Skip to content

Does not work with custom cert dnsNames #605

@nkgilley

Description

@nkgilley

By default the plugin's barman-cloud-server Certificate has dnsNames set to ['barman-cloud'] https://github.com/cloudnative-pg/plugin-barman-cloud/blob/main/kubernetes/server-certificate.yaml#L9.

This naming convention is not allowed in our environment. It must end in .svc, like barman-cloud.svc. If I do this though I then get an error when I try to bring up the cluster:

Phase: Cluster cannot proceed to reconciliation due to an error while interacting with plugins
Phase Reason: Error while discovering plugins: while getting plugin connection: while querying plugin identity: rpc error: code = Unavailable desc = connection error: desc = "transport: authentication handshake failed: tls: failed to verify certificate: x509: certificate is valid for barman-cloud.svc, not barman-cloud"

Is there somewhere else I can change it to use barman-cloud.svc to avoid this error?

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions