certmgr
certmgr copied to clipboard
fix: Skip host checks for certs with invalid DNS names
Kubernetes system certs have a CN which is not a vaild DNS name (e.g. system:kube-proxy). The hostname check always fails for kubernetes system certs, causing them to be regenerated every 30m, causing trouble.
Also running into this