DevFW-CICD/ingress-nginx-helm
12
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Avoid secret without tls.crt and tls.key but a valid ca.crt (#5225)

Browse source
This commit is contained in:
Manuel Alejandro de Brito Fontes 2020-03-07 21:15:24 -03:00 committed by GitHub
parent 0c9db55265
commit ad460e16ce
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
internal/ingress/controller/controller.go
View file

@ -1111,6 +1111,13 @@ func (n *NGINXController) createServers(data []*ingress.Ingress,
continue
}
if cert.Certificate == nil {
klog.Warningf("SSL certificate %q does not contain a valid SSL certificate for server %q", secrKey, host)
klog.Warningf("Using default certificate")
servers[host].SSLCert = n.getDefaultSSLCertificate()
continue
}
err = cert.Certificate.VerifyHostname(host)
if err != nil {
klog.Warningf("Unexpected error validating SSL certificate %q for server %q: %v", secrKey, host, err)