[req]
distinguished_name = req_distinguished_name
req_extensions = v3_req

[req_distinguished_name]
countryName = US
countryName_default = US
stateOrProvinceName = Washington
stateOrProvinceName_default = Washington
localityName = Seattle
localityName_default = Seattle
organizationName = Example Company
organizationName_default = Example Company
organizationalUnitName = Color App
organizationalUnitName_default = Color App
commonName = color-blue.howto-k8s-tls-file-based.svc.cluster.local
commonName_default = color-blue.howto-k8s-tls-file-based.svc.cluster.local
commonName_max  = 64
emailAddress = color-app-blue@example.com
emailAddress_default = color-app-blue@example.com

[v3_req]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
extendedKeyUsage = clientAuth, serverAuth
subjectKeyIdentifier = hash
subjectAltName = @alt_names

[alt_names]
DNS.1 = color-blue.howto-k8s-tls-file-based.svc.cluster.local