Support federation bundle endpoint profile http_web certificates (#469)

* Support federation bundle endpoint profile http_web certificates Signed-off-by: Kevin Fox <[email protected]> * Fix var Signed-off-by: Kevin Fox <[email protected]> * Fix key Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> * Fix test Signed-off-by: Kevin Fox <[email protected]> --------- Signed-off-by: Kevin Fox <[email protected]>
2024-10-10 12:03:54 -07:00
parent cecf51c27c
commit fcbd64e011
8 changed files with 49 additions and 37 deletions
@@ -248,8 +248,12 @@ federation:
    port: 8443
    ## @param federation.bundleEndpoint.address Address for trust bundle federation
    address: "0.0.0.0"
-    ## @param federation.bundleEndpoint.refresh_hint Hint used by federated servers on how often to refresh the bundle. CA TTL must be 3-5x the duration of this value to ensure public keys are loaded on federated servers prior to private key rotation on remote server.
-    refresh_hint: "5m"
+    ## @param federation.bundleEndpoint.refreshHint Hint used by federated servers on how often to refresh the bundle. CA TTL must be 3-5x the duration of this value to ensure public keys are loaded on federated servers prior to private key rotation on remote server.
+    refreshHint: "5m"
+    profile:
+      httpWeb:
+        ## @param federation.bundleEndpoint.profile.httpWeb.fileSyncInterval Interval on which to reload the certificate/key from disk
+        fileSyncInterval: 1h

  tls:
    spire: