From fd4d3be4d4fa0685da2fd4d2ef31e9d534f336f1 Mon Sep 17 00:00:00 2001 From: Aaron Dewes Date: Mon, 24 Mar 2025 14:54:38 +0100 Subject: [PATCH] fix: Use proper key when signing kubelet certificate I assume this was a mistake when copying and the kubelet key should have been used here. This bug was introduced in #11471. Signed-off-by: Aaron Dewes (cherry picked from commit 147a3c0daf05f630da26ef63d865d429e866fe8e) Signed-off-by: Brad Davidson --- pkg/server/handlers/handlers.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pkg/server/handlers/handlers.go b/pkg/server/handlers/handlers.go index 9681a4178a..162e2750a4 100644 --- a/pkg/server/handlers/handlers.go +++ b/pkg/server/handlers/handlers.go @@ -95,7 +95,7 @@ func ClientKubeletCert(control *config.Control, auth nodepassword.NodeAuthValida util.SendError(err, resp, req, errCode) return } - signAndSend(resp, req, control.Runtime.ClientCA, control.Runtime.ClientCAKey, control.Runtime.ClientKubeProxyKey, certutil.Config{ + signAndSend(resp, req, control.Runtime.ClientCA, control.Runtime.ClientCAKey, control.Runtime.ClientKubeletKey, certutil.Config{ CommonName: "system:node:" + nodeName, Organization: []string{user.NodesGroup}, Usages: []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},