Merge pull request #119859 from SataQiu/fix-healthcheck-client-cert-20230809

kubeadm: remove 'system:masters' organization from etcd/healthcheck-client certificate
This commit is contained in:
Kubernetes Prow Robot
2023-08-16 01:22:26 -07:00
committed by GitHub

View File

@@ -394,7 +394,6 @@ func KubeadmCertEtcdHealthcheck() *KubeadmCert {
config: pkiutil.CertConfig{
Config: certutil.Config{
CommonName: kubeadmconstants.EtcdHealthcheckClientCertCommonName,
Organization: []string{kubeadmconstants.SystemPrivilegedGroup},
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
},
},