home/charts
2
0
Fork 0
mirror of https://github.com/wahyd4/charts.git synced 2026-08-15 16:16:27 +10:00
Code Issues Packages Projects Releases Wiki Activity

[bitnami/elasticsearch] Fix alt names in generated TLS certs (#11632)

Browse Source 
* [bitnami/elasticsearch] Fix secret name in README

Signed-off-by: Petr Široký <petr.siroky@pm.me>

* [bitnami/elasticsearch] Fix alt names in generated certs

Signed-off-by: Petr Široký <petr.siroky@pm.me>

Signed-off-by: Petr Široký <petr.siroky@pm.me>
This commit is contained in:
Petr Široký
2022-08-18 08:49:38 +02:00
committed by GitHub
parent b0693450f6
commit 85a650c967
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitnami/elasticsearch/README.md
+1 -1
View File
@@ -701,7 +701,7 @@ kibana:
# Instruct kibana to connect to elastic over https
enabled: true
# Bit of a catch 22, as you will need to know the name upfront of your release
existingSecret: RELEASENAME-elasticsearch-coordinating-only-crt
existingSecret: RELEASENAME-elasticsearch-coordinating-crt # or just 'elasticsearch-coordinating-crt' if the release name happens to be 'elasticsearch'
# As the certs are auto-generated, they are pemCerts so set to true
usePemCerts: true
```
bitnami/elasticsearch/templates/tls-secret.yaml
+3 -3
View File
@@ -9,7 +9,7 @@
{{- $altNames := list (printf "*.%s.%s.svc.%s" $serviceName $releaseNamespace $clusterDomain) (printf "%s.%s.svc.%s" $serviceName $releaseNamespace $clusterDomain) $fullname "127.0.0.1" "localhost" }}
{{- if not (include "elasticsearch.coordinating.enabled" .) }}
{{- $altNames = append $altNames (include "elasticsearch.service.name" .) }}
{{- $altNames = append $altNames (printf "%s.%s.svc.%s" (include "elasticsearch.service.name" .)) }}
{{- $altNames = append $altNames (printf "%s.%s.svc.%s" (include "elasticsearch.service.name" .) $releaseNamespace $clusterDomain) }}
{{- end }}
{{- $crt := genSignedCert $fullname nil $altNames 365 $ca }}
apiVersion: v1
@@ -59,7 +59,7 @@ data:
{{- if and (include "elasticsearch.coordinating.enabled" .) (not .Values.security.tls.coordinating.existingSecret) }}
{{- $fullname := include "elasticsearch.coordinating.fullname" . }}
{{- $serviceName := printf "%s-hl" (include "elasticsearch.coordinating.fullname" .) | trunc 63 | trimSuffix "-" }}
{{- $altNames := list (include "elasticsearch.service.name" .) (printf "%s.%s.svc.%s" (include "elasticsearch.service.name" .)) (printf "*.%s.%s.svc.%s" $serviceName $releaseNamespace $clusterDomain) (printf "%s.%s.svc.%s" $serviceName $releaseNamespace $clusterDomain) $fullname "127.0.0.1" "localhost" }}
{{- $altNames := list (include "elasticsearch.service.name" .) (printf "%s.%s.svc.%s" (include "elasticsearch.service.name" .) $releaseNamespace $clusterDomain) (printf "*.%s.%s.svc.%s" $serviceName $releaseNamespace $clusterDomain) (printf "%s.%s.svc.%s" $serviceName $releaseNamespace $clusterDomain) $fullname "127.0.0.1" "localhost" }}
{{- $crt := genSignedCert $fullname nil $altNames 365 $ca }}
---
apiVersion: v1
@@ -87,7 +87,7 @@ data:
{{- $altNames := list (printf "*.%s.%s.svc.%s" $serviceName $releaseNamespace $clusterDomain) (printf "%s.%s.svc.%s" $serviceName $releaseNamespace $clusterDomain) $fullname "127.0.0.1" "localhost" }}
{{- if .Values.ingest.service.enabled }}
{{- $altNames = append $altNames (include "elasticsearch.ingest.fullname" .) }}
{{- $altNames = append $altNames (printf "%s.%s.svc.%s" (include "elasticsearch.ingest.fullname" .)) }}
{{- $altNames = append $altNames (printf "%s.%s.svc.%s" (include "elasticsearch.ingest.fullname" .) $releaseNamespace $clusterDomain) }}
{{- end }}
{{- $crt := genSignedCert $fullname nil $altNames 365 $ca }}
---