fix pd-client tls bug

Yisaer · Feb 14, 2020 · 336bef9 · 336bef9
1 parent 87f2acf
commit 336bef9
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/charts/tidb-operator/templates/admission/admission-webhook-rbac.yaml b/charts/tidb-operator/templates/admission/admission-webhook-rbac.yaml
@@ -27,6 +27,9 @@ rules:
   - apiGroups: [""]
     resources: ["pods"]
     verbs: ["get", "list", "watch", "update"]
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "list"]
   - apiGroups: [""]
     resources: ["events"]
     verbs: ["create","patch","update"]

diff --git a/pkg/manager/member/pd_member_manager.go b/pkg/manager/member/pd_member_manager.go
@@ -257,10 +257,11 @@ func (pmm *pdMemberManager) syncPDStatefulSetForTidbCluster(tc *v1alpha1.TidbClu
 func (pmm *pdMemberManager) syncPDClientCerts(tc *v1alpha1.TidbCluster) error {
 	ns := tc.GetNamespace()
 	tcName := tc.GetName()
-	commonName := fmt.Sprintf("%s-pd-client", tcName)
+	commonName := fmt.Sprintf("%s-pd", tcName)
 
 	hostList := []string{
 		commonName,
+		fmt.Sprintf("%s.%s", commonName, tc.Namespace),
 	}
 
 	certOpts := &controller.TiDBClusterCertOptions{