Some users didn't find it necessary for Vault to enforce the CA cert or PEM keys. Examples can be found in the related issues.
Design of Change
We add false booleans to the kubernetes_ca_cert and pem_keys fields. While the required field on the FieldSchema struct are deprecated we added this just for future reference and documentation. We also remove checks that enforced kubernetes_ca_cert to be present instead we just default to the local CA cert if kubernetes_ca_cert is not set which will return an error of x509: certificate signed by unknown authority if the user did supply an appropriate CA cert.
Overview
Some users didn't find it necessary for Vault to enforce the CA cert or PEM keys. Examples can be found in the related issues.
Design of Change
We add false booleans to the
kubernetes_ca_cert
andpem_keys
fields. While therequired
field on theFieldSchema
struct are deprecated we added this just for future reference and documentation. We also remove checks that enforcedkubernetes_ca_cert
to be present instead we just default to the local CA cert ifkubernetes_ca_cert
is not set which will return an error ofx509: certificate signed by unknown authority
if the user did supply an appropriate CA cert.Related Issues
Issue #62 Issue #88
Docs
I don't believe docs need to be added since this is implied in the example below.