mirror of
https://github.com/hanzozt/zt.git
synced 2026-10-30 15:04:55 +00:00
Andrew Martinez
6ecca65c85
- adds support for trust domain lookup on x509 chain - adds support for non-ha trustDomain configuration - adds default generated trust domain for non-ha controllers - non-HA controllers will generate a trust domain from the root CA if possible - additionalTrustDomains has been added for transitioning between trust domains update changelog.md
27 lines
1.0 KiB
Cheetah
27 lines
1.0 KiB
Cheetah
v: 3
|
|
|
|
db: /home/{{ .Model.MustVariable "credentials.ssh.username" }}/ctrl.db
|
|
|
|
trustDomain: smart-test
|
|
|
|
identity:
|
|
cert: /home/{{ .Model.MustVariable "credentials.ssh.username" }}/fablab/pki/intermediate/certs/{{ .Component.PublicIdentity }}-client.cert
|
|
server_cert: /home/{{ .Model.MustVariable "credentials.ssh.username" }}/fablab/pki/intermediate/certs/{{ .Component.PublicIdentity }}-server.cert
|
|
key: /home/{{ .Model.MustVariable "credentials.ssh.username" }}/fablab/pki/intermediate/keys/{{ .Component.PublicIdentity }}.key
|
|
ca: /home/{{ .Model.MustVariable "credentials.ssh.username" }}/fablab/pki/intermediate/certs/{{ .Component.PublicIdentity }}-server.chain.pem
|
|
|
|
# Disable smart routing for zitilib/characterization transit-less configuration
|
|
#
|
|
network:
|
|
cycleSeconds: 120
|
|
smart:
|
|
rerouteFraction: 0
|
|
rerouteCap: 0
|
|
# #
|
|
|
|
ctrl:
|
|
listener: tls:0.0.0.0:6262
|
|
|
|
mgmt:
|
|
listener: tls:0.0.0.0:10000
|