talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Add IP addresses to worker certs for the metrics server.

Browse Source
This commit is contained in:
Tom Alexander
2026-05-02 20:35:13 -04:00
parent b129bf5e3e
commit 26cbb79960
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
nix/kubernetes/keys/package/k8s-ca/files/client-ca.conf
View File

@@ -120,7 +120,7 @@ extendedKeyUsage = clientAuth, serverAuth
keyUsage = critical, digitalSignature, keyEncipherment keyUsage = critical, digitalSignature, keyEncipherment
nsCertType = client nsCertType = client
nsComment = "worker0 Certificate" nsComment = "worker0 Certificate"
subjectAltName = DNS:worker0, IP:127.0.0.1 subjectAltName = DNS:worker0, IP:127.0.0.1, IP:10.215.1.224, IP:2620:11f:7001:7:ffff:ffff:ad7:1e0
subjectKeyIdentifier = hash subjectKeyIdentifier = hash
[worker0_distinguished_name] [worker0_distinguished_name]
@@ -141,7 +141,7 @@ extendedKeyUsage = clientAuth, serverAuth
keyUsage = critical, digitalSignature, keyEncipherment keyUsage = critical, digitalSignature, keyEncipherment
nsCertType = client nsCertType = client
nsComment = "worker1 Certificate" nsComment = "worker1 Certificate"
subjectAltName = DNS:worker1, IP:127.0.0.1 subjectAltName = DNS:worker1, IP:127.0.0.1, IP:10.215.1.225, IP:2620:11f:7001:7:ffff:ffff:ad7:1e1
subjectKeyIdentifier = hash subjectKeyIdentifier = hash
[worker1_distinguished_name] [worker1_distinguished_name]
@@ -162,7 +162,7 @@ extendedKeyUsage = clientAuth, serverAuth
keyUsage = critical, digitalSignature, keyEncipherment keyUsage = critical, digitalSignature, keyEncipherment
nsCertType = client nsCertType = client
nsComment = "worker2 Certificate" nsComment = "worker2 Certificate"
subjectAltName = DNS:worker2, IP:127.0.0.1 subjectAltName = DNS:worker2, IP:127.0.0.1, IP:10.215.1.226, IP:2620:11f:7001:7:ffff:ffff:ad7:1e2
subjectKeyIdentifier = hash subjectKeyIdentifier = hash
[worker2_distinguished_name] [worker2_distinguished_name]