Browse Source

Force kubelet certificates to be generated as lowercase (#1886)

All nodes get converted to lowercase, so certs should set
CN with lowercase as well.
pull/1889/head
Matthew Mosesohn 7 years ago
committed by GitHub
parent
commit
fe81bba08d
1 changed files with 1 additions and 2 deletions
  1. 3
      roles/kubernetes/secrets/files/make-ssl.sh

3
roles/kubernetes/secrets/files/make-ssl.sh

@ -105,14 +105,13 @@ fi
if [ -n "$HOSTS" ]; then
for host in $HOSTS; do
cn="${host%%.*}"
gen_key_and_cert "node-${host}" "/CN=system:node:${cn}/O=system:nodes"
gen_key_and_cert "node-${host}" "/CN=system:node:${cn,,}/O=system:nodes"
done
fi
# system:node-proxier
if [ -n "$HOSTS" ]; then
for host in $HOSTS; do
cn="${host%%.*}"
# kube-proxy
gen_key_and_cert "kube-proxy-${host}" "/CN=system:kube-proxy/O=system:node-proxier"
done

Loading…
Cancel
Save