Merge pull request #121837 from neolit123/1.29-remove-system-masters-from-kubelet-client-cert

kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt
This commit is contained in:
Kubernetes Prow Robot 2023-11-10 17:56:07 +01:00 committed by GitHub
commit 1f3256bbac
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -291,7 +291,7 @@ func KubeadmCertKubeletClient() *KubeadmCert {
config: pkiutil.CertConfig{
Config: certutil.Config{
CommonName: kubeadmconstants.APIServerKubeletClientCertCommonName,
Organization: []string{kubeadmconstants.SystemPrivilegedGroup},
Organization: []string{kubeadmconstants.ClusterAdminsGroupAndClusterRoleBinding},
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
},
},