chore: add glob domains

- allow generation of hostnames like prod* without a domain
This commit is contained in:
Ben Vincent 2024-02-25 22:42:22 +11:00
parent fd5c3dbce2
commit f351cc8413

View File

@ -36,9 +36,10 @@
vault write pki_int/roles/servers_default \
issuer_ref="$(vault read -field=default pki_int/config/issuers)" \
allow_ip_sans=true \
allowed_domains="unkin.net" \
allowed_domains="unkin.net,prod*" \
allow_subdomains=true \
allow_bare_domains=true \
allow_glob_domains=true \
max_ttl="2160h" \
key_bits=4096 \
country="Australia"