| 2020-06-08 21:52:03 |
Camille Rodriguez |
description |
The vault charm limits the number of parameters that can be set when requesting a CSR. The code allows for : ttl, C (country), ST (province), OU (organizational unit), O (organization). The upstream API allows for all those, plus L (locality), street_address, postal_code, serial_number, etc. See the latest list here https://www.vaultproject.io/api-docs/secret/pki#generate-intermediate.
Currently, to be able to pass a L parameter, for example, one needs to use directly the vault API instead of the juju actions. |
The vault charm limits the number of parameters that can be set when requesting a CSR. The code allows for : ttl, C (country), ST (province), OU (organizational unit), O (organization), see https://github.com/openstack/charm-vault/blob/master/src/lib/charm/vault_pki.py#L135. The upstream API allows for all those, plus L (locality), street_address, postal_code, serial_number, etc. See the latest list here https://www.vaultproject.io/api-docs/secret/pki#generate-intermediate.
Currently, to be able to pass a L parameter, for example, one needs to use directly the vault API instead of the juju actions. |
|
