Merge pull request #121837 from neolit123/1.29-remove-system-masters-from-kubelet-client-cert
kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
This commit is contained in:
@@ -291,7 +291,7 @@ func KubeadmCertKubeletClient() *KubeadmCert {
|
|||||||
config: pkiutil.CertConfig{
|
config: pkiutil.CertConfig{
|
||||||
Config: certutil.Config{
|
Config: certutil.Config{
|
||||||
CommonName: kubeadmconstants.APIServerKubeletClientCertCommonName,
|
CommonName: kubeadmconstants.APIServerKubeletClientCertCommonName,
|
||||||
Organization: []string{kubeadmconstants.SystemPrivilegedGroup},
|
Organization: []string{kubeadmconstants.ClusterAdminsGroupAndClusterRoleBinding},
|
||||||
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
|
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
|
||||||
},
|
},
|
||||||
},
|
},
|
||||||
|
Reference in New Issue
Block a user