add organizations to certificates

kubernetes-sigs · Oct 5, 2021 · e08fca1 · e08fca1
1 parent 6ab9c28
commit e08fca1
Show file tree

Hide file tree

Showing 5 changed files with 16 additions and 0 deletions.
diff --git a/bootstrap/kubeadm/config/certmanager/certificate.yaml b/bootstrap/kubeadm/config/certmanager/certificate.yaml
@@ -23,3 +23,6 @@ spec:
     kind: Issuer
     name: selfsigned-issuer
   secretName: $(SERVICE_NAME)-cert # this secret will not be prefixed, since it's not managed by kustomize
+  subject:
+    organizations:
+      - k8s-sig-cluster-lifecycle
diff --git a/config/certmanager/certificate.yaml b/config/certmanager/certificate.yaml
@@ -22,3 +22,6 @@ spec:
     kind: Issuer
     name: selfsigned-issuer
   secretName: $(SERVICE_NAME)-cert # this secret will not be prefixed, since it's not managed by kustomize
+  subject:
+    organizations:
+      - k8s-sig-cluster-lifecycle
diff --git a/controlplane/kubeadm/config/certmanager/certificate.yaml b/controlplane/kubeadm/config/certmanager/certificate.yaml
@@ -23,3 +23,6 @@ spec:
     kind: Issuer
     name: selfsigned-issuer
   secretName: $(SERVICE_NAME)-cert # this secret will not be prefixed, since it's not managed by kustomize
+  subject:
+    organizations:
+      - k8s-sig-cluster-lifecycle
diff --git a/docs/book/src/developer/providers/v1alpha4-to-v1beta1.md b/docs/book/src/developer/providers/v1alpha4-to-v1beta1.md
@@ -22,6 +22,10 @@ The core ClusterAPI providers will support upgrade from v1alpha3 **and** v1alpha
 from v1alpha3 and v1alpha4 to v1beta1 have been implemented. If other providers also want to support the upgrade from v1alpha3 **and**
 v1alpha4, the same conversions have to be implemented.
 
+## Certificates
+
+The `serving-cert` certificates now have organization set to `k8s-sig-cluster-lifecycle`.
+
 ## Removed items
 
 ### API Fields 

diff --git a/test/infrastructure/docker/config/certmanager/certificate.yaml b/test/infrastructure/docker/config/certmanager/certificate.yaml
@@ -22,3 +22,6 @@ spec:
     kind: Issuer
     name: selfsigned-issuer
   secretName: $(SERVICE_NAME)-cert # this secret will not be prefixed, since it's not managed by kustomize
+  subject:
+    organizations:
+      - k8s-sig-cluster-lifecycle