8 Commits (69c7ba320e041894c073f7f62a98075b72c6bfd8)

Author	SHA1	Message	Date
fibonacci1729	bd0686731c	fix(helm): fix(helm): add `--tls-hostname` flag to tls flags ... docs(*): update tiller_ssl.md to reflect IP SAN usage. When using helm/tiller in tls-verify mode, 127.0.0.1 should be listed as an IP SAN in the tiller certificate to pass hostname verficiation of the TLS handshake. Closes #4149	6 years ago
Brian	aedd306e83	Revert "fix(helm): add `--tls-hostname` flag to tls flags."	6 years ago
fibonacci1729	aaf1c6a352	docs(*): update tiller_ssl docs to reflect IP SAN usage. ... When using helm/tiller in tls-verify mode, 127.0.0.1 should be listed as an IP SAN in the tiller certificate to pass hostname verficiation of the TLS handshake. Closes #4149	6 years ago
mf-lit	215abe9fd4	Update tiller_ssl.md ... Add -days parameter to openssl signing commands for clarity. Also add some related troubleshooting steps.	7 years ago
AdamDang	31c03a2484	Update tiller_ssl.md ... "that" is duplicated.	7 years ago
lihuang	bf8bc42cfc	Update tiller_ssl.md	7 years ago
Matthew Fisher	35616bd0df	fix links to service_accounts.md	7 years ago
Matt Butcher	e8e6ac5d77	Fix/missing ssl params (#3152) ... * fix(helm): add TLS params back During a recent refactor, several TLS flags stopped being processed for a few of the commands. This fixes those commands, and documents how to set up TLS. * fix(tiller): add stricter certificate verification The older version of Tiller allowed a weaker set of certificate checks than we intended. This version requires a client certificate, and then requires that that certificate be signed by a known CA. This works around the situation where a user could provide a self-signed certificate.	7 years ago