fix updateEntry for first domain len > 64

gardener · Mar 6, 2024 · 40ed451 · 40ed451
1 parent 3ff6269
commit 40ed451
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/pkg/cert/source/reconciler.go b/pkg/cert/source/reconciler.go
@@ -397,8 +397,13 @@ func (r *sourceReconciler) updateEntry(logger logger.LogContext, info CertInfo,
 		var cn *string
 		var dnsNames []string
 		if len(info.Domains) > 0 {
-			cn = &info.Domains[0]
-			dnsNames = info.Domains[1:]
+			if len(info.Domains[0]) <= 64 {
+				cn = &info.Domains[0]
+				dnsNames = info.Domains[1:]
+			} else {
+				cn = nil
+				dnsNames = info.Domains
+			}
 		}
 
 		mod.AssureStringPtrPtr(&spec.CommonName, cn)