From ac0c5702721b200b971bf09deffbeebb7a99b06a Mon Sep 17 00:00:00 2001 From: mexsmits Date: Mon, 23 Jan 2023 12:03:05 +0100 Subject: [PATCH] Add *.cluster.local in certificate alts --- elasticsearch/templates/_helpers.tpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/elasticsearch/templates/_helpers.tpl b/elasticsearch/templates/_helpers.tpl index b47e2fed8..afe0fa0b3 100644 --- a/elasticsearch/templates/_helpers.tpl +++ b/elasticsearch/templates/_helpers.tpl @@ -37,7 +37,7 @@ tls.crt: {{ index $certs.data "tls.crt" }} tls.key: {{ index $certs.data "tls.key" }} ca.crt: {{ index $certs.data "ca.crt" }} {{- else -}} -{{- $altNames := list ( include "elasticsearch.masterService" . ) ( printf "%s.%s" (include "elasticsearch.masterService" .) .Release.Namespace ) ( printf "%s.%s.svc" (include "elasticsearch.masterService" .) .Release.Namespace ) -}} +{{- $altNames := list ( include "elasticsearch.masterService" . ) ( printf "%s.%s" (include "elasticsearch.masterService" .) .Release.Namespace ) ( printf "%s.%s.svc" (include "elasticsearch.masterService" .) .Release.Namespace ) ( printf "%s.%s.svc.cluster.local" (include "elasticsearch.masterService" .) .Release.Namespace ) -}} {{- $ca := genCA "elasticsearch-ca" 365 -}} {{- $cert := genSignedCert ( include "elasticsearch.masterService" . ) nil $altNames 365 $ca -}} tls.crt: {{ $cert.Cert | toString | b64enc }}