From d68a41c6877009841a2314108267e64d1cacd1bd Mon Sep 17 00:00:00 2001
From: Denis Krivak <inbox@dkrv.me>
Date: Tue, 8 Apr 2025 10:08:57 +0200
Subject: [PATCH] Fix openssl config for kube-api

---
 ca.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ca.conf b/ca.conf
index 8bfcaed..06be8cc 100644
--- a/ca.conf
+++ b/ca.conf
@@ -174,7 +174,7 @@ req_extensions     = kube-api-server_req_extensions
 basicConstraints     = CA:FALSE
 extendedKeyUsage     = clientAuth, serverAuth
 keyUsage             = critical, digitalSignature, keyEncipherment
-nsCertType           = client
+nsCertType           = server
 nsComment            = "Kube API Server Certificate"
 subjectAltName       = @kube-api-server_alt_names
 subjectKeyIdentifier = hash