Skip to content

Commit

Permalink
[tls] set organization on galera certificate
Browse files Browse the repository at this point in the history
From comment on #678 (comment)

~~~
The certificate created for galera should populate the 'organization'
field, otherwise this trip the SST transfer setup done by wsrep_sst_rsync.
This will not show at the initial deployment because there is no SST
involved when the DB is bootstrapped as there are no data to be
transferred yet.
~~~

Jira: OSPRH-2440
  • Loading branch information
stuggi committed Apr 12, 2024
1 parent a062109 commit 1ad32e4
Showing 1 changed file with 8 additions and 0 deletions.
8 changes: 8 additions & 0 deletions pkg/openstack/galera.go
Original file line number Diff line number Diff line change
Expand Up @@ -53,6 +53,14 @@ func ReconcileGaleras(
hostname,
fmt.Sprintf("%s.%s", hostname, ClusterInternalDomain),
},
// Note (dciabrin) from https://github.com/openstack-k8s-operators/openstack-operator/pull/678#issuecomment-1952459166
// the certificate created for galera should populate the 'organization' field,
// otherwise this trip the SST transfer setup done by wsrep_sst_rsync. This will not show
// at the initial deployment because there is no SST involved when the DB is bootstrapped
// as there are no data to be transferred yet.
Subject: &certmgrv1.X509Subject{
Organizations: []string{fmt.Sprintf("%s.cluster.local", instance.Namespace)},
},
Usages: []certmgrv1.KeyUsage{
"key encipherment",
"digital signature",
Expand Down

0 comments on commit 1ad32e4

Please sign in to comment.