Support accessing Kubernetes cluster with IP as CNAME (metalbear-co#422)

tamasfe · Oct 10, 2022 · 19ea9cc · 19ea9cc
1 parent d9b19fe
commit 19ea9cc
Show file tree

Hide file tree

Showing 3 changed files with 18 additions and 4 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -9,6 +9,8 @@ Check [Keep a Changelog](http://keepachangelog.com/) for recommendations on how
 
 ### Fixed
 - mirrord-layer: Return errors from agent when `connect` fails back to the hook (previously we were handling these as errors in layer, so `connect` had slightly wrong behavior).
+- mirrord-layer: workaround for `presented server name type wasn't supported` error when Kubernetes server has IP for CN in certificate. [[#388](https://github.com/metalbear-co/mirrord/issues/388)]
+
 ### Changed
 - mirrord-layer: Use `tracing::instrument` to improve logs.
 - CI: pin rust nightly channel to 2022-09-13.

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -54,7 +54,10 @@ streammap-ext = "0.1"
 # so we patch crates.io to use the latest commits from rustls
 # this should be changed once a newer version of rustls is ou
 [patch.crates-io]
-rustls = { git = 'https://github.com/rustls/rustls' }
+rustls = { git = "https://github.com/metalbear-co/rustls", branch = "feat-ip-address" }
+
+[patch."https://github.com/ctz/webpki"]
+webpki = { git = "https://github.com/metalbear-co/webpki", branch = "feat-ip-address" }
 
 [profile.release]
 strip = "debuginfo"