From bf2d3cd07471cb0501343f694594b3e0b0e3db18 Mon Sep 17 00:00:00 2001
From: David Anderson <danderson@tailscale.com>
Date: Mon, 7 Nov 2022 14:58:03 -0800
Subject: [PATCH] cmd/containerboot: don't write device ID when not in
 Kubernetes.

Fixes #6218.

Signed-off-by: David Anderson <danderson@tailscale.com>
---
 cmd/containerboot/main.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/cmd/containerboot/main.go b/cmd/containerboot/main.go
index c3dd13f14..9d8784ce3 100644
--- a/cmd/containerboot/main.go
+++ b/cmd/containerboot/main.go
@@ -133,7 +133,7 @@ func main() {
 			log.Fatalf("installing proxy rules: %v", err)
 		}
 	}
-	if cfg.KubeSecret != "" {
+	if cfg.InKubernetes && cfg.KubeSecret != "" {
 		if err := storeDeviceID(ctx, cfg.KubeSecret, string(st.Self.ID)); err != nil {
 			log.Fatalf("storing device ID in kube secret: %v", err)
 		}