From fe81bba08de5c5fa0ee338c9414ed6a57a80049f Mon Sep 17 00:00:00 2001
From: Matthew Mosesohn <matthew.mosesohn@gmail.com>
Date: Fri, 27 Oct 2017 15:58:25 +0100
Subject: [PATCH] Force kubelet certificates to be generated as lowercase
 (#1886)

All nodes get converted to lowercase, so certs should set
CN with lowercase as well.
---
 roles/kubernetes/secrets/files/make-ssl.sh | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/roles/kubernetes/secrets/files/make-ssl.sh b/roles/kubernetes/secrets/files/make-ssl.sh
index e5277c768..9139ce98f 100755
--- a/roles/kubernetes/secrets/files/make-ssl.sh
+++ b/roles/kubernetes/secrets/files/make-ssl.sh
@@ -105,14 +105,13 @@ fi
 if [ -n "$HOSTS" ]; then
     for host in $HOSTS; do
         cn="${host%%.*}"
-        gen_key_and_cert "node-${host}" "/CN=system:node:${cn}/O=system:nodes"
+        gen_key_and_cert "node-${host}" "/CN=system:node:${cn,,}/O=system:nodes"
     done
 fi
 
 # system:node-proxier
 if [ -n "$HOSTS" ]; then
     for host in $HOSTS; do
-        cn="${host%%.*}"
         # kube-proxy
         gen_key_and_cert "kube-proxy-${host}" "/CN=system:kube-proxy/O=system:node-proxier"
     done