diff --git a/website/content/api-docs/secret/pki.mdx b/website/content/api-docs/secret/pki.mdx index 64ca4b904b..c6c4c4e0b4 100644 --- a/website/content/api-docs/secret/pki.mdx +++ b/website/content/api-docs/secret/pki.mdx @@ -3417,7 +3417,7 @@ parameter. [RFC 5280 Section 4.2.2.1](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.2.1) for information about the Authority Information Access field. -- `enable_aia_url_templating` `(bool: false)` - Specifies that the above AIA +- `enable_templating` `(bool: false)` - Specifies that the above AIA URL values (`issuing_certificates`, `crl_distribution_points`, and `ocsp_servers`) should be templated. This replaces the literal value `{{issuer_id}}` with the ID of the issuer doing the issuance, the @@ -3433,7 +3433,7 @@ parameter. - `issuing_certificates={{cluster_aia_path}}/issuer/{{issuer_id}}/der` - `crl_distribution_points={{cluster_aia_path}}/issuer/{{issuer_id}}/crl/der` - - `ocsp_servers={{cluster_path}}/ocsp` + - `ocsp_servers={{cluster_aia_path}}/ocsp` ~> **Note**: If no cluster-local address is present and templating is used, issuance will fail. @@ -3442,7 +3442,9 @@ parameter. ```json { - "ocsp_servers": ["https://..."] + "issuing_certificates": ["{{cluster_aia_path}}/issuer/{{issuer_id}}/der"], + "crl_distribution_points": ["{{cluster_aia_path}}/issuer/{{issuer_id}}/crl/der"], + "ocsp_servers": ["{{cluster_aia_path}}/ocsp"] } ```