Arnaud Riess

> The module will throw error if duplicate IPs is detected in the input variable. Examples of input variables are [here](https://github.com/TelkomIndonesia/terraform-nebula-mesh/blob/master/examples) Thank you for pointing me towards this new terraform...

@davidkel indeed this is what I suspected and reported in https://github.com/hyperledger/fabric/issues/2972#issuecomment-937543866 This is obviously not ideal to have to generate the TLS certs outside of fabric-ca-server when using PKCS11 instead...

Now I'm trying to generate a separate TLS cert for fabric-ca-server with openssl, the server starts but I get "certificate signed by unknown authority" from fabric-ca-client (I set --tls.certfiles to...

the `oidc.config` parameter in the argo-cm configmap actually allows specifying a custom secret name and key for the OIDC client secret in the form of `$:`: https://argo-cd.readthedocs.io/en/stable/operator-manual/user-management/#alternative for example: ```...

After some extensive googling I found that the label should be the HSM cluster name: This gets me a bit further (I init a brand new fabric ca server here...

> ``` > 2021/10/06 22:14:40 [FATAL] Initialization failure: Failed generating ECDSA P256 key: P11: keypair generate failed [pkcs11: 0x13: CKR_ATTRIBUTE_VALUE_INVALID] > ``` Actually that error was because the AltId value...

> We could add some detail to the docs about this as well as iterate that the AltId value for each certificate in the same HSM must be unique. Ah...

@ddelnano The official doc on static records seems to indicate this is possible to specify a record type, so maybe this has changed recently? Being able to manage TXT or...

I think the argument name depends on the record type, for example the TXT type would use `text` instead of `ip`. Here are all the possible arguments in the cli:...

It may not be easy to do a generic "dns_record" resource since the arguments change depending on the type. Maybe we should have different resources by type if it's not...