Installer: migrate internal services to *.p.{domain}
diff --git a/core/nebula/controller/controllers/ca.go b/core/nebula/controller/controllers/ca.go
index d31b6cd..f442db6 100644
--- a/core/nebula/controller/controllers/ca.go
+++ b/core/nebula/controller/controllers/ca.go
@@ -215,7 +215,7 @@
return nil
}
ca, err := c.getCA(node.Spec.CANamespace, node.Spec.CAName)
- if ca.Status.State != nebulav1.NebulaCAStateReady {
+ if ca == nil || ca.Status.State != nebulav1.NebulaCAStateReady {
return fmt.Errorf("Referenced CA %s is not ready yet.", node.Spec.CAName)
}
caSecret, err := c.getSecret(ca.Namespace, ca.Spec.SecretName)