From ca29d2219d0a863b294709b82a33b39640576107 Mon Sep 17 00:00:00 2001 From: claire bontempo <68122737+hellobontempo@users.noreply.github.com> Date: Tue, 2 May 2023 19:29:14 +0000 Subject: [PATCH] backport of commit 26b5b24e23056150129b91613a977b4097f80926 --- website/content/api-docs/secret/pki.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/website/content/api-docs/secret/pki.mdx b/website/content/api-docs/secret/pki.mdx index 7dbacb4bc6b5..b56243587e31 100644 --- a/website/content/api-docs/secret/pki.mdx +++ b/website/content/api-docs/secret/pki.mdx @@ -3469,7 +3469,7 @@ the CRL. revocations on, to regenerate the delta CRL. Must be shorter than CRL expiry. -- `cross_cluster_revocation` `(bool: false)` - Enable cross-cluster revocation +- `cross_cluster_revocation` `(bool: false)` - Enables cross-cluster revocation request queues. When a serial not issued on this local cluster is presented to Vault via the [`/revoke` API](#revoke-certificate), it is replicated across clusters and the cluster which issued that certificate will revoke @@ -3501,7 +3501,7 @@ the CRL. unified CRL and OCSP on the existing, previously cluster-local paths (e.g., `/pki/crl` will now contain the unified CRL when enabled). This allows transitioning AIA-based consumption of CRLs to a unified view - without having to re-issue certificates or update scripts pulling the + without having to re-issue certificates or update scripts pulling a single CRL. ~> Note: `unified_crl_on_existing_paths` is a Vault Enterprise only feature.