From 6082a92fa86d121d3ea4256859ee4c9d412e78c0 Mon Sep 17 00:00:00 2001
From: Christian Pointner <equinox@spreadspace.org>
Date: Thu, 10 Jun 2021 01:15:32 +0200
Subject: promethues: remote certificate signing for exporter/base

---
 roles/monitoring/prometheus/ca/tasks/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'roles/monitoring/prometheus/ca')

diff --git a/roles/monitoring/prometheus/ca/tasks/main.yml b/roles/monitoring/prometheus/ca/tasks/main.yml
index 9f166321..cde4a267 100644
--- a/roles/monitoring/prometheus/ca/tasks/main.yml
+++ b/roles/monitoring/prometheus/ca/tasks/main.yml
@@ -34,7 +34,6 @@
     useCommonNameForSAN: no
     key_usage:
     - cRLSign
-    - digitalSignature
     - keyCertSign
     key_usage_critical: yes
     basic_constraints:
@@ -50,3 +49,4 @@
     provider: selfsigned
     selfsigned_digest: sha256
     selfsigned_not_after: "+18250d" ## 50 years
+    selfsigned_create_subject_key_identifier: always_create
-- 
cgit v1.2.3