Skip to content

UpdateSSHCertIssuer.md

Latest commit

 

History

History
43 lines (35 loc) · 3.51 KB

UpdateSSHCertIssuer.md

File metadata and controls

43 lines (35 loc) · 3.51 KB

UpdateSSHCertIssuer

Properties

Name Type Description Notes
providerType String [optional]
addTag List<String> List of the new tags that will be attached to this item [optional]
allowedUsers String Users allowed to fetch the certificate, e.g root,ubuntu
deleteProtection String Protection from accidental deletion of this object [true/false] [optional]
description String Description of the object [optional]
extensions Map<String, String> Signed certificates with extensions, e.g permit-port-forwarding=\&quot;\&quot; [optional]
externalUsername String Externally provided username [true/false] [optional]
fixedUserClaimKeyname String For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true) [optional]
hostProvider String Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret [optional]
itemCustomFields Map<String, String> Additional custom fields to associate with the item [optional]
json Boolean Set output format to JSON [optional]
metadata String Deprecated - use description [optional]
name String SSH certificate issuer name
newName String New item name [optional]
principals String Signed certificates with principal, e.g example_role1,example_role2 [optional]
rmTag List<String> List of the existent tags that will be removed from this item [optional]
secureAccessApi String Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900 [optional]
secureAccessBastionApi String Deprecated. use secure-access-api [optional]
secureAccessBastionSsh String Deprecated. use secure-access-ssh [optional]
secureAccessEnable String Enable/Disable secure remote access [true/false] [optional]
secureAccessEnforceHostsRestriction Boolean Enable this flag to enforce connections only to the hosts listed in --secure-access-host [optional]
secureAccessGateway String [optional]
secureAccessHost List<String> Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers) [optional]
secureAccessSsh String Bastion's SSH server. E.g. my.sra-server:22 [optional]
secureAccessSshCredsUser String SSH username to connect to target server, must be in 'Allowed Users' list [optional]
secureAccessUseInternalBastion Boolean Deprecated. Use secure-access-use-internal-ssh-access [optional]
secureAccessUseInternalSshAccess Boolean Use internal SSH Access [optional]
signerKeyName String A key to sign the certificate with
token String Authentication token (see `/auth` and `/configure`) [optional]
ttl Long The requested Time To Live for the certificate, in seconds
uidToken String The universal identity token, Required only for universal_identity authentication [optional]