-
Notifications
You must be signed in to change notification settings - Fork 344
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix way we force es secret reconcile #1374
Conversation
Signed-off-by: Kevin Earls <[email protected]>
@jpkrohling Please review |
Codecov Report
@@ Coverage Diff @@
## master #1374 +/- ##
=======================================
Coverage 86.22% 86.22%
=======================================
Files 90 90
Lines 5146 5146
=======================================
Hits 4437 4437
Misses 539 539
Partials 170 170 Continue to review full report at Codecov.
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good, just a "why" before merging :-)
scripts/cert_generation.sh
Outdated
@@ -209,7 +209,9 @@ function generate_certs() { | |||
|
|||
# For TRACING-1631 - if we can't find the namespace in the cert it's bad, regenerate everything | |||
if [ $REGENERATE_NEEDED = 0 ] && [ "${component}" == "elasticsearch" ] && [ -f ${WORKING_DIR}/logging-es.crt ] ; then | |||
openssl x509 -in ${WORKING_DIR}/logging-es.crt -text | grep -q "DNS:elasticsearch.${NAMESPACE}.svc" | |||
# Make sure the SAN contains both "DNS:elasticsearch.${NAMESPACE}.svc.cluster.local" AND "DNS:elasticsearch.${NAMESPACE}.svc. | |||
# The latter may be followed by a comma or whitespace |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sounds strange. Any reasons why?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry, let me fix that
Signed-off-by: Kevin Earls <[email protected]>
Signed-off-by: Kevin Earls [email protected]