add notafter field

hashicorp · Dec 18, 2024 · 6dc6b70 · 6dc6b70
1 parent 78f2eda
commit 6dc6b70
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/internal/consts/consts.go b/internal/consts/consts.go
@@ -451,6 +451,7 @@ const (
 	FieldEabKey                        = "key"
 	FieldAcmeDirectory                 = "acme_directory"
 	FieldEabId                         = "eab_id"
+	FieldNotAfter                      = "not_after"
 	/*
 		common environment variables
 	*/

diff --git a/vault/resource_pki_secret_backend_root_sign_intermediate.go b/vault/resource_pki_secret_backend_root_sign_intermediate.go
@@ -220,6 +220,13 @@ func pkiSecretBackendRootSignIntermediateResource() *schema.Resource {
 				Optional:    true,
 				Description: "Specifies the default issuer of this request.",
 			},
+			consts.FieldNotAfter: {
+				Type:     schema.TypeString,
+				Optional: true,
+				Description: "Set the Not After field of the certificate with specified date value. " +
+					"The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. " +
+					"Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.",
+			},
 		},
 	}
 }
@@ -247,6 +254,7 @@ func pkiSecretBackendRootSignIntermediateCreate(ctx context.Context, d *schema.R
 		consts.FieldProvince,
 		consts.FieldStreetAddress,
 		consts.FieldPostalCode,
+		consts.FieldNotAfter,
 	}
 
 	intermediateSignBooleanAPIFields := []string{