From f956e662072fe1f403c973a8acfdde5fb7650bde Mon Sep 17 00:00:00 2001 From: John Murret Date: Wed, 23 Feb 2022 14:04:26 -0700 Subject: [PATCH] Updating consul on k8s to remove known limitations of serverAdditionalDNSSans and serverAdditionalIPSans (#12338) --- website/content/docs/k8s/installation/vault/index.mdx | 2 -- 1 file changed, 2 deletions(-) diff --git a/website/content/docs/k8s/installation/vault/index.mdx b/website/content/docs/k8s/installation/vault/index.mdx index f759ce6d3f..84dd345fc0 100644 --- a/website/content/docs/k8s/installation/vault/index.mdx +++ b/website/content/docs/k8s/installation/vault/index.mdx @@ -75,8 +75,6 @@ $ vault secrets enable pki ## Known Limitations - TLS - - `global.tls.serverAdditionalDNSSans` is not currently configurable and must be manually added to the server certificate in Vault. - - `global.tls.serverAdditionalIPSans` is not currently configurable and must be manually added to the server certificate in Vault. - Mesh gateway is not currently supported. - Multi-DC Federation is not currently supported. - Certificate rotation for Server TLS certs is not currently supported through the Helm chart. Ensure the TTL for your Server TLS certificates are sufficiently long. Should your certificates expire it will be necessary to issue a `consul reload` on each server after issuing new Server TLS certs from Vault.