Skip to content

Commit 01312ec

Browse files
committed
ssl: allow cert to be used by hostonly IPs
In certain cases, we want to proxify endpoints through the hostonly interfaces (ipv4 and ipv6) so let's relax the certificate and allow the endpoints to be on these IPs too.
1 parent b2bcc54 commit 01312ec

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

playbooks/roles/simpleca/tasks/main.yaml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -81,6 +81,8 @@
8181
- "DNS:{{ standalone_host }}"
8282
- "IP:{{ public_api }}"
8383
- "IP:{{ control_plane_ip }}"
84+
- "IP:{{ hostonly_gateway }}"
85+
- "IP:{{ hostonly_v6_gateway }}"
8486
register: user_csr
8587

8688
- name: Sign the CSR for {{ cert_user }}

0 commit comments

Comments
 (0)