• Eric Paris's avatar
    Add Subject Alt Names to self signed apiserver certs · 7a29af4d
    Eric Paris authored
    A cert from GCE shows:
    - IP Address:23.236.49.122
    - IP Address:10.0.0.1
    - DNS:kubernetes,
    - DNS:kubernetes.default
    - DNS:kubernetes.default.svc
    - DNS:kubernetes.default.svc.cluster.local
    - DNS:e2e-test-zml-master
    
    A similarly configured self signed cert shows:
    - IP Address:23.236.49.122
    - IP Address:10.0.0.1
    - DNS:kubernetes
    - DNS:kubernetes.default
    - DNS:kubernetes.default.svc
    
    So we are missing the fqdn kubernetes.default.svc.cluster.local. The
    apiserver does not even know the fqdn! it's defined entirely by the
    kubelet! We also do not have the cluster name certificate. This may be
    --cluster-name= argument to the apiserver but will take a bit more
    research.
    7a29af4d
Name
Last commit
Last update
..
ports Loading commit data...
controller.go Loading commit data...
controller_test.go Loading commit data...
doc.go Loading commit data...
master.go Loading commit data...
master_test.go Loading commit data...