backport of commit 34a722195e (#20951)

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
This commit is contained in:
hc-github-team-secure-vault-core
2023-06-01 23:29:48 -04:00
committed by GitHub
parent c826572328
commit 2d077fc6f9
18 changed files with 277 additions and 25 deletions

View File

@@ -368,13 +368,13 @@ mount.
an issuer outside this list, it will be allowed. The default value `*`
allows every issuer within the mount.
- `allowed_roles` `(list: ["*"])` - Specifies a list of roles to allow to
- `allowed_roles` `(list: ["*"])` - Specifies a list of roles allowed to
issue certificates via explicit ACME paths. The default value `*` allows
every role within the mount to be used. If the `default_directory_policy`
specifies a role, it must be allowed under this configuration.
- `default_directory_policy` `(string: "sign-verbatim")` - Specifies the
behavior of the default ACME director. Can be `forbid`, `sign-verbatim`
behavior of the default ACME directory. Can be `forbid`, `sign-verbatim`
or a role given by `role:<role_name>`. If a role is used, it must be
present in `allowed_roles`.