don't check OtherNames when fuzzy matching
Signed-off-by: Tim Ramlot <42113979+inteon@users.noreply.github.com>
This commit is contained in:
parent
736896d264
commit
3dad3f320b
@ -312,16 +312,6 @@ func SecretDataAltNamesMatchSpec(secret *corev1.Secret, spec cmapi.CertificateSp
|
|||||||
violations = append(violations, "spec.emailAddresses")
|
violations = append(violations, "spec.emailAddresses")
|
||||||
}
|
}
|
||||||
|
|
||||||
if spec.OtherNames != nil {
|
|
||||||
matched, err := matchOtherNames(x509cert.Extensions, spec.OtherNames)
|
|
||||||
if err != nil {
|
|
||||||
return nil, err
|
|
||||||
}
|
|
||||||
if !matched {
|
|
||||||
violations = append(violations, "spec.otherNames")
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return violations, nil
|
return violations, nil
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user