Release v3.6.2

akeylesslabs · Mar 4, 2024 · 064fa30 · 064fa30
1 parent 2391be9
commit 064fa30
Show file tree

Hide file tree

Showing 608 changed files with 170,431 additions and 28,871 deletions.
diff --git a/.openapi-generator/FILES b/.openapi-generator/FILES
diff --git a/README.md b/README.md
diff --git a/api/openapi.yaml b/api/openapi.yaml
diff --git a/build.gradle b/build.gradle
@@ -4,7 +4,7 @@ apply plugin: 'java'
 apply plugin: 'com.diffplug.spotless'
 
 group = 'io.akeyless'
-version = '3.6.1'
+version = '3.6.2'
 
 buildscript {
     repositories {

diff --git a/build.sbt b/build.sbt
@@ -2,7 +2,7 @@ lazy val root = (project in file(".")).
   settings(
     organization := "io.akeyless",
     name := "akeyless-java",
-    version := "3.6.1",
+    version := "3.6.2",
     scalaVersion := "2.11.4",
     scalacOptions ++= Seq("-feature"),
     javacOptions in compile ++= Seq("-Xlint:deprecation"),

diff --git a/docs/AccountGeneralSettings.md b/docs/AccountGeneralSettings.md
@@ -12,12 +12,14 @@ Name | Type | Description | Notes
 **accountDefaultKeyName** | **String** | AccountDefaultKeyName is the name of the DFC key item configured as the default key This is here simply for the response to include the item name in addition to the display ID so the client can properly show this to the user. It will not be saved to the DB, only the AccountDefaultKeyItemID will. |  [optional]
 **authUsageEvent** | [**UsageEventSetting**](UsageEventSetting.md) |  |  [optional]
 **dataProtectionSection** | [**DataProtectionSection**](DataProtectionSection.md) |  |  [optional]
+**dynamicSecretMaxTtl** | [**DynamicSecretMaxTtl**](DynamicSecretMaxTtl.md) |  |  [optional]
 **enableRequestForAccess** | **Boolean** |  |  [optional]
 **invalidCharacters** | **String** | InvalidCharacters is the invalid characters for items/targets/roles/auths/notifier_forwarder naming convention |  [optional]
 **itemUsageEvent** | [**UsageEventSetting**](UsageEventSetting.md) |  |  [optional]
 **lockDefaultKey** | **Boolean** | LockDefaultKey determines whether the configured default key can be updated by end-users on a per-request basis true - all requests use the configured default key false - every request can determine its protection key (default) nil - change nothing (every request can determine its protection key (default)) This parameter is only relevant if AccountDefaultKeyItemID is not empty |  [optional]
 **passwordPolicy** | [**PasswordPolicyInfo**](PasswordPolicyInfo.md) |  |  [optional]
 **protectItemsByDefault** | **Boolean** |  |  [optional]
+**rotationSecretMaxInterval** | [**RotationSecretMaxInterval**](RotationSecretMaxInterval.md) |  |  [optional]
 **sharingPolicy** | [**SharingPolicyInfo**](SharingPolicyInfo.md) |  |  [optional]
 
 

diff --git a/docs/AuthMethodAccessInfo.md b/docs/AuthMethodAccessInfo.md
@@ -25,6 +25,7 @@ Name | Type | Description | Notes
 **oauth2AccessRules** | [**OAuth2AccessRules**](OAuth2AccessRules.md) |  |  [optional]
 **ociAccessRules** | [**OCIAccessRules**](OCIAccessRules.md) |  |  [optional]
 **oidcAccessRules** | [**OIDCAccessRules**](OIDCAccessRules.md) |  |  [optional]
+**productTypes** | **List&lt;String&gt;** | List of product types this auth method will be in use of |  [optional]
 **rulesType** | **String** |  |  [optional]
 **samlAccessRules** | [**SAMLAccessRules**](SAMLAccessRules.md) |  |  [optional]
 **subClaimsDelimiters** | **List&lt;String&gt;** |  |  [optional]

diff --git a/docs/CreateAuthMethod.md b/docs/CreateAuthMethod.md
@@ -15,6 +15,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]
 

diff --git a/docs/CreateAuthMethodAWSIAM.md b/docs/CreateAuthMethodAWSIAM.md
@@ -23,6 +23,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **stsUrl** | **String** | sts URL |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]

diff --git a/docs/CreateAuthMethodAzureAD.md b/docs/CreateAuthMethodAzureAD.md
@@ -28,6 +28,7 @@ Name | Type | Description | Notes
 **jwksUri** | **String** | The URL to the JSON Web Key Set (JWKS) that containing the public keys that should be used to verify any JSON Web Token (JWT) issued by the authorization server. |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]
 

diff --git a/docs/CreateAuthMethodCert.md b/docs/CreateAuthMethodCert.md
@@ -24,6 +24,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **revokedCertIds** | **List&lt;String&gt;** | A list of revoked cert ids |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]

diff --git a/docs/CreateAuthMethodEmail.md b/docs/CreateAuthMethodEmail.md
@@ -17,6 +17,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]
 

diff --git a/docs/CreateAuthMethodGCP.md b/docs/CreateAuthMethodGCP.md
@@ -22,6 +22,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **serviceAccountCredsData** | **String** | ServiceAccount credentials data instead of giving a file path, base64 encoded |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **type** | **String** | Type of the GCP Access Rules | 

diff --git a/docs/CreateAuthMethodHuawei.md b/docs/CreateAuthMethodHuawei.md
@@ -23,6 +23,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]
 

diff --git a/docs/CreateAuthMethodK8S.md b/docs/CreateAuthMethodK8S.md
@@ -21,6 +21,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **publicKey** | **String** | Base64-encoded or PEM formatted public key data for K8S authentication method is required [RSA2048] |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]

diff --git a/docs/CreateAuthMethodLDAP.md b/docs/CreateAuthMethodLDAP.md
@@ -17,6 +17,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **publicKeyData** | **String** | A public key generated for LDAP authentication method on Akeyless in base64 or PEM format [RSA2048] |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]

diff --git a/docs/CreateAuthMethodOAuth2.md b/docs/CreateAuthMethodOAuth2.md
@@ -12,6 +12,8 @@ Name | Type | Description | Notes
 **audience** | **String** | The audience in the JWT |  [optional]
 **boundClientIds** | **List&lt;String&gt;** | The clients ids that the access is restricted to |  [optional]
 **boundIps** | **List&lt;String&gt;** | A CIDR whitelist with the IPs that the access is restricted to |  [optional]
+**cert** | **String** | CertificateFile Path to a file that contain the certificate in a PEM format. |  [optional]
+**certFileData** | **String** | CertificateFileData PEM Certificate in a Base64 format. |  [optional]
 **description** | **String** | Auth Method description |  [optional]
 **forceSubClaims** | **Boolean** | if true: enforce role-association must include sub claims |  [optional]
 **gatewayUrl** | **String** | Akeyless Gateway URL (Configuration Management port). Relevant only when the jwks-uri is accessible only from the gateway. |  [optional]
@@ -22,6 +24,7 @@ Name | Type | Description | Notes
 **jwksUri** | **String** | The URL to the JSON Web Key Set (JWKS) that containing the public keys that should be used to verify any JSON Web Token (JWT) issued by the authorization server. | 
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **subclaimsDelimiters** | **List&lt;String&gt;** | A list of additional sub claims delimiters (relevant only for SAML, OIDC, OAuth2/JWT) |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]

diff --git a/docs/CreateAuthMethodOCI.md b/docs/CreateAuthMethodOCI.md
@@ -17,6 +17,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **tenantOcid** | **String** | The Oracle Cloud tenant ID | 
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]

diff --git a/docs/CreateAuthMethodOIDC.md b/docs/CreateAuthMethodOIDC.md
@@ -21,6 +21,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **requiredScopes** | **List&lt;String&gt;** | RequiredScopes is a list of required scopes that the oidc method will request from the oidc provider and the user must approve |  [optional]
 **requiredScopesPrefix** | **String** | RequiredScopesPrefix is a a prefix to add to all required-scopes when requesting them from the oidc server (for example, azures&#39; Application ID URI) |  [optional]
 **subclaimsDelimiters** | **List&lt;String&gt;** | A list of additional sub claims delimiters (relevant only for SAML, OIDC, OAuth2/JWT) |  [optional]

diff --git a/docs/CreateAuthMethodSAML.md b/docs/CreateAuthMethodSAML.md
@@ -19,6 +19,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **subclaimsDelimiters** | **List&lt;String&gt;** | A list of additional sub claims delimiters (relevant only for SAML, OIDC, OAuth2/JWT) |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]

diff --git a/docs/CreateAuthMethodUniversalIdentity.md b/docs/CreateAuthMethodUniversalIdentity.md
@@ -18,6 +18,7 @@ Name | Type | Description | Notes
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **jwtTtl** | **Long** | Jwt TTL |  [optional]
 **name** | **String** | Auth Method name | 
+**productType** | **List&lt;String&gt;** | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |  [optional]
 **token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
 **ttl** | **Integer** | Token ttl |  [optional]
 **uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]

diff --git a/docs/CreateGodaddyTarget.md b/docs/CreateGodaddyTarget.md
@@ -0,0 +1,25 @@
+
+
+# CreateGodaddyTarget
+
+
+## Properties
+
+Name | Type | Description | Notes
+------------ | ------------- | ------------- | -------------
+**apiKey** | **String** | Key of the api credentials to the Godaddy account | 
+**description** | **String** | Description of the object |  [optional]
+**imapFqdn** | **String** | ImapFQDN of the IMAP service, FQDN or IPv4 address. Must be FQDN if the IMAP is using TLS | 
+**imapPassword** | **String** | ImapPassword to access the IMAP service | 
+**imapPort** | **String** | ImapPort of the IMAP service |  [optional]
+**imapUsername** | **String** | ImapUsername to access the IMAP service | 
+**json** | **Boolean** | Set output format to JSON |  [optional]
+**key** | **String** | The name of a key that used to encrypt the target secret value (if empty, the account default protectionKey key will be used) |  [optional]
+**name** | **String** | Target name | 
+**secret** | **String** | Secret of the api credentials to the Godaddy account | 
+**timeout** | **String** | Timeout waiting for certificate validation in Duration format (1h - 1 Hour, 20m - 20 Minutes, 33m3s - 33 Minutes and 3 Seconds), maximum 1h. |  [optional]
+**token** | **String** | Authentication token (see &#x60;/auth&#x60; and &#x60;/configure&#x60;) |  [optional]
+**uidToken** | **String** | The universal identity token, Required only for universal_identity authentication |  [optional]
+
+
+
diff --git a/docs/CreateGodaddyTargetOutput.md b/docs/CreateGodaddyTargetOutput.md
@@ -0,0 +1,13 @@
+
+
+# CreateGodaddyTargetOutput
+
+
+## Properties
+
+Name | Type | Description | Notes
+------------ | ------------- | ------------- | -------------
+**targetId** | **Long** |  |  [optional]
+
+
+
diff --git a/docs/CreatePKICertIssuer.md b/docs/CreatePKICertIssuer.md
@@ -8,8 +8,10 @@
 Name | Type | Description | Notes
 ------------ | ------------- | ------------- | -------------
 **allowAnyName** | **Boolean** | If set, clients can request certificates for any CN |  [optional]
+**allowCopyExtFromCsr** | **Boolean** | If set, will allow copying the extra extensions from the csr file (if given) |  [optional]
 **allowSubdomains** | **Boolean** | If set, clients can request certificates for subdomains and wildcard subdomains of the allowed domains |  [optional]
 **allowedDomains** | **String** | A list of the allowed domains that clients can request to be included in the certificate (in a comma-delimited list) |  [optional]
+**allowedExtraExtensions** | **String** | A json string containing the allowed extra extensions for the pki cert issuer |  [optional]
 **allowedUriSans** | **String** | A list of the allowed URIs that clients can request to be included in the certificate as part of the URI Subject Alternative Names (in a comma-delimited list) |  [optional]
 **caTarget** | **String** | The name of an existing CA target to attach this PKI Certificate Issuer to, required in Public CA mode |  [optional]
 **clientFlag** | **Boolean** | If set, certificates will be flagged for client auth use |  [optional]

diff --git a/docs/CreateRotatedSecret.md b/docs/CreateRotatedSecret.md
@@ -2,6 +2,7 @@
 
 # CreateRotatedSecret
 
+createRotatedSecret is a command that creates a rotated secret [Deprecated: Use rotated-secret-create commands]
 
 ## Properties
 
@@ -13,18 +14,20 @@ Name | Type | Description | Notes
 **applicationId** | **String** | ApplicationId (used in azure) |  [optional]
 **authenticationCredentials** | **String** | The credentials to connect with use-user-creds/use-target-creds |  [optional]
 **autoRotate** | **String** | Whether to automatically rotate every --rotation-interval days, or disable existing automatic rotation [true/false] |  [optional]
-**awsRegion** | **String** | Region (used in aws) |  [optional]
+**awsRegion** | **String** | Aws Region (relevant only for aws) |  [optional]
 **customPayload** | **String** | Secret payload to be sent with rotation request (relevant only for rotator-type&#x3D;custom) |  [optional]
 **deleteProtection** | **String** | Protection from accidental deletion of this item [true/false] |  [optional]
 **description** | **String** | Description of the object |  [optional]
 **gcpKey** | **String** | Base64-encoded service account private key text |  [optional]
 **gcpServiceAccountEmail** | **String** | The email of the gcp service account to rotate |  [optional]
 **gcpServiceAccountKeyId** | **String** | The key id of the gcp service account to rotate |  [optional]
+**graceRotation** | **String** | Create a new access key without deleting the old key from AWS for backup (relevant only for AWS) [true/false] |  [optional]
 **hostProvider** | **String** | Host provider type [explicit/target], Relevant only for Secure Remote Access of ssh cert issuer and ldap rotated secret |  [optional]
 **json** | **Boolean** | Set output format to JSON |  [optional]
 **key** | **String** | The name of a key that used to encrypt the secret value (if empty, the account default protectionKey key will be used) |  [optional]
 **metadata** | **String** | Deprecated - use description |  [optional]
 **name** | **String** | Secret name | 
+**passwordLength** | **String** | The length of the password to be generated |  [optional]
 **rotateAfterDisconnect** | **String** | Rotate the value of the secret after SRA session ends [true/false] |  [optional]
 **rotatedPassword** | **String** | rotated-username password (relevant only for rotator-type&#x3D;password) |  [optional]
 **rotatedUsername** | **String** | username to be rotated, if selected use-self-creds at rotator-creds-type, this username will try to rotate it&#39;s own password, if use-target-creds is selected, target credentials will be use to rotate the rotated-password (relevant only for rotator-type&#x3D;password) |  [optional]
@@ -44,6 +47,7 @@ Name | Type | Description | Notes
 **secureAccessHost** | **List&lt;String&gt;** | Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers) |  [optional]
 **secureAccessRdpDomain** | **String** | Required when the Dynamic Secret is used for a domain user (relevant only for RDP Dynamic-Secret) |  [optional]
 **secureAccessRdpUser** | **String** | Override the RDP Domain username (relevant only for rdp) |  [optional]
+**secureAccessUrl** | **String** | Destination URL to inject secrets |  [optional]
 **secureAccessWeb** | **Boolean** | Enable Web Secure Remote Access |  [optional]
 **secureAccessWebBrowsing** | **Boolean** | Secure browser via Akeyless Web Access Bastion (relevant only for aws or azure) |  [optional]
 **secureAccessWebProxy** | **Boolean** | Web-Proxy via Akeyless Web Access Bastion (relevant only for aws or azure) |  [optional]