ceph/rgw: add s3.ceph.unkin.net to radosgw cert SAN + nginx aliases #487

Merged

benvin merged 1 commits from benvin/rgw-s3-altname into develop

2026-07-18 17:01:41 +10:00

Author	SHA1	Message	Date
benvin	c88e7dd314	ceph/rgw: add s3.ceph.unkin.net to radosgw cert SAN + nginx aliases ci/woodpecker/pr/ruby-validate Pipeline was successful Details ci/woodpecker/pr/yamllint Pipeline was successful Details ci/woodpecker/pr/bolt-validate Pipeline was successful Details ci/woodpecker/pr/puppet-lint Pipeline was successful Details ci/woodpecker/pr/erb-validate Pipeline was successful Details ci/woodpecker/pr/epp-validate Pipeline was successful Details ci/woodpecker/pr/puppet-validate Pipeline was successful Details ci/woodpecker/pr/ruby-check Pipeline was successful Details s3.ceph.unkin.net is the S3 endpoint name (a CNAME to radosgw.service.consul). The radosgw hosts front RGW with nginx (443 -> radosgw:7480) using the vault cert, so both the cert and nginx must recognise the name. - Add s3.ceph.unkin.net to profiles::pki::vault::alt_names (cert SAN). - Add s3.ceph.unkin.net to profiles::nginx::simpleproxy::nginx_aliases so nginx answers for it.	2026-07-18 16:29:02 +10:00