{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/3670","labels_url":"https://api.github.com/repos/openshift/origin/issues/3670/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/3670/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/3670/events","html_url":"https://github.com/openshift/origin/issues/3670","id":94663684,"number":3670,"title":"Add Kubernetes service IP to cert name SANs (as per upstream)","user":{"login":"jimmidyson","id":464659,"avatar_url":"https://avatars.githubusercontent.com/u/464659?v=3","gravatar_id":"","url":"https://api.github.com/users/jimmidyson","html_url":"https://github.com/jimmidyson","followers_url":"https://api.github.com/users/jimmidyson/followers","following_url":"https://api.github.com/users/jimmidyson/following{/other_user}","gists_url":"https://api.github.com/users/jimmidyson/gists{/gist_id}","starred_url":"https://api.github.com/users/jimmidyson/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jimmidyson/subscriptions","organizations_url":"https://api.github.com/users/jimmidyson/orgs","repos_url":"https://api.github.com/users/jimmidyson/repos","events_url":"https://api.github.com/users/jimmidyson/events{/privacy}","received_events_url":"https://api.github.com/users/jimmidyson/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/openshift/origin/labels/area/security","name":"area/security","color":"006b75"},{"url":"https://api.github.com/repos/openshift/origin/labels/area/usability","name":"area/usability","color":"006b75"},{"url":"https://api.github.com/repos/openshift/origin/labels/component/auth","name":"component/auth","color":"0052cc"},{"url":"https://api.github.com/repos/openshift/origin/labels/kind/enhancement","name":"kind/enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/openshift/origin/labels/priority/P2","name":"priority/P2","color":"fbca04"}],"state":"open","locked":false,"assignee":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"milestone":null,"comments":8,"created_at":"2015-07-13T08:13:53Z","updated_at":"2015-08-03T13:35:37Z","closed_at":null,"body":"In https://github.com/GoogleCloudPlatform/kubernetes/pull/10643, the `ServiceReadWriteIP` is added to the certificate SANs. This allows pods to address the API server via the `KUBERNETES_SERVICE_HOST` env var without having to disable hostname verification. This is another option to use in addition to using DNS, which is still sometimes flaky (IPv6 issues apparently)."},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/127234920","html_url":"https://github.com/openshift/origin/issues/3670#issuecomment-127234920","issue_url":"https://api.github.com/repos/openshift/origin/issues/3670","id":127234920,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2015-08-03T13:35:37Z","updated_at":"2015-08-03T13:35:37Z","body":"That would be what I would expect. @smarterclayton?\r\n\r\nFYI, #3985 is open to add all the DNS-resolveable names to the certs"}}