init: use a proper cn for the aggregator client certA

The current cert creation tooling might be confused if we did not provide a service name. I'm supplying "remove-this" as this code should be refactored soon.A The current cert creation tooling might be confused if we did not provide a service name. I'm supplying "remove-this" as this code should be refactored soon.
PinkDiamond1 · Sep 16, 2022 · c57d8e4 · c57d8e4
1 parent 50da273
commit c57d8e4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pkg/cmd/init.go b/pkg/cmd/init.go
@@ -210,9 +210,9 @@ func initCerts(cfg *config.MicroshiftConfig) ([]byte, *cryptomaterial.Certificat
  "service-account.crt", "service-account.key"); err != nil {
  return nil, nil, err
  }
- if err := util.GenCerts("system:masters", filepath.Join(cfg.DataDir, "/certs/kube-apiserver/secrets/aggregator-client"),
+ if err := util.GenCerts("system:openshift-aggregator", filepath.Join(cfg.DataDir, "/certs/kube-apiserver/secrets/aggregator-client"),
  "tls.crt", "tls.key",
- []string{"system:admin", "system:masters"}); err != nil {
+ []string{"remove-this"}); err != nil {
  return nil, nil, err
  }