gardar
gardar
Should be persistent across the board now #425
I don't have a problem with adding support for MacOS personally, but @SuperQ and @paulfantom might have other ideas. But rather than adding support for just MacOS I would like...
Before we increase the maintenance overhead by adding support for other supervisors (or do any other major changes) I'd like to merge some of the common tasks as proposed in...
cc @SuperQ @paulfantom
Are you talking about what the user should place in the kv inventory? Or what the output should be? For the output you'd need to set both the key and...
I'm only researching certificate auth myself so I hope I'm not wrong but if you are using the certificates with a low ttl and using principals (as suggested here: https://www.hashicorp.com/blog/managing-ssh-access-at-scale-with-hashicorp-vault...
Yep that should work! The manual workflow is something like: ``` vault write -field=signed_key ssh-client-signer/sign/myuser-role public_key=@$HOME/.ssh/id_rsa.pub valid_principals=myuser > ~/.ssh/id_rsa-signed.pub ssh -i ~/.ssh/id_rsa -i ~/.ssh/id_rsa-signed.pub myuser@domain ```
No stress about the delay! I totally get that you're swamped. It's cool that you're even considering my idea. Take all the time you need and thanks for keeping me...
Awesome! Didn't have a chance to test #104 but I'll be testing the merged version soon!
I wonder if the [`community.general.to_ini`](https://docs.ansible.com/ansible/latest/collections/community/general/to_ini_filter.html) plugin could be used to convert the yaml to ini instead of using a template?