TLS CA create command with name-constraint

[guillaumejchauveau]

Nomad version

Bug occurs on versions 1.6.0, 1.7.[1,2,3].

Operating system and Environment details

Fedora 39, Rocky Linux 9.

Issue

Using the CLI command nomad tls ca create -name-constraint="true" -domain="foo.com" yields Please provide the -domain flag if you want to enable custom domain constraints.
Nomad version 1.5.0 behaves as expected.

Reproduction steps

Use Nomad version 1.6.0 or 1.7.[1,2,3]. Run the command nomad tls ca create -name-constraint="true" -domain="foo.com".

Expected Result

==> CA certificate saved to: foo.com-agent-ca.pem
==> CA certificate key saved to: foo.com-agent-ca-key.pem

Actual Result

Please provide the -domain flag if you want to enable custom domain constraints.

[lgfa29]

Thanks for the report @guillaumejchauveau.

I think the bug was introduced in #17309, where the -domain flag is being overwritten unless you specify other customization flags. I've opened #19892 to fix this.

[github-actions]

I'm going to lock this issue because it has been closed for 120 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.