Update kubelet restart script in Windows templates

templates/flavors/machinepool-windows/machine-pool-deployment-windows.yaml

@@ -51,14 +51,15 @@ spec:
   preKubeadmCommands:
     - powershell c:/create-external-network.ps1
   postKubeadmCommands:
-    - nssm set kubelet start SERVICE_AUTO_START
+    - powershell C:/KubeletRestart_nssm_sc.ps1
     - powershell C:/defender-exclude-calico.ps1
   joinConfiguration:
     nodeRegistration:
       name: '{{ ds.meta_data["local_hostname"] }}'
       criSocket: npipe:////./pipe/containerd-containerd
       kubeletExtraArgs:
         cloud-provider: external
+        register-with-taints: node.cloudprovider.kubernetes.io/uninitialized=true:NoSchedule
   files:
   - contentFrom:
       secret:
@@ -67,6 +68,21 @@ spec:
     owner: root:root
     path: c:/k/azure.json
     permissions: "0644"
+  - content: |
+      # This script restarts the kubelet service.
+      # It supports both nssm and Windows service configurations,
+      # ensuring a smooth transition between service managers without interruption.
+      # This script will eventually be removed once nssm is no longer used.
+      $scriptPath = "$env:SYSTEMDRIVE/k/RestartKubelet.ps1"
+      if (Test-Path $scriptPath) {
+          Write-Host "Found RestartKubelet.ps1, executing..."
+          & $scriptPath
+      } else {
+          Write-Host "RestartKubelet.ps1 not found. Running fallback command..."
+          & "$env:SYSTEMDRIVE\k\nssm.exe" set kubelet start SERVICE_AUTO_START
+      }
+    path: C:/KubeletRestart_nssm_sc.ps1
+    permissions: "0744"
   - path: C:/defender-exclude-calico.ps1
     permissions: "0744"
     content: |-

templates/flavors/windows-apiserver-ilb/machine-deployment-windows.yaml

@@ -59,14 +59,15 @@ spec:
         - ${AZURE_SSH_PUBLIC_KEY:=""}
       preKubeadmCommands: []
       postKubeadmCommands:
-        - nssm set kubelet start SERVICE_AUTO_START
+        - powershell C:/KubeletRestart_nssm_sc.ps1
         - powershell C:/defender-exclude-calico.ps1
       joinConfiguration:
         nodeRegistration:
           name: '{{ ds.meta_data["local_hostname"] }}'
           criSocket: npipe:////./pipe/containerd-containerd
           kubeletExtraArgs:
             cloud-provider: external
+            register-with-taints: node.cloudprovider.kubernetes.io/uninitialized=true:NoSchedule
             v: "2"
             windows-priorityclass: "ABOVE_NORMAL_PRIORITY_CLASS"
       files:
@@ -77,6 +78,21 @@ spec:
         owner: root:root
         path: c:/k/azure.json
         permissions: "0644"
+      - content: |
+          # This script restarts the kubelet service.
+          # It supports both nssm and Windows service configurations,
+          # ensuring a smooth transition between service managers without interruption.
+          # This script will eventually be removed once nssm is no longer used.
+          $scriptPath = "$env:SYSTEMDRIVE/k/RestartKubelet.ps1"
+          if (Test-Path $scriptPath) {
+              Write-Host "Found RestartKubelet.ps1, executing..."
+              & $scriptPath
+          } else {
+              Write-Host "RestartKubelet.ps1 not found. Running fallback command..."
+              & "$env:SYSTEMDRIVE\k\nssm.exe" set kubelet start SERVICE_AUTO_START
+          }
+        path: C:/KubeletRestart_nssm_sc.ps1
+        permissions: "0744"
       - path: C:/defender-exclude-calico.ps1
         permissions: "0744"
         content: |-

templates/flavors/windows/machine-deployment-windows.yaml

@@ -59,16 +59,17 @@ spec:
         - ${AZURE_SSH_PUBLIC_KEY:=""}
       preKubeadmCommands: []
       postKubeadmCommands:
-        - nssm set kubelet start SERVICE_AUTO_START
+        - powershell C:/KubeletRestart_nssm_sc.ps1
         - powershell C:/defender-exclude-calico.ps1
       joinConfiguration:
         nodeRegistration:
           name: '{{ ds.meta_data["local_hostname"] }}'
           criSocket: npipe:////./pipe/containerd-containerd
           kubeletExtraArgs:
             cloud-provider: external
+            register-with-taints: node.cloudprovider.kubernetes.io/uninitialized=true:NoSchedule
             v: "2"
-            windows-priorityclass: "ABOVE_NORMAL_PRIORITY_CLASS"
+            windows-priorityclass: ABOVE_NORMAL_PRIORITY_CLASS
       files:
       - contentFrom:
           secret:
@@ -77,6 +78,21 @@ spec:
         owner: root:root
         path: c:/k/azure.json
         permissions: "0644"
+      - content: |
+          # This script restarts the kubelet service.
+          # It supports both nssm and Windows service configurations,
+          # ensuring a smooth transition between service managers without interruption.
+          # This script will eventually be removed once nssm is no longer used.
+          $scriptPath = "$env:SYSTEMDRIVE/k/RestartKubelet.ps1"
+          if (Test-Path $scriptPath) {
+              Write-Host "Found RestartKubelet.ps1, executing..."
+              & $scriptPath
+          } else {
+              Write-Host "RestartKubelet.ps1 not found. Running fallback command..."
+              & "$env:SYSTEMDRIVE\k\nssm.exe" set kubelet start SERVICE_AUTO_START
+          }
+        path: C:/KubeletRestart_nssm_sc.ps1
+        permissions: "0744"
       - path: C:/defender-exclude-calico.ps1
         permissions: "0744"
         content: |-