fix: add server_name in mtls config

Author: ianchen0119

config/manager_config.default.toml

@@ -102,6 +102,7 @@ in_cluster = false
 
 [mtls]
 enable = false
+server_name = "localhost"
 cert_pem = """
 -----BEGIN CERTIFICATE-----
 YOUR_MANAGER_CERTIFICATE_HERE

config/manager_config.go

@@ -43,10 +43,11 @@ type ManageConfig struct {
 // CertPem and KeyPem are the service's own certificate/key pair signed by the private CA.
 // CAPem is the private CA certificate used to verify the peer's certificate.
 type MTLSConfig struct {
-	Enable  bool        `mapstructure:"enable"`
-	CertPem SecretValue `mapstructure:"cert_pem"`
-	KeyPem  SecretValue `mapstructure:"key_pem"`
-	CAPem   SecretValue `mapstructure:"ca_pem"`
+	Enable     bool        `mapstructure:"enable"`
+	ServerName string      `mapstructure:"server_name"`
+	CertPem    SecretValue `mapstructure:"cert_pem"`
+	KeyPem     SecretValue `mapstructure:"key_pem"`
+	CAPem      SecretValue `mapstructure:"ca_pem"`
 }
 
 type MongoDBConfig struct {
@@ -80,9 +81,7 @@ type K8SConfig struct {
 	IsInCluster    bool   `mapstructure:"in_cluster"`
 }
 
-var (
-	managerCfg *ManageConfig
-)
+var managerCfg *ManageConfig
 
 func GetManagerConfig() *ManageConfig {
 	return managerCfg

manager/client/deicison_maker.go

@@ -36,6 +36,7 @@ func NewDecisionMakerClient(keyConfig config.KeyConfig, mtlsCfg config.MTLSConfi
 			Certificates: []tls.Certificate{cert},
 			RootCAs:      caPool,
 			MinVersion:   tls.VersionTLS12,
+			ServerName:   mtlsCfg.ServerName,
 		}
 
 		defaultTransport, ok := http.DefaultTransport.(*http.Transport)