For special proxy or cross-domain access requirements, you can customize the SANs for a new or existing cluster in the ACK console.
Prerequisites
You have created an ACK managed cluster, ACK dedicated cluster, or ACK Serverless cluster. For more information, see Create an ACK managed cluster, Create an ACK dedicated cluster (Creation is no longer supported), or Create a cluster.
-
You cannot customize SANs for an ACK Serverless cluster when you create it. You can only update the SANs for an existing cluster.
-
You can customize SANs for an ACK dedicated cluster only when you create it. You cannot update the SANs for an existing cluster.
SAN overview
SAN is an extension to the X.509 standard. This extension allows you to associate multiple values, such as IP addresses, domain names, URIs, and email addresses, with a single SSL certificate by using the subjectAltName field.
Customize API server certificate SANs
New cluster
This section uses an ACK managed cluster as an example to demonstrate how to customize API server certificate SANs during cluster creation. The procedure is similar for other cluster types.
During cluster creation, on the Cluster Configurations page, click Show Advanced Options. In the Custom Certificate SANs field, enter the required values. For more information, see Create an ACK managed cluster.
In the Custom Certificate SANs field, you can enter valid custom IP addresses, domain names, and URIs. Separate multiple values with commas.
The Custom Certificate SANs field can contain domain names and IP addresses.
Existing cluster
Updating or modifying custom SANs restarts the cluster's API server. To minimize business impact, we recommend performing this operation during off-peak hours.
Log on to the ACK console. In the left navigation pane, click Clusters.
On the Clusters page, click the name of your cluster. In the left navigation pane, click Cluster Information.
-
On the Cluster Information page, click the Basic Information tab. In the Network section, click Edit to the right of Custom Certificate SANs.
-
In the Update Custom SAN dialog box, configure the Custom Certificate SANs field and then click OK.
Related documents
API server audit logs record and trace user operations. For more information, see Work with cluster auditing.