forked from TrueCloudLab/certificates
[docs] provisioners fix attr dupe and give warning about stale docs
This commit is contained in:
parent
2c164f39cc
commit
19a3cd10a1
1 changed files with 6 additions and 2 deletions
|
@ -1,5 +1,9 @@
|
||||||
# Provisioners
|
# Provisioners
|
||||||
|
|
||||||
|
> Note: The canonical documentation for `step-ca` provisioners now lives at
|
||||||
|
> https://smallstep.com/docs/step-ca/configuration#provisioners. Documentation
|
||||||
|
> found on this page may be out of date.
|
||||||
|
|
||||||
Provisioners are people or code that are registered with the CA and authorized
|
Provisioners are people or code that are registered with the CA and authorized
|
||||||
to issue "provisioning tokens". Provisioning tokens are single-use tokens that
|
to issue "provisioning tokens". Provisioning tokens are single-use tokens that
|
||||||
can be used to authenticate with the CA and get a certificate.
|
can be used to authenticate with the CA and get a certificate.
|
||||||
|
@ -29,9 +33,10 @@ Example `claims`:
|
||||||
"disableRenewal": false,
|
"disableRenewal": false,
|
||||||
"minHostSSHCertDuration": "5m",
|
"minHostSSHCertDuration": "5m",
|
||||||
"maxHostSSHCertDuration": "1680h",
|
"maxHostSSHCertDuration": "1680h",
|
||||||
|
"defaultHostSSHCertDuration": "720h",
|
||||||
"minUserSSHCertDuration": "5m",
|
"minUserSSHCertDuration": "5m",
|
||||||
"maxUserSSHCertDuration": "24h",
|
"maxUserSSHCertDuration": "24h",
|
||||||
"maxTLSCertDuration": "16h",
|
"defaultUserSSHCertDuration": "16h",
|
||||||
"enableSSHCA": true
|
"enableSSHCA": true
|
||||||
},
|
},
|
||||||
...
|
...
|
||||||
|
@ -142,7 +147,6 @@ In the ca.json configuration file, a complete JWK provisioner example looks like
|
||||||
"maxHostSSHCertDuration": "1680h",
|
"maxHostSSHCertDuration": "1680h",
|
||||||
"minUserSSHCertDuration": "5m",
|
"minUserSSHCertDuration": "5m",
|
||||||
"maxUserSSHCertDuration": "24h",
|
"maxUserSSHCertDuration": "24h",
|
||||||
"maxTLSCertDuration": "16h",
|
|
||||||
"enableSSHCA": true
|
"enableSSHCA": true
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue