vrr/cozystack
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(redis): align TLS Certificate SANs with new service architecture

Browse source 
Replace rfs-* SAN entries with master/replicas variants and keep
external-lb. The Certificate now matches the redesigned helper and
covers every TLS endpoint that tenants are expected to connect to.

Signed-off-by: Arsolitt <arsolitt@gmail.com>
This commit is contained in:
Arsolitt 2026-04-29 20:26:14 +03:00
parent 7cc892163b
commit 8048868c6e
No known key found for this signature in database
GPG key ID: 4D8302CE6A9247C4
1 changed files with 8 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

12
packages/apps/redis/templates/tls-certificate.yaml
View file

@ -1,13 +1,17 @@
{{- if and .Values.tls.enabled (not .Values.tls.secretName) }}
{{- $dnsNames := list -}}
{{- $dnsNames = append $dnsNames (printf "%s-master" .Release.Name) -}}
{{- $dnsNames = append $dnsNames (printf "%s-master.%s" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "%s-master.%s.svc" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "%s-master.%s.svc.cluster.local" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "%s-replicas" .Release.Name) -}}
{{- $dnsNames = append $dnsNames (printf "%s-replicas.%s" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "%s-replicas.%s.svc" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "%s-replicas.%s.svc.cluster.local" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "%s-external-lb" .Release.Name) -}}
{{- $dnsNames = append $dnsNames (printf "%s-external-lb.%s" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "%s-external-lb.%s.svc" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "%s-external-lb.%s.svc.cluster.local" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "rfs-%s" .Release.Name) -}}
{{- $dnsNames = append $dnsNames (printf "rfs-%s.%s" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "rfs-%s.%s.svc" .Release.Name .Release.Namespace) -}}
{{- $dnsNames = append $dnsNames (printf "rfs-%s.%s.svc.cluster.local" .Release.Name .Release.Namespace) -}}
{{- include "cozy-lib.tls.certificate" (dict
"Release" .Release
"name" (printf "%s-redis-tls" .Release.Name)