commit 8051434035ba4e7b4419029ee31ad727bcbea2e3
author Marek Celoud <mceloud@mirantis.com> Thu Nov 09 13:34:38 2017 +0000
committer Gerrit Code Review <gerrit2@44cc31867e31> Thu Nov 09 13:34:38 2017 +0000
tree 9d94ee5803962f6712b6bb8275c676139eb5774f
parent 9bc2bdf1bd138cf057ca1425e1a025fde3a4cf18
parent 3d1a0df978a9b70b2276713c173da7ebd49d7c1d

Merge "Add cluster_local_address to allowed alternative names for etcd server certificate in single mode."

salt/minion/cert/etcd_server_single.yml

diff --git a/salt/minion/cert/etcd_server_single.yml b/salt/minion/cert/etcd_server_single.yml
index f9fc585..d333fb8 100644
--- a/salt/minion/cert/etcd_server_single.yml
+++ b/salt/minion/cert/etcd_server_single.yml
@@ -7,7 +7,7 @@
           authority: ${_param:salt_minion_ca_authority}
           common_name: ${linux:system:name}
           signing_policy: cert_open
-          alternative_names: IP:127.0.0.1,DNS:${linux:system:name},DNS:${linux:network:fqdn}
+          alternative_names: IP:127.0.0.1,IP:${_param:cluster_local_address},DNS:${linux:system:name},DNS:${linux:network:fqdn}
           extended_key_usage: serverAuth,clientAuth
           key_usage: "digitalSignature,nonRepudiation,keyEncipherment"
           key_file: /var/lib/etcd/etcd-server.key