epostnikof/kubespray
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kubespray.git synced 2026-02-28 09:39:12 +03:00
Code Issues Packages Projects Releases Wiki Activity

Fix: The Hubble certificate is faulty because the cluster name is hard coded (#9340)

Browse Source 
Signed-off-by: dcwbq <biqiang.wu@daocloud.io>

Signed-off-by: dcwbq <biqiang.wu@daocloud.io>
This commit is contained in:
biqiang Wu
2022-09-27 20:57:52 +08:00
committed by GitHub
parent 472996c8b3
commit 31caab5f92
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/network_plugin/cilium/templates/hubble/cronjob.yml.j2
View File

@@ -37,7 +37,7 @@ spec:
- "--hubble-ca-config-map-create=true" - "--hubble-ca-config-map-create=true"
- "--hubble-ca-config-map-name=hubble-ca-cert" - "--hubble-ca-config-map-name=hubble-ca-cert"
- "--hubble-server-cert-generate=true" - "--hubble-server-cert-generate=true"
- "--hubble-server-cert-common-name=*.default.hubble-grpc.cilium.io" - "--hubble-server-cert-common-name=*.{{ cilium_cluster_name }}.hubble-grpc.cilium.io"
- "--hubble-server-cert-validity-duration=94608000s" - "--hubble-server-cert-validity-duration=94608000s"
- "--hubble-server-cert-secret-name=hubble-server-certs" - "--hubble-server-cert-secret-name=hubble-server-certs"
- "--hubble-relay-client-cert-generate=true" - "--hubble-relay-client-cert-generate=true"

2
roles/network_plugin/cilium/templates/hubble/job.yml.j2
View File

@@ -33,7 +33,7 @@ spec:
- "--hubble-ca-config-map-create=true" - "--hubble-ca-config-map-create=true"
- "--hubble-ca-config-map-name=hubble-ca-cert" - "--hubble-ca-config-map-name=hubble-ca-cert"
- "--hubble-server-cert-generate=true" - "--hubble-server-cert-generate=true"
- "--hubble-server-cert-common-name=*.default.hubble-grpc.cilium.io" - "--hubble-server-cert-common-name=*.{{ cilium_cluster_name }}.hubble-grpc.cilium.io"
- "--hubble-server-cert-validity-duration=94608000s" - "--hubble-server-cert-validity-duration=94608000s"
- "--hubble-server-cert-secret-name=hubble-server-certs" - "--hubble-server-cert-secret-name=hubble-server-certs"
- "--hubble-relay-client-cert-generate=true" - "--hubble-relay-client-cert-generate=true"