API Reference
Start typing to search…

/create-ssh-cert-issuer

post
https://api.akeyless.io/create-ssh-cert-issuer
Body Params
string
string
required
Defaults to -

Users allowed to fetch the certificate, e.g root,ubuntu

string

Protection from accidental deletion of this object [true/false]

string

Description of the object

extensions
object

Signed certificates with extensions, e.g permit-port-forwarding=""

string
Defaults to false

Externally provided username [true/false]

string

For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)

string

Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret

item-custom-fields
object

Additional custom fields to associate with the item

boolean
Defaults to false

Set output format to JSON

string

Deprecated - use description

string
required

SSH certificate issuer name

string

Signed certificates with principal, e.g example_role1,example_role2

string

Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900

string

Deprecated. use secure-access-api

string

Deprecated. use secure-access-ssh

string

Enable/Disable secure remote access [true/false]

boolean

Enable this flag to enforce connections only to the hosts listed in --secure-access-host

string
secure-access-host
array of strings

Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)

secure-access-host
string

Bastion's SSH server. E.g. my.sra-server:22

string

SSH username to connect to target server, must be in 'Allowed Users' list

boolean

Deprecated. Use secure-access-use-internal-ssh-access

boolean

Use internal SSH Access

string
required

A key to sign the certificate with

tag
array of strings

List of the tags attached to this key

tag
target
array of strings

A list of linked targets to be associated, Relevant only for Secure Remote Access for ssh cert issuer, ldap rotated secret and ldap dynamic secret, To specify multiple targets use argument multiple times

target
string

Authentication token (see /auth and /configure)

int64
required

The requested Time To Live for the certificate, in seconds

string

The universal identity token, Required only for universal_identity authentication

Responses

Updated 7 months ago

Language
Response 
Click Try It! to start a request and see the response here! Or choose an example:
application/json
Updated 7 months ago 



    
    
    Footer Section