Adding cluster_name to api cert alt name for vault

6 years ago · 3d819a6edd
1 changed files with 1 additions and 1 deletions
--- a/roles/kubernetes/secrets/tasks/gen_certs_vault.yml
+++ b/roles/kubernetes/secrets/tasks/gen_certs_vault.yml
@ -25,7 +25,7 @@
    kube_cert_alt_names: >-
      {{
      groups['kube-master'] +
-      ['kubernetes.default.svc.cluster.local', 'kubernetes.default.svc', 'kubernetes.default', 'kubernetes'] +
+      ['kubernetes.default.svc.'+cluster_name, 'kubernetes.default.svc', 'kubernetes.default', 'kubernetes'] +
      ['localhost']
      }}
  run_once: true