By default, the Subject Alternative Name (SAN) field in an ACS cluster's API server certificate includes the cluster's local domain name, the private IP address of the API server's SLB instance, the local IP address of the API server service, and public EIPs. If you require proxy or cross-domain access, you can customize the SAN field for an existing cluster in the ACS console.
Prerequisites
You have created an ACS cluster.
You cannot customize the SAN field when you create an ACS cluster. You can only update the SAN field for an existing cluster.
SAN
SAN is an extension to the X.509 standard. This extension allows you to associate multiple values, such as IP addresses, domain names, URIs, and email addresses, with an SSL certificate through the subjectAltName field.
Customize API server certificate SANs
Modifying the custom SANs triggers a brief restart of the cluster's API server. Perform this operation during off-peak hours.
-
Log on to the ACS console. In the left navigation pane, click Clusters.
-
On the Clusters page, click the name of the target cluster, or click Details in the Actions column.
-
On the cluster details page, click the Basic Information tab, and then click Edit to the right of Custom Certificate SANs.
-
In the Update Custom SAN dialog box, enter your custom values in the Custom Certificate SANs field, and then click OK.