@overlay/match by=overlay.subset({"kind": "StatefulSet", "metadata": {"namespace": "avi-system"}})
+---
+spec:
+    template:
+        spec:
+          #@overlay/match missing_ok=True
+          tolerations:
+          - key: "node-role.kubernetes.io/master"
+            operator: "Exists"
+            effect: "NoSchedule"

windows/cert/cluster_config.yml

@@ -1,2 +1,2 @@
 #Add this to the cluster config you are using and replace the content with base64 encoded root ca
-CUSTOM_CA: <base64encodedrootcert>
+ROOT_CERT: <base64encodedrootcert>

windows/cert/inject-cert-values.yml

@@ -1,4 +1,4 @@
 #@data/values
 #@overlay/match-child-defaults missing_ok=True
 ---
-CUSTOM_CA:
+ROOT_CERT:

windows/cert/inject-cert.yml

@@ -18,9 +18,12 @@ spec:
       files:
       #@overlay/append
         - path: c:\k\rootca.pem
-          content: #@ base64.decode(data.values.CUSTOM_CA)
+          content: #@ base64.decode(data.values.ROOT_CERT)
+        - path: c:\k\addcert.ps1
+          content: |
+            Import-Certificate -FilePath "c:\k\rootca.pem" -CertStoreLocation cert:\LocalMachine\Root
       #@overlay/match missing_ok=True
       preKubeadmCommands:
         #@overlay/append
-        - 'Import-Certificate -FilePath "c:\k\rootca.pem" -CertStoreLocation cert:\LocalMachine\Root'
+        - powershell c:/k/addcert.ps1 -ExecutionPolicy Bypass
 #@ end