mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-08 21:14:56 +09:00
The leaf cert now covers the base ClusterIP service `<release>` alongside the existing `-primary` and `-secondary` services so a client connection that uses the unqualified release name (e.g. via cozystack platform DNS) passes hostname verification. The headless `-internal` wildcard and the external LoadBalancer hostname are unaffected. Signed-off-by: Arsolitt <arsolitt@gmail.com>