Skip to content

kubeadm lowercases all domain names passed as additional SANs#64718

Merged
k8s-github-robot merged 1 commit intokubernetes:masterfrom
liztio:kubeadm-downcase-fqdn
Jun 5, 2018
Merged

kubeadm lowercases all domain names passed as additional SANs#64718
k8s-github-robot merged 1 commit intokubernetes:masterfrom
liztio:kubeadm-downcase-fqdn

Conversation

@liztio
Copy link
Copy Markdown
Contributor

@liztio liztio commented Jun 4, 2018

What this PR does / why we need it:

Some domains, like ELBs, output a domain name with uppercase letters. To
accept these, we lowercase all arguments passed to ----apiserver-cert-extra-sans

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #kubeadm/827

NONE

@k8s-ci-robot k8s-ci-robot added release-note-none Denotes a PR that doesn't merit a release note. size/M Denotes a PR that changes 30-99 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Jun 4, 2018
@k8s-ci-robot k8s-ci-robot added area/kubeadm sig/cluster-lifecycle Categorizes an issue or PR as relevant to SIG Cluster Lifecycle. labels Jun 4, 2018
@liztio
Copy link
Copy Markdown
Contributor Author

liztio commented Jun 4, 2018

/cc @kubernetes/sig-cluster-lifecycle-pr-reviews

@liztio
Copy link
Copy Markdown
Contributor Author

liztio commented Jun 4, 2018

I could honestly go either way on this. Is this additional complexity worth helping users out in this corner case?

Copy link
Copy Markdown
Member

@neolit123 neolit123 Jun 4, 2018

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

i think we should notify the user about SANs that were lowercased. (edit: possibly for higher verbosity levels).

Copy link
Copy Markdown
Member

@luxas luxas left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

As an UX improvement, this is probably a good thing to do. Not too much code, most of it is unit testing 👍

Please fix mine and @neolit123's review comments though.

Comment thread cmd/kubeadm/app/cmd/init.go Outdated
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This must be called by configutil.SetInitDynamicDefaults instead of here to be run every time we load a config instead of just for kubeadm init

@luxas luxas self-assigned this Jun 4, 2018
@luxas
Copy link
Copy Markdown
Member

luxas commented Jun 4, 2018

/kind bug
/priority important-soon
/status approved-for-milestone
/milestone v1.11

@k8s-ci-robot k8s-ci-robot added this to the v1.11 milestone Jun 4, 2018
@k8s-ci-robot k8s-ci-robot added kind/bug Categorizes issue or PR as related to a bug. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. labels Jun 4, 2018
Copy link
Copy Markdown
Contributor

@timothysc timothysc left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/approve

defer @neolit123 for lgtm

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 5, 2018
@chuckha
Copy link
Copy Markdown
Contributor

chuckha commented Jun 5, 2018

looks great! we can delete some code in the quickstart with this change :)

@liztio liztio force-pushed the kubeadm-downcase-fqdn branch from 84d7686 to b76a20c Compare June 5, 2018 14:04
@liztio
Copy link
Copy Markdown
Contributor Author

liztio commented Jun 5, 2018

I0605 14:04:19.278283 17572 masterconfig.go:228] lowercasing SAN "allCAPS.horse" to "allcaps.horse" @luxas

Some domains, like ELBs, output a domain name with uppercase letters. To
accept these, we lowercase all arguments passed to ----apiserver-cert-extra-sans
@liztio liztio force-pushed the kubeadm-downcase-fqdn branch from b76a20c to db52cd4 Compare June 5, 2018 14:14
@neolit123
Copy link
Copy Markdown
Member

thanks for adding that verbose output!
/lgtm

@k8s-ci-robot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: liztio, neolit123, timothysc

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Jun 5, 2018
@k8s-github-robot
Copy link
Copy Markdown

[MILESTONENOTIFIER] Milestone Pull Request: Up-to-date for process

@liztio @luxas @neolit123 @timothysc

Pull Request Labels
  • sig/cluster-lifecycle: Pull Request will be escalated to these SIGs if needed.
  • priority/important-soon: Escalate to the pull request owners and SIG owner; move out of milestone after several unsuccessful escalation attempts.
  • kind/bug: Fixes a bug discovered during the current release.
Help

@k8s-github-robot
Copy link
Copy Markdown

/test all [submit-queue is verifying that this PR is safe to merge]

@k8s-github-robot
Copy link
Copy Markdown

Automatic merge from submit-queue (batch tested with PRs 63322, 64718, 64708, 64775, 64777). If you want to cherry-pick this change to another branch, please follow the instructions here.

@zparnold
Copy link
Copy Markdown

Hello there! @liztio I'm Zach Arnold working on Docs for the 1.11 release. This PR was identified as one needing some documentation in the https://github.com/kubernetes/website repo around your contributions (thanks by the way!) When you have some time, could you please modify/add/remove the relevant content that needs changing in our documentation repo? Thanks! Please let me or my colleague Misty know (@zparnold/@misty on K8s Slack) if you need any assistance with the documentation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. area/kubeadm cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/bug Categorizes issue or PR as related to a bug. lgtm "Looks good to me", indicates that a PR is ready to be merged. priority/important-soon Must be staffed and worked on either currently, or very soon, ideally in time for the next release. release-note-none Denotes a PR that doesn't merit a release note. sig/cluster-lifecycle Categorizes an issue or PR as relevant to SIG Cluster Lifecycle. size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

8 participants