{"action":"created","issue":{"url":"https://api.github.com/repos/projectcalico/k8s-policy/issues/69","repository_url":"https://api.github.com/repos/projectcalico/k8s-policy","labels_url":"https://api.github.com/repos/projectcalico/k8s-policy/issues/69/labels{/name}","comments_url":"https://api.github.com/repos/projectcalico/k8s-policy/issues/69/comments","events_url":"https://api.github.com/repos/projectcalico/k8s-policy/issues/69/events","html_url":"https://github.com/projectcalico/k8s-policy/issues/69","id":211726499,"number":69,"title":"Policy controller doesn't support IP SANs","user":{"login":"fasaxc","id":469264,"avatar_url":"https://avatars3.githubusercontent.com/u/469264?v=3","gravatar_id":"","url":"https://api.github.com/users/fasaxc","html_url":"https://github.com/fasaxc","followers_url":"https://api.github.com/users/fasaxc/followers","following_url":"https://api.github.com/users/fasaxc/following{/other_user}","gists_url":"https://api.github.com/users/fasaxc/gists{/gist_id}","starred_url":"https://api.github.com/users/fasaxc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fasaxc/subscriptions","organizations_url":"https://api.github.com/users/fasaxc/orgs","repos_url":"https://api.github.com/users/fasaxc/repos","events_url":"https://api.github.com/users/fasaxc/events{/privacy}","received_events_url":"https://api.github.com/users/fasaxc/received_events","type":"User","site_admin":false},"labels":[{"id":438589789,"url":"https://api.github.com/repos/projectcalico/k8s-policy/labels/kind/support","name":"kind/support","color":"cc317c","default":false}],"state":"open","locked":false,"assignee":{"login":"caseydavenport","id":1944093,"avatar_url":"https://avatars0.githubusercontent.com/u/1944093?v=3","gravatar_id":"","url":"https://api.github.com/users/caseydavenport","html_url":"https://github.com/caseydavenport","followers_url":"https://api.github.com/users/caseydavenport/followers","following_url":"https://api.github.com/users/caseydavenport/following{/other_user}","gists_url":"https://api.github.com/users/caseydavenport/gists{/gist_id}","starred_url":"https://api.github.com/users/caseydavenport/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/caseydavenport/subscriptions","organizations_url":"https://api.github.com/users/caseydavenport/orgs","repos_url":"https://api.github.com/users/caseydavenport/repos","events_url":"https://api.github.com/users/caseydavenport/events{/privacy}","received_events_url":"https://api.github.com/users/caseydavenport/received_events","type":"User","site_admin":false},"assignees":[{"login":"caseydavenport","id":1944093,"avatar_url":"https://avatars0.githubusercontent.com/u/1944093?v=3","gravatar_id":"","url":"https://api.github.com/users/caseydavenport","html_url":"https://github.com/caseydavenport","followers_url":"https://api.github.com/users/caseydavenport/followers","following_url":"https://api.github.com/users/caseydavenport/following{/other_user}","gists_url":"https://api.github.com/users/caseydavenport/gists{/gist_id}","starred_url":"https://api.github.com/users/caseydavenport/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/caseydavenport/subscriptions","organizations_url":"https://api.github.com/users/caseydavenport/orgs","repos_url":"https://api.github.com/users/caseydavenport/repos","events_url":"https://api.github.com/users/caseydavenport/events{/privacy}","received_events_url":"https://api.github.com/users/caseydavenport/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/projectcalico/k8s-policy/milestones/1","html_url":"https://github.com/projectcalico/k8s-policy/milestone/1","labels_url":"https://api.github.com/repos/projectcalico/k8s-policy/milestones/1/labels","id":2415698,"number":1,"title":"Calico v2.2.0","description":"","creator":{"login":"caseydavenport","id":1944093,"avatar_url":"https://avatars0.githubusercontent.com/u/1944093?v=3","gravatar_id":"","url":"https://api.github.com/users/caseydavenport","html_url":"https://github.com/caseydavenport","followers_url":"https://api.github.com/users/caseydavenport/followers","following_url":"https://api.github.com/users/caseydavenport/following{/other_user}","gists_url":"https://api.github.com/users/caseydavenport/gists{/gist_id}","starred_url":"https://api.github.com/users/caseydavenport/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/caseydavenport/subscriptions","organizations_url":"https://api.github.com/users/caseydavenport/orgs","repos_url":"https://api.github.com/users/caseydavenport/repos","events_url":"https://api.github.com/users/caseydavenport/events{/privacy}","received_events_url":"https://api.github.com/users/caseydavenport/received_events","type":"User","site_admin":false},"open_issues":3,"closed_issues":1,"state":"open","created_at":"2017-03-28T06:57:05Z","updated_at":"2017-03-28T08:35:14Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2017-03-03T15:54:14Z","updated_at":"2017-03-31T16:18:17Z","closed_at":null,"body":"This often trips people up, especially if they're following a perfectly reasonable guide to get k8s certs set up then they try to add Calico.\r\n\r\nI believe IP SAN support has now landed in urllib3 so revving that library might get us that support \"for free\"."},"comment":{"url":"https://api.github.com/repos/projectcalico/k8s-policy/issues/comments/290758730","html_url":"https://github.com/projectcalico/k8s-policy/issues/69#issuecomment-290758730","issue_url":"https://api.github.com/repos/projectcalico/k8s-policy/issues/69","id":290758730,"user":{"login":"treytabner","id":1548707,"avatar_url":"https://avatars3.githubusercontent.com/u/1548707?v=3","gravatar_id":"","url":"https://api.github.com/users/treytabner","html_url":"https://github.com/treytabner","followers_url":"https://api.github.com/users/treytabner/followers","following_url":"https://api.github.com/users/treytabner/following{/other_user}","gists_url":"https://api.github.com/users/treytabner/gists{/gist_id}","starred_url":"https://api.github.com/users/treytabner/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/treytabner/subscriptions","organizations_url":"https://api.github.com/users/treytabner/orgs","repos_url":"https://api.github.com/users/treytabner/repos","events_url":"https://api.github.com/users/treytabner/events{/privacy}","received_events_url":"https://api.github.com/users/treytabner/received_events","type":"User","site_admin":false},"created_at":"2017-03-31T16:18:17Z","updated_at":"2017-03-31T16:18:17Z","body":"To clarify the problem here, when we have both IP addresses and one or more DNS names listed in the certificate, the IP addresses are ignored and only the DNS name is checked:\r\n\r\n```\r\n2017-03-31 16:16:20,100 5 INFO Syncing 'Namespace' objects\r\n2017-03-31 16:16:20,100 5 DEBUG Getting API resources 'https://172.20.0.1:443/api/v1/namespaces' at version 'None'. stream=False\r\n2017-03-31 16:16:20,100 5 INFO Syncing 'Pod' objects\r\n2017-03-31 16:16:20,102 5 DEBUG Getting API resources 'https://172.20.0.1:443/api/v1/pods' at version 'None'. stream=False\r\n2017-03-31 16:16:20,104 5 INFO Syncing 'NetworkPolicy' objects\r\n2017-03-31 16:16:20,104 5 DEBUG Getting API resources 'https://172.20.0.1:443/apis/extensions/v1beta1/networkpolicies' at version 'None'. stream=False\r\n2017-03-31 16:16:20,193 5 WARNING Connection error: Pod ...hostname '172.20.0.1' doesn't match 'dev.cont.example.net'\r\n2017-03-31 16:16:20,194 5 WARNING Connection error: Namespace ...hostname '172.20.0.1' doesn't match 'dev.cont.example.net'\r\n2017-03-31 16:16:20,195 5 INFO Restarting watch on resource: Namespace\r\n2017-03-31 16:16:20,195 5 WARNING Connection error: NetworkPolicy ...hostname '172.20.0.1' doesn't match 'dev.cont.example.net'\r\n2017-03-31 16:16:20,195 5 INFO Restarting watch on resource: NetworkPolicy\r\n2017-03-31 16:16:20,195 5 INFO Restarting watch on resource: Pod\r\n```\r\n\r\nThe certificate in question contains:\r\n\r\n```\r\n            X509v3 Subject Alternative Name: \r\n                IP Address:192.168.10.2, IP Address:192.168.10.3, IP Address:192.168.10.4, IP Address:172.20.0.1, DNS:dev.cont.example.net\r\n```"}}
{"actor":{"display_login":"treytabner"}}