From 181cd198e86a8dcf42fc95c7b84d77aa6880f998 Mon Sep 17 00:00:00 2001 From: Seth Vargo Date: Thu, 16 Mar 2017 09:48:45 -0700 Subject: [PATCH] Add new SSH field --- website/source/docs/http/secret/ssh/index.html.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/website/source/docs/http/secret/ssh/index.html.md b/website/source/docs/http/secret/ssh/index.html.md index d7fe1dcbd4..b3c1d77ea9 100644 --- a/website/source/docs/http/secret/ssh/index.html.md +++ b/website/source/docs/http/secret/ssh/index.html.md @@ -190,6 +190,11 @@ This endpoint creates or updates a named role. - `allow_subdomains` `(bool: false)` – Specifies if host certificates that are requested are allowed to use subdomains of those listed in "allowed_users". +- `allow_user_key_ids` `(bool: false)` – Specifies if users can override the key + ID for a signed certificate with the "key_id" field. When false, the key ID + will always be the token display name. The key ID is logged by the SSH server + and can be useful for auditing. + ### Sample Payload ```json @@ -262,6 +267,7 @@ For a CA role: "allow_bare_domains": false, "allow_host_certificates": true, "allow_subdomains": false, + "allow_user_key_ids": false, "allow_user_certificates": true, "allowed_critical_options": "", "allowed_extensions": "",