tree 779db36b8e11585d9cfccf5428433104fd10deb8
parent beffa36e11d3f4791286c99d8e720a8635f1267e
author Andrey Shestakov <ashestakov@mirantis.com> 1514406551 +0200
committer Andrey Shestakov <ashestakov@mirantis.com> 1515154092 +0200

Split k8s client certificate by services.

Each k8s service should have own CN for RBAC.
kubelet should belong to group system:nodes.

Change-Id: If1c9f5820af2801909c42ebc56bd127ae42ff4ec