mirror of
https://github.com/hashicorp/vault.git
synced 2026-03-29 13:53:16 -04:00
f2b685e0f8
Specifying the `allowed_organiztaional_units` parameter to a cert auth
backend role will require client certificates to contain at least one of
a list of one or more "organizational units" (OU).
Example use cases:
Certificates are issued to entities in an organization arrangement by
organizational unit (OU). The OU may be a department, team, or any other logical
grouping of resources with similar roles. The entities within the OU
should be granted the same policies.
```
$ vault write auth/cert/certs/ou-engineering \
certificate=@ca.pem \
policies=engineering \
allowed_organiztaional_units=engineering
$ vault write auth/cert/certs/ou-engineering \
certificate=@ca.pem \
policies=engineering \
allowed_organiztaional_units=engineering,support
```
|
||
|---|---|---|
| .. | ||
| alicloud | ||
| app-id | ||
| approle | ||
| aws | ||
| azure | ||
| cert | ||
| gcp | ||
| github | ||
| jwt | ||
| kubernetes | ||
| ldap | ||
| okta | ||
| radius | ||
| token | ||
| userpass | ||
| index.html.md | ||