/update-ssh-cert-issuer

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
add-tag
array of strings

List of the new tags that will be attached to this item

add-tag
string
required
Defaults to -

Users allowed to fetch the certificate, e.g root,ubuntu

string

Protection from accidental deletion of this object [true/false]

string

Description of the object

extensions
object

Signed certificates with extensions, e.g permit-port-forwarding=""

string
Defaults to false

Externally provided username [true/false]

string

For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)

string

Host provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secret

item-custom-fields
object

Additional custom fields to associate with the item

boolean
Defaults to false

Set output format to JSON

string

Deprecated - use description

string
required

SSH certificate issuer name

string

New item name

string

Signed certificates with principal, e.g example_role1,example_role2

rm-tag
array of strings

List of the existent tags that will be removed from this item

rm-tag
string

Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900

string

Deprecated. use secure-access-api

string

Deprecated. use secure-access-ssh

string

Enable/Disable secure remote access [true/false]

boolean

Enable this flag to enforce connections only to the hosts listed in --secure-access-host

string
secure-access-host
array of strings

Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)

secure-access-host
string

Bastion's SSH server. E.g. my.sra-server:22

string

SSH username to connect to target server, must be in 'Allowed Users' list

boolean

Deprecated. Use secure-access-use-internal-ssh-access

boolean

Use internal SSH Access

string
required

A key to sign the certificate with

string

Authentication token (see /auth and /configure)

int64
required

The requested Time To Live for the certificate, in seconds

string

The universal identity token, Required only for universal_identity authentication

Responses

Language
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json
Footer Section