packages icon indicating copy to clipboard operation
packages copied to clipboard

[Hono] Fix service names in example certificates

Open b-abel opened this issue 3 years ago • 4 comments

The configuration for creating example certificates defines Subject alternative names for the service names, like eg. "hono-service-auth.hono". The service names are prefixed during deployment with the release name. The release name in the documentation for deploying only Hono is "eclipse-hono", in the documentation of the cloud2edge package it is "c2e", but only "hono" would match. All client configuration I found disables hostname verification, so there is no real consequence during runtime. But FMPOV the configuration is misleading and does not serve as a good example.

The easiest solution would probably be to remove the release name prefix from the service names. The impact should be small because in practice probably no one will deploy Hono multiple times into the same Kubernetes namespace.

Another solution could be to define a "standard release name" and create the certificates for this name. This could be accompanied by informing the user via the NOTES.txt about the release name to be used, or even by a check that requires the release name.

b-abel avatar Jun 02 '21 15:06 b-abel