Cloud Organization API, gRPC: SshCertificateService.Generate
Members of an organization can generate certificates for themselves
Signing certificates for other users requires a special permission
gRPC request
rpc Generate (GenerateSshCertificateRequest) returns (GenerateSshCertificateResponse)
GenerateSshCertificateRequest
{
// Includes only one of the fields `cloudId`, `organizationId`
"cloudId": "string",
"organizationId": "string",
// end of the list of possible fields
// Includes only one of the fields `subjectId`, `osLogin`
"subjectId": "string",
"osLogin": "string",
// end of the list of possible fields
"publicKey": "string"
}
Field |
Description |
cloudId |
string the cloud must be attached to an organization Includes only one of the fields |
organizationId |
string Includes only one of the fields |
subjectId |
string specify subject to generate certificate for default login Includes only one of the fields |
osLogin |
string specify os_login for a specific login Includes only one of the fields |
publicKey |
string Required field. |
GenerateSshCertificateResponse
{
"signedCertificate": "string"
}
Field |
Description |
signedCertificate |
string as per specification https://cvsweb.openbsd.org/src/usr.bin/ssh/PROTOCOL.certkeys?annotate=HEAD |