search

dell / csm

Dell Container Storage Modules (CSM)
Apache License 2.0
71 stars 16 forks source link

[BUG]: SubjectAltName needs to be updated in the tls.crt #1571

Open shanmydell opened 2 weeks ago

shanmydell commented 2 weeks ago

Bug Description

https://dell.github.io/csm-docs/docs/deployment/csmoperator/drivers/powermax/#csi-powermax-reverse-proxy

Here we need to provide a sample for the SubjectAltName that will be used with tls.crt

Better approach would be automatically generating this as self signed certificate by operator

Logs

https://dell.github.io/csm-docs/docs/deployment/csmoperator/drivers/powermax/#csi-powermax-reverse-proxy

tls.crt needs to be updated with SAN

subjectAltName = @alt_names

Screenshots

No response

Additional Environment Information

No response

Steps to Reproduce

In the tls.crt we need to product subjectAltName which is alternate names, we have to give samples how to create this subjectAltName = @alt_names

Expected Behavior

Create a sample which defines what name needs to be created as an alternative names

CSM Driver(s)

PowerMax and wherever applicable

Installation Type

No response

Container Storage Modules Enabled

No response

Container Orchestrator

NA

Operating System

NA

csmbot commented 2 weeks ago

@shanmydell: Thank you for submitting this issue!

The issue is currently awaiting triage. Please make sure you have given us as much context as possible.

If the maintainers determine this is a relevant issue, they will remove the needs-triage label and respond appropriately.

We want your feedback! If you have any questions or suggestions regarding our contributing process/workflow, please reach out to us at container.storage.modules@dell.com.

jooseppi-luna commented 2 weeks ago

@shanmydell a couple questions: 1) What is SubjectAltName? I don't see anything about it in documentation and haven't run into it the several times I've installed csi-powermax. 2) "Better approach would be automatically generating this as self signed certificate by operator" - this is a good idea but more a feature request than a defect

shanmydell commented 1 week ago

/sync

shanmydell commented 1 week ago

@jooseppi-luna : It is the alternative name that is going to be used, this ticket is to update that information in the documentation for tls.crt

anandrajak1 commented 1 week ago

/sync

csmbot commented 1 week ago

link: 30244