From cb20c317aee5754746047578c9902c95a3c454f8 Mon Sep 17 00:00:00 2001 From: Pete Birley Date: Tue, 4 Sep 2018 14:44:48 -0500 Subject: [PATCH] TLS: Ensure CN is included in list of DNS alt names This PS udpates the TLS cert gen function to ensure the CN is included in the list of DNS alt names within the cert. Change-Id: Iaec9207e61884972d49dee84af24d4827d914afb Signed-off-by: Pete Birley --- helm-toolkit/templates/tls/_tls_generate_certs.tpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/helm-toolkit/templates/tls/_tls_generate_certs.tpl b/helm-toolkit/templates/tls/_tls_generate_certs.tpl index 81808071d..f079eff6f 100644 --- a/helm-toolkit/templates/tls/_tls_generate_certs.tpl +++ b/helm-toolkit/templates/tls/_tls_generate_certs.tpl @@ -64,7 +64,7 @@ return: | {{- $ca := buildCustomCert ($params.ca.crt | b64enc ) ($params.ca.key | b64enc ) }} {{- $expDate := date_in_zone "2006-01-02T15:04:05Z07:00" ( date_modify (printf "+%sh" (mul $params.life 24 |toString)) now ) "UTC" }} -{{- $rawCert := genSignedCert (first $local.certHosts) ($local.certIps) (rest $local.certHosts) (int $params.life) $ca }} +{{- $rawCert := genSignedCert (first $local.certHosts) ($local.certIps) $local.certHosts (int $params.life) $ca }} {{- $certificate := dict "crt" $rawCert.Cert "key" $rawCert.Key "ca" $params.ca.crt "exp" $expDate "" }} {{- $certificate | toYaml }} {{- end -}}