Merge pull request kubernetes#121837 from neolit123/1.29-remove-system-masters-from-kubelet-client-cert

kubeadm: change SystemPrivilegedGroup in apiserve-kubelet-client.crt

Author: k8s-ci-robot

cmd/kubeadm/app/phases/certs/certlist.go

@@ -291,7 +291,7 @@ func KubeadmCertKubeletClient() *KubeadmCert {
 		config: pkiutil.CertConfig{
 			Config: certutil.Config{
 				CommonName:   kubeadmconstants.APIServerKubeletClientCertCommonName,
-				Organization: []string{kubeadmconstants.SystemPrivilegedGroup},
+				Organization: []string{kubeadmconstants.ClusterAdminsGroupAndClusterRoleBinding},
 				Usages:       []x509.ExtKeyUsage{x509.ExtKeyUsageClientAuth},
 			},
 		},