Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RFE] validate DN Organization field when using custom certificates #2586

Open
flrichar opened this issue Jun 24, 2021 · 0 comments
Open

[RFE] validate DN Organization field when using custom certificates #2586

flrichar opened this issue Jun 24, 2021 · 0 comments

Comments

@flrichar
Copy link

flrichar commented Jun 24, 2021

RKE version:
RKE 1.2.9

Docker version: (docker version,docker info preferred)
NA

Operating system and kernel: (cat /etc/os-release, uname -r preferred)
NA

Type/provider of hosts: (VirtualBox/Bare-metal/AWS/GCE/DO)
Any

cluster.yml file:
NA

Steps to Reproduce:

  • use custom Root CA for Kubernetes
  • use RKE cert generate-csr command
  • cluster fails to provision if Org DN field is not correct, error is kube-admin not authorized to create clusterrolebindings

Results:

This RFE is just to add validation to RKE to ensure the DN Field for Organization should be set properly for certain Common Names (CN).
The Kubernetes the Hard Way section on CA Certificates outlines what these should be for every component.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants