correct commonName for certificates

Author: kvaps

deploy/helm/kubernetes/templates/etcd-certs.yaml

@@ -6,7 +6,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-etcd-ca"
 spec:
-  commonName: "{{ $fullName }}-pki-etcd-ca"
+  commonName: "{{ $fullName }}-etcd-ca"
   secretName: "{{ $fullName }}-pki-etcd-ca"
   duration: 87600h # 3650d
   renewBefore: 8760h # 365d
@@ -44,7 +44,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-etcd-peer"
 spec:
-  commonName: "{{ $fullName }}-pki-etcd-peer"
+  commonName: "{{ $fullName }}-etcd-peer"
   secretName: "{{ $fullName }}-pki-etcd-peer"
   duration: 8760h # 365d
   renewBefore: 4380h # 178d
@@ -75,7 +75,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-etcd-server"
 spec:
-  commonName: "{{ $fullName }}-pki-etcd-server"
+  commonName: "{{ $fullName }}-etcd-server"
   secretName: "{{ $fullName }}-pki-etcd-server"
   duration: 8760h # 365d
   renewBefore: 4380h # 178d
@@ -120,7 +120,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-etcd-healthcheck-client"
 spec:
-  commonName: "{{ $fullName }}-pki-etcd-healthcheck-client"
+  commonName: "{{ $fullName }}-etcd-healthcheck-client"
   secretName: "{{ $fullName }}-pki-etcd-healthcheck-client"
   duration: 8760h # 365d
   renewBefore: 4380h # 178d
@@ -140,7 +140,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-apiserver-etcd-client"
 spec:
-  commonName: "{{ $fullName }}-pki-apiserver-etcd-client"
+  commonName: "{{ $fullName }}-apiserver-etcd-client"
   secretName: "{{ $fullName }}-pki-apiserver-etcd-client"
   duration: 8760h # 365d
   renewBefore: 4380h # 178d

deploy/helm/kubernetes/templates/konnectivity-certs.yaml

@@ -6,7 +6,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-konnectivity-ca"
 spec:
-  commonName: "{{ $fullName }}-pki-konnectivity-ca"
+  commonName: "{{ $fullName }}-konnectivity-ca"
   secretName: "{{ $fullName }}-pki-konnectivity-ca"
   duration: 87600h # 3650d
   renewBefore: 8760h # 365d
@@ -41,7 +41,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-konnectivity-server"
 spec:
-  commonName: "{{ $fullName }}-pki-konnectivity-server"
+  commonName: "{{ $fullName }}-konnectivity-server"
   secretName: "{{ $fullName }}-pki-konnectivity-server"
   duration: 8760h # 365d
   renewBefore: 4380h # 178d
@@ -71,7 +71,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-konnectivity-client"
 spec:
-  commonName: "{{ $fullName }}-pki-konnectivity-client"
+  commonName: "{{ $fullName }}-konnectivity-client"
   secretName: "{{ $fullName }}-pki-konnectivity-client"
   duration: 8760h # 365d
   renewBefore: 4380h # 178d

deploy/helm/kubernetes/templates/kubernetes-certs.yaml

@@ -5,7 +5,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-ca"
 spec:
-  commonName: "{{ $fullName }}-pki-ca"
+  commonName: "{{ $fullName }}-ca"
   secretName: "{{ $fullName }}-pki-ca"
   duration: 87600h # 3650d
   renewBefore: 8760h # 365d
@@ -40,7 +40,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-apiserver"
 spec:
-  commonName: "{{ $fullName }}-pki-apiserver"
+  commonName: "{{ $fullName }}-apiserver"
   secretName: "{{ $fullName }}-pki-apiserver"
   duration: 8760h # 365d
   renewBefore: 4380h # 178d
@@ -82,7 +82,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-apiserver-kubelet-client"
 spec:
-  commonName: "{{ $fullName }}-pki-apiserver-kubelet-client"
+  commonName: "{{ $fullName }}-apiserver-kubelet-client"
   secretName: "{{ $fullName }}-pki-apiserver-kubelet-client"
   duration: 8760h # 365d
   renewBefore: 4380h # 178d

deploy/helm/kubernetes/templates/kubernetes-front-proxy-certs.yaml

@@ -6,7 +6,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-front-proxy-ca"
 spec:
-  commonName: "{{ $fullName }}-pki-front-proxy-ca"
+  commonName: "{{ $fullName }}-front-proxy-ca"
   secretName: "{{ $fullName }}-pki-front-proxy-ca"
   duration: 87600h # 3650d
   renewBefore: 8760h # 365d
@@ -35,7 +35,7 @@ kind: Certificate
 metadata:
   name: "{{ $fullName }}-pki-front-proxy-client"
 spec:
-  commonName: "{{ $fullName }}-pki-front-proxy-client"
+  commonName: "{{ $fullName }}-front-proxy-client"
   secretName: "{{ $fullName }}-pki-front-proxy-client"
   duration: 8760h # 365d
   renewBefore: 4380h # 178d