We're updating the issue view to help you get more done. 

Sanity check will almost always fail if external certificate is provided

Description

The sanity check uses the CLI profile created during installation.
That CLI profile always points at "localhost".

This result in certificate validation failing unless "localhost" is listed as a DNS/IP on the cert.

Our self-generated external cert contains "localhost", but user-provided certs will almost never contain it.

Steps to Reproduce

Environment:
OS (CLI), HA cluster, cloud provider
------------------------------------

Steps to reproduce:
------------------
1.
2.
3.

Expected result:
---------------

Actual result:
-------------

Why Propose Close?

None

Status

Assignee

Ido Berkovitch

Reporter

Isaac Shabtay

Labels

Severity

Critical

Target Version

4.4

Premium Only

no

Found In Version

4.3

QA Owner

Lital Hamami

Bug Type

regression bug

Customer Encountered

Yes

Customer Name

None

Release Notes

yes

Priority

None

Sprint

None

Fix versions

Priority

Unprioritized