Renew Vault intermediate authority certificate
Needs ReviewPublic
Actions

Authored by dereckson on Wed, Sep 10, 19:34.

Tags

None

Referenced Files

	Unknown Object (File)
	Wed, Oct 1, 08:30

	Unknown Object (File)
	Tue, Sep 30, 02:44

	Unknown Object (File)
	Sun, Sep 28, 09:39

	Unknown Object (File)
	Sun, Sep 28, 06:16

	Unknown Object (File)
	Mon, Sep 22, 22:50

	Unknown Object (File)
	Sun, Sep 21, 18:11

	Unknown Object (File)
	Sun, Sep 21, 03:14

	Unknown Object (File)
	Fri, Sep 19, 09:28

View All 36 Files

Subscribers

None

Details

Reviewers

DorianWinty

Maniphest Tasks

T2112: Renew Vault web server certificate automatically

Summary

Provide an helper script to regenerate the intermediate authority:

create a CSR
sign it with root certificate
assign it to pki_vault
update signing role

Bootstrap instructions updated with new multi-issuer procedure.

References:

Ref T2112

Test Plan

Renewed 2025-09-10 ecrtificate with pki-intermediate-regenerate.sh

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

vault-pki-intermediate

Build Status

Buildable 5857
Build 6139: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Wed, Sep 10, 19:34

dereckson created this revision.

Harbormaster completed remote builds in B5856: Diff 9473.Wed, Sep 10, 19:34

shellcheck

Harbormaster completed remote builds in B5857: Diff 9474.Wed, Sep 10, 19:36

dereckson edited the summary of this revision. (Show Details)Wed, Sep 10, 19:43

Revision Contents
Changeset List

Path

Size

roles/

vault/

bootstrap/

files/

vault-initialize.sh

14 lines

utils/

vault/

pki-intermediate-regenerate.sh

36 lines

Diff 9474

View Options

roles/vault/bootstrap/files/vault-initialize.sh