akeyless 5.0.24 → 5.0.26

data/lib/akeyless/models/create_role.rb

@@ -45,6 +45,9 @@ module Akeyless
     # Allow this role to view gw analytics. Currently only 'none', 'scoped', 'all' values are supported, allowing associated auth methods to view reports produced by the same auth methods.
     attr_accessor :gw_analytics_access
 
+    # Allow this role to access Identity & Secrets Intelligence. Currently only 'none', 'scoped' and 'all' values are supported.
+    attr_accessor :isi_access
+
     # Set output format to JSON
     attr_accessor :json
 
@@ -79,6 +82,7 @@ module Akeyless
         :'event_forwarders_access' => :'event-forwarders-access',
         :'event_forwarders_name' => :'event-forwarders-name',
         :'gw_analytics_access' => :'gw-analytics-access',
+        :'isi_access' => :'isi-access',
         :'json' => :'json',
         :'name' => :'name',
         :'reverse_rbac_access' => :'reverse-rbac-access',
@@ -107,6 +111,7 @@ module Akeyless
         :'event_forwarders_access' => :'String',
         :'event_forwarders_name' => :'Array<String>',
         :'gw_analytics_access' => :'String',
+        :'isi_access' => :'String',
         :'json' => :'Boolean',
         :'name' => :'String',
         :'reverse_rbac_access' => :'String',
@@ -180,6 +185,10 @@ module Akeyless
         self.gw_analytics_access = attributes[:'gw_analytics_access']
       end
 
+      if attributes.key?(:'isi_access')
+        self.isi_access = attributes[:'isi_access']
+      end
+
       if attributes.key?(:'json')
         self.json = attributes[:'json']
       else
@@ -248,6 +257,7 @@ module Akeyless
           event_forwarders_access == o.event_forwarders_access &&
           event_forwarders_name == o.event_forwarders_name &&
           gw_analytics_access == o.gw_analytics_access &&
+          isi_access == o.isi_access &&
           json == o.json &&
           name == o.name &&
           reverse_rbac_access == o.reverse_rbac_access &&
@@ -266,7 +276,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [analytics_access, ara_reports_access, audit_access, comment, delete_protection, description, event_center_access, event_forwarders_access, event_forwarders_name, gw_analytics_access, json, name, reverse_rbac_access, sra_reports_access, token, uid_token, usage_reports_access].hash
+      [analytics_access, ara_reports_access, audit_access, comment, delete_protection, description, event_center_access, event_forwarders_access, event_forwarders_name, gw_analytics_access, isi_access, json, name, reverse_rbac_access, sra_reports_access, token, uid_token, usage_reports_access].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/create_secret.rb

@@ -36,6 +36,9 @@ module Akeyless
     # For Password Management use, reflect the website context
     attr_accessor :inject_url
 
+    # Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input)
+    attr_accessor :input_rule
+
     # Additional custom fields to associate with the item
     attr_accessor :item_custom_fields
 
@@ -57,6 +60,9 @@ module Akeyless
     # Secret name
     attr_accessor :name
 
+    # Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
+    attr_accessor :output_rule
+
     # For Password Management use, additional fields
     attr_accessor :password
 
@@ -123,6 +129,7 @@ module Akeyless
         :'description' => :'description',
         :'format' => :'format',
         :'inject_url' => :'inject-url',
+        :'input_rule' => :'input-rule',
         :'item_custom_fields' => :'item-custom-fields',
         :'json' => :'json',
         :'lock_during_sra_session' => :'lock-during-sra-session',
@@ -130,6 +137,7 @@ module Akeyless
         :'metadata' => :'metadata',
         :'multiline_value' => :'multiline_value',
         :'name' => :'name',
+        :'output_rule' => :'output-rule',
         :'password' => :'password',
         :'protection_key' => :'protection_key',
         :'secure_access_bastion_issuer' => :'secure-access-bastion-issuer',
@@ -167,6 +175,7 @@ module Akeyless
         :'description' => :'String',
         :'format' => :'String',
         :'inject_url' => :'Array<String>',
+        :'input_rule' => :'Array<String>',
         :'item_custom_fields' => :'Hash<String, String>',
         :'json' => :'Boolean',
         :'lock_during_sra_session' => :'String',
@@ -174,6 +183,7 @@ module Akeyless
         :'metadata' => :'String',
         :'multiline_value' => :'Boolean',
         :'name' => :'String',
+        :'output_rule' => :'Array<String>',
         :'password' => :'String',
         :'protection_key' => :'String',
         :'secure_access_bastion_issuer' => :'String',
@@ -253,6 +263,12 @@ module Akeyless
         end
       end
 
+      if attributes.key?(:'input_rule')
+        if (value = attributes[:'input_rule']).is_a?(Array)
+          self.input_rule = value
+        end
+      end
+
       if attributes.key?(:'item_custom_fields')
         if (value = attributes[:'item_custom_fields']).is_a?(Hash)
           self.item_custom_fields = value
@@ -287,6 +303,12 @@ module Akeyless
         self.name = nil
       end
 
+      if attributes.key?(:'output_rule')
+        if (value = attributes[:'output_rule']).is_a?(Array)
+          self.output_rule = value
+        end
+      end
+
       if attributes.key?(:'password')
         self.password = attributes[:'password']
       end
@@ -413,6 +435,7 @@ module Akeyless
           description == o.description &&
           format == o.format &&
           inject_url == o.inject_url &&
+          input_rule == o.input_rule &&
           item_custom_fields == o.item_custom_fields &&
           json == o.json &&
           lock_during_sra_session == o.lock_during_sra_session &&
@@ -420,6 +443,7 @@ module Akeyless
           metadata == o.metadata &&
           multiline_value == o.multiline_value &&
           name == o.name &&
+          output_rule == o.output_rule &&
           password == o.password &&
           protection_key == o.protection_key &&
           secure_access_bastion_issuer == o.secure_access_bastion_issuer &&
@@ -450,7 +474,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [accessibility, change_event, custom_field, delete_protection, description, format, inject_url, item_custom_fields, json, lock_during_sra_session, max_versions, metadata, multiline_value, name, password, protection_key, secure_access_bastion_issuer, secure_access_certificate_issuer, secure_access_enable, secure_access_gateway, secure_access_host, secure_access_rdp_user, secure_access_ssh_creds, secure_access_ssh_user, secure_access_url, secure_access_web_browsing, secure_access_web_proxy, tags, token, type, uid_token, username, value].hash
+      [accessibility, change_event, custom_field, delete_protection, description, format, inject_url, input_rule, item_custom_fields, json, lock_during_sra_session, max_versions, metadata, multiline_value, name, output_rule, password, protection_key, secure_access_bastion_issuer, secure_access_certificate_issuer, secure_access_enable, secure_access_gateway, secure_access_host, secure_access_rdp_user, secure_access_ssh_creds, secure_access_ssh_user, secure_access_url, secure_access_web_browsing, secure_access_web_proxy, tags, token, type, uid_token, username, value].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/db_target_details.rb

@@ -16,6 +16,15 @@ require 'time'
 module Akeyless
   # DbTargetDetails
   class DbTargetDetails
+    # (Optional) ClientCertificate defines the client certificate for mutual TLS. Must be base64 certificate loaded by UI using file loader field
+    attr_accessor :client_certificate
+
+    # (Optional) ClientKeyPassphrase defines the passphrase for the client private key
+    attr_accessor :client_key_passphrase
+
+    # (Optional) ClientPrivateKey defines the client private key for mutual TLS. Must be base64 private key loaded by UI using file loader field
+    attr_accessor :client_private_key
+
     attr_accessor :cloud_service_provider
 
     attr_accessor :cluster_mode
@@ -49,6 +58,9 @@ module Akeyless
 
     attr_accessor :db_user_name
 
+    # (Optional) EnableMTLS defines if mutual TLS will be used to connect to DB
+    attr_accessor :enable_mtls
+
     attr_accessor :oracle_wallet_details
 
     attr_accessor :sf_account
@@ -62,6 +74,9 @@ module Akeyless
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
+        :'client_certificate' => :'client_certificate',
+        :'client_key_passphrase' => :'client_key_passphrase',
+        :'client_private_key' => :'client_private_key',
         :'cloud_service_provider' => :'cloud_service_provider',
         :'cluster_mode' => :'cluster_mode',
         :'connection_type' => :'connection_type',
@@ -77,6 +92,7 @@ module Akeyless
         :'db_server_name' => :'db_server_name',
         :'db_tenant_id' => :'db_tenant_id',
         :'db_user_name' => :'db_user_name',
+        :'enable_mtls' => :'enable_mtls',
         :'oracle_wallet_details' => :'oracle_wallet_details',
         :'sf_account' => :'sf_account',
         :'ssl_connection_certificate' => :'ssl_connection_certificate',
@@ -92,6 +108,9 @@ module Akeyless
     # Attribute type mapping.
     def self.openapi_types
       {
+        :'client_certificate' => :'String',
+        :'client_key_passphrase' => :'String',
+        :'client_private_key' => :'String',
         :'cloud_service_provider' => :'String',
         :'cluster_mode' => :'Boolean',
         :'connection_type' => :'String',
@@ -107,6 +126,7 @@ module Akeyless
         :'db_server_name' => :'String',
         :'db_tenant_id' => :'String',
         :'db_user_name' => :'String',
+        :'enable_mtls' => :'Boolean',
         :'oracle_wallet_details' => :'WalletDetails',
         :'sf_account' => :'String',
         :'ssl_connection_certificate' => :'String',
@@ -135,6 +155,18 @@ module Akeyless
         h[k.to_sym] = v
       }
 
+      if attributes.key?(:'client_certificate')
+        self.client_certificate = attributes[:'client_certificate']
+      end
+
+      if attributes.key?(:'client_key_passphrase')
+        self.client_key_passphrase = attributes[:'client_key_passphrase']
+      end
+
+      if attributes.key?(:'client_private_key')
+        self.client_private_key = attributes[:'client_private_key']
+      end
+
       if attributes.key?(:'cloud_service_provider')
         self.cloud_service_provider = attributes[:'cloud_service_provider']
       end
@@ -195,6 +227,10 @@ module Akeyless
         self.db_user_name = attributes[:'db_user_name']
       end
 
+      if attributes.key?(:'enable_mtls')
+        self.enable_mtls = attributes[:'enable_mtls']
+      end
+
       if attributes.key?(:'oracle_wallet_details')
         self.oracle_wallet_details = attributes[:'oracle_wallet_details']
       end
@@ -232,6 +268,9 @@ module Akeyless
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          client_certificate == o.client_certificate &&
+          client_key_passphrase == o.client_key_passphrase &&
+          client_private_key == o.client_private_key &&
           cloud_service_provider == o.cloud_service_provider &&
           cluster_mode == o.cluster_mode &&
           connection_type == o.connection_type &&
@@ -247,6 +286,7 @@ module Akeyless
           db_server_name == o.db_server_name &&
           db_tenant_id == o.db_tenant_id &&
           db_user_name == o.db_user_name &&
+          enable_mtls == o.enable_mtls &&
           oracle_wallet_details == o.oracle_wallet_details &&
           sf_account == o.sf_account &&
           ssl_connection_certificate == o.ssl_connection_certificate &&
@@ -262,7 +302,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [cloud_service_provider, cluster_mode, connection_type, db_client_id, db_client_secret, db_host_name, db_name, db_port, db_private_key, db_private_key_passphrase, db_pwd, db_server_certificates, db_server_name, db_tenant_id, db_user_name, oracle_wallet_details, sf_account, ssl_connection_certificate, ssl_connection_mode].hash
+      [client_certificate, client_key_passphrase, client_private_key, cloud_service_provider, cluster_mode, connection_type, db_client_id, db_client_secret, db_host_name, db_name, db_port, db_private_key, db_private_key_passphrase, db_pwd, db_server_certificates, db_server_name, db_tenant_id, db_user_name, enable_mtls, oracle_wallet_details, sf_account, ssl_connection_certificate, ssl_connection_mode].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/digi_cert_target_details.rb

@@ -31,6 +31,9 @@ module Akeyless
 
     attr_accessor :dns_target_type
 
+    # Cloudflare zone identifier. Required when DNSTargetType is Cloudflare.
+    attr_accessor :dns_zone
+
     # External Account Binding HMAC key. Required until ACME account is bootstrapped on first issuance.
     attr_accessor :eab_hmac_key
 
@@ -61,6 +64,7 @@ module Akeyless
         :'digicert_directory_type' => :'digicert_directory_type',
         :'dns_target_name' => :'dns_target_name',
         :'dns_target_type' => :'dns_target_type',
+        :'dns_zone' => :'dns_zone',
         :'eab_hmac_key' => :'eab_hmac_key',
         :'eab_key_id' => :'eab_key_id',
         :'email' => :'email',
@@ -85,6 +89,7 @@ module Akeyless
         :'digicert_directory_type' => :'String',
         :'dns_target_name' => :'String',
         :'dns_target_type' => :'String',
+        :'dns_zone' => :'String',
         :'eab_hmac_key' => :'String',
         :'eab_key_id' => :'String',
         :'email' => :'String',
@@ -140,6 +145,10 @@ module Akeyless
         self.dns_target_type = attributes[:'dns_target_type']
       end
 
+      if attributes.key?(:'dns_zone')
+        self.dns_zone = attributes[:'dns_zone']
+      end
+
       if attributes.key?(:'eab_hmac_key')
         self.eab_hmac_key = attributes[:'eab_hmac_key']
       end
@@ -195,6 +204,7 @@ module Akeyless
           digicert_directory_type == o.digicert_directory_type &&
           dns_target_name == o.dns_target_name &&
           dns_target_type == o.dns_target_type &&
+          dns_zone == o.dns_zone &&
           eab_hmac_key == o.eab_hmac_key &&
           eab_key_id == o.eab_key_id &&
           email == o.email &&
@@ -213,7 +223,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [account_key_pem, account_url, challenge_type, digicert_directory_type, dns_target_name, dns_target_type, eab_hmac_key, eab_key_id, email, gcp_project, hosted_zone, resource_group, timeout].hash
+      [account_key_pem, account_url, challenge_type, digicert_directory_type, dns_target_name, dns_target_type, dns_zone, eab_hmac_key, eab_key_id, email, gcp_project, hosted_zone, resource_group, timeout].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/ds_producer_details.rb

@@ -125,6 +125,15 @@ module Akeyless
 
     attr_accessor :client_authentication_type
 
+    # (Optional) ClientCertificate defines the client certificate for mutual TLS. Must be base64 certificate loaded by UI using file loader field
+    attr_accessor :client_certificate
+
+    # (Optional) ClientKeyPassphrase defines the passphrase for the client private key
+    attr_accessor :client_key_passphrase
+
+    # (Optional) ClientPrivateKey defines the client private key for mutual TLS. Must be base64 private key loaded by UI using file loader field
+    attr_accessor :client_private_key
+
     attr_accessor :cloud_service_provider
 
     attr_accessor :cluster_mode
@@ -192,6 +201,9 @@ module Akeyless
 
     attr_accessor :enable_admin_rotation
 
+    # (Optional) EnableMTLS defines if mutual TLS will be used to connect to DB
+    attr_accessor :enable_mtls
+
     # relevant for PRIVATE_KEY_JWT client authentication type
     attr_accessor :enforce_replay_prevention
 
@@ -627,6 +639,9 @@ module Akeyless
         :'chef_server_username' => :'chef_server_username',
         :'chef_skip_ssl' => :'chef_skip_ssl',
         :'client_authentication_type' => :'client_authentication_type',
+        :'client_certificate' => :'client_certificate',
+        :'client_key_passphrase' => :'client_key_passphrase',
+        :'client_private_key' => :'client_private_key',
         :'cloud_service_provider' => :'cloud_service_provider',
         :'cluster_mode' => :'cluster_mode',
         :'connection_type' => :'connection_type',
@@ -659,6 +674,7 @@ module Akeyless
         :'eks_region' => :'eks_region',
         :'eks_secret_access_key' => :'eks_secret_access_key',
         :'enable_admin_rotation' => :'enable_admin_rotation',
+        :'enable_mtls' => :'enable_mtls',
         :'enforce_replay_prevention' => :'enforce_replay_prevention',
         :'expiration_date' => :'expiration_date',
         :'externally_provided_user' => :'externally_provided_user',
@@ -904,6 +920,9 @@ module Akeyless
         :'chef_server_username' => :'String',
         :'chef_skip_ssl' => :'Boolean',
         :'client_authentication_type' => :'String',
+        :'client_certificate' => :'String',
+        :'client_key_passphrase' => :'String',
+        :'client_private_key' => :'String',
         :'cloud_service_provider' => :'String',
         :'cluster_mode' => :'Boolean',
         :'connection_type' => :'String',
@@ -936,6 +955,7 @@ module Akeyless
         :'eks_region' => :'String',
         :'eks_secret_access_key' => :'String',
         :'enable_admin_rotation' => :'Boolean',
+        :'enable_mtls' => :'Boolean',
         :'enforce_replay_prevention' => :'Boolean',
         :'expiration_date' => :'Time',
         :'externally_provided_user' => :'String',
@@ -1361,6 +1381,18 @@ module Akeyless
         self.client_authentication_type = attributes[:'client_authentication_type']
       end
 
+      if attributes.key?(:'client_certificate')
+        self.client_certificate = attributes[:'client_certificate']
+      end
+
+      if attributes.key?(:'client_key_passphrase')
+        self.client_key_passphrase = attributes[:'client_key_passphrase']
+      end
+
+      if attributes.key?(:'client_private_key')
+        self.client_private_key = attributes[:'client_private_key']
+      end
+
       if attributes.key?(:'cloud_service_provider')
         self.cloud_service_provider = attributes[:'cloud_service_provider']
       end
@@ -1489,6 +1521,10 @@ module Akeyless
         self.enable_admin_rotation = attributes[:'enable_admin_rotation']
       end
 
+      if attributes.key?(:'enable_mtls')
+        self.enable_mtls = attributes[:'enable_mtls']
+      end
+
       if attributes.key?(:'enforce_replay_prevention')
         self.enforce_replay_prevention = attributes[:'enforce_replay_prevention']
       end
@@ -2309,6 +2345,9 @@ module Akeyless
           chef_server_username == o.chef_server_username &&
           chef_skip_ssl == o.chef_skip_ssl &&
           client_authentication_type == o.client_authentication_type &&
+          client_certificate == o.client_certificate &&
+          client_key_passphrase == o.client_key_passphrase &&
+          client_private_key == o.client_private_key &&
           cloud_service_provider == o.cloud_service_provider &&
           cluster_mode == o.cluster_mode &&
           connection_type == o.connection_type &&
@@ -2341,6 +2380,7 @@ module Akeyless
           eks_region == o.eks_region &&
           eks_secret_access_key == o.eks_secret_access_key &&
           enable_admin_rotation == o.enable_admin_rotation &&
+          enable_mtls == o.enable_mtls &&
           enforce_replay_prevention == o.enforce_replay_prevention &&
           expiration_date == o.expiration_date &&
           externally_provided_user == o.externally_provided_user &&
@@ -2531,7 +2571,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [access_token_manager_id, acl_rules, active, admin_name, admin_pwd, admin_rotation_interval_days, administrative_port, agentic_rules, api_key, api_key_id, artifactory_admin_apikey, artifactory_admin_username, artifactory_base_url, artifactory_token_audience, artifactory_token_scope, authorization_port, aws_access_key_id, aws_access_mode, aws_external_id, aws_region, aws_role_arns, aws_secret_access_key, aws_session_tags, aws_session_token, aws_transitive_tag_keys, aws_user_console_access, aws_user_groups, aws_user_policies, aws_user_programmatic_access, azure_administrative_unit, azure_app_object_id, azure_client_id, azure_client_secret, azure_cloud, azure_fixed_user_name_sub_claim_key, azure_fixed_user_only, azure_resource_group_name, azure_resource_name, azure_subscription_id, azure_tenant_id, azure_user_groups_obj_id, azure_user_portal_access, azure_user_programmatic_access, azure_user_roles_template_id, azure_username, cassandra_creation_statements, chef_organizations, chef_server_access_mode, chef_server_host_name, chef_server_key, chef_server_port, chef_server_url, chef_server_username, chef_skip_ssl, client_authentication_type, cloud_service_provider, cluster_mode, connection_type, create_sync_url, db_client_id, db_client_secret, db_host_name, db_isolation_level, db_max_idle_conns, db_max_open_conns, db_name, db_port, db_private_key, db_private_key_passphrase, db_pwd, db_server_certificates, db_server_name, db_tenant_id, db_user_name, delete_protection, dynamic_secret_id, dynamic_secret_key, dynamic_secret_name, dynamic_secret_type, eks_access_key_id, eks_assume_role, eks_cluster_ca_certificate, eks_cluster_endpoint, eks_cluster_name, eks_region, eks_secret_access_key, enable_admin_rotation, enforce_replay_prevention, expiration_date, externally_provided_user, failure_message, fixed_user_only, gcp_access_type, gcp_fixed_user_claim_keyname, gcp_key_algo, gcp_project_id, gcp_role_bindings, gcp_role_names, gcp_service_account_email, gcp_service_account_key, gcp_service_account_key_base64, gcp_service_account_key_id, gcp_service_account_type, gcp_tmp_service_account_name, gcp_token_lifetime, gcp_token_scope, gcp_token_type, github_app_id, github_app_private_key, github_base_url, github_installation_id, github_installation_token_permissions, github_installation_token_repositories, github_installation_token_repositories_ids, github_organization_name, github_repository_path, gitlab_access_token, gitlab_access_type, gitlab_certificate, gitlab_group_name, gitlab_project_name, gitlab_role, gitlab_token_scope, gitlab_url, gke_cluster_ca_certificate, gke_cluster_endpoint, gke_cluster_name, gke_service_account_key, gke_service_account_name, google_workspace_access_mode, google_workspace_admin_name, google_workspace_fixed_user_name_sub_claim_key, google_workspace_group_name, google_workspace_group_role, google_workspace_role_name, google_workspace_role_scope, grace_rotated_secret_key, grant_types, groups, gw_cloud_identity_external_id_opt, hanadb_creation_statements, hanadb_revocation_statements, host_name, host_port, implementation_type, is_fixed_user, issuer, item_custom_fields_details, item_targets_assoc, jwks, jwks_url, k8s_allowed_namespaces, k8s_auth_type, k8s_bearer_token, k8s_client_cert_data, k8s_client_key_data, k8s_cluster_ca_certificate, k8s_cluster_endpoint, k8s_cluster_name, k8s_dynamic_mode, k8s_multiple_doc_yaml_temp_definition, k8s_namespace, k8s_role_name, k8s_role_type, k8s_service_account, last_admin_rotation, ldap_audience, ldap_bind_dn, ldap_bind_password, ldap_certificate, ldap_fixed_user_name_sub_claim_key, ldap_fixed_user_type, ldap_group_dn, ldap_token_expiration, ldap_url, ldap_user_attr, ldap_user_dn, metadata, mongodb_atlas_api_private_key, mongodb_atlas_api_public_key, mongodb_atlas_project_id, mongodb_custom_data, mongodb_db_name, mongodb_default_auth_db, mongodb_host_port, mongodb_is_atlas, mongodb_password, mongodb_roles, mongodb_scopes, mongodb_uri_connection, mongodb_uri_options, mongodb_username, mssql_allowed_db_names, mssql_creation_statements, mssql_revocation_statements, mysql_creation_statements, mysql_revocation_statements, openai_url, oracle_creation_statements, oracle_revocation_statements, oracle_wallet_details, organization_id, password, password_length, password_policy, payload, ping_url, postgres_creation_statements, postgres_revocation_statements, privileged_user, project_id, rabbitmq_server_password, rabbitmq_server_uri, rabbitmq_server_user, rabbitmq_user_conf_permission, rabbitmq_user_read_permission, rabbitmq_user_tags, rabbitmq_user_vhost, rabbitmq_user_write_permission, rdp_fixed_user_name_sub_claim_key, redirect_uris, redshift_creation_statements, restricted_scopes, revoke_sync_url, rotate_sync_url, scopes, secure_remote_access_details, session_extension_warn_interval_min, sf_account, sf_auth_mode, sf_key_algo, sf_user_role, sf_warehouse_name, should_stop, signing_algorithm, ssl_connection_certificate, ssl_connection_mode, subject_dn, tags, timeout_seconds, use_gw_cloud_identity, use_gw_service_account, user_name, user_password, user_principal_name, user_ttl, username_length, username_policy, username_template, venafi_allow_subdomains, venafi_allowed_domains, venafi_api_key, venafi_auto_generated_folder, venafi_base_url, venafi_root_first_in_chain, venafi_sign_using_akeyless_pki, venafi_signer_key_name, venafi_store_private_key, venafi_tpp_access_token, venafi_tpp_client_id, venafi_tpp_password, venafi_tpp_refresh_token, venafi_tpp_username, venafi_use_tpp, venafi_zone, warn_before_user_expiration_min].hash
+      [access_token_manager_id, acl_rules, active, admin_name, admin_pwd, admin_rotation_interval_days, administrative_port, agentic_rules, api_key, api_key_id, artifactory_admin_apikey, artifactory_admin_username, artifactory_base_url, artifactory_token_audience, artifactory_token_scope, authorization_port, aws_access_key_id, aws_access_mode, aws_external_id, aws_region, aws_role_arns, aws_secret_access_key, aws_session_tags, aws_session_token, aws_transitive_tag_keys, aws_user_console_access, aws_user_groups, aws_user_policies, aws_user_programmatic_access, azure_administrative_unit, azure_app_object_id, azure_client_id, azure_client_secret, azure_cloud, azure_fixed_user_name_sub_claim_key, azure_fixed_user_only, azure_resource_group_name, azure_resource_name, azure_subscription_id, azure_tenant_id, azure_user_groups_obj_id, azure_user_portal_access, azure_user_programmatic_access, azure_user_roles_template_id, azure_username, cassandra_creation_statements, chef_organizations, chef_server_access_mode, chef_server_host_name, chef_server_key, chef_server_port, chef_server_url, chef_server_username, chef_skip_ssl, client_authentication_type, client_certificate, client_key_passphrase, client_private_key, cloud_service_provider, cluster_mode, connection_type, create_sync_url, db_client_id, db_client_secret, db_host_name, db_isolation_level, db_max_idle_conns, db_max_open_conns, db_name, db_port, db_private_key, db_private_key_passphrase, db_pwd, db_server_certificates, db_server_name, db_tenant_id, db_user_name, delete_protection, dynamic_secret_id, dynamic_secret_key, dynamic_secret_name, dynamic_secret_type, eks_access_key_id, eks_assume_role, eks_cluster_ca_certificate, eks_cluster_endpoint, eks_cluster_name, eks_region, eks_secret_access_key, enable_admin_rotation, enable_mtls, enforce_replay_prevention, expiration_date, externally_provided_user, failure_message, fixed_user_only, gcp_access_type, gcp_fixed_user_claim_keyname, gcp_key_algo, gcp_project_id, gcp_role_bindings, gcp_role_names, gcp_service_account_email, gcp_service_account_key, gcp_service_account_key_base64, gcp_service_account_key_id, gcp_service_account_type, gcp_tmp_service_account_name, gcp_token_lifetime, gcp_token_scope, gcp_token_type, github_app_id, github_app_private_key, github_base_url, github_installation_id, github_installation_token_permissions, github_installation_token_repositories, github_installation_token_repositories_ids, github_organization_name, github_repository_path, gitlab_access_token, gitlab_access_type, gitlab_certificate, gitlab_group_name, gitlab_project_name, gitlab_role, gitlab_token_scope, gitlab_url, gke_cluster_ca_certificate, gke_cluster_endpoint, gke_cluster_name, gke_service_account_key, gke_service_account_name, google_workspace_access_mode, google_workspace_admin_name, google_workspace_fixed_user_name_sub_claim_key, google_workspace_group_name, google_workspace_group_role, google_workspace_role_name, google_workspace_role_scope, grace_rotated_secret_key, grant_types, groups, gw_cloud_identity_external_id_opt, hanadb_creation_statements, hanadb_revocation_statements, host_name, host_port, implementation_type, is_fixed_user, issuer, item_custom_fields_details, item_targets_assoc, jwks, jwks_url, k8s_allowed_namespaces, k8s_auth_type, k8s_bearer_token, k8s_client_cert_data, k8s_client_key_data, k8s_cluster_ca_certificate, k8s_cluster_endpoint, k8s_cluster_name, k8s_dynamic_mode, k8s_multiple_doc_yaml_temp_definition, k8s_namespace, k8s_role_name, k8s_role_type, k8s_service_account, last_admin_rotation, ldap_audience, ldap_bind_dn, ldap_bind_password, ldap_certificate, ldap_fixed_user_name_sub_claim_key, ldap_fixed_user_type, ldap_group_dn, ldap_token_expiration, ldap_url, ldap_user_attr, ldap_user_dn, metadata, mongodb_atlas_api_private_key, mongodb_atlas_api_public_key, mongodb_atlas_project_id, mongodb_custom_data, mongodb_db_name, mongodb_default_auth_db, mongodb_host_port, mongodb_is_atlas, mongodb_password, mongodb_roles, mongodb_scopes, mongodb_uri_connection, mongodb_uri_options, mongodb_username, mssql_allowed_db_names, mssql_creation_statements, mssql_revocation_statements, mysql_creation_statements, mysql_revocation_statements, openai_url, oracle_creation_statements, oracle_revocation_statements, oracle_wallet_details, organization_id, password, password_length, password_policy, payload, ping_url, postgres_creation_statements, postgres_revocation_statements, privileged_user, project_id, rabbitmq_server_password, rabbitmq_server_uri, rabbitmq_server_user, rabbitmq_user_conf_permission, rabbitmq_user_read_permission, rabbitmq_user_tags, rabbitmq_user_vhost, rabbitmq_user_write_permission, rdp_fixed_user_name_sub_claim_key, redirect_uris, redshift_creation_statements, restricted_scopes, revoke_sync_url, rotate_sync_url, scopes, secure_remote_access_details, session_extension_warn_interval_min, sf_account, sf_auth_mode, sf_key_algo, sf_user_role, sf_warehouse_name, should_stop, signing_algorithm, ssl_connection_certificate, ssl_connection_mode, subject_dn, tags, timeout_seconds, use_gw_cloud_identity, use_gw_service_account, user_name, user_password, user_principal_name, user_ttl, username_length, username_policy, username_template, venafi_allow_subdomains, venafi_allowed_domains, venafi_api_key, venafi_auto_generated_folder, venafi_base_url, venafi_root_first_in_chain, venafi_sign_using_akeyless_pki, venafi_signer_key_name, venafi_store_private_key, venafi_tpp_access_token, venafi_tpp_client_id, venafi_tpp_password, venafi_tpp_refresh_token, venafi_tpp_username, venafi_use_tpp, venafi_zone, warn_before_user_expiration_min].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/dynamic_secret_create_artifactory.rb

@@ -40,6 +40,9 @@ module Akeyless
     # Description of the object
     attr_accessor :description
 
+    # Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).
+    attr_accessor :input_rule
+
     # Additional custom fields to associate with the item
     attr_accessor :item_custom_fields
 
@@ -49,6 +52,9 @@ module Akeyless
     # Dynamic secret name
     attr_accessor :name
 
+    # Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
+    attr_accessor :output_rule
+
     # Dynamic producer encryption key
     attr_accessor :producer_encryption_key_name
 
@@ -78,9 +84,11 @@ module Akeyless
         :'custom_username_template' => :'custom-username-template',
         :'delete_protection' => :'delete_protection',
         :'description' => :'description',
+        :'input_rule' => :'input-rule',
         :'item_custom_fields' => :'item-custom-fields',
         :'json' => :'json',
         :'name' => :'name',
+        :'output_rule' => :'output-rule',
         :'producer_encryption_key_name' => :'producer-encryption-key-name',
         :'tags' => :'tags',
         :'target_name' => :'target-name',
@@ -106,9 +114,11 @@ module Akeyless
         :'custom_username_template' => :'String',
         :'delete_protection' => :'String',
         :'description' => :'String',
+        :'input_rule' => :'Array<String>',
         :'item_custom_fields' => :'Hash<String, String>',
         :'json' => :'Boolean',
         :'name' => :'String',
+        :'output_rule' => :'Array<String>',
         :'producer_encryption_key_name' => :'String',
         :'tags' => :'Array<String>',
         :'target_name' => :'String',
@@ -175,6 +185,12 @@ module Akeyless
         self.description = attributes[:'description']
       end
 
+      if attributes.key?(:'input_rule')
+        if (value = attributes[:'input_rule']).is_a?(Array)
+          self.input_rule = value
+        end
+      end
+
       if attributes.key?(:'item_custom_fields')
         if (value = attributes[:'item_custom_fields']).is_a?(Hash)
           self.item_custom_fields = value
@@ -193,6 +209,12 @@ module Akeyless
         self.name = nil
       end
 
+      if attributes.key?(:'output_rule')
+        if (value = attributes[:'output_rule']).is_a?(Array)
+          self.output_rule = value
+        end
+      end
+
       if attributes.key?(:'producer_encryption_key_name')
         self.producer_encryption_key_name = attributes[:'producer_encryption_key_name']
       end
@@ -265,9 +287,11 @@ module Akeyless
           custom_username_template == o.custom_username_template &&
           delete_protection == o.delete_protection &&
           description == o.description &&
+          input_rule == o.input_rule &&
           item_custom_fields == o.item_custom_fields &&
           json == o.json &&
           name == o.name &&
+          output_rule == o.output_rule &&
           producer_encryption_key_name == o.producer_encryption_key_name &&
           tags == o.tags &&
           target_name == o.target_name &&
@@ -285,7 +309,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [artifactory_admin_name, artifactory_admin_pwd, artifactory_token_audience, artifactory_token_scope, base_url, custom_username_template, delete_protection, description, item_custom_fields, json, name, producer_encryption_key_name, tags, target_name, token, uid_token, user_ttl].hash
+      [artifactory_admin_name, artifactory_admin_pwd, artifactory_token_audience, artifactory_token_scope, base_url, custom_username_template, delete_protection, description, input_rule, item_custom_fields, json, name, output_rule, producer_encryption_key_name, tags, target_name, token, uid_token, user_ttl].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/dynamic_secret_create_aws.rb

@@ -57,6 +57,9 @@ module Akeyless
     # Automatic admin credentials rotation
     attr_accessor :enable_admin_rotation
 
+    # Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) Mirrors commands.AgenticRulesParams — kept separate because ResourceDS cannot embed it (different package, different struct layout).
+    attr_accessor :input_rule
+
     # Additional custom fields to associate with the item
     attr_accessor :item_custom_fields
 
@@ -66,6 +69,9 @@ module Akeyless
     # Dynamic secret name
     attr_accessor :name
 
+    # Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets)
+    attr_accessor :output_rule
+
     # The length of the password to be generated
     attr_accessor :password_length
 
@@ -140,9 +146,11 @@ module Akeyless
         :'delete_protection' => :'delete_protection',
         :'description' => :'description',
         :'enable_admin_rotation' => :'enable-admin-rotation',
+        :'input_rule' => :'input-rule',
         :'item_custom_fields' => :'item-custom-fields',
         :'json' => :'json',
         :'name' => :'name',
+        :'output_rule' => :'output-rule',
         :'password_length' => :'password-length',
         :'producer_encryption_key_name' => :'producer-encryption-key-name',
         :'region' => :'region',
@@ -187,9 +195,11 @@ module Akeyless
         :'delete_protection' => :'String',
         :'description' => :'String',
         :'enable_admin_rotation' => :'Boolean',
+        :'input_rule' => :'Array<String>',
         :'item_custom_fields' => :'Hash<String, String>',
         :'json' => :'Boolean',
         :'name' => :'String',
+        :'output_rule' => :'Array<String>',
         :'password_length' => :'String',
         :'producer_encryption_key_name' => :'String',
         :'region' => :'String',
@@ -297,6 +307,12 @@ module Akeyless
         self.enable_admin_rotation = false
       end
 
+      if attributes.key?(:'input_rule')
+        if (value = attributes[:'input_rule']).is_a?(Array)
+          self.input_rule = value
+        end
+      end
+
       if attributes.key?(:'item_custom_fields')
         if (value = attributes[:'item_custom_fields']).is_a?(Hash)
           self.item_custom_fields = value
@@ -315,6 +331,12 @@ module Akeyless
         self.name = nil
       end
 
+      if attributes.key?(:'output_rule')
+        if (value = attributes[:'output_rule']).is_a?(Array)
+          self.output_rule = value
+        end
+      end
+
       if attributes.key?(:'password_length')
         self.password_length = attributes[:'password_length']
       end
@@ -443,9 +465,11 @@ module Akeyless
           delete_protection == o.delete_protection &&
           description == o.description &&
           enable_admin_rotation == o.enable_admin_rotation &&
+          input_rule == o.input_rule &&
           item_custom_fields == o.item_custom_fields &&
           json == o.json &&
           name == o.name &&
+          output_rule == o.output_rule &&
           password_length == o.password_length &&
           producer_encryption_key_name == o.producer_encryption_key_name &&
           region == o.region &&
@@ -476,7 +500,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [access_mode, admin_rotation_interval_days, aws_access_key_id, aws_access_secret_key, aws_external_id, aws_role_arns, aws_user_console_access, aws_user_groups, aws_user_policies, aws_user_programmatic_access, custom_username_template, delete_protection, description, enable_admin_rotation, item_custom_fields, json, name, password_length, producer_encryption_key_name, region, secure_access_aws_account_id, secure_access_aws_native_cli, secure_access_bastion_issuer, secure_access_certificate_issuer, secure_access_delay, secure_access_enable, secure_access_web, secure_access_web_browsing, secure_access_web_proxy, session_tags, tags, target_name, token, transitive_tag_keys, uid_token, user_ttl].hash
+      [access_mode, admin_rotation_interval_days, aws_access_key_id, aws_access_secret_key, aws_external_id, aws_role_arns, aws_user_console_access, aws_user_groups, aws_user_policies, aws_user_programmatic_access, custom_username_template, delete_protection, description, enable_admin_rotation, input_rule, item_custom_fields, json, name, output_rule, password_length, producer_encryption_key_name, region, secure_access_aws_account_id, secure_access_aws_native_cli, secure_access_bastion_issuer, secure_access_certificate_issuer, secure_access_delay, secure_access_enable, secure_access_web, secure_access_web_browsing, secure_access_web_proxy, session_tags, tags, target_name, token, transitive_tag_keys, uid_token, user_ttl].hash
     end
 
     # Builds the object from hash