Merge pull request #121837 from neolit123/1.29-remove-system-masters-from-kubelet-client-cert
kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
This commit is contained in:
		@@ -291,7 +291,7 @@ func KubeadmCertKubeletClient() *KubeadmCert {
 | 
				
			|||||||
		config: pkiutil.CertConfig{
 | 
							config: pkiutil.CertConfig{
 | 
				
			||||||
			Config: certutil.Config{
 | 
								Config: certutil.Config{
 | 
				
			||||||
				CommonName:   kubeadmconstants.APIServerKubeletClientCertCommonName,
 | 
									CommonName:   kubeadmconstants.APIServerKubeletClientCertCommonName,
 | 
				
			||||||
				Organization: []string{kubeadmconstants.SystemPrivilegedGroup},
 | 
									Organization: []string{kubeadmconstants.ClusterAdminsGroupAndClusterRoleBinding},
 | 
				
			||||||
				Usages:       []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
 | 
									Usages:       []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
 | 
				
			||||||
			},
 | 
								},
 | 
				
			||||||
		},
 | 
							},
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user