Can we support wildcard tls cert for k3s?

[mogliang]

Hi all,

We are using Azure relay to connect k3s cluster, the relay endpoint is like {guid}.myrelaydomain.com, guid is random generated at runtime, and rotate every few hours. To make apiserver pass tls validation, we need add wildcard tls-san *.myrelaydomain.com, however, k3s don't like it

I see the regex reject wildcard cert, any specific reason for this? can we allow wildcard cert?

https://github.com/rancher/dynamiclistener/blame/3fc2b04ceda3f071d8862a3b12f56f058cb9b6e3/factory/gen.go#L32

[mogliang]

add reference
k3s-io/k3s#7821