http.cert_request_rate_limit

Holds per-endpoint rate limits for certificate request creation endpoints. Zero or negative disables the specific limit.

Key	Type	Default
http.cert_request_rate_limit.user	number	10
http.cert_request_rate_limit.service_enroll	number	5
http.cert_request_rate_limit.pam	number	10
http.cert_request_rate_limit.console	number	10

user

number, default 10

The limit for POST /api/certs/user (interactive user cert).

http:
  cert_request_rate_limit:
    user: 10

service_enroll

number, default 5

The limit for POST /api/certs/service/enroll (service enrollment, unattended).

http:
  cert_request_rate_limit:
    service_enroll: 5

pam

number, default 10

The limit for POST /api/certs/pam (short-lived PAM cert, gated on local interaction).

http:
  cert_request_rate_limit:
    pam: 10

console

number, default 10

The limit for POST /api/certs/console (console login, gated on someone standing at a keyboard).

http:
  cert_request_rate_limit:
    console: 10