Skip to content
Snippets Groups Projects
Commit fe81bba0 authored by Matthew Mosesohn's avatar Matthew Mosesohn Committed by GitHub
Browse files

Force kubelet certificates to be generated as lowercase (#1886)

All nodes get converted to lowercase, so certs should set
CN with lowercase as well.
parent 84cf6fbe
Branches
Tags
No related merge requests found
...@@ -105,14 +105,13 @@ fi ...@@ -105,14 +105,13 @@ fi
if [ -n "$HOSTS" ]; then if [ -n "$HOSTS" ]; then
for host in $HOSTS; do for host in $HOSTS; do
cn="${host%%.*}" cn="${host%%.*}"
gen_key_and_cert "node-${host}" "/CN=system:node:${cn}/O=system:nodes" gen_key_and_cert "node-${host}" "/CN=system:node:${cn,,}/O=system:nodes"
done done
fi fi
# system:node-proxier # system:node-proxier
if [ -n "$HOSTS" ]; then if [ -n "$HOSTS" ]; then
for host in $HOSTS; do for host in $HOSTS; do
cn="${host%%.*}"
# kube-proxy # kube-proxy
gen_key_and_cert "kube-proxy-${host}" "/CN=system:kube-proxy/O=system:node-proxier" gen_key_and_cert "kube-proxy-${host}" "/CN=system:kube-proxy/O=system:node-proxier"
done done
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment