mirror of
https://github.com/arangodb/kube-arangodb.git
synced 2024-12-14 11:57:37 +00:00
Set common name
This commit is contained in:
parent
9b565b8e24
commit
8b1053a7b2
2 changed files with 6 additions and 2 deletions
|
@ -91,7 +91,8 @@ func (d *Deployment) ensureCACertificateSecret(spec api.TLSSpec) error {
|
|||
if _, err := kubecli.CoreV1().Secrets(ns).Get(spec.CASecretName, metav1.GetOptions{}); k8sutil.IsNotFound(err) {
|
||||
// Secret not found, create it
|
||||
owner := d.apiObject.AsOwner()
|
||||
if err := createCACertificate(d.deps.Log, kubecli.CoreV1(), spec, ns, &owner); k8sutil.IsAlreadyExists(err) {
|
||||
deploymentName := d.apiObject.GetName()
|
||||
if err := createCACertificate(d.deps.Log, kubecli.CoreV1(), spec, deploymentName, ns, &owner); k8sutil.IsAlreadyExists(err) {
|
||||
// Secret added while we tried it also
|
||||
return nil
|
||||
} else if err != nil {
|
||||
|
|
|
@ -23,6 +23,7 @@
|
|||
package deployment
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
|
@ -42,7 +43,7 @@ const (
|
|||
|
||||
// createCACertificate creates a CA certificate and stores it in a secret with name
|
||||
// specified in the given spec.
|
||||
func createCACertificate(log zerolog.Logger, cli v1.CoreV1Interface, spec api.TLSSpec, namespace string, ownerRef *metav1.OwnerReference) error {
|
||||
func createCACertificate(log zerolog.Logger, cli v1.CoreV1Interface, spec api.TLSSpec, deploymentName, namespace string, ownerRef *metav1.OwnerReference) error {
|
||||
dnsNames, ipAddresses, emailAddress, err := spec.GetAltNames()
|
||||
if err != nil {
|
||||
log.Debug().Err(err).Msg("Failed to get alternate names")
|
||||
|
@ -50,6 +51,7 @@ func createCACertificate(log zerolog.Logger, cli v1.CoreV1Interface, spec api.TL
|
|||
}
|
||||
|
||||
options := certificates.CreateCertificateOptions{
|
||||
CommonName: fmt.Sprintf("%s Root Certificate", deploymentName),
|
||||
Hosts: append(dnsNames, ipAddresses...),
|
||||
EmailAddresses: emailAddress,
|
||||
ValidFrom: time.Now(),
|
||||
|
@ -93,6 +95,7 @@ func createServerCertificate(log zerolog.Logger, cli v1.CoreV1Interface, serverN
|
|||
}
|
||||
|
||||
options := certificates.CreateCertificateOptions{
|
||||
CommonName: serverNames[0],
|
||||
Hosts: append(append(serverNames, dnsNames...), ipAddresses...),
|
||||
EmailAddresses: emailAddress,
|
||||
ValidFrom: time.Now(),
|
||||
|
|
Loading…
Reference in a new issue