Uh oh!
There was an error while loading. Please reload this page.
Allow challenges for hosts that don't match the route's host - #13637
Conversation
This allows certificate plugins (ie. net-cert-manager) to deal with domain names that are really long.
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: dprotaso The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Codecov ReportBase: 86.17% // Head: 86.17% // Decreases project coverage by
Additional details and impacted files@@ Coverage Diff @@## main #13637 +/- ##
==========================================
- Coverage 86.17% 86.17% -0.01%
==========================================
Files 197 197 Lines 14722 14727 +5 ==========================================
+ Hits 12687 12691 +4 + Misses 1734 1733 -1 - Partials 301 303 +2
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. ☔ View full report at Codecov. |
| } | ||
| // MakeACMEIngressPaths returns a set of netv1alpha1.HTTPIngressPath | ||
| // that can be used to perform ACME challenges. |
There was a problem hiding this comment.
should there be a comment added here to explain the new return value?
There was a problem hiding this comment.
I guess I was thinking something to explain what the extra domains are for. "Also returns hosts in the challenge that are not in domains". But I suppose that is just explaining the code at that point
There was a problem hiding this comment.
"Also returns hosts in the challenge that are not in domains"
This function is actually all the route domains (not the HTTP01 challenge domains)
ie.route-1.blah.example.comroute-1.blah.svc.cluster.localroute-1.blah.svcroute-1.blah
KauzClay
commented
Jan 23, 2023
/lgtm |
This allows certificate plugins (ie. net-cert-manager) to deal
with domain names that are really long.
Part of knative-extensions/net-certmanager#214 (comment)
Was testing it via #13621