| accessExpires |
Number |
Access expiration date in Unix timestamp (select 0 for access without expiry date) |
[optional] [default to 0] |
| allowedClientType |
[String] |
limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension] |
[optional] |
| audience |
String |
The audience in the Kubernetes JWT that the access is restricted to |
[optional] |
| auditLogsClaims |
[String] |
Subclaims to include in audit logs, e.g "--audit-logs-claims email --audit-logs-claims username" |
[optional] |
| boundIps |
[String] |
A CIDR whitelist with the IPs that the access is restricted to |
[optional] |
| boundNamespaces |
[String] |
A list of namespaces that the access is restricted to |
[optional] |
| boundPodNames |
[String] |
A list of pod names that the access is restricted to |
[optional] |
| boundSaNames |
[String] |
A list of service account names that the access is restricted to |
[optional] |
| deleteProtection |
String |
Protection from accidental deletion of this object [true/false] |
[optional] |
| description |
String |
Auth Method description |
[optional] |
| expirationEventIn |
[String] |
How many days before the expiration of the auth method would you like to be notified. |
[optional] |
| forceSubClaims |
Boolean |
if true: enforce role-association must include sub claims |
[optional] |
| genKey |
String |
Automatically generate key-pair for K8S configuration. If set to false, a public key needs to be provided [true/false] |
[optional] [default to 'true'] |
| gwBoundIps |
[String] |
A CIDR whitelist with the GW IPs that the access is restricted to |
[optional] |
| json |
Boolean |
Set output format to JSON |
[optional] [default to false] |
| jwtTtl |
Number |
Jwt TTL |
[optional] [default to 0] |
| name |
String |
Auth Method name |
|
| productType |
[String] |
Choose the relevant product type for the auth method [sm, sra, pm, dp, ca] |
[optional] |
| publicKey |
String |
Base64-encoded or PEM formatted public key data for K8S authentication method is required [RSA2048] |
[optional] |
| token |
String |
Authentication token (see `/auth` and `/configure`) |
[optional] |
| uidToken |
String |
The universal identity token, Required only for universal_identity authentication |
[optional] |