github/kubernetes
1
0
Fork 0
mirror of https://github.com/k3s-io/kubernetes.git synced 2025-09-24 19:38:02 +00:00
Code Issues Projects Releases Wiki Activity

kubeadm: remove the restriction that the ca.crt can only contain one certificate

Browse Source
This commit is contained in:
SataQiu
2022-01-05 15:08:29 +08:00
parent 38f4968046
commit 83ef08336b
3 changed files with 9 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
cmd/kubeadm/app/util/config/cluster.go
View File

@@ -183,8 +183,8 @@ func getNodeNameFromKubeletConfig(fileName string) (string, error) {
return "", errors.Errorf("invalid kubeconfig file %s. x509 certificate expected", fileName)
}
// We are only putting one certificate in the certificate pem file, so it's safe to just pick the first one
// TODO: Support multiple certs here in order to be able to rotate certs
// Safely pick the first one because the sender's certificate must come first in the list.
// For details, see: https://www.rfc-editor.org/rfc/rfc4346#section-7.4.2
cert := certs[0]
// gets the node name from the certificate common name