This is an automated email from the ASF dual-hosted git repository.
lhotari pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar-helm-chart.git
The following commit(s) were added to refs/heads/master by this push:
new f9fe6c6 Add support for ipAddresses in TLS certificate templates
(#643)
f9fe6c6 is described below
commit f9fe6c617d95b9da679d18f8416840d617b1b7e0
Author: ankith-carver <[email protected]>
AuthorDate: Fri Mar 20 12:11:35 2026 +0530
Add support for ipAddresses in TLS certificate templates (#643)
---
charts/pulsar/templates/_certs.tpl | 4 ++++
charts/pulsar/values.yaml | 8 ++++++++
2 files changed, 12 insertions(+)
diff --git a/charts/pulsar/templates/_certs.tpl
b/charts/pulsar/templates/_certs.tpl
index 72e3a71..80efaf7 100644
--- a/charts/pulsar/templates/_certs.tpl
+++ b/charts/pulsar/templates/_certs.tpl
@@ -107,6 +107,10 @@ spec:
{{- end }}
- {{ printf "*.%s-%s.%s.svc.%s" (include "pulsar.fullname" .root)
.componentConfig.component (include "pulsar.namespace" .root)
.root.Values.clusterDomain | quote }}
- {{ printf "%s-%s" (include "pulsar.fullname" .root)
.componentConfig.component | quote }}
+{{- if .tlsConfig.ipAddresses }}
+ ipAddresses:
+{{ toYaml .tlsConfig.ipAddresses | indent 4 }}
+{{- end }}
# Issuer references are always required.
issuerRef:
name: "{{ template "pulsar.certs.issuers.ca.name" .root }}"
diff --git a/charts/pulsar/values.yaml b/charts/pulsar/values.yaml
index ef04379..47fb6a3 100755
--- a/charts/pulsar/values.yaml
+++ b/charts/pulsar/values.yaml
@@ -251,6 +251,10 @@ tls:
# The dnsNames field specifies a list of Subject Alternative Names to be
associated with the certificate.
dnsNames:
# - example.com
+ # The ipAddresses fields specifies a list of IP addresses to include as
SANs in the certificate.
+ # Useful for internal cluster communication or when DNS names are
unavailable.
+ ipAddresses:
+ # - 10.84.12.9
cacerts:
enabled: false
certs:
@@ -265,6 +269,10 @@ tls:
# The dnsNames field specifies a list of Subject Alternative Names to be
associated with the certificate.
dnsNames:
# - example.com
+ # The ipAddresses fields specifies a list of IP addresses to include as
SANs in the certificate.
+ # Useful for internal cluster communication or when DNS names are
unavailable.
+ ipAddresses:
+ # - 10.84.12.11
cacerts:
enabled: false
certs:
