Data location and format

Extra data for the CSR is read from the csr_attributes.yaml file in Puppet's confdir. The location of this file can be changed with the csr_attributes configuration setting.

The csr_attributes.yaml file must contain a YAML hash with one or both of the following keys:

• custom_attributes

• extension_requests

The value of each key must also be a hash, where:

• Each key is a valid object identifier (OID) — Puppet-specific OIDscan optionally be referenced by short name instead of by numeric ID.

• Each value is an object that can be cast to a string — numbers are allowed but arrays are not.

For information about how each hash is used and recommended OIDs for each hash, see the sections below.