Add missing protocol path table to CMPv2 API documentation (#30864)

* Add missing protocol path table to CMPv2 API documentation

* Update CODEOWNERS for PKI api-docs
This commit is contained in:
Steven Clark 2025-06-06 13:25:28 -04:00 committed by GitHub
parent ff23007a15
commit 62a7ff7968
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 9 additions and 0 deletions

View file

@ -76,6 +76,7 @@
/builtin/logical/pki/ @hashicorp/vault-crypto
/builtin/logical/pkiext/ @hashicorp/vault-crypto
/website/content/docs/secrets/pki/ @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/secret/pki/ @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/website/content/api-docs/secret/pki.mdx @hashicorp/vault-crypto @hashicorp/vault-education-approvers
/builtin/credential/cert/ @hashicorp/vault-crypto
/website/content/docs/auth/cert.mdx @hashicorp/vault-crypto @hashicorp/vault-education-approvers

View file

@ -681,6 +681,14 @@ for issuing and renewing leaf certificates.
These are the CMP protocol API paths currently supported from Vault's authentication
point of view.
| Path | Default Path Policy | Issuer | Role |
|:-----------------------|:--------------------|:----------------------|:--------------|
| `/pki/cmp` | `sign-verbatim` | `default` | Sign-Verbatim |
| `/pki/cmp` | `role:role_ref` | Specified by the role | `:role_ref` |
| `/pki/roles/:role/cmp` | (any) | Specified by the role | `:role` |
The Default Path Policy is specified in the [CMPv2 configuration](#set-cmpv2-configuration).
When a role is not explicitly specified within the path, the behavior is specified by the `default_path_policy` field.
### Read CMPv2 Configuration <EnterpriseAlert inline="true" />