github/kubernetes
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Merge pull request #121837 from neolit123/1.29-remove-system-masters-from-kubelet-client-cert

Browse Source 
kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
This commit is contained in:
Kubernetes Prow Robot
2023-11-10 17:56:07 +01:00
committed by GitHub
parent 5ce0bd95cc 2780060a78
commit 1f3256bbac
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
cmd/kubeadm/app/phases/certs/certlist.go
View File

@@ -291,7 +291,7 @@ func KubeadmCertKubeletClient() *KubeadmCert {
config: pkiutil.CertConfig{
Config: certutil.Config{
CommonName: kubeadmconstants.APIServerKubeletClientCertCommonName,
Organization: []string{kubeadmconstants.SystemPrivilegedGroup},
Organization: []string{kubeadmconstants.ClusterAdminsGroupAndClusterRoleBinding},
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
},
},