mirror of
https://github.com/open-cluster-management-io/ocm.git
synced 2026-08-19 12:16:46 +00:00
The CertRotationController only included the short SVC hostname (service.namespace.svc) in the serving certificate SANs. Clients resolving via the full cluster.local FQDN get a TLS verification failure because the name doesn't match. Add the .svc.cluster.local form so both resolve correctly. Signed-off-by: Randy Bruno Piverger <21374229+Randy424@users.noreply.github.com> Co-authored-by: Randy Bruno Piverger <21374229+Randy424@users.noreply.github.com> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>