From fe81bba08de5c5fa0ee338c9414ed6a57a80049f Mon Sep 17 00:00:00 2001
From: Matthew Mosesohn <matthew.mosesohn@gmail.com>
Date: Fri, 27 Oct 2017 15:58:25 +0100
Subject: [PATCH] Force kubelet certificates to be generated as lowercase
(#1886)
All nodes get converted to lowercase, so certs should set
CN with lowercase as well.
---
roles/kubernetes/secrets/files/make-ssl.sh | 3 +--
1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/roles/kubernetes/secrets/files/make-ssl.sh b/roles/kubernetes/secrets/files/make-ssl.sh
index e5277c768..9139ce98f 100755
--- a/roles/kubernetes/secrets/files/make-ssl.sh
+++ b/roles/kubernetes/secrets/files/make-ssl.sh
@@ -105,14 +105,13 @@ fi
if [ -n "$HOSTS" ]; then
for host in $HOSTS; do
cn="${host%%.*}"
- gen_key_and_cert "node-${host}" "/CN=system:node:${cn}/O=system:nodes"
+ gen_key_and_cert "node-${host}" "/CN=system:node:${cn,,}/O=system:nodes"
done
fi
# system:node-proxier
if [ -n "$HOSTS" ]; then
for host in $HOSTS; do
- cn="${host%%.*}"
# kube-proxy
gen_key_and_cert "kube-proxy-${host}" "/CN=system:kube-proxy/O=system:node-proxier"
done
--
GitLab