Incorrect "hostname" in nomad client and server certificates

[micafer]

In the nomad client and server certificate:

ai4-ansible/roles/nomad/tasks/generate_certificates.yml

Lines 30 to 36 in 8872ccc

	shell: "echo '{}' | cfssl gencert -ca={{ path }}nomad-ca.pem -ca-key={{ path }}nomad-ca-key.pem -config={{ path }}cfssl.json -hostname=\"{{ ansible_hostname }},server.{{ nomad_region }}.nomad,server.{{ nomad_region }}.nomad,localhost,127.0.0.1,{{ ansible_default_ipv4.address }}\" - | cfssljson -bare server"
	args:
	chdir: "{{ path }}"
	creates: "{{ path }}server.pem"
	- name: "Generate client certificate"
	shell: "echo '{}' | cfssl gencert -ca={{ path }}nomad-ca.pem -ca-key={{ path }}nomad-ca-key.pem -config={{ path }}cfssl.json -hostname=\"{{ ansible_hostname }},client.{{ nomad_region }}.nomad,client.{{ nomad_region }}.nomad,localhost,127.0.0.1,{{ ansible_default_ipv4.address }}\" - | cfssljson -bare client"

There is an error.
We are only generating one server/client certificate used in all the servers/clients, which is generated in the nomad_master node. So the "ansible_hostname" (or the IP address) always refers to the nomad_master node in all of them, and it may raise some SSL errors in applications accessing the nomad API.

Currently it is not a major issue, but we have to keep an eye.

[Sftobias]

Hi Miguel, i will check this as soon as i can.