Comment 0 for bug 1882599

Revision history for this message
Camille Rodriguez (camille.rodriguez) wrote : Vault get_csr function is missing options (L locality, ST province)

The vault charm limits the number of parameters that can be set when requesting a CSR. The code allows for : ttl, C (country), ST (province), OU (organizational unit), O (organization). The upstream API allows for all those, plus L (locality), street_address, postal_code, serial_number, etc. See the latest list here https://www.vaultproject.io/api-docs/secret/pki#generate-intermediate.

Currently, to be able to pass a L parameter, for example, one needs to use directly the vault API instead of the juju actions.