Skip to content

Commit

Permalink
(SERVER-3033) Fix auth rule for CRL update endpoint
Browse files Browse the repository at this point in the history
Prior to this change, all PUT requests to the `certificate_revocation_list`
endpoint would get denied, since the request path wouldn't exactly match the
string in the auth rule. Using type `regex` ensures that we can access this
endpoint appropriately.
  • Loading branch information
mwaggett committed Jun 16, 2021
1 parent 01777f4 commit d9bf097
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion ezbake/config/conf.d/auth.conf
Original file line number Diff line number Diff line change
Expand Up @@ -74,7 +74,7 @@ authorization: {
{
match-request: {
path: "^/puppet-ca/v1/certificate_revocation_list$"
type: path
type: regex
method: put
}
allow: {
Expand Down

0 comments on commit d9bf097

Please sign in to comment.