Skip to content

docs(fleet-manager): rotating the operator CA - #81

Merged
Bugs5382 merged 1 commit into
mainfrom
docs/manager-157-rotate-operator-ca
Oct 1, 2026
Merged

Bugs5382 merged 1 commit into
mainfrom
docs/manager-157-rotate-operator-ca

Conversation

@Bugs5382

@Bugs5382 Bugs5382 commented Oct 1, 2026 •

Copy link
Copy Markdown
Contributor

What and why

Adds a "Rotating the operator CA" page for the manager's operator CA admin RPCs. It covers:

  • registering the next CA, which makes the old one retiring;
  • the overlap;
  • retiring the old CA;
  • changing a registered CA's CRL source, uploading CRLs and setting its OCSP mode;
  • the refusals (1605, 1607, 1609) and the self-lockout guard.

The operator CA page and the sidebar link to it.

Companion to CryptOS-PKI/cryptos-manager#162; merge the two together. The page links to the web Operator CAs page that #75 adds, so merge docs#75 first or at the same time. Until then the build warns about that link.

Checked against docs#75: its register, retire (1609 and the self-lockout tick box), CRL source, upload and OCSP steps match how the manager behaves. Its "In flight" note can come out once the manager PR merges.

Refs CryptOS-PKI/cryptos-manager#157

Verification

  • Build succeeds
  • Documentation updated

How this was verified

npx docusaurus build succeeds. The only warnings are the two links to web-operator-cas.md, the page docs#75 adds.

…d OCSP settings

Signed-off-by: Bugs5382 <12115015+Bugs5382@users.noreply.github.com>
@Bugs5382 Bugs5382 self-assigned this Oct 1, 2026
@Bugs5382
Bugs5382 marked this pull request as ready for review October 1, 2026 14:39
@github-actions github-actions Bot added the documentation Documentation only (docs). label Oct 1, 2026
@Bugs5382

Bugs5382 commented Oct 1, 2026

Copy link
Copy Markdown
Contributor Author

Merging for the v0.1.0 test run: CI green and mergeable at merge time.

@Bugs5382
Bugs5382 merged commit 6a9547c into main Oct 1, 2026
19 checks passed
@Bugs5382
Bugs5382 deleted the docs/manager-157-rotate-operator-ca branch October 1, 2026 14:48
@Bugs5382 Bugs5382 added this to the v0.1.0 milestone Oct 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Documentation only (docs).

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant