infra/kubernetes
1
0
Fork 0
Code Pull Requests 3 Activity

sshca: Do not sign certs for root

Browse Source 
We no longer need *root* in the list of authorized principals for user
certificates issued by SSHCA.
This commit is contained in:
Dustin
2025-03-04 19:22:48 -06:00
parent 8f5129cbef
commit b75d83cd32
1 changed files with 0 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
sshca/config.toml
View File

@@ -15,7 +15,6 @@ private_key_passphrase_file = "/run/sshca/secrets/user/passphrase/user-ca-key.pa
[ca.user.group_principals] [ca.user.group_principals]
"Server Admins" = [ "Server Admins" = [
"core", "core",
"root",
] ]
[[libvirt]] [[libvirt]]