From 158d441ea06cf9d8fbf43d25a40c8d763b64329e Mon Sep 17 00:00:00 2001
From: Sumit Kumar <sumitkumar@kgpian.iitkgp.ac.in>
Date: Fri, 9 May 2025 14:17:00 +0530
Subject: [PATCH] rke2: fix validation message for agent token requirement

The message incorrectly stated that 'agentToken' or 'agentTokenFile' should be set when role is 'agent', which is misleading. Corrected it to state that these should NOT be set for the 'agent' role.
---
 nixos/modules/services/cluster/rke2/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/modules/services/cluster/rke2/default.nix b/nixos/modules/services/cluster/rke2/default.nix
index 1c7ef3af1c8a..6e0cfd9df3fe 100644
--- a/nixos/modules/services/cluster/rke2/default.nix
+++ b/nixos/modules/services/cluster/rke2/default.nix
@@ -228,7 +228,7 @@ in
       }
       {
         assertion = cfg.role == "agent" -> !(cfg.agentTokenFile != null || cfg.agentToken != "");
-        message = "agentToken or agentTokenFile should be set if role is 'agent'";
+        message = "agentToken or agentTokenFile should NOT be set if role is 'agent'";
       }
       {
         assertion = cfg.role == "agent" -> !(cfg.disable != [ ]);