upstream/kubernetes
1
0
Fork 0
mirror of https://github.com/kubernetes/kubernetes.git synced 2026-06-09 08:55:55 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #120521 from SataQiu/clean-kubeadm-20230908

Browse source 
kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate
This commit is contained in:
Kubernetes Prow Robot 2023-09-08 05:26:25 -07:00 committed by GitHub
commit 4c0d37e767
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
cmd/kubeadm/app/phases/certs/certlist.go
View file

@ -409,9 +409,8 @@ func KubeadmCertEtcdAPIClient() *KubeadmCert {
CAName: "etcd-ca",
config: pkiutil.CertConfig{
Config: certutil.Config{
CommonName: kubeadmconstants.APIServerEtcdClientCertCommonName,
Organization: []string{kubeadmconstants.SystemPrivilegedGroup},
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
CommonName: kubeadmconstants.APIServerEtcdClientCertCommonName,
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
},
},
}