Name | Type | Description | Notes |
---|---|---|---|
accessExpires | Number | Access expiration date in Unix timestamp (select 0 for access without expiry date) | [optional] [default to 0] |
audience | String | The audience in the Kubernetes JWT that the access is restricted to | [optional] |
auditLogsClaims | [String] | Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username" | [optional] |
boundIps | [String] | A CIDR whitelist with the IPs that the access is restricted to | [optional] |
boundNamespaces | [String] | A list of namespaces that the access is restricted to | [optional] |
boundPodNames | [String] | A list of pod names that the access is restricted to | [optional] |
boundSaNames | [String] | A list of service account names that the access is restricted to | [optional] |
deleteProtection | String | Protection from accidental deletion of this object [true/false] | [optional] |
description | String | Auth Method description | [optional] |
forceSubClaims | Boolean | if true: enforce role-association must include sub claims | [optional] |
genKey | String | Automatically generate key-pair for K8S configuration. If set to false, a public key needs to be provided [true/false] | [optional] [default to 'true'] |
gwBoundIps | [String] | A CIDR whitelist with the GW IPs that the access is restricted to | [optional] |
json | Boolean | Set output format to JSON | [optional] [default to false] |
jwtTtl | Number | Jwt TTL | [optional] [default to 0] |
name | String | Auth Method name | |
productType | [String] | Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] | [optional] |
publicKey | String | Base64-encoded or PEM formatted public key data for K8S authentication method is required [RSA2048] | [optional] |
token | String | Authentication token (see `/auth` and `/configure`) | [optional] |
uidToken | String | The universal identity token, Required only for universal_identity authentication | [optional] |