From 7f349eff69278d21677e4f802a3f6b2fdf3c7799 Mon Sep 17 00:00:00 2001 From: SpectralHiss Date: Tue, 2 Jan 2024 09:28:10 +0000 Subject: [PATCH] Allow other SANS in Vault e2e framework * This is to enable conformance testing of the otherName alpha feature Signed-off-by: SpectralHiss --- test/e2e/framework/addon/vault/setup.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/test/e2e/framework/addon/vault/setup.go b/test/e2e/framework/addon/vault/setup.go index 8fb9f6a8c..5986b8f71 100644 --- a/test/e2e/framework/addon/vault/setup.go +++ b/test/e2e/framework/addon/vault/setup.go @@ -507,6 +507,8 @@ func (v *VaultInitializer) configureIntermediateRoles() error { "max_ttl": "2160h", "key_type": "any", "require_cn": "false", + "allowed_other_sans": "*", + "use_csr_sans": "true", "allowed_uri_sans": "spiffe://cluster.local/*", "enforce_hostnames": "false", "allow_bare_domains": "true",