Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add name constraints params for PKI certificate resources. #2396

Merged
merged 3 commits into from
Jan 28, 2025

Conversation

victorr
Copy link
Contributor

@victorr victorr commented Jan 24, 2025

Description

Add the new parameters used to create the name constaints extension:

  • excluded_dns_domains
  • permitted_ip_ranges
  • excluded_ip_ranges
  • permitted_email_addresses
  • excluded_email_addresses
  • permitted_uri_domains
  • excluded_uri_domains

To resources:

  • vault_pki_secret_backend_root_cert
  • vault_pki_secret_backend_root_sign_intermediate

The new fields were added in Vault 1.19. See hashicorp/vault#29245.

Checklist

  • Added CHANGELOG entry (only for user-facing changes)
  • Acceptance tests were run against all supported Vault Versions

Community Note

  • Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
  • Please do not leave "+1" comments, they generate extra noise for pull request followers and do not help prioritize the request

@victorr victorr self-assigned this Jan 24, 2025
@victorr victorr requested a review from a team as a code owner January 24, 2025 18:23
@victorr victorr requested a review from tcrayford January 24, 2025 18:23
@victorr victorr force-pushed the victorr/vault-33180-add-pki-name-constraints-params branch from b1bf290 to 845bcd4 Compare January 24, 2025 18:33
@victorr victorr marked this pull request as draft January 27, 2025 15:29
@victorr victorr requested a review from a team January 27, 2025 15:30
@victorr victorr force-pushed the victorr/vault-33180-add-pki-name-constraints-params branch from 845bcd4 to fad951f Compare January 28, 2025 16:09
Add the new parameters used to create the name constaints extension:
  * excluded_dns_domains
  * permitted_ip_ranges
  * excluded_ip_ranges
  * permitted_email_addresses
  * excluded_email_addresses
  * permitted_uri_domains
  * excluded_uri_domains

To resources:
  * vault_pki_secret_backend_root_cert
  * vault_pki_secret_backend_root_sign_intermediate
@victorr victorr force-pushed the victorr/vault-33180-add-pki-name-constraints-params branch from fad951f to 3aa6b7d Compare January 28, 2025 16:58
@victorr victorr marked this pull request as ready for review January 28, 2025 16:58
@victorr
Copy link
Contributor Author

victorr commented Jan 28, 2025

Branch hack-to-run-name-constraints-provider-tests can be used to run the tests against a dev build of Vault.

sgmiller
sgmiller previously approved these changes Jan 28, 2025
Copy link

@sgmiller sgmiller left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good!

CHANGELOG.md Outdated Show resolved Hide resolved
vault/resource_pki_secret_backend_root_cert_test.go Outdated Show resolved Hide resolved
@victorr victorr merged commit baf4ae8 into main Jan 28, 2025
11 checks passed
@victorr victorr deleted the victorr/vault-33180-add-pki-name-constraints-params branch January 28, 2025 19:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants