Merge pull request #1170 from ankon/pr/admin-masters

Set /O=system:masters for the admin certificate DN

README.md

@@ -209,7 +209,7 @@ To change the `MaxPods` setting to 5 on the Kubelet, pass this flag: `--extra-co
 
 This feature also supports nested structs. To change the `LeaderElection.LeaderElect` setting to `true` on the scheduler, pass this flag: `--extra-config=scheduler.LeaderElection.LeaderElect=true`.
 
-To set the `AuthorizationMode` on the `apiserver` to `RBAC`, you can use: `--extra-config=apiserver.GenericServerRunOptions.AuthorizationMode=RBAC`. You should use `--extra-config=apiserver.GenericServerRunOptions.AuthorizationRBAC,SuperUser=minikube` as well in that case.
+To set the `AuthorizationMode` on the `apiserver` to `RBAC`, you can use: `--extra-config=apiserver.GenericServerRunOptions.AuthorizationMode=RBAC`.
 
 To enable all alpha feature gates, you can use: `--feature-gates=AllAlpha=true`
 

pkg/util/crypto.go

@@ -89,7 +89,8 @@ func GenerateSignedCert(certPath, keyPath string, ips []net.IP, alternateDNS []s
 	template := x509.Certificate{
 		SerialNumber: big.NewInt(2),
 		Subject: pkix.Name{
-			CommonName: "minikube",
+			CommonName:   "minikube",
+			Organization: []string{"system:masters"},
 		},
 		NotBefore: time.Now(),
 		NotAfter:  time.Now().Add(time.Hour * 24 * 365),