[HWORKS-1008] Include OpenSearch Consul domains to elastic user certi…

…ficate SAN
logicalclocks · Jun 7, 2024 · 3f9e2d9 · 3f9e2d9
1 parent 5caf284
commit 3f9e2d9
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java b/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java
@@ -927,7 +927,9 @@ GeneralName[] getSanForUsername(String username, String region) {
         onlinefsDomain.add(HopsworksService.MYSQL.getNameWithTag(MysqlTags.onlinefs));
         return convertToGeneralNames(onlinefsDomain, true, region);
       case "elastic":
-        return convertToGeneralNames(HopsworksService.LOGSTASH.domains(), true, region);
+        return convertToGeneralNames(mergeSets(
+            HopsworksService.LOGSTASH.domains(), HopsworksService.OPENSEARCH.domains()),
+            true, region);
       case "flyingduck":
         return convertToGeneralNames(HopsworksService.FLYING_DUCK.domains(), true, region);
       case "kagent":