Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PROJQUAY-1577: Fixed certs being overwritten when BUILDMAN_HOSTNAME not present #404

Merged
merged 1 commit into from
Mar 15, 2021

Conversation

jonathankingfc
Copy link
Collaborator

Issue: https://issues.redhat.com/browse/PROJQUAY-1577

Changelog:

  • Operator will only ensure BUILDMAN_HOSTNAME is valid for certificates when the field has been populated. If the field is empty, it will not be included in the list of hostnames to check against given SANs.

Docs:

Testing:

  • Unit tests for EnsureTLSFor function.

Details:


}

for _, host := range hosts {
if valid, _ := shared.ValidateCertPairWithHostname(tlsCert, tlsKey, host, fieldGroupNameFor("route")); !valid {
fmt.Printf("Host %s not valid for certificates provided. Generating self-signed certs", host) // change to logger?
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes. A logging statement is better.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM otherwise

@jonathankingfc jonathankingfc merged commit 76718ab into quay:master Mar 15, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants