public/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

kubernetes: fix certificate generation

Browse Source 
Signed-off-by: Sascha Grunert <sgrunert@suse.com>
This commit is contained in:
Sascha Grunert
2020-09-10 13:07:32 +02:00
parent 9210c8e8ed
commit 35f7a3347c
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/cluster/kubernetes/pki.nix
+3 -2
View File
@@ -20,7 +20,7 @@ let
size = 2048; size = 2048;
}; };
CN = top.masterAddress; CN = top.masterAddress;
hosts = cfg.cfsslAPIExtraSANs; hosts = [top.masterAddress] ++ cfg.cfsslAPIExtraSANs;
}); });
cfsslAPITokenBaseName = "apitoken.secret"; cfsslAPITokenBaseName = "apitoken.secret";
@@ -228,7 +228,8 @@ in
}; };
private_key = cert.privateKeyOptions; private_key = cert.privateKeyOptions;
request = { request = {
inherit (cert) CN hosts; hosts = [cert.CN] ++ cert.hosts;
inherit (cert) CN;
key = { key = {
algo = "rsa"; algo = "rsa";
size = 2048; size = 2048;