authMethodCreateK8s is a command that creates a new auth method that will be able to authenticate using K8S.
Name | Type | Description | Notes |
---|---|---|---|
accessExpires | Long | Access expiration date in Unix timestamp (select 0 for access without expiry date) | [optional] |
audience | String | The audience in the Kubernetes JWT that the access is restricted to | [optional] |
auditLogsClaims | List<String> | Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username" | [optional] |
boundIps | List<String> | A CIDR whitelist with the IPs that the access is restricted to | [optional] |
boundNamespaces | List<String> | A list of namespaces that the access is restricted to | [optional] |
boundPodNames | List<String> | A list of pod names that the access is restricted to | [optional] |
boundSaNames | List<String> | A list of service account names that the access is restricted to | [optional] |
deleteProtection | String | Protection from accidental deletion of this object [true/false] | [optional] |
description | String | Auth Method description | [optional] |
forceSubClaims | Boolean | if true: enforce role-association must include sub claims | [optional] |
genKey | String | Automatically generate key-pair for K8S configuration. If set to false, a public key needs to be provided [true/false] | [optional] |
gwBoundIps | List<String> | A CIDR whitelist with the GW IPs that the access is restricted to | [optional] |
json | Boolean | Set output format to JSON | [optional] |
jwtTtl | Long | Jwt TTL | [optional] |
name | String | Auth Method name | |
productType | List<String> | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] | [optional] |
publicKey | String | Base64-encoded or PEM formatted public key data for K8S authentication method is required [RSA2048] | [optional] |
token | String | Authentication token (see `/auth` and `/configure`) | [optional] |
uidToken | String | The universal identity token, Required only for universal_identity authentication | [optional] |