akeyless 4.2.3 → 4.2.5

data/lib/akeyless/models/connect.rb

@@ -16,9 +16,6 @@ require 'time'
 module Akeyless
   # Connect is a command that performs secure remote access
   class Connect
-    # todo - enable when gw-sra unification is done The Gateway URL (configuration management) address, e.g. http://localhost:8000
-    attr_accessor :bastion_gateway_url
-
     attr_accessor :helper
 
     # used to override .akeyless-connect.rc in tests
@@ -39,6 +36,9 @@ module Akeyless
     # The Akeyless certificate issuer name
     attr_accessor :cert_issuer_name
 
+    # The Gateway URL (configuration management) address, e.g. http://localhost:8000
+    attr_accessor :gateway_url
+
     # The file from which the identity (private key) for public key authentication is read
     attr_accessor :identity_file
 
@@ -77,7 +77,6 @@ module Akeyless
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
-        :'bastion_gateway_url' => :'BastionGatewayUrl',
         :'helper' => :'Helper',
         :'rc_file_override' => :'RcFileOverride',
         :'bastion_ctrl_path' => :'bastion-ctrl-path',
@@ -85,6 +84,7 @@ module Akeyless
         :'bastion_ctrl_proto' => :'bastion-ctrl-proto',
         :'bastion_ctrl_subdomain' => :'bastion-ctrl-subdomain',
         :'cert_issuer_name' => :'cert-issuer-name',
+        :'gateway_url' => :'gateway-url',
         :'identity_file' => :'identity-file',
         :'json' => :'json',
         :'justification' => :'justification',
@@ -108,7 +108,6 @@ module Akeyless
     # Attribute type mapping.
     def self.openapi_types
       {
-        :'bastion_gateway_url' => :'String',
         :'helper' => :'Object',
         :'rc_file_override' => :'String',
         :'bastion_ctrl_path' => :'String',
@@ -116,6 +115,7 @@ module Akeyless
         :'bastion_ctrl_proto' => :'String',
         :'bastion_ctrl_subdomain' => :'String',
         :'cert_issuer_name' => :'String',
+        :'gateway_url' => :'String',
         :'identity_file' => :'String',
         :'json' => :'Boolean',
         :'justification' => :'String',
@@ -152,10 +152,6 @@ module Akeyless
         h[k.to_sym] = v
       }
 
-      if attributes.key?(:'bastion_gateway_url')
-        self.bastion_gateway_url = attributes[:'bastion_gateway_url']
-      end
-
       if attributes.key?(:'helper')
         self.helper = attributes[:'helper']
       end
@@ -188,6 +184,10 @@ module Akeyless
         self.cert_issuer_name = attributes[:'cert_issuer_name']
       end
 
+      if attributes.key?(:'gateway_url')
+        self.gateway_url = attributes[:'gateway_url']
+      end
+
       if attributes.key?(:'identity_file')
         self.identity_file = attributes[:'identity_file']
       end
@@ -261,7 +261,6 @@ module Akeyless
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
-          bastion_gateway_url == o.bastion_gateway_url &&
           helper == o.helper &&
           rc_file_override == o.rc_file_override &&
           bastion_ctrl_path == o.bastion_ctrl_path &&
@@ -269,6 +268,7 @@ module Akeyless
           bastion_ctrl_proto == o.bastion_ctrl_proto &&
           bastion_ctrl_subdomain == o.bastion_ctrl_subdomain &&
           cert_issuer_name == o.cert_issuer_name &&
+          gateway_url == o.gateway_url &&
           identity_file == o.identity_file &&
           json == o.json &&
           justification == o.justification &&
@@ -292,7 +292,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [bastion_gateway_url, helper, rc_file_override, bastion_ctrl_path, bastion_ctrl_port, bastion_ctrl_proto, bastion_ctrl_subdomain, cert_issuer_name, identity_file, json, justification, name, ssh_command, ssh_extra_args, ssh_legacy_signing_alg, target, token, uid_token, use_ssh_agent, via_bastion].hash
+      [helper, rc_file_override, bastion_ctrl_path, bastion_ctrl_port, bastion_ctrl_proto, bastion_ctrl_subdomain, cert_issuer_name, gateway_url, identity_file, json, justification, name, ssh_command, ssh_extra_args, ssh_legacy_signing_alg, target, token, uid_token, use_ssh_agent, via_bastion].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/create_classic_key.rb

@@ -19,6 +19,9 @@ module Akeyless
     # Classic Key type; options: [AES128GCM, AES256GCM, AES128SIV, AES256SIV, RSA1024, RSA2048, RSA3072, RSA4096, EC256, EC384, GPG]
     attr_accessor :alg
 
+    # Whether to automatically rotate every rotation_interval days, or disable existing automatic rotation [true/false]
+    attr_accessor :auto_rotate
+
     # Certificate in a PEM format.
     attr_accessor :cert_file_data
 
@@ -54,6 +57,9 @@ module Akeyless
     # Description of the object
     attr_accessor :description
 
+    # How many days before the expiration of the certificate would you like to be notified.
+    attr_accessor :expiration_event_in
+
     # Whether to generate a self signed certificate with the key. If set, --certificate-ttl must be provided.
     attr_accessor :generate_self_signed_certificate
 
@@ -75,6 +81,12 @@ module Akeyless
     # The name of a key that used to encrypt the secret value (if empty, the account default protectionKey key will be used)
     attr_accessor :protection_key_name
 
+    # How many days before the rotation of the item would you like to be notified
+    attr_accessor :rotation_event_in
+
+    # The number of days to wait between every automatic rotation (1-365)
+    attr_accessor :rotation_interval
+
     # Add tags attached to this object
     attr_accessor :tags
 
@@ -88,6 +100,7 @@ module Akeyless
     def self.attribute_map
       {
         :'alg' => :'alg',
+        :'auto_rotate' => :'auto-rotate',
         :'cert_file_data' => :'cert-file-data',
         :'certificate_common_name' => :'certificate-common-name',
         :'certificate_country' => :'certificate-country',
@@ -100,6 +113,7 @@ module Akeyless
         :'conf_file_data' => :'conf-file-data',
         :'delete_protection' => :'delete_protection',
         :'description' => :'description',
+        :'expiration_event_in' => :'expiration-event-in',
         :'generate_self_signed_certificate' => :'generate-self-signed-certificate',
         :'gpg_alg' => :'gpg-alg',
         :'json' => :'json',
@@ -107,6 +121,8 @@ module Akeyless
         :'metadata' => :'metadata',
         :'name' => :'name',
         :'protection_key_name' => :'protection-key-name',
+        :'rotation_event_in' => :'rotation-event-in',
+        :'rotation_interval' => :'rotation-interval',
         :'tags' => :'tags',
         :'token' => :'token',
         :'uid_token' => :'uid-token'
@@ -122,6 +138,7 @@ module Akeyless
     def self.openapi_types
       {
         :'alg' => :'String',
+        :'auto_rotate' => :'String',
         :'cert_file_data' => :'String',
         :'certificate_common_name' => :'String',
         :'certificate_country' => :'String',
@@ -134,6 +151,7 @@ module Akeyless
         :'conf_file_data' => :'String',
         :'delete_protection' => :'String',
         :'description' => :'String',
+        :'expiration_event_in' => :'Array<String>',
         :'generate_self_signed_certificate' => :'Boolean',
         :'gpg_alg' => :'String',
         :'json' => :'Boolean',
@@ -141,6 +159,8 @@ module Akeyless
         :'metadata' => :'String',
         :'name' => :'String',
         :'protection_key_name' => :'String',
+        :'rotation_event_in' => :'Array<String>',
+        :'rotation_interval' => :'String',
         :'tags' => :'Array<String>',
         :'token' => :'String',
         :'uid_token' => :'String'
@@ -174,6 +194,10 @@ module Akeyless
         self.alg = nil
       end
 
+      if attributes.key?(:'auto_rotate')
+        self.auto_rotate = attributes[:'auto_rotate']
+      end
+
       if attributes.key?(:'cert_file_data')
         self.cert_file_data = attributes[:'cert_file_data']
       end
@@ -222,6 +246,12 @@ module Akeyless
         self.description = attributes[:'description']
       end
 
+      if attributes.key?(:'expiration_event_in')
+        if (value = attributes[:'expiration_event_in']).is_a?(Array)
+          self.expiration_event_in = value
+        end
+      end
+
       if attributes.key?(:'generate_self_signed_certificate')
         self.generate_self_signed_certificate = attributes[:'generate_self_signed_certificate']
       end
@@ -254,6 +284,16 @@ module Akeyless
         self.protection_key_name = attributes[:'protection_key_name']
       end
 
+      if attributes.key?(:'rotation_event_in')
+        if (value = attributes[:'rotation_event_in']).is_a?(Array)
+          self.rotation_event_in = value
+        end
+      end
+
+      if attributes.key?(:'rotation_interval')
+        self.rotation_interval = attributes[:'rotation_interval']
+      end
+
       if attributes.key?(:'tags')
         if (value = attributes[:'tags']).is_a?(Array)
           self.tags = value
@@ -300,6 +340,7 @@ module Akeyless
       return true if self.equal?(o)
       self.class == o.class &&
           alg == o.alg &&
+          auto_rotate == o.auto_rotate &&
           cert_file_data == o.cert_file_data &&
           certificate_common_name == o.certificate_common_name &&
           certificate_country == o.certificate_country &&
@@ -312,6 +353,7 @@ module Akeyless
           conf_file_data == o.conf_file_data &&
           delete_protection == o.delete_protection &&
           description == o.description &&
+          expiration_event_in == o.expiration_event_in &&
           generate_self_signed_certificate == o.generate_self_signed_certificate &&
           gpg_alg == o.gpg_alg &&
           json == o.json &&
@@ -319,6 +361,8 @@ module Akeyless
           metadata == o.metadata &&
           name == o.name &&
           protection_key_name == o.protection_key_name &&
+          rotation_event_in == o.rotation_event_in &&
+          rotation_interval == o.rotation_interval &&
           tags == o.tags &&
           token == o.token &&
           uid_token == o.uid_token
@@ -333,7 +377,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [alg, cert_file_data, certificate_common_name, certificate_country, certificate_digest_algo, certificate_format, certificate_locality, certificate_organization, certificate_province, certificate_ttl, conf_file_data, delete_protection, description, generate_self_signed_certificate, gpg_alg, json, key_data, metadata, name, protection_key_name, tags, token, uid_token].hash
+      [alg, auto_rotate, cert_file_data, certificate_common_name, certificate_country, certificate_digest_algo, certificate_format, certificate_locality, certificate_organization, certificate_province, certificate_ttl, conf_file_data, delete_protection, description, expiration_event_in, generate_self_signed_certificate, gpg_alg, json, key_data, metadata, name, protection_key_name, rotation_event_in, rotation_interval, tags, token, uid_token].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/create_dfc_key.rb

@@ -18,6 +18,9 @@ module Akeyless
     # DFCKey type; options: [AES128GCM, AES256GCM, AES128SIV, AES256SIV, AES128CBC, AES256CBC, RSA1024, RSA2048, RSA3072, RSA4096]
     attr_accessor :alg
 
+    # Whether to automatically rotate every rotation_interval days, or disable existing automatic rotation [true/false]
+    attr_accessor :auto_rotate
+
     # Common name for the generated certificate. Relevant only for generate-self-signed-certificate.
     attr_accessor :certificate_common_name
 
@@ -53,6 +56,9 @@ module Akeyless
     # Description of the object
     attr_accessor :description
 
+    # How many days before the expiration of the certificate would you like to be notified.
+    attr_accessor :expiration_event_in
+
     # Whether to generate a self signed certificate with the key. If set, --certificate-ttl must be provided.
     attr_accessor :generate_self_signed_certificate
 
@@ -65,6 +71,12 @@ module Akeyless
     # DFCKey name
     attr_accessor :name
 
+    # How many days before the rotation of the item would you like to be notified
+    attr_accessor :rotation_event_in
+
+    # The number of days to wait between every automatic rotation (7-365)
+    attr_accessor :rotation_interval
+
     # The number of fragments that the item will be split into (not includes customer fragment)
     attr_accessor :split_level
 
@@ -81,6 +93,7 @@ module Akeyless
     def self.attribute_map
       {
         :'alg' => :'alg',
+        :'auto_rotate' => :'auto-rotate',
         :'certificate_common_name' => :'certificate-common-name',
         :'certificate_country' => :'certificate-country',
         :'certificate_digest_algo' => :'certificate-digest-algo',
@@ -93,10 +106,13 @@ module Akeyless
         :'customer_frg_id' => :'customer-frg-id',
         :'delete_protection' => :'delete_protection',
         :'description' => :'description',
+        :'expiration_event_in' => :'expiration-event-in',
         :'generate_self_signed_certificate' => :'generate-self-signed-certificate',
         :'json' => :'json',
         :'metadata' => :'metadata',
         :'name' => :'name',
+        :'rotation_event_in' => :'rotation-event-in',
+        :'rotation_interval' => :'rotation-interval',
         :'split_level' => :'split-level',
         :'tag' => :'tag',
         :'token' => :'token',
@@ -113,6 +129,7 @@ module Akeyless
     def self.openapi_types
       {
         :'alg' => :'String',
+        :'auto_rotate' => :'String',
         :'certificate_common_name' => :'String',
         :'certificate_country' => :'String',
         :'certificate_digest_algo' => :'String',
@@ -125,10 +142,13 @@ module Akeyless
         :'customer_frg_id' => :'String',
         :'delete_protection' => :'String',
         :'description' => :'String',
+        :'expiration_event_in' => :'Array<String>',
         :'generate_self_signed_certificate' => :'Boolean',
         :'json' => :'Boolean',
         :'metadata' => :'String',
         :'name' => :'String',
+        :'rotation_event_in' => :'Array<String>',
+        :'rotation_interval' => :'String',
         :'split_level' => :'Integer',
         :'tag' => :'Array<String>',
         :'token' => :'String',
@@ -163,6 +183,10 @@ module Akeyless
         self.alg = nil
       end
 
+      if attributes.key?(:'auto_rotate')
+        self.auto_rotate = attributes[:'auto_rotate']
+      end
+
       if attributes.key?(:'certificate_common_name')
         self.certificate_common_name = attributes[:'certificate_common_name']
       end
@@ -211,6 +235,12 @@ module Akeyless
         self.description = attributes[:'description']
       end
 
+      if attributes.key?(:'expiration_event_in')
+        if (value = attributes[:'expiration_event_in']).is_a?(Array)
+          self.expiration_event_in = value
+        end
+      end
+
       if attributes.key?(:'generate_self_signed_certificate')
         self.generate_self_signed_certificate = attributes[:'generate_self_signed_certificate']
       end
@@ -231,6 +261,16 @@ module Akeyless
         self.name = nil
       end
 
+      if attributes.key?(:'rotation_event_in')
+        if (value = attributes[:'rotation_event_in']).is_a?(Array)
+          self.rotation_event_in = value
+        end
+      end
+
+      if attributes.key?(:'rotation_interval')
+        self.rotation_interval = attributes[:'rotation_interval']
+      end
+
       if attributes.key?(:'split_level')
         self.split_level = attributes[:'split_level']
       else
@@ -283,6 +323,7 @@ module Akeyless
       return true if self.equal?(o)
       self.class == o.class &&
           alg == o.alg &&
+          auto_rotate == o.auto_rotate &&
           certificate_common_name == o.certificate_common_name &&
           certificate_country == o.certificate_country &&
           certificate_digest_algo == o.certificate_digest_algo &&
@@ -295,10 +336,13 @@ module Akeyless
           customer_frg_id == o.customer_frg_id &&
           delete_protection == o.delete_protection &&
           description == o.description &&
+          expiration_event_in == o.expiration_event_in &&
           generate_self_signed_certificate == o.generate_self_signed_certificate &&
           json == o.json &&
           metadata == o.metadata &&
           name == o.name &&
+          rotation_event_in == o.rotation_event_in &&
+          rotation_interval == o.rotation_interval &&
           split_level == o.split_level &&
           tag == o.tag &&
           token == o.token &&
@@ -314,7 +358,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [alg, certificate_common_name, certificate_country, certificate_digest_algo, certificate_format, certificate_locality, certificate_organization, certificate_province, certificate_ttl, conf_file_data, customer_frg_id, delete_protection, description, generate_self_signed_certificate, json, metadata, name, split_level, tag, token, uid_token].hash
+      [alg, auto_rotate, certificate_common_name, certificate_country, certificate_digest_algo, certificate_format, certificate_locality, certificate_organization, certificate_province, certificate_ttl, conf_file_data, customer_frg_id, delete_protection, description, expiration_event_in, generate_self_signed_certificate, json, metadata, name, rotation_event_in, rotation_interval, split_level, tag, token, uid_token].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/create_pki_cert_issuer.rb

@@ -51,6 +51,9 @@ module Akeyless
     # Set this to allow the cert issuer will expose a public CRL endpoint
     attr_accessor :create_public_crl
 
+    # Mark key usage as critical [true/false]
+    attr_accessor :critical_key_usage
+
     # Protection from accidental deletion of this object [true/false]
     attr_accessor :delete_protection
 
@@ -60,10 +63,13 @@ module Akeyless
     # A path in which to save generated certificates
     attr_accessor :destination_path
 
+    # If set, the cert issuer will support the acme protocol
+    attr_accessor :enable_acme
+
     # How many days before the expiration of the certificate would you like to be notified.
     attr_accessor :expiration_event_in
 
-    # The GW cluster URL to issue the certificate from, required in Public CA mode or to allow CRLs on private CA
+    # The GW cluster URL to issue the certificate from. Required in Public CA mode, to allow CRLs on private CA, or to enable ACME
     attr_accessor :gw_cluster_url
 
     # If set, the basic constraints extension will be added to certificate
@@ -141,9 +147,11 @@ module Akeyless
         :'country' => :'country',
         :'create_private_crl' => :'create-private-crl',
         :'create_public_crl' => :'create-public-crl',
+        :'critical_key_usage' => :'critical-key-usage',
         :'delete_protection' => :'delete_protection',
         :'description' => :'description',
         :'destination_path' => :'destination-path',
+        :'enable_acme' => :'enable-acme',
         :'expiration_event_in' => :'expiration-event-in',
         :'gw_cluster_url' => :'gw-cluster-url',
         :'is_ca' => :'is-ca',
@@ -189,9 +197,11 @@ module Akeyless
         :'country' => :'String',
         :'create_private_crl' => :'Boolean',
         :'create_public_crl' => :'Boolean',
+        :'critical_key_usage' => :'String',
         :'delete_protection' => :'String',
         :'description' => :'String',
         :'destination_path' => :'String',
+        :'enable_acme' => :'Boolean',
         :'expiration_event_in' => :'Array<String>',
         :'gw_cluster_url' => :'String',
         :'is_ca' => :'Boolean',
@@ -286,6 +296,12 @@ module Akeyless
         self.create_public_crl = attributes[:'create_public_crl']
       end
 
+      if attributes.key?(:'critical_key_usage')
+        self.critical_key_usage = attributes[:'critical_key_usage']
+      else
+        self.critical_key_usage = 'true'
+      end
+
       if attributes.key?(:'delete_protection')
         self.delete_protection = attributes[:'delete_protection']
       end
@@ -298,6 +314,10 @@ module Akeyless
         self.destination_path = attributes[:'destination_path']
       end
 
+      if attributes.key?(:'enable_acme')
+        self.enable_acme = attributes[:'enable_acme']
+      end
+
       if attributes.key?(:'expiration_event_in')
         if (value = attributes[:'expiration_event_in']).is_a?(Array)
           self.expiration_event_in = value
@@ -448,9 +468,11 @@ module Akeyless
           country == o.country &&
           create_private_crl == o.create_private_crl &&
           create_public_crl == o.create_public_crl &&
+          critical_key_usage == o.critical_key_usage &&
           delete_protection == o.delete_protection &&
           description == o.description &&
           destination_path == o.destination_path &&
+          enable_acme == o.enable_acme &&
           expiration_event_in == o.expiration_event_in &&
           gw_cluster_url == o.gw_cluster_url &&
           is_ca == o.is_ca &&
@@ -484,7 +506,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [allow_any_name, allow_copy_ext_from_csr, allow_subdomains, allowed_domains, allowed_extra_extensions, allowed_uri_sans, ca_target, client_flag, code_signing_flag, country, create_private_crl, create_public_crl, delete_protection, description, destination_path, expiration_event_in, gw_cluster_url, is_ca, json, key_usage, locality, metadata, name, not_enforce_hostnames, not_require_cn, organizational_units, organizations, postal_code, protect_certificates, province, server_flag, signer_key_name, street_address, tag, token, ttl, uid_token].hash
+      [allow_any_name, allow_copy_ext_from_csr, allow_subdomains, allowed_domains, allowed_extra_extensions, allowed_uri_sans, ca_target, client_flag, code_signing_flag, country, create_private_crl, create_public_crl, critical_key_usage, delete_protection, description, destination_path, enable_acme, expiration_event_in, gw_cluster_url, is_ca, json, key_usage, locality, metadata, name, not_enforce_hostnames, not_require_cn, organizational_units, organizations, postal_code, protect_certificates, province, server_flag, signer_key_name, street_address, tag, token, ttl, uid_token].hash
     end
 
     # Builds the object from hash