Skip to content

Commit 0d3d0a3

Browse files
Add CA bundle reference in the docs
1 parent ba63698 commit 0d3d0a3

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

doc/configuration-v3_0.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ The Ignition configuration is a JSON document conforming to the following specif
1919
* **_security_** (object): options relating to network security.
2020
* **_tls_** (object): options relating to TLS when fetching resources over `https`.
2121
* **_certificateAuthorities_** (list of objects): the list of additional certificate authorities (in addition to the system authorities) to be used for TLS verification when fetching over `https`. All certificate authorities must have a unique `source`.
22-
* **source** (string): the URL of the certificate (in PEM format). Supported schemes are `http`, `https`, `s3`, `tftp`, and [`data`][rfc2397]. Note: When using `http`, it is advisable to use the verification option to ensure the contents haven't been modified.
22+
* **source** (string): the URL of the certificate bundle (in PEM format). The bundle can contain multiple concatenated certificates. Supported schemes are `http`, `https`, `s3`, `tftp`, and [`data`][rfc2397]. Note: When using `http`, it is advisable to use the verification option to ensure the contents haven't been modified.
2323
* **_verification_** (object): options related to the verification of the certificate.
2424
* **_hash_** (string): the hash of the certificate, in the form `<type>-<value>` where type is sha512.
2525
* **_storage_** (object): describes the desired state of the system's storage devices.

doc/configuration-v3_1.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ The Ignition configuration is a JSON document conforming to the following specif
2727
* **_security_** (object): options relating to network security.
2828
* **_tls_** (object): options relating to TLS when fetching resources over `https`.
2929
* **_certificateAuthorities_** (list of objects): the list of additional certificate authorities (in addition to the system authorities) to be used for TLS verification when fetching over `https`. All certificate authorities must have a unique `source`.
30-
* **source** (string): the URL of the certificate (in PEM format). Supported schemes are `http`, `https`, `s3`, `tftp`, and [`data`][rfc2397]. Note: When using `http`, it is advisable to use the verification option to ensure the contents haven't been modified.
30+
* **source** (string): the URL of the certificate bundle (in PEM format). The bundle can contain multiple concatenated certificates. Supported schemes are `http`, `https`, `s3`, `tftp`, and [`data`][rfc2397]. Note: When using `http`, it is advisable to use the verification option to ensure the contents haven't been modified.
3131
* **_compression_** (string): the type of compression used on the certificate (null or gzip). Compression cannot be used with S3.
3232
* **_httpHeaders_** (list of objects): a list of HTTP headers to be added to the request. Available for `http` and `https` source schemes only.
3333
* **name** (string): the header name.

doc/configuration-v3_2_experimental.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ The Ignition configuration is a JSON document conforming to the following specif
2929
* **_security_** (object): options relating to network security.
3030
* **_tls_** (object): options relating to TLS when fetching resources over `https`.
3131
* **_certificateAuthorities_** (list of objects): the list of additional certificate authorities (in addition to the system authorities) to be used for TLS verification when fetching over `https`. All certificate authorities must have a unique `source`.
32-
* **source** (string): the URL of the certificate (in PEM format). Supported schemes are `http`, `https`, `s3`, `tftp`, and [`data`][rfc2397]. Note: When using `http`, it is advisable to use the verification option to ensure the contents haven't been modified.
32+
* **source** (string): the URL of the certificate bundle (in PEM format). The bundle can contain multiple concatenated certificates. Supported schemes are `http`, `https`, `s3`, `tftp`, and [`data`][rfc2397]. Note: When using `http`, it is advisable to use the verification option to ensure the contents haven't been modified.
3333
* **_compression_** (string): the type of compression used on the certificate (null or gzip). Compression cannot be used with S3.
3434
* **_httpHeaders_** (list of objects): a list of HTTP headers to be added to the request. Available for `http` and `https` source schemes only.
3535
* **name** (string): the header name.

0 commit comments

Comments
 (0)