Merge pull request #52 from binlab/issue-51

Replace legacy Common Name field (CN) with SAN DNS
binlab · Jul 29, 2021 · afe1386 · afe1386
2 parents 1370dfa + b813804
commit afe1386
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/tls.tf b/tls.tf
@@ -71,11 +71,15 @@ resource "tls_cert_request" "node" {
   private_key_pem = tls_private_key.node[count.index].private_key_pem
 
   subject {
-    common_name         = format(local.internal_domain_tmpl, count.index)
+    common_name         = format("%s Node %d", var.cluster_description, var.cluster_count)
     organizational_unit = format("%s Certificate", var.cluster_description)
     organization        = var.cluster_description
   }
 
+  dns_names = [
+    format(local.internal_domain_tmpl, count.index)
+  ]
+
   lifecycle {
     prevent_destroy = false
   }