From 8048868c6ebbb7cc5201844991b454e800cb8239 Mon Sep 17 00:00:00 2001
From: Arsolitt <arsolitt@gmail.com>
Date: Wed, 29 Apr 2026 20:26:14 +0300
Subject: [PATCH] feat(redis): align TLS Certificate SANs with new service
 architecture

Replace rfs-* SAN entries with master/replicas variants and keep
external-lb. The Certificate now matches the redesigned helper and
covers every TLS endpoint that tenants are expected to connect to.

Signed-off-by: Arsolitt <arsolitt@gmail.com>
---
 packages/apps/redis/templates/tls-certificate.yaml | 12 ++++++++----
 1 file changed, 8 insertions(+), 4 deletions(-)

diff --git a/packages/apps/redis/templates/tls-certificate.yaml b/packages/apps/redis/templates/tls-certificate.yaml
index 7a0e8229..2c091acf 100644
--- a/packages/apps/redis/templates/tls-certificate.yaml
+++ b/packages/apps/redis/templates/tls-certificate.yaml
@@ -1,13 +1,17 @@
 {{- if and .Values.tls.enabled (not .Values.tls.secretName) }}
 {{- $dnsNames := list -}}
+{{- $dnsNames = append $dnsNames (printf "%s-master" .Release.Name) -}}
+{{- $dnsNames = append $dnsNames (printf "%s-master.%s" .Release.Name .Release.Namespace) -}}
+{{- $dnsNames = append $dnsNames (printf "%s-master.%s.svc" .Release.Name .Release.Namespace) -}}
+{{- $dnsNames = append $dnsNames (printf "%s-master.%s.svc.cluster.local" .Release.Name .Release.Namespace) -}}
+{{- $dnsNames = append $dnsNames (printf "%s-replicas" .Release.Name) -}}
+{{- $dnsNames = append $dnsNames (printf "%s-replicas.%s" .Release.Name .Release.Namespace) -}}
+{{- $dnsNames = append $dnsNames (printf "%s-replicas.%s.svc" .Release.Name .Release.Namespace) -}}
+{{- $dnsNames = append $dnsNames (printf "%s-replicas.%s.svc.cluster.local" .Release.Name .Release.Namespace) -}}
 {{- $dnsNames = append $dnsNames (printf "%s-external-lb" .Release.Name) -}}
 {{- $dnsNames = append $dnsNames (printf "%s-external-lb.%s" .Release.Name .Release.Namespace) -}}
 {{- $dnsNames = append $dnsNames (printf "%s-external-lb.%s.svc" .Release.Name .Release.Namespace) -}}
 {{- $dnsNames = append $dnsNames (printf "%s-external-lb.%s.svc.cluster.local" .Release.Name .Release.Namespace) -}}
-{{- $dnsNames = append $dnsNames (printf "rfs-%s" .Release.Name) -}}
-{{- $dnsNames = append $dnsNames (printf "rfs-%s.%s" .Release.Name .Release.Namespace) -}}
-{{- $dnsNames = append $dnsNames (printf "rfs-%s.%s.svc" .Release.Name .Release.Namespace) -}}
-{{- $dnsNames = append $dnsNames (printf "rfs-%s.%s.svc.cluster.local" .Release.Name .Release.Namespace) -}}
 {{- include "cozy-lib.tls.certificate" (dict
     "Release"    .Release
     "name"       (printf "%s-redis-tls" .Release.Name)