fix generated kubeconfig bug (#2776)

Signed-off-by: Jeff <zw0948@gmail.com>
This commit is contained in:
zryfish
2020-08-05 17:48:05 +08:00
committed by GitHub
parent dbc33fe5d2
commit 9ef0a87e4a

View File

@@ -200,7 +200,7 @@ func (o *operator) createCSR(username string) ([]byte, error) {
CommonName: username, CommonName: username,
Organization: nil, Organization: nil,
AltNames: certutil.AltNames{}, AltNames: certutil.AltNames{},
Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth}, Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
} }
x509csr, x509key, err := pkiutil.NewCSRAndKey(csrConfig) x509csr, x509key, err := pkiutil.NewCSRAndKey(csrConfig)
if err != nil { if err != nil {
@@ -247,7 +247,7 @@ func (o *operator) createCSR(username string) ([]byte, error) {
}, },
Spec: certificatesv1beta1.CertificateSigningRequestSpec{ Spec: certificatesv1beta1.CertificateSigningRequestSpec{
Request: csr, Request: csr,
Usages: []certificatesv1beta1.KeyUsage{certificatesv1beta1.UsageServerAuth, certificatesv1beta1.UsageKeyEncipherment, certificatesv1beta1.UsageClientAuth, certificatesv1beta1.UsageDigitalSignature}, Usages: []certificatesv1beta1.KeyUsage{certificatesv1beta1.UsageKeyEncipherment, certificatesv1beta1.UsageClientAuth, certificatesv1beta1.UsageDigitalSignature},
Username: username, Username: username,
Groups: []string{user.AllAuthenticated}, Groups: []string{user.AllAuthenticated},
}, },