Sign in

v1

latestOpenAPI 3.0.0Apache 2.02026-07-24340250799.5 KB
agent-pools-mtls-certificates

Sign an Agent Pool Certificate

This endpoint signs a CSR for an agent pool certificate to use it for agent mTLS connection.

Example CSR generation with OpenSSL (EC P-256)::

openssl ecparam -genkey -name prime256v1 -noout -out scalr-agent.key
openssl req -new -key scalr-agent.key -out scalr-agent.csr -subj "/CN=agent-pool"
post/agent-pools/{agent_pool}/actions/sign-csr

Path parameters

agent_poolstring required

The ID of the agent pool for which the certificate is issued.

Request body

csrstring required

PEM-encoded certificate signing request for the agent pool certificate.

not-valid-afterstring date-time

UTC datetime after which the issued certificate expires. Defaults to 1 year from the time of signing.

replace-fingerprintsboolean

Whether the newly issued certificate should immediately replace the currently active agent pool mTLS fingerprint set.

Response

Certificate signed successfully.

certificatestring required

PEM-encoded agent pool certificate signed by the Scalr platform.

not-valid-afterstring date-time required

UTC datetime after which the issued certificate expires.