Browse Source
Fix: The Hubble certificate is faulty because the cluster name is hard coded (#9340)
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
pull/9341/head
biqiang Wu
2 years ago
committed by
GitHub
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with
2 additions and
2 deletions
-
roles/network_plugin/cilium/templates/hubble/cronjob.yml.j2
-
roles/network_plugin/cilium/templates/hubble/job.yml.j2
|
|
@ -37,7 +37,7 @@ spec: |
|
|
- "--hubble-ca-config-map-create=true" |
|
|
- "--hubble-ca-config-map-create=true" |
|
|
- "--hubble-ca-config-map-name=hubble-ca-cert" |
|
|
- "--hubble-ca-config-map-name=hubble-ca-cert" |
|
|
- "--hubble-server-cert-generate=true" |
|
|
- "--hubble-server-cert-generate=true" |
|
|
- "--hubble-server-cert-common-name=*.default.hubble-grpc.cilium.io" |
|
|
|
|
|
|
|
|
- "--hubble-server-cert-common-name=*.{{ cilium_cluster_name }}.hubble-grpc.cilium.io" |
|
|
- "--hubble-server-cert-validity-duration=94608000s" |
|
|
- "--hubble-server-cert-validity-duration=94608000s" |
|
|
- "--hubble-server-cert-secret-name=hubble-server-certs" |
|
|
- "--hubble-server-cert-secret-name=hubble-server-certs" |
|
|
- "--hubble-relay-client-cert-generate=true" |
|
|
- "--hubble-relay-client-cert-generate=true" |
|
|
|
|
|
@ -33,7 +33,7 @@ spec: |
|
|
- "--hubble-ca-config-map-create=true" |
|
|
- "--hubble-ca-config-map-create=true" |
|
|
- "--hubble-ca-config-map-name=hubble-ca-cert" |
|
|
- "--hubble-ca-config-map-name=hubble-ca-cert" |
|
|
- "--hubble-server-cert-generate=true" |
|
|
- "--hubble-server-cert-generate=true" |
|
|
- "--hubble-server-cert-common-name=*.default.hubble-grpc.cilium.io" |
|
|
|
|
|
|
|
|
- "--hubble-server-cert-common-name=*.{{ cilium_cluster_name }}.hubble-grpc.cilium.io" |
|
|
- "--hubble-server-cert-validity-duration=94608000s" |
|
|
- "--hubble-server-cert-validity-duration=94608000s" |
|
|
- "--hubble-server-cert-secret-name=hubble-server-certs" |
|
|
- "--hubble-server-cert-secret-name=hubble-server-certs" |
|
|
- "--hubble-relay-client-cert-generate=true" |
|
|
- "--hubble-relay-client-cert-generate=true" |
|
|
|
