github
/
k3s
mirror of https://github.com/k3s-io/k3s
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #1768 from brandond/fix_1764 

Configure default signer implementation to use ClientCA instead of ServerCA
pull/2008/head
Brandon Davidson 2020-07-07 16:52:14 -07:00 committed by GitHub
parent 4637816f40 71561ecda2
commit 538842ffdc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkg/daemons/control/server.go
View File

@ -133,8 +133,8 @@ func controllerManager(cfg *config.Control, runtime *config.ControlRuntime) erro
"bind-address": localhostIP.String(), "bind-address": localhostIP.String(),
"secure-port": "0", "secure-port": "0",
"use-service-account-credentials": "true", "use-service-account-credentials": "true",
"cluster-signing-cert-file": runtime.ServerCA, "cluster-signing-cert-file": runtime.ClientCA,
"cluster-signing-key-file": runtime.ServerCAKey, "cluster-signing-key-file": runtime.ClientCAKey,
} }
if cfg.NoLeaderElect { if cfg.NoLeaderElect {
argsMap["leader-elect"] = "false" argsMap["leader-elect"] = "false"