Merge pull request #328 from hexfusion/fix-peer-san

Bug 1830505: pkg/operator/etcdcertsigner: fix DNS SAN for peer certificates
openshift · May 2, 2020 · b752590 · b752590
2 parents 7b7e544 + 4d18a6d
commit b752590
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/pkg/operator/etcdcertsigner/etcdcertsignercontroller.go b/pkg/operator/etcdcertsigner/etcdcertsignercontroller.go
@@ -234,7 +234,10 @@ func (c *EtcdCertSignerController) createSecretForNode(node *corev1.Node, record
 	if err != nil {
 		return err
 	}
-	peerHostNames := append([]string{"localhost", etcdDiscoveryDomain}, nodeInternalIPs...)
+	peerHostNames := append([]string{
+		"localhost",
+		"*." + etcdDiscoveryDomain,
+	}, nodeInternalIPs...)
 	serverHostNames := append([]string{
 		"localhost",
 		"etcd.kube-system.svc",