Skip to content

Commit

Permalink
Helm: Add SAN to a certificate of liqo-metric-agent
Browse files Browse the repository at this point in the history
Add SAN to a certificate since kube-apiserver keeps outputting like a following message if the cert have no SAN.

I1219 11:45:34.682981       1 server_cert_deprecations.go:68] missing-san.invalid-cert.kubernetes.io: invalid certificate detected connecting to "10.2.133.101": relies on a legacy Common Name field instead of the SAN extension for subject validation
  • Loading branch information
kariya-mitsuru authored and adamjensenbot committed Dec 19, 2023
1 parent a328a04 commit cddbc8f
Showing 1 changed file with 2 additions and 0 deletions.
2 changes: 2 additions & 0 deletions deployments/liqo/templates/liqo-metric-agent-deployment.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -54,6 +54,8 @@ spec:
- /certs/key.pem
- -out
- /certs/cert.pem
- -addext
- subjectAltName = DNS:{{ include "liqo.prefixedName" $metricConfig }}.{{ .Release.Namespace }}.svc
resources: {{- toYaml .Values.metricAgent.pod.resources | nindent 12 }}
containers:
- image: {{ .Values.metricAgent.imageName }}{{ include "liqo.suffix" $metricConfig }}:{{ include "liqo.version" $metricConfig }}
Expand Down

0 comments on commit cddbc8f

Please sign in to comment.