Templated role glob *([a-z]) not working

Vault
1

Hi I am trying to create a role which allows creation of certificates with a globa pattern with below command

vault write pki-external/v1/ica2/v1/roles/templated-local
allowed_domains=“test.*([a-z]).local”
allowed_domains_template=true
allow_subdomains=true
allow_bare_domains=true
allow_glob_domains=true
max_ttl=“720h”

However while testing it, it fails to create certificate for CN as test.rohit.local. I tested the glob pattern on Glob Tool | DigitalOcean which works but vault fails to generate.

Can someone help me what am I missing.

2

The DigitalOcean tool is implementing an advanced form of glob with several extensions.

Vault only implements the most basic form, in which * matches any substring.

With the configuration you have, you would have to request a certificate for test.rohit([a-z]).local