unkin/terraform-vault
3
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Fix SSH host certificate signing for the sshca role #153

Merged
benvin merged 4 commits from benvin/sshca-sign-path-and-principals into master 2026-09-19 15:48:44 +10:00
Conversation 1 Commits 4 Files Changed 2
+2 -2
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
config/ssh_secret_backend_role/sshca/signhost.yaml
+1 -1
View File
@@ -3,6 +3,6 @@ algorithm_signer: rsa-sha2-256
ttl: 315360000 # 87600 * 3600
allow_host_certificates: true
allow_user_certificates: false
allowed_domains: "main.unkin.net,consul"
allowed_domains: "unkin.net,main.unkin.net,consul"
allow_subdomains: true
allow_bare_domains: false
policies/sshca/sign/host.yaml → policies/sshca/sign/signhost.yaml
+1 -1
View File
@@ -1,7 +1,7 @@
# Allow signing SSH host certificates
---
rules:
- path: "sshca/sign/host"
- path: "sshca/sign/signhost"
capabilities:
- create
- update