Links
- CA generation: https://developer.hashicorp.com/vault/docs/secrets/ssh/signed-ssh-certificates
- OpenPGP ssh key: https://github.com/drduh/YubiKey-Guide/tree/master
ca_clients
CA for SSH clients
Source: ../../infra/vault/tf/output
Update: automatically
ca_servers
CA for SSH servers
Source: ../../infra/vault/tf/output
Update: automatically
simeonwarren
Source ./simeonwarren@alwaldend.com-2026-03-22-openpgp.pub
Update: manual export from the yubikey