Differential D3657

Renew Vault intermediate authority certificate
Needs ReviewPublic
Actions

Authored by dereckson on Wed, Sep 10, 19:34.

Details

Reviewers

DorianWinty

Maniphest Tasks

T2112: Renew Vault web server certificate automatically

Summary

Provide an helper script to regenerate the intermediate authority:

create a CSR
sign it with root certificate
assign it to pki_vault
update signing role

Bootstrap instructions updated with new multi-issuer procedure.

References:

Ref T2112

Test Plan

Renewed 2025-09-10 ecrtificate with pki-intermediate-regenerate.sh

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Severity	Location	Code	Message
Advice	utils/vault/pki-intermediate-regenerate.sh:11	SC2086	SHELLCHECK
Advice	utils/vault/pki-intermediate-regenerate.sh:35	SC2086	SHELLCHECK
Advice	utils/vault/pki-intermediate-regenerate.sh:36	SC2086	SHELLCHECK

Unit

No Test Coverage

Branch

vault-pki-intermediate

Build Status

Buildable 5856
Build 6138: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Wed, Sep 10, 19:34

dereckson created this revision.

Harbormaster completed remote builds in B5856: Diff 9473.Wed, Sep 10, 19:34

shellcheck

Harbormaster completed remote builds in B5857: Diff 9474.Wed, Sep 10, 19:36

dereckson edited the summary of this revision. (Show Details)Wed, Sep 10, 19:43

Revision Contents
Changeset List

Path

Size

roles/

vault/

bootstrap/

files/

vault-initialize.sh

14 lines

utils/

vault/

pki-intermediate-regenerate.sh

36 lines

Diff 9473

View Options

roles/vault/bootstrap/files/vault-initialize.sh