You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/operate/rs/release-notes/rs-7-8-releases/rs-7-8-4-tba.md
+15-7Lines changed: 15 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -32,6 +32,16 @@ This version offers:
32
32
33
33
- To set up certificate-based authentication, use [REST API]({{<relref "/operate/rs/references/rest-api">}}) requests to do the following:
34
34
35
+
1. Configure a trusted CA certificate `mtls_trusted_ca` using an [update cluster certificate]({{<relref "/operate/rs/references/rest-api/requests/cluster/certificates#put-cluster-update_cert">}}) request:
36
+
37
+
```sh
38
+
PUT /v1/cluster/update_cert
39
+
{
40
+
"name": "mtls_trusted_ca",
41
+
"certificate": "<content of certificate PEM file>"
42
+
}
43
+
```
44
+
35
45
1. [Update cluster settings]({{<relref "/operate/rs/references/rest-api/requests/cluster#put-cluster">}}) with mutual TLS configuration:
36
46
37
47
```sh
@@ -49,19 +59,17 @@ This version offers:
49
59
}]
50
60
}
51
61
```
52
-
53
-
1. Configure a trusted CA certificate`mtls_trusted_ca` using an [update cluster certificate]({{<relref "/operate/rs/references/rest-api/requests/cluster/certificates#put-cluster-update_cert">}}) request:
62
+
63
+
1. Include `"auth_method": "certificate"` and `certificate_subject_line`in the request body when you [create new users]({{<relref "/operate/rs/references/rest-api/requests/users#post-user">}}) or [update existing users]({{<relref "/operate/rs/references/rest-api/requests/users#put-user">}}):
54
64
55
65
```sh
56
-
PUT /v1/cluster/update_cert
66
+
POST /v1/users |PUT /v1/users/<user-id>
57
67
{
58
-
"name": "mtls_trusted_ca",
59
-
"certificate": "<content of certificate PEM file>"
68
+
"auth_method": "certificate",
69
+
"certificate_subject_line": "<subject of the user's client certificate>"
60
70
}
61
71
```
62
72
63
-
1. Include `"auth_method": "certificate"`in the request body when you [create new users]({{<relref "/operate/rs/references/rest-api/requests/users#post-user">}}) or [update existing users]({{<relref "/operate/rs/references/rest-api/requests/users#put-user">}}).
64
-
65
73
- Limitations:
66
74
67
75
- Certificate-based authentication is not implemented for the Cluster Manager UI.
0 commit comments