const ONLY_YUBIHSM2_ADMIN_PLAINTEXT_NON_ADMIN_PLAINTEXT: &[u8] = b"system:\n iteration: 1\n admin_secret_handling: plaintext\n non_admin_secret_handling: plaintext\n mappings:\n - wire_guard_download:\n system_user: wireguard-downloader\n ssh_authorized_key: >-\n ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOh9BTe81DC6A0YZALsq9dWcyl6xjjqlxWPwlExTFgBt\n user@host\nyubihsm2:\n connections:\n - usb:\n serial_number: 12345678\n - usb:\n serial_number: 87654321\n mappings:\n - admin:\n authentication_key_id: 1\n - audit_log:\n authentication_key_id: 2\n ssh_authorized_key: >-\n ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIPkpXKiNhy39A3bZ1u19a5d4sFwYMBkWQyCbzgUfdKBm\n user@host\n system_user: metrics-user\n - backup:\n authentication_key_id: 3\n wrapping_key_id: 2\n ssh_authorized_key: >-\n ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAINrIYA+bfMBThUP5lKbMFEHiytmcCPhpkGrB/85n0mAN\n user@host\n system_user: backup-user\n - hermetic_audit_log:\n authentication_key_id: 4\n system_user: yubihsm2-hermetic-metrics-user\n - signing:\n authentication_key_id: 5\n key_setup:\n key_type: Curve25519\n key_mechanisms:\n - EdDsaSignature\n signature_type: EdDsa\n key_context:\n openpgp:\n user_ids:\n - Foobar McFooface <foobar@mcfooface.org>\n version: \"4\"\n domain: 1\n signing_key_id: 1\n ssh_authorized_key: >-\n ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOh96uFTnvX6P1ebbLxXFvy6sK7qFqlMHDOuJ0TmuXQQ\n user@host\n system_user: signing2\n";Expand description
Config with YubiHSM2 backend.
- plaintext for administrative secrets
- plaintext for non-administrative secrets