It looks like the code will ignore any new parameter that's not included in this module, which means you need to be very fast when vault provides new versions with additional parameters.
Another way would be to pass unknown parameters in the config key as is.
Currently, I see the following options missing for pki_role (I'm sure other modules are affected as well):
- issuer_ref
- allow_wildcard_certificates
- allowed_uri_sans_template
- allowed_serial_numbers
- signature_bits
- use_pss
- not_after
- cn_validations
It looks like the code will ignore any new parameter that's not included in this module, which means you need to be very fast when vault provides new versions with additional parameters.
Another way would be to pass unknown parameters in the
configkey as is.Currently, I see the following options missing for
pki_role(I'm sure other modules are affected as well):