./easyrsa --subject-alt-name=couchbase-operator-admission.operator-admission.svc build-server-full couchbase-admission-controller nopass
Using SSL: openssl OpenSSL 1.1.1 11 Sep 2018
Trying to figure out how to TLS the kubernetes cluster…and having difficulty with this part trying to generate the dynamic admission controller.
First question, is why is this needed when it’s not reference in the operator specific documentation (https://docs.couchbase.com/operator/current/reference-couchbasecluster.html#spec-networking-tls)?
And how does this one get defined in the operator?
If it’s not needed, why is it documented here?
./easyrsa --subject-alt-name=couchbase-operator-admission.operator-admission.svc build-server-full couchbase-admission-controller nopass
Using SSL: openssl OpenSSL 1.1.1 11 Sep 2018
Error Loading request extension section req_extra
140197617070528:error:2207507C:X509 V3 routines:v2i_GENERAL_NAME_ex:missing value:…/crypto/x509v3/v3_alt.c:512:
140197617070528:error:22098080:X509 V3 routines:X509V3_EXT_nconf:error in extension:…/crypto/x509v3/v3_conf.c:47:name=subjectAltName, value=couchbase-operator-admission.operator-admission.svc
Easy-RSA error:
Failed to generate request