Configurable Default Provisioner Type

[pflegen]

Hi,

I use step-ca in Docker/Docker Compose for ACME certificates. I wish there was an environment variable(s) or something to configure the default provisioner to be an ACME provisioner instead of the JWT one.

Admittedly I'm not an expert with step-ca so I don't believe I need the JWT provisioner for what I'm doing with ACME so it's just sitting there. But please correct me if I'm wrong here.

If you can point me in the direction on how to implement this I would gladly create a PR.

Thanks!

[tashian]

The initial ("default") JWT provisioner is only for CA admin operations. When remote management is enabled, you can delete the JWT provisioner, but you always need at least one provisioner with a Super Admin attached. So, create a new provisioner with a Super Admin (eg. you could use OIDC, X5C, or another type depending on your setup), make sure it works for CA administration, and then you should be able to delete the JWT provisioner.

[pflegen]

Ah 😮 Thank you for the clarification.