Page MenuHomeDevCentral
Create Task
Maniphest T1966

Automate certificates renewal for Vault
Open, NormalPublic
Actions

Description

Certificate for Vault HTTP UI is managed by Vault itself, and is short-lived (30 to 90 days).

Automation is welcome there.

This week-end, I've prepared P351 and P352 to kickstart that automation.

Revisions and Commits

rOPS Nasqueron Operations
D4216rOPS28ada36c6cf4 Renew intermediate CA certificate with vault pki reissue
D4215rOPSb7d3a8e00e82 Allow admin Vault policy to send PATCH requests to pki_

Related Objects

Event Timeline

dereckson triaged this task as Normal priority.Jun 2 2024, 22:37
dereckson created this task.
dereckson removed dereckson as the assignee of this task.Mar 23 2026, 09:23

Unassigning this task to make it available for others.

As I'm not currently working actively on this issue, reset the assignee.

Contributions opportunity. If you’re interested, go ahead and assign yourself. I’m available to share context, review early approaches, or pair if helpful—just tag me.

dereckson added a project: TLS certificates.Mar 25 2026, 08:40
dereckson moved this task from Backlog to Vault / Nasqueron PKI on the TLS certificates board.Mar 25 2026, 09:32
dereckson added a revision: D4215: Allow admin Vault policy to send PATCH requests to pki_.Sun, Sep 13, 23:03
dereckson added a commit: rOPSb7d3a8e00e82: Allow admin Vault policy to send PATCH requests to pki_.Sun, Sep 13, 23:04
dereckson added a revision: D4216: Renew intermediate CA certificate with vault pki reissue.Sun, Sep 13, 23:27
dereckson added a commit: rOPS28ada36c6cf4: Renew intermediate CA certificate with vault pki reissue.Sun, Sep 13, 23:29
Nasqueron DevCentral · If it had been much bigger the moon would have had a core of ice. · Powered by Phabricator