upstream/opnsense-plugins
1
0
Fork 0
mirror of https://github.com/opnsense/plugins.git synced 2026-02-03 20:40:37 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #4830 from kevinvanblokland/master

Browse source 
security/acme-client: add support for AzureDNS System Assigned Managed Identity
This commit is contained in:
Frank Wall 2025-11-30 22:40:05 +01:00 committed by GitHub
commit e866e541da
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 14 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
security/acme-client/src/opnsense/mvc/app/controllers/OPNsense/AcmeClient/forms/dialogValidation.xml
View file

@ -226,6 +226,12 @@
<label>Client Secret</label>
<type>text</type>
</field>
<field>
<id>validation.dns_azuredns_managedidentity</id>
<label>Use System Assigned Managed Identity</label>
<type>checkbox</type>
<help><![CDATA[When System Assigned Managed Identity is enabled the Tenant ID, APP ID and Client Secret settings are ignored by the acme client. Access tokens are obtained using the Azure Instance Metadata Service for the System Assigned Managed Identity. See <a target="_blank" href="https://learn.microsoft.com/en-us/entra/identity/managed-identities-azure-resources/how-to-use-vm-token">documentation</a>.]]></help>
</field>
<field>
<label>Bunny</label>
<type>header</type>

4
security/acme-client/src/opnsense/mvc/app/library/OPNsense/AcmeClient/LeValidation/DnsAzure.php
View file

@ -43,5 +43,9 @@ class DnsAzure extends Base implements LeValidationInterface
$this->acme_env['AZUREDNS_TENANTID'] = (string)$this->config->dns_azuredns_tenantid;
$this->acme_env['AZUREDNS_APPID'] = (string)$this->config->dns_azuredns_appid;
$this->acme_env['AZUREDNS_CLIENTSECRET'] = (string)$this->config->dns_azuredns_clientsecret;
if ($this->config->dns_azuredns_managedidentity == '1') {
$this->acme_env['AZUREDNS_MANAGEDIDENTITY'] = 'true';
}
}
}

4
security/acme-client/src/opnsense/mvc/app/models/OPNsense/AcmeClient/AcmeClient.xml
View file

@ -581,6 +581,10 @@
<dns_azuredns_clientsecret type="TextField">
<Required>N</Required>
</dns_azuredns_clientsecret>
<dns_azuredns_managedidentity type="BooleanField">
<Default>0</Default>
<Required>N</Required>
</dns_azuredns_managedidentity>
<dns_bunny_api_key type="TextField">
<Required>N</Required>
</dns_bunny_api_key>