From 9ef0a87e4af125fc0f34ce2458c3045fb325576a Mon Sep 17 00:00:00 2001 From: zryfish Date: Wed, 5 Aug 2020 17:48:05 +0800 Subject: [PATCH] fix generated kubeconfig bug (#2776) Signed-off-by: Jeff --- pkg/models/kubeconfig/kubeconfig.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/models/kubeconfig/kubeconfig.go b/pkg/models/kubeconfig/kubeconfig.go index e6657478b..35b31f9e7 100644 --- a/pkg/models/kubeconfig/kubeconfig.go +++ b/pkg/models/kubeconfig/kubeconfig.go @@ -200,7 +200,7 @@ func (o *operator) createCSR(username string) ([]byte, error) { CommonName: username, Organization: nil, AltNames: certutil.AltNames{}, - Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth}, + Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth}, } x509csr, x509key, err := pkiutil.NewCSRAndKey(csrConfig) if err != nil { @@ -247,7 +247,7 @@ func (o *operator) createCSR(username string) ([]byte, error) { }, Spec: certificatesv1beta1.CertificateSigningRequestSpec{ Request: csr, - Usages: []certificatesv1beta1.KeyUsage{certificatesv1beta1.UsageServerAuth, certificatesv1beta1.UsageKeyEncipherment, certificatesv1beta1.UsageClientAuth, certificatesv1beta1.UsageDigitalSignature}, + Usages: []certificatesv1beta1.KeyUsage{certificatesv1beta1.UsageKeyEncipherment, certificatesv1beta1.UsageClientAuth, certificatesv1beta1.UsageDigitalSignature}, Username: username, Groups: []string{user.AllAuthenticated}, },