fix: API server cert/CIDR parsing bug

jpts · Sep 4, 2023 · 8218a1c · 8218a1c
1 parent 938d701
commit 8218a1c
Showing 1 changed file with 6 additions and 5 deletions.
diff --git a/cmd/mode.go b/cmd/mode.go
@@ -85,11 +85,12 @@ func getAPIServerCIDRS() ([]*net.IPNet, error) {
 
 	var cidrs []*net.IPNet
 	for _, ip := range cert.IPAddresses {
-		cidrs = append(cidrs, &net.IPNet{
-			IP: ip,
-			// Take a best guess here
-			Mask: net.IPv4Mask(255, 255, 252, 0),
-		})
+		// Guess subnet size
+		_, net, err := net.ParseCIDR(fmt.Sprintf("%s/22", ip.String()))
+		if err != nil {
+			return nil, fmt.Errorf("problem parsing apiserver cert IPs: %s", ip)
+		}
+		cidrs = append(cidrs, net)
 	}
 
 	return cidrs, nil