-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Allow challenges for hosts that don't match the route's host #13637
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
This allows certificate plugins (ie. net-cert-manager) to deal with domain names that are really long.
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: dprotaso The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Codecov ReportBase: 86.17% // Head: 86.17% // Decreases project coverage by
Additional details and impacted files@@ Coverage Diff @@
## main #13637 +/- ##
==========================================
- Coverage 86.17% 86.17% -0.01%
==========================================
Files 197 197
Lines 14722 14727 +5
==========================================
+ Hits 12687 12691 +4
+ Misses 1734 1733 -1
- Partials 301 303 +2
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. ☔ View full report at Codecov. |
| } | ||
|
|
||
| // MakeACMEIngressPaths returns a set of netv1alpha1.HTTPIngressPath | ||
| // that can be used to perform ACME challenges. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
should there be a comment added here to explain the new return value?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What were you thinking?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I guess I was thinking something to explain what the extra domains are for. "Also returns hosts in the challenge that are not in domains". But I suppose that is just explaining the code at that point
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
"Also returns hosts in the challenge that are not in domains"
This function is actually all the route domains (not the HTTP01 challenge domains)
ie.
route-1.blah.example.com
route-1.blah.svc.cluster.local
route-1.blah.svc
route-1.blah
|
/lgtm |
This allows certificate plugins (ie. net-cert-manager) to deal
with domain names that are really long.
Part of knative-extensions/net-certmanager#214 (comment)
Was testing it via #13621