From 7b8f88747c261917de0ea92c609727927550b2f8 Mon Sep 17 00:00:00 2001 From: Antonis Kouzoupis Date: Fri, 7 Jun 2024 12:50:48 +0200 Subject: [PATCH] [HWORKS-1008] Include OpenSearch Consul domains to elastic user certificate SAN (#1537) --- .../src/main/java/io/hops/hopsworks/ca/controllers/PKI.java | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java b/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java index 276ba5910b..2de0f270c2 100644 --- a/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java +++ b/hopsworks-ca/src/main/java/io/hops/hopsworks/ca/controllers/PKI.java @@ -927,7 +927,9 @@ GeneralName[] getSanForUsername(String username, String region) { onlinefsDomain.add(HopsworksService.MYSQL.getNameWithTag(MysqlTags.onlinefs)); return convertToGeneralNames(onlinefsDomain, true, region); case "elastic": - return convertToGeneralNames(HopsworksService.LOGSTASH.domains(), true, region); + return convertToGeneralNames(mergeSets( + HopsworksService.LOGSTASH.domains(), HopsworksService.OPENSEARCH.domains()), + true, region); case "flyingduck": return convertToGeneralNames(HopsworksService.FLYING_DUCK.domains(), true, region); case "kagent":