TLS Certificates Requirer

Learn about configurations >

• common_name | string

  This configuration option should not be set when num_certificates is greater than 1. Common name to be used in the certificate. If set, only the leader unit will request the certificate with this common name. Other units will not request certificates. If not set, the following value will be used (depending on the mode):

  • unit: cert-<certificate number>.unit-<unit number>.<app name>.<model name>
  • app: cert-<certificate number>.<app name>.<model name>

• country_name | string

  Country name to be used in the certificate. If not set, no country name will be used.

• email_address | string

  Email address to be used in the certificate. If not set, no email address will be used.

• is_ca | boolean

  If set to true, the charm will request a certificate that can be used as a Certificate Authority (CA).

• locality_name | string

  Locality name to be used in the certificate. If not set, no locality name will be used.

• mode | string

  Default: unit

  Mode in which the charm will request the certificate. Allowed values:

  • unit: Certificates are managed at the unit level. Each unit will have its own certificate.
  • app: Certificates are managed at the application level. The application can have 1 or more certificates.

• num_certificates | int

  Default: 1

  Number of certificates to request. If the mode is set to unit, each unit will request this number of certificates.

• organization_name | string

  Organization name to be used in the certificate. If not set, no organization name will be used.

• sans_dns | string

  If set, only the leader unit will request the certificate with this list of DNS Subject Alternative Names (SAN's). Other units will not request certificates. Comma separated list of DNS Subject Alternative Names (SAN's) to be used in the certificate. If not set, the following value will be used (depending on the mode):

  • unit: cert-<certificate number>.unit-<unit number>.<app name>.<model name>
  • app: cert-<certificate number>.<app name>.<model name>

• state_or_province_name | string

  State or province name to be used in the certificate. If not set, no state or province name will be used.