agent-pools-mtls-certificates

Sign an Agent Pool Certificate

This endpoint signs a CSR for an agent pool certificate to use it for agent mTLS connection.

Example CSR generation with OpenSSL (EC P-256)::

openssl ecparam -genkey -name prime256v1 -noout -out scalr-agent.key
openssl req -new -key scalr-agent.key -out scalr-agent.csr -subj "/CN=agent-pool"
post/agent-pools/{agent_pool}/actions/sign-csr

Request

  • Base URL: https://example.scalr.io/api/iacp/v3
  • URL: https://example.scalr.io/api/iacp/v3/agent-pools/{agent_pool}/actions/sign-csr
  • Auth: HTTP bearer

Path parameters

agent_poolstring required

The ID of the agent pool for which the certificate is issued.

Request body

csrstring required

PEM-encoded certificate signing request for the agent pool certificate.

not-valid-afterstring date-time

UTC datetime after which the issued certificate expires. Defaults to 1 year from the time of signing.

replace-fingerprintsboolean

Whether the newly issued certificate should immediately replace the currently active agent pool mTLS fingerprint set.

Response

Certificate signed successfully.

certificatestring required

PEM-encoded agent pool certificate signed by the Scalr platform.

not-valid-afterstring date-time required

UTC datetime after which the issued certificate expires.

Changes

No recorded changes to this operation across all 1 revision of this API.