[fix] Add Alternate names for k8s services (#834)

Signed-off-by: Rahul M Chheda <rahul.chheda@accurics.com>
tenable · Jun 3, 2021 · 1229942 · 1229942
1 parent b899922
commit 1229942
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/deploy/helm/templates/_cert_related_resources.tpl b/deploy/helm/templates/_cert_related_resources.tpl
@@ -1,6 +1,6 @@
 {{- define "certificate_related_deployments" }}
 {{- if and (eq "" .Values.secrets.tlsCertFilePath) (eq "" .Values.secrets.tlsKeyFilePath) }}
-{{- $altNames := list ( printf "%s.%s.svc.cluster.local" .Values.name .Release.Namespace ) }}
+{{- $altNames := list ( printf "%s.%s.svc" .Values.name .Release.Namespace ) ( printf "%s.%s.svc.cluster.local" .Values.name .Release.Namespace ) }}
 {{- $ca := genCA ( printf "%s-server-ca" "terrascan" ) 365 }}
 {{- $certterrascan := genSignedCert ( printf "%s-server" "terrascan" ) nil $altNames 365 $ca }}
 {{- $_ := set . "cert" $certterrascan.Cert -}}