Skip to content
Snippets Groups Projects
Commit fe81bba0 authored by Matthew Mosesohn's avatar Matthew Mosesohn Committed by GitHub
Browse files

Force kubelet certificates to be generated as lowercase (#1886)

All nodes get converted to lowercase, so certs should set
CN with lowercase as well.
parent 84cf6fbe
No related branches found
No related tags found
No related merge requests found
......@@ -105,14 +105,13 @@ fi
if [ -n "$HOSTS" ]; then
for host in $HOSTS; do
cn="${host%%.*}"
gen_key_and_cert "node-${host}" "/CN=system:node:${cn}/O=system:nodes"
gen_key_and_cert "node-${host}" "/CN=system:node:${cn,,}/O=system:nodes"
done
fi
# system:node-proxier
if [ -n "$HOSTS" ]; then
for host in $HOSTS; do
cn="${host%%.*}"
# kube-proxy
gen_key_and_cert "kube-proxy-${host}" "/CN=system:kube-proxy/O=system:node-proxier"
done
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment