- migrate from individual terraform files to config-driven terragrunt module structure - add vault_cluster module with config discovery system - replace individual .tf files with centralized config.hcl - restructure auth and secret backends as configurable modules - move auth roles and secret backends to yaml-based configuration - convert policies from .hcl to .yaml format, add rules/auth definition - add pre-commit hooks for yaml formatting and file cleanup - add terragrunt cache to gitignore - update makefile with terragrunt commands and format target
18 lines
498 B
YAML
18 lines
498 B
YAML
description: "PKI Intermediate CA"
|
|
max_lease_ttl_seconds: 157680000 # 43800 hours * 3600
|
|
issuer_ref: "default"
|
|
issuing_certificates:
|
|
- "https://vault.service.consul:8200/v1/pki_int/ca"
|
|
crl_distribution_points:
|
|
- "https://vault.service.consul:8200/v1/pki_int/crl"
|
|
ocsp_servers: []
|
|
enable_templating: false
|
|
default_issuer_ref: null
|
|
default_follows_latest_issuer: false
|
|
crl_expiry: "72h"
|
|
crl_disable: false
|
|
ocsp_disable: false
|
|
auto_rebuild: false
|
|
enable_delta: false
|
|
delta_rebuild_interval: null
|