kubelet: fix rbac

songhui1984 · Jul 3, 2018 · 0db276f · 0db276f
1 parent a8a099f
commit 0db276f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/07-2.kubelet.md b/07-2.kubelet.md
@@ -339,14 +339,14 @@ cat > csr-crb.yaml <<EOF
    name: system:certificates.k8s.io:certificatesigningrequests:nodeclient
    apiGroup: rbac.authorization.k8s.io
 ---
- # To let a node of the group "system:bootstrappers" renew its own credentials
+ # To let a node of the group "system:nodes" renew its own credentials
  kind: ClusterRoleBinding
  apiVersion: rbac.authorization.k8s.io/v1
  metadata:
    name: node-client-cert-renewal
  subjects:
  - kind: Group
-   name: system:bootstrappers
+   name: system:nodes
    apiGroup: rbac.authorization.k8s.io
  roleRef:
    kind: ClusterRole