github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-03 09:22:44 +00:00
Code Issues Projects Releases Wiki Activity

kubeadm: remove 'system:masters' organization from apiserver-etcd-client certificate

Browse Source
This commit is contained in:
SataQiu 2023-09-08 15:01:00 +08:00
parent f8ca582a06
commit 3e2bad02dc
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cmd/kubeadm/app/phases/certs/certlist.go
View File

@ -409,9 +409,8 @@ func KubeadmCertEtcdAPIClient() *KubeadmCert {
CAName: "etcd-ca", CAName: "etcd-ca",
config: pkiutil.CertConfig{ config: pkiutil.CertConfig{
Config: certutil.Config{ Config: certutil.Config{
CommonName: kubeadmconstants.APIServerEtcdClientCertCommonName, CommonName: kubeadmconstants.APIServerEtcdClientCertCommonName,
Organization: []string{kubeadmconstants.SystemPrivilegedGroup}, Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
}, },
}, },
} }