/update-ssh-cert-issuerAsk AIpost https://api.akeyless.io/update-ssh-cert-issuerRecent RequestsLog in to see full request historyTimeStatusUser Agent Retrieving recent requests…LoadingLoading…Body ParamsProviderTypestringadd-tagarray of stringsList of the new tags that will be attached to this itemadd-tagADD stringallowed-usersstringrequiredDefaults to -Users allowed to fetch the certificate, e.g root,ubuntudelete_protectionstringProtection from accidental deletion of this object [true/false]descriptionstringDescription of the objectextensionsobjectSigned certificates with extensions, e.g permit-port-forwarding=""extensions objectexternal-usernamestringDefaults to falseExternally provided username [true/false]fixed-user-claim-keynamestringFor externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)host-providerstringHost provider type [explicit/target], Default Host provider is explicit, Relevant only for Secure Remote Access of ssh cert issuer, ldap rotated secret and ldap dynamic secretitem-custom-fieldsobjectAdditional custom fields to associate with the itemitem-custom-fields objectjsonbooleanDefaults to falseSet output format to JSONtruefalsemetadatastringDeprecated - use descriptionnamestringrequiredSSH certificate issuer namenew-namestringNew item nameprincipalsstringSigned certificates with principal, e.g example_role1,example_role2rm-tagarray of stringsList of the existent tags that will be removed from this itemrm-tagADD stringsecure-access-apistringSecure Access SSH control API endpoint. E.g. https://my.sra-server:9900secure-access-bastion-apistringDeprecated. use secure-access-apisecure-access-bastion-sshstringDeprecated. use secure-access-sshsecure-access-enablestringEnable/Disable secure remote access [true/false]secure-access-enforce-hosts-restrictionbooleanEnable this flag to enforce connections only to the hosts listed in --secure-access-hosttruefalsesecure-access-gatewaystringsecure-access-hostarray of stringsTarget servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)secure-access-hostADD stringsecure-access-sshstringBastion's SSH server. E.g. my.sra-server:22secure-access-ssh-creds-userstringSSH username to connect to target server, must be in 'Allowed Users' listsecure-access-use-internal-bastionbooleanDeprecated. Use secure-access-use-internal-ssh-accesstruefalsesecure-access-use-internal-ssh-accessbooleanUse internal SSH Accesstruefalsesigner-key-namestringrequiredA key to sign the certificate withtokenstringAuthentication token (see /auth and /configure)ttlint64requiredThe requested Time To Live for the certificate, in secondsuid-tokenstringThe universal identity token, Required only for universal_identity authenticationResponses 200updateSSHCertIssuerResponse wraps response body. defaulterrorResponse wraps any error to return it as a JSON object with one "error" field.Updated 7 months ago