summaryrefslogtreecommitdiff
path: root/doc/examples/cloud-config-ca-certs.txt
diff options
context:
space:
mode:
Diffstat (limited to 'doc/examples/cloud-config-ca-certs.txt')
-rw-r--r--doc/examples/cloud-config-ca-certs.txt11
1 files changed, 6 insertions, 5 deletions
diff --git a/doc/examples/cloud-config-ca-certs.txt b/doc/examples/cloud-config-ca-certs.txt
index 9f7beb05..427465d4 100644
--- a/doc/examples/cloud-config-ca-certs.txt
+++ b/doc/examples/cloud-config-ca-certs.txt
@@ -8,11 +8,12 @@
# It should be passed as user-data when starting the instance.
ca_certs:
- # If present and set to True, the 'remove_defaults' parameter will remove
- # all the default trusted CA certificates that are normally shipped with
- # Ubuntu.
- # This is mainly for paranoid admins - most users will not need this
- # functionality.
+ # If present and set to True, the 'remove_defaults' parameter will either
+ # disable all the trusted CA certifications normally shipped with
+ # Alpine, Debian or Ubuntu. On RedHat, this action will delete those
+ # certificates.
+ # This is mainly for very security-sensitive use cases - most users will not
+ # need this functionality.
remove_defaults: true
# If present, the 'trusted' parameter should contain a certificate (or list