Updating consul on k8s to remove known limitations of serverAdditionalDNSSans and serverAdditionalIPSans (#12338)
This commit is contained in:
parent
ed1bc166e4
commit
0c9663c57f
|
@ -75,8 +75,6 @@ $ vault secrets enable pki
|
|||
## Known Limitations
|
||||
|
||||
- TLS
|
||||
- `global.tls.serverAdditionalDNSSans` is not currently configurable and must be manually added to the server certificate in Vault.
|
||||
- `global.tls.serverAdditionalIPSans` is not currently configurable and must be manually added to the server certificate in Vault.
|
||||
- Mesh gateway is not currently supported.
|
||||
- Multi-DC Federation is not currently supported.
|
||||
- Certificate rotation for Server TLS certs is not currently supported through the Helm chart. Ensure the TTL for your Server TLS certificates are sufficiently long. Should your certificates expire it will be necessary to issue a `consul reload` on each server after issuing new Server TLS certs from Vault.
|
||||
|
|
Loading…
Reference in New Issue