scottk/vault
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/vault.git synced 2025-11-03 12:07:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

ssh certificate signing: fix documentation of extensions (#8859)

Browse Source
This commit is contained in:
Christophe Drevet-Droguet
2020-05-29 19:23:19 +02:00
committed by GitHub
parent d52e530189
commit b78561e331
2 changed files with 8 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
website/pages/api-docs/secret/ssh/index.mdx
View File

@@ -163,9 +163,9 @@ This endpoint creates or updates a named role.
critical options. critical options.
- `allowed_extensions` `(string: "")` – Specifies a comma-separated list of - `allowed_extensions` `(string: "")` – Specifies a comma-separated list of
extensions that certificates can have when signed. To allow any critical extensions that certificates can have when signed. To allow any extensions,
options, set this to an empty string. Will default to allowing any set this to an empty string. Will default to allowing any extensions.
extensions. For the list of extensions, take a look at the [sshd For the list of extensions, take a look at the [sshd
manual's](https://man.openbsd.org/sshd#AUTHORIZED_KEYS_FILE_FORMAT) manual's](https://man.openbsd.org/sshd#AUTHORIZED_KEYS_FILE_FORMAT)
`AUTHORIZED_KEYS FILE FORMAT` section. You should add a `permit-` before the `AUTHORIZED_KEYS FILE FORMAT` section. You should add a `permit-` before the
name of extension to allow it. name of extension to allow it.
@@ -777,7 +777,7 @@ to the restrictions contained in the role named in the endpoint.
- `critical_options` `(map<string|string>: "")` – Specifies a map of the - `critical_options` `(map<string|string>: "")` – Specifies a map of the
critical options that the certificate should be signed for. Defaults to none. critical options that the certificate should be signed for. Defaults to none.
- `extension` `(map<string|string>: "")` – Specifies a map of the extensions - `extensions` `(map<string|string>: "")` – Specifies a map of the extensions
that the certificate should be signed for. Defaults to none. that the certificate should be signed for. Defaults to none.
### Sample Payload ### Sample Payload

6
website/pages/docs/secrets/ssh/signed-ssh-certificates.mdx
View File

@@ -109,6 +109,7 @@ team, or configuration management tooling.
{ {
"allow_user_certificates": true, "allow_user_certificates": true,
"allowed_users": "*", "allowed_users": "*",
"allowed_extensions": "permit-pty,permit-port-forwarding",
"default_extensions": [ "default_extensions": [
{ {
"permit-pty": "" "permit-pty": ""
@@ -158,8 +159,9 @@ the client's local workstation.
"public_key": "ssh-rsa AAA...", "public_key": "ssh-rsa AAA...",
"valid_principals": "my-user", "valid_principals": "my-user",
"key_id": "custom-prefix", "key_id": "custom-prefix",
"extension": { "extensions": {
"permit-pty": "" "permit-pty": "",
"permit-port-forwarding": ""
} }
} }
EOH EOH