{"action":"opened","issue":{"url":"https://api.github.com/repos/chef-cookbooks/etcd/issues/89","repository_url":"https://api.github.com/repos/chef-cookbooks/etcd","labels_url":"https://api.github.com/repos/chef-cookbooks/etcd/issues/89/labels{/name}","comments_url":"https://api.github.com/repos/chef-cookbooks/etcd/issues/89/comments","events_url":"https://api.github.com/repos/chef-cookbooks/etcd/issues/89/events","html_url":"https://github.com/chef-cookbooks/etcd/issues/89","id":346724916,"node_id":"MDU6SXNzdWUzNDY3MjQ5MTY=","number":89,"title":"Missing peer_cert_allowed_cn security property","user":{"login":"grizo","id":4908882,"node_id":"MDQ6VXNlcjQ5MDg4ODI=","avatar_url":"https://avatars0.githubusercontent.com/u/4908882?v=4","gravatar_id":"","url":"https://api.github.com/users/grizo","html_url":"https://github.com/grizo","followers_url":"https://api.github.com/users/grizo/followers","following_url":"https://api.github.com/users/grizo/following{/other_user}","gists_url":"https://api.github.com/users/grizo/gists{/gist_id}","starred_url":"https://api.github.com/users/grizo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/grizo/subscriptions","organizations_url":"https://api.github.com/users/grizo/orgs","repos_url":"https://api.github.com/users/grizo/repos","events_url":"https://api.github.com/users/grizo/events{/privacy}","received_events_url":"https://api.github.com/users/grizo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-08-01T18:54:27Z","updated_at":"2018-08-01T18:54:27Z","closed_at":null,"author_association":"NONE","body":"> v3.3.0 adds etcd --peer-cert-allowed-cn flag to support CN(Common Name)-based auth for inter-peer connections. Kubernetes TLS bootstrapping involves generating dynamic certificates for etcd members and other system components (e.g. API server, kubelet, etc.). Maintaining different CAs for each component provides tighter access control to etcd cluster but often tedious. When --peer-cert-allowed-cn flag is specified, node can only join with matching common name even with shared CAs. "}}
{"actor":{"display_login":"grizo"}}