Tim Bannister

> [@sftim](https://github.com/sftim) do you know in which context CEL is used as a templating language in kubernetes ? I do! And I can recommend a page about it: https://kubernetes.io/docs/reference/using-api/cel/

@sylr you're kind of right, but this issue may not be the best place to get help learning CEL. Anyway, the CEL expression requires quoting: `"eks.amazonaws.com/clusterName"`. See https://github.com/google/cel-spec/blob/master/doc/langdef.md#string-and-bytes-values

If you want to know how to let people provide either a basic string **or** an expression to template it, there are Kubernetes conventions for that too.

@sylr I recommend taking this to the Kubernetes Slack workspace. [In my view] this issue discussion is the wrong place to learn Kubernetes architecture or to hash out implementation details....

Right now Karpenter does not provide a way to define an expression that sets a tag based on evaluation. In the future, if / when Karpenter supports a way to...

Be sure to update the website after making this change, including https://kubernetes.io/docs/reference/access-authn-authz/kubelet-tls-bootstrapping/#certificate-rotation

> Does this issue have zero to low barrier of entry? Unclear, but I'd say it does not. I think it fails on _It should be easy for new contributors....

Changelog suggestion ```diff -kubelet, when configured to rotate certificates, will only request certificates when there is at least one IP address on the node.status.addresses +Changed the way the kubelet requests...

I suggest moving to a domain name linked to the vendor, AWS. We can do that provided that AWS are happy to confirm a suitable domain name.

Because there is ambiguity, and until we resolve it, I suggest removing the good-first-issue label temporarily.