From dcf959c78241d29b5486dedfe70e805841d0c5a0 Mon Sep 17 00:00:00 2001 From: SataQiu Date: Mon, 7 Feb 2022 17:12:38 +0800 Subject: [PATCH] kubeadm: fix the bug that 'kubeadm certs generate-csr' command does not remove duplicated SANs --- cmd/kubeadm/app/util/pkiutil/pki_helpers.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/cmd/kubeadm/app/util/pkiutil/pki_helpers.go b/cmd/kubeadm/app/util/pkiutil/pki_helpers.go index 46878c731c0..dac477429c0 100644 --- a/cmd/kubeadm/app/util/pkiutil/pki_helpers.go +++ b/cmd/kubeadm/app/util/pkiutil/pki_helpers.go @@ -563,6 +563,8 @@ func CertificateRequestFromFile(file string) (*x509.CertificateRequest, error) { // NewCSR creates a new CSR func NewCSR(cfg CertConfig, key crypto.Signer) (*x509.CertificateRequest, error) { + RemoveDuplicateAltNames(&cfg.AltNames) + template := &x509.CertificateRequest{ Subject: pkix.Name{ CommonName: cfg.CommonName,