github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-08-15 06:43:54 +00:00
Code Issues Projects Releases Wiki Activity

Merge pull request #119859 from SataQiu/fix-healthcheck-client-cert-20230809

Browse Source 
kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate
This commit is contained in:
Kubernetes Prow Robot 2023-08-16 01:22:26 -07:00 committed by GitHub
commit 85e018634c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
cmd/kubeadm/app/phases/certs/certlist.go
View File

@ -394,7 +394,6 @@ func KubeadmCertEtcdHealthcheck() *KubeadmCert {
config: pkiutil.CertConfig{ config: pkiutil.CertConfig{
Config: certutil.Config{ Config: certutil.Config{
CommonName: kubeadmconstants.EtcdHealthcheckClientCertCommonName, CommonName: kubeadmconstants.EtcdHealthcheckClientCertCommonName,
Organization: []string{kubeadmconstants.SystemPrivilegedGroup},
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth}, Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
}, },
}, },