cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

kubernetes: fix certificate generation

Browse source 
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
This commit is contained in:
Sascha Grunert 2020-08-31 13:07:58 +02:00
parent 9210c8e8ed
commit 35f7a3347c
No known key found for this signature in database
GPG key ID: 8CE029DD1A866E52
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
nixos/modules/services/cluster/kubernetes/pki.nix
View file

@ -20,7 +20,7 @@ let
size = 2048; size = 2048;
}; };
CN = top.masterAddress; CN = top.masterAddress;
hosts = cfg.cfsslAPIExtraSANs; hosts = [top.masterAddress] ++ cfg.cfsslAPIExtraSANs;
}); });
cfsslAPITokenBaseName = "apitoken.secret"; cfsslAPITokenBaseName = "apitoken.secret";
@ -228,7 +228,8 @@ in
}; };
private_key = cert.privateKeyOptions; private_key = cert.privateKeyOptions;
request = { request = {
inherit (cert) CN hosts; hosts = [cert.CN] ++ cert.hosts;
inherit (cert) CN;
key = { key = {
algo = "rsa"; algo = "rsa";
size = 2048; size = 2048;