From ea3ed2b6e1cd4c3c3eac097747fc8f4efca317bd Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Tomas=20Daba=C5=A1inskas?= <tomas.it@gmail.com>
Date: Wed, 7 Oct 2020 23:17:47 +1100
Subject: [PATCH] Update managing-tls-in-a-cluster.md to include fields in
 certificate signing request (or CSR) required by
 kubernetes.io/kubelet-serving signer policy

---
 content/en/docs/tasks/tls/managing-tls-in-a-cluster.md | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/content/en/docs/tasks/tls/managing-tls-in-a-cluster.md b/content/en/docs/tasks/tls/managing-tls-in-a-cluster.md
index e35fddcd46..62e5cfc9cf 100644
--- a/content/en/docs/tasks/tls/managing-tls-in-a-cluster.md
+++ b/content/en/docs/tasks/tls/managing-tls-in-a-cluster.md
@@ -76,11 +76,16 @@ cat <<EOF | cfssl genkey - | cfssljson -bare server
     "192.0.2.24",
     "10.0.34.2"
   ],
-  "CN": "my-pod.my-namespace.pod.cluster.local",
+  "CN": "system:node:my-pod.my-namespace.pod.cluster.local",
   "key": {
     "algo": "ecdsa",
     "size": 256
-  }
+  },
+  "names": [
+    {
+      "O": "system:nodes"
+    }
+  ]
 }
 EOF
 ```