Customize how temporary usernames are generated using go template

Protection from accidental deletion of this object [true/false]

Set output format to JSON

Comma-separated list of allowed K8S namespaces for the generated ServiceAccount (relevant only for k8s-service-account-type=dynamic)

K8S cluster CA certificate

K8S cluster URL endpoint

K8S cluster name

K8S cluster Bearer token

K8S Namespace where the ServiceAccount exists.

The pre-existing Role or ClusterRole name to bind the generated ServiceAccount to (relevant only for k8s-service-account-type=dynamic)

Specifies the type of the pre-existing K8S role [Role, ClusterRole] (relevant only for k8s-service-account-type=dynamic)

Content of the yaml in a Base64 format.

Path to yaml file that contains definitions of K8S role and role binding (relevant only for k8s-service-account-type=dynamic)

K8S ServiceAccount to extract token from.

K8S ServiceAccount type [fixed, dynamic].

Dynamic secret name

Dynamic secret name

Dynamic producer encryption key

Enable Port forwarding while using CLI access

Deprecated. use secure-access-certificate-issuer

Path to the SSH Certificate Issuer for your Akeyless Secure Access

The K8s cluster endpoint URL

The K8s dashboard url

The delay duration, in seconds, to wait after generating just-in-time credentials. Accepted range: 0-120 seconds

Enable/Disable secure remote access [true/false]

Enable Web Secure Remote Access

Secure browser via Akeyless's Secure Remote Access (SRA)

Web-Proxy via Akeyless's Secure Remote Access (SRA)

Target name

Authentication token (see /auth and /configure)

The universal identity token, Required only for universal_identity authentication

Use the GW's service account

User TTL