Skip to content

CreateSSHCertIssuer.md

Latest commit

 

History

History
42 lines (34 loc) · 3.57 KB

CreateSSHCertIssuer.md

File metadata and controls

42 lines (34 loc) · 3.57 KB

CreateSSHCertIssuer

Properties

Name Type Description Notes
providerType String [optional]
allowedUsers String Users allowed to fetch the certificate, e.g root,ubuntu
deleteProtection String Protection from accidental deletion of this object [true/false] [optional]
description String Description of the object [optional]
extensions Map<String, String> Signed certificates with extensions, e.g permit-port-forwarding=\&quot;\&quot; [optional]
externalUsername String Externally provided username [true/false] [optional]
fixedUserClaimKeyname String For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true) [optional]
hostProvider String Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret [optional]
itemCustomFields Map<String, String> Additional custom fields to associate with the item [optional]
json Boolean Set output format to JSON [optional]
metadata String Deprecated - use description [optional]
name String SSH certificate issuer name
principals String Signed certificates with principal, e.g example_role1,example_role2 [optional]
secureAccessApi String Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900 [optional]
secureAccessBastionApi String Deprecated. use secure-access-api [optional]
secureAccessBastionSsh String Deprecated. use secure-access-ssh [optional]
secureAccessEnable String Enable/Disable secure remote access [true/false] [optional]
secureAccessEnforceHostsRestriction Boolean Enable this flag to enforce connections only to the hosts listed in --secure-access-host [optional]
secureAccessGateway String [optional]
secureAccessHost List<String> Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers) [optional]
secureAccessSsh String Bastion's SSH server. E.g. my.sra-server:22 [optional]
secureAccessSshCredsUser String SSH username to connect to target server, must be in 'Allowed Users' list [optional]
secureAccessUseInternalBastion Boolean Deprecated. Use secure-access-use-internal-ssh-access [optional]
secureAccessUseInternalSshAccess Boolean Use internal SSH Access [optional]
signerKeyName String A key to sign the certificate with
tag List<String> List of the tags attached to this key [optional]
target List<String> A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times [optional]
token String Authentication token (see `/auth` and `/configure`) [optional]
ttl Long The requested Time To Live for the certificate, in seconds
uidToken String The universal identity token, Required only for universal_identity authentication [optional]