Merge pull request #662 from cloudfoundry/logging-cert-dns-names

Logging cert dns names
cloudfoundry · Jan 18, 2019 · 4146395 · 4146395
2 parents 769b054 + 6f2ac74
commit 4146395
Showing 1 changed file with 27 additions and 1 deletion.
diff --git a/cf-deployment.yml b/cf-deployment.yml
@@ -1948,6 +1948,10 @@ variables:
     common_name: statsdinjector
     extended_key_usage:
     - client_auth
+    alternative_names:
+    - uaa.service.cf.internal
+    - api.service.cf.internal
+    - scheduler.service.cf.internal
 - name: loggregator_tls_agent
   type: certificate
   options:
@@ -1964,6 +1968,8 @@ variables:
     extended_key_usage:
     - client_auth
     - server_auth
+    alternative_names:
+    - doppler.service.cf.internal
 - name: loggregator_tls_tc
   type: certificate
   options:
@@ -1972,20 +1978,26 @@ variables:
     extended_key_usage:
     - client_auth
     - server_auth
+    alternative_names:
+    - log-api.service.cf.internal
 - name: loggregator_tls_cc_tc
   type: certificate
   options:
     ca: service_cf_internal_ca
     common_name: trafficcontroller
     extended_key_usage:
     - client_auth
+    alternative_names:
+    - log-api.service.cf.internal
 - name: loggregator_rlp_gateway_tls_cc
   type: certificate
   options:
     ca: service_cf_internal_ca
     common_name: rlp-gateway
     extended_key_usage:
     - client_auth
+    alternative_names:
+    - log-api.service.cf.internal
 - name: loggregator_tls_rlp
   type: certificate
   options:
@@ -1994,13 +2006,17 @@ variables:
     extended_key_usage:
     - client_auth
     - server_auth
+    alternative_names:
+    - log-api.service.cf.internal
 - name: loggregator_rlp_gateway
   type: certificate
   options:
     ca: loggregator_ca
     common_name: rlp_gateway
     extended_key_usage:
     - client_auth
+    alternative_names:
+    - log-api.service.cf.internal
 - name: adapter_rlp_tls
   type: certificate
   options:
@@ -2009,6 +2025,8 @@ variables:
     extended_key_usage:
     - client_auth
     - server_auth
+    alternative_names:
+    - adapter.service.cf.internal
 - name: scheduler_api_tls
   type: certificate
   options:
@@ -2017,6 +2035,8 @@ variables:
     extended_key_usage:
     - client_auth
     - server_auth
+    alternative_names:
+    - scheduler.service.cf.internal
 - name: adapter_tls
   type: certificate
   options:
@@ -2025,21 +2045,27 @@ variables:
     extended_key_usage:
     - server_auth
     - client_auth
+    alternative_names:
+    - adapter.service.cf.internal
 - name: scheduler_client_tls
   type: certificate
   options:
     ca: loggregator_ca
     common_name: ss-scheduler
     extended_key_usage:
     - client_auth
+    alternative_names:
+    - scheduler.service.cf.internal
 - name: logs_provider
+  type: certificate
   options:
     ca: loggregator_ca
     common_name: log-cache
     extended_key_usage:
     - client_auth
     - server_auth
-  type: certificate
+    alternative_names:
+    - doppler.service.cf.internal
 - name: log_cache_ca
   options:
     common_name: log-cache