From f667eb2adf9ae0526efe30e15c0c3f3be8ce7522 Mon Sep 17 00:00:00 2001
From: Dustin Decker <dustindecker@protonmail.com>
Date: Mon, 4 Jan 2021 10:43:04 -0800
Subject: [PATCH] Add SAN to the helm generated cert (#97)

Signed-off-by: Dustin Decker <dustindecker@protonmail.com>
---
 charts/k-rail/templates/deployment.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/charts/k-rail/templates/deployment.yaml b/charts/k-rail/templates/deployment.yaml
index 5d08657..9e189b1 100644
--- a/charts/k-rail/templates/deployment.yaml
+++ b/charts/k-rail/templates/deployment.yaml
@@ -1,6 +1,7 @@
 {{- $cn := printf "k-rail.%s.svc" .Release.Namespace }}
 {{- $ca := genCA "k-rail-admission-ca" 3650 -}}
-{{- $cert := genSignedCert $cn nil nil 3650 $ca -}}
+{{- $san := printf "k-rail.%s.svc" .Release.Namespace }}
+{{- $cert := genSignedCert $cn nil (list $san) 3650 $ca -}}
 ---
 apiVersion: v1
 kind: Secret