Skip to content

Latest commit

 

History

History
54 lines (46 loc) · 4.71 KB

File metadata and controls

54 lines (46 loc) · 4.71 KB

DynamicSecretCreateLdap

dynamicSecretCreateLdap is a command that creates ldap dynamic secret

Properties

Name Type Description Notes
providerType String [optional]
bindDn String Bind DN [optional]
bindDnPassword String Bind DN Password [optional]
customUsernameTemplate String Customize how temporary usernames are generated using go template [optional]
deleteProtection String Protection from accidental deletion of this object [true/false] [optional]
description String Description of the object [optional]
externalUsername String Externally provided username [true/false] [optional]
fixedUserClaimKeyname String For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true) [optional]
groupDn String Group DN which the temporary user should be added [optional]
hostProvider String Host provider type [explicit/target], Default Host provider is explicit, Relevant only for SRA items. [optional]
inputRule List<String> Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout). [optional]
itemCustomFields Map<String, String> Additional custom fields to associate with the item [optional]
json Boolean Set output format to JSON [optional]
ldapCaCert String CA Certificate File Content [optional]
ldapUrl String LDAP Server URL [optional]
name String Dynamic secret name
outputRule List<String> Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) [optional]
passwordLength String The length of the password to be generated [optional]
producerEncryptionKeyName String Dynamic producer encryption key [optional]
secureAccessBastionIssuer String Deprecated. use secure-access-certificate-issuer [optional]
secureAccessCertificateIssuer String Path to the SSH Certificate Issuer for your Akeyless Secure Access [optional]
secureAccessDelay Long The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds [optional]
secureAccessEnable String Enable/Disable secure remote access [true/false] [optional]
secureAccessEnforceHostsRestriction Boolean Enforce connections only to allowed SRA hosts [optional]
secureAccessHost List<String> Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers) [optional]
secureAccessRdGatewayServer String RD Gateway server [optional]
secureAccessRdpDomain String Required when the Dynamic Secret is used for a domain user [optional]
skipDryRun String If set, dry-run will be skipped [optional]
tags List<String> Add tags attached to this object [optional]
target List<String> A list of targets to be associated with an SRA item, To specify multiple targets use argument multiple times [optional]
targetName String Target name [optional]
token String Authentication token (see `/auth` and `/configure`) [optional]
tokenExpiration String Token expiration [optional]
uidToken String The universal identity token, Required only for universal_identity authentication [optional]
useCapitalLetters String Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false] [optional]
useLowerLetters String Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false] [optional]
useNumbers String Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false] [optional]
useSpecialCharacters String [optional]
userAttribute String User Attribute [optional]
userDn String User DN [optional]
userTtl String User TTL [optional]