scl/kubespray
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Force kubelet certificates to be generated as lowercase (#1886)

Browse Source 
All nodes get converted to lowercase, so certs should set
CN with lowercase as well.
This commit is contained in:
Matthew Mosesohn
2017-10-27 15:58:25 +01:00
committed by GitHub
parent 84cf6fbe83
commit fe81bba08d
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
roles/kubernetes/secrets/files/make-ssl.sh
View File

@ -105,14 +105,13 @@ fi
if [ -n "$HOSTS" ]; then if [ -n "$HOSTS" ]; then
for host in $HOSTS; do for host in $HOSTS; do
cn="${host%%.*}" cn="${host%%.*}"
gen_key_and_cert "node-${host}" "/CN=system:node:${cn}/O=system:nodes" gen_key_and_cert "node-${host}" "/CN=system:node:${cn,,}/O=system:nodes"
done done
fi fi
# system:node-proxier # system:node-proxier
if [ -n "$HOSTS" ]; then if [ -n "$HOSTS" ]; then
for host in $HOSTS; do for host in $HOSTS; do
cn="${host%%.*}"
# kube-proxy # kube-proxy
gen_key_and_cert "kube-proxy-${host}" "/CN=system:kube-proxy/O=system:node-proxier" gen_key_and_cert "kube-proxy-${host}" "/CN=system:kube-proxy/O=system:node-proxier"
done done