From f6cec4e75d0bd298988000cc313b6e9685fb0acc Mon Sep 17 00:00:00 2001 From: Brad Davidson Date: Tue, 8 Jun 2021 10:48:08 -0700 Subject: [PATCH] Add kubernetes.default.svc to serving certs Signed-off-by: Brad Davidson --- pkg/cluster/https.go | 2 +- pkg/daemons/control/deps/deps.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/cluster/https.go b/pkg/cluster/https.go index c1343dd184..29551e3ff4 100644 --- a/pkg/cluster/https.go +++ b/pkg/cluster/https.go @@ -38,7 +38,7 @@ func (c *Cluster) newListener(ctx context.Context) (net.Listener, http.Handler, return dynamiclistener.NewListener(tcp, storage, cert, key, dynamiclistener.Config{ ExpirationDaysCheck: config.CertificateRenewDays, Organization: []string{version.Program}, - SANs: append(c.config.SANs, "localhost", "kubernetes", "kubernetes.default", "kubernetes.default.svc."+c.config.ClusterDomain), + SANs: append(c.config.SANs, "localhost", "kubernetes", "kubernetes.default", "kubernetes.default.svc", "kubernetes.default.svc."+c.config.ClusterDomain), CN: version.Program, TLSConfig: &tls.Config{ ClientAuth: tls.RequestClientCert, diff --git a/pkg/daemons/control/deps/deps.go b/pkg/daemons/control/deps/deps.go index 6220f76cc0..b694afb796 100644 --- a/pkg/daemons/control/deps/deps.go +++ b/pkg/daemons/control/deps/deps.go @@ -319,7 +319,7 @@ func genServerCerts(config *config.Control, runtime *config.ControlRuntime) erro } altNames := &certutil.AltNames{ - DNSNames: []string{"localhost", "kubernetes", "kubernetes.default", "kubernetes.default.svc." + config.ClusterDomain}, + DNSNames: []string{"localhost", "kubernetes", "kubernetes.default", "kubernetes.default.svc", "kubernetes.default.svc." + config.ClusterDomain}, IPs: []net.IP{apiServerServiceIP}, }