Skip to content

Commit 6fe60e7

Browse files
Merge pull request #817 from fmount/direct_tls
Additional SubjectName in the CertificateRequest
2 parents 5de8b1b + 57d3317 commit 6fe60e7

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

pkg/openstack/common.go

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -298,6 +298,11 @@ func EnsureEndpointConfig(
298298
Labels: util.MergeMaps(ed.Labels, map[string]string{serviceCertSelector: ""}),
299299
Usages: nil,
300300
}
301+
302+
addSubjNames := util.GetStringListFromMap(svc.Annotations, tls.AdditionalSubjectNamesKey)
303+
if len(addSubjNames) > 0 {
304+
certRequest.Hostnames = append(certRequest.Hostnames, addSubjNames...)
305+
}
301306
if instance.Spec.TLS.Ingress.Cert.Duration != nil {
302307
certRequest.Duration = &instance.Spec.TLS.Ingress.Cert.Duration.Duration
303308
}
@@ -343,6 +348,11 @@ func EnsureEndpointConfig(
343348
Labels: util.MergeMaps(ed.Labels, map[string]string{serviceCertSelector: ""}),
344349
Usages: nil,
345350
}
351+
352+
addSubjNames := util.GetStringListFromMap(svc.Annotations, tls.AdditionalSubjectNamesKey)
353+
if len(addSubjNames) > 0 {
354+
certRequest.Hostnames = append(certRequest.Hostnames, addSubjNames...)
355+
}
346356
if instance.Spec.TLS.PodLevel.Internal.Cert.Duration != nil {
347357
certRequest.Duration = &instance.Spec.TLS.PodLevel.Internal.Cert.Duration.Duration
348358
}

0 commit comments

Comments
 (0)