Differential D3657

Renew Vault intermediate authority certificate
ClosedPublic
Actions

Authored by dereckson on Sep 10 2025, 19:34.

Details

Reviewers

DorianWinty

Maniphest Tasks

T2112: Renew Vault web server certificate automatically

Commits

rOPS0980197cdc6c: Renew Vault intermediate authority certificate

Summary

Provide an helper script to regenerate the intermediate authority:

create a CSR
sign it with root certificate
assign it to pki_vault
update signing role

Bootstrap instructions updated with new multi-issuer procedure.

References:

Ref T2112

Test Plan

Renewed 2025-09-10 ecrtificate with pki-intermediate-regenerate.sh

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Sep 10 2025, 19:34

dereckson created this revision.

Harbormaster completed remote builds in B5856: Diff 9473.Sep 10 2025, 19:34

shellcheck

Harbormaster completed remote builds in B5857: Diff 9474.Sep 10 2025, 19:36

dereckson edited the summary of this revision. (Show Details)Sep 10 2025, 19:43

DorianWinty accepted this revision.Oct 13 2025, 14:37

This revision is now accepted and ready to land.Oct 13 2025, 14:37

Rebased, 4 spaces

Harbormaster completed remote builds in B6015: Diff 9709.Mon, Oct 13, 18:03

Closed by commit rOPS0980197cdc6c: Renew Vault intermediate authority certificate (authored by dereckson). · Explain WhyMon, Oct 13, 18:03

This revision was automatically updated to reflect the committed changes.

dereckson added a commit: rOPS0980197cdc6c: Renew Vault intermediate authority certificate.

Revision Contents
Changeset List

Path

Size

roles/

vault/

bootstrap/

files/

vault-initialize.sh

14 lines

utils/

vault/

pki-intermediate-regenerate.sh

36 lines

Diff 9710

View Options

roles/vault/bootstrap/files/vault-initialize.sh