Skip to content

[Feature]: Allow customizing plugin certificate dnsName #9218

@nkgilley

Description

@nkgilley

By default the plugin's barman-cloud-server Certificate has dnsNames set to ['barman-cloud'] https://github.com/cloudnative-pg/plugin-barman-cloud/blob/main/kubernetes/server-certificate.yaml#L9.

This naming convention is not allowed in our environment. It must end in .svc, like barman-cloud.svc. If I do this though I then get an error when I try to bring up the cluster:

Phase: Cluster cannot proceed to reconciliation due to an error while interacting with plugins
Phase Reason: Error while discovering plugins: while getting plugin connection: while querying plugin identity: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate is valid for barman-cloud.svc, not barman-cloud"

Is there somewhere else I can change it to use barman-cloud.svc to avoid this error?

Metadata

Metadata

Assignees

Labels

Projects

Status

Done

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions