Files
cozystack/packages
Arsolitt 62f778be19 fix(mariadb): include base service hostname in leaf cert SAN list
The leaf cert now covers the base ClusterIP service `<release>` alongside
the existing `-primary` and `-secondary` services so a client connection
that uses the unqualified release name (e.g. via cozystack platform DNS)
passes hostname verification. The headless `-internal` wildcard and the
external LoadBalancer hostname are unaffected.

Signed-off-by: Arsolitt <arsolitt@gmail.com>
2026-09-03 01:38:28 +03:00
..