mirror of
https://github.com/kubernetes/kubernetes.git
synced 2026-08-10 19:34:24 +00:00
The Projected PodCertificate mTLS test built the client fetch URL from the partially qualified name "server.<namespace>.svc". Windows pods treat any name containing a "." as an FQDN and skip DNS search-suffix resolution, so partially qualified service names do not resolve there. Build the fetch URL from the fully qualified service name using the cluster DNS domain so the client resolves the server on both Linux and Windows.