Merge pull request #1768 from brandond/fix_1764

Configure default signer implementation to use ClientCA instead of ServerCA

Merge pull request #1768 from brandond/fix_1764
538842ff · Brandon Davidson · GitHub · 4637816f · 71561ecd · 538842ff
Unverified Commit 538842ff authored Jul 07, 2020 by Brandon Davidson Committed by GitHub Jul 07, 2020
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

server.go pkg/daemons/control/server.go +2 -2

No files found.
--- a/pkg/daemons/control/server.go
+++ b/pkg/daemons/control/server.go
@@ -133,8 +133,8 @@ func controllerManager(cfg *config.Control, runtime *config.ControlRuntime) erro
 		"bind-address":                     localhostIP.String(),
 		"secure-port":                      "0",
 		"use-service-account-credentials":  "true",
-		"cluster-signing-cert-file":        runtime.ServerCA,
-		"cluster-signing-key-file":         runtime.ServerCAKey,
+		"cluster-signing-cert-file":        runtime.ClientCA,
+		"cluster-signing-key-file":         runtime.ClientCAKey,
 	}
 	if cfg.NoLeaderElect {
 		argsMap["leader-elect"] = "false"