chore: make organization selection an interface

Making organization a interface for preparing to avoid giving
system:masters access to the talosctl kubeconfig generated certificate.

Signed-off-by: Niklas Wik <niklas.wik@nokia.com>
Signed-off-by: Andrey Smirnov <andrey.smirnov@talos-systems.com>

internal/app/machined/pkg/controllers/secrets/kubernetes.go

@@ -349,3 +349,7 @@ func (adapter *generateAdminAdapter) CertLifetime() time.Duration {
 func (adapter *generateAdminAdapter) CommonName() string {
 	return constants.KubernetesTalosAdminCertCommonName
 }
+
+func (adapter *generateAdminAdapter) CertOrganization() string {
+	return constants.KubernetesAdminCertOrganization
+}

pkg/kubeconfig/generate.go

@@ -16,7 +16,6 @@ import (
 	"github.com/siderolabs/crypto/x509"
 
 	"github.com/siderolabs/talos/pkg/machinery/config"
-	"github.com/siderolabs/talos/pkg/machinery/constants"
 )
 
 const kubeConfigTemplate = `apiVersion: v1
@@ -59,7 +58,7 @@ func GenerateAdmin(config GenerateAdminInput, out io.Writer) error {
 			CertificateLifetime: config.AdminKubeconfig().CertLifetime(),
 
 			CommonName:   config.AdminKubeconfig().CommonName(),
-			Organization: constants.KubernetesAdminCertOrganization,
+			Organization: config.AdminKubeconfig().CertOrganization(),
 
 			Endpoint:    config.Endpoint().String(),
 			Username:    "admin",

pkg/machinery/config/provider.go

@@ -521,6 +521,7 @@ type ExternalCloudProvider interface {
 // AdminKubeconfig defines settings for admin kubeconfig.
 type AdminKubeconfig interface {
 	CommonName() string
+	CertOrganization() string
 	CertLifetime() time.Duration
 }
 

pkg/machinery/config/types/v1alpha1/v1alpha1_provider.go

@@ -1247,6 +1247,11 @@ func (a *AdminKubeconfigConfig) CommonName() string {
 	return constants.KubernetesAdminCertCommonName
 }
 
+// CertOrganization implements the config.Provider interface.
+func (a *AdminKubeconfigConfig) CertOrganization() string {
+	return constants.KubernetesAdminCertOrganization
+}
+
 // Endpoints implements the config.Provider interface.
 func (r *RegistryMirrorConfig) Endpoints() []string {
 	return r.MirrorEndpoints