v1

latestOpenAPI 3.0.02026-07-246171,3332.1 MB
v2

post/auth-method-update-k8s

Request body

access-expiresinteger

Access expiration date in Unix timestamp (select 0 for access without expiry date)

allowed-client-typestring[]

limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]

audiencestring

The audience in the Kubernetes JWT that the access is restricted to

audit-logs-claimsstring[]

Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username"

bound-ipsstring[]

A CIDR whitelist with the IPs that the access is restricted to

bound-namespacesstring[]

A list of namespaces that the access is restricted to

bound-pod-namesstring[]

A list of pod names that the access is restricted to

bound-sa-namesstring[]

A list of service account names that the access is restricted to

delete_protectionstring

Protection from accidental deletion of this object [true/false]

descriptionstring

Auth Method description

expiration-event-instring[]

How many days before the expiration of the auth method would you like to be notified.

force-sub-claimsboolean

if true: enforce role-association must include sub claims

gen-keystring

Automatically generate key-pair for K8S configuration. If set to false, a public key needs to be provided [true/false]

gw-bound-ipsstring[]

A CIDR whitelist with the GW IPs that the access is restricted to

jsonboolean

Set output format to JSON

jwt-ttlinteger

Jwt TTL

namestring required

Auth Method name

new-namestring

Auth Method new name

product-typestring[]

Choose the relevant product type for the auth method [sm, sra, pm, dp, ca]

public-keystring

Base64-encoded or PEM formatted public key data for K8S authentication method is required [RSA2048]

tokenstring

Authentication token (see /auth and /configure)

uid-tokenstring

The universal identity token, Required only for universal_identity authentication

Response

authMethodUpdateK8sResponse wraps response body.

namestring
prv_keystring