akeyless 5.0.28 → 5.0.31

data/docs/CreateMcpSecretBearerToken.md

@@ -0,0 +1,46 @@
+# Akeyless::CreateMcpSecretBearerToken
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **accessibility** | **String** | for personal password manager | [optional][default to 'regular'] |
+| **bearer_token** | **String** | Bearer token value | [optional] |
+| **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
+| **description** | **String** | Description of the object | [optional] |
+| **input_rule** | **Array<String>** | Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) | [optional] |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **max_versions** | **String** | Set the maximum number of versions, limited by the account settings defaults. | [optional] |
+| **metadata** | **String** | Deprecated - use description | [optional] |
+| **name** | **String** | Secret name |  |
+| **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
+| **protection_key** | **String** |  | [optional] |
+| **tags** | **Array<String>** | Add tags attached to this object | [optional] |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **url** | **String** | URL of the service | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::CreateMcpSecretBearerToken.new(
+  accessibility: null,
+  bearer_token: null,
+  delete_protection: null,
+  description: null,
+  input_rule: null,
+  json: null,
+  max_versions: null,
+  metadata: null,
+  name: null,
+  output_rule: null,
+  protection_key: null,
+  tags: null,
+  token: null,
+  uid_token: null,
+  url: null
+)
+```
+

data/docs/CreateMcpSecretOAuthAuthCode.md

@@ -0,0 +1,56 @@
+# Akeyless::CreateMcpSecretOAuthAuthCode
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **accessibility** | **String** | for personal password manager | [optional][default to 'regular'] |
+| **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
+| **description** | **String** | Description of the object | [optional] |
+| **input_rule** | **Array<String>** | Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) | [optional] |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **max_versions** | **String** | Set the maximum number of versions, limited by the account settings defaults. | [optional] |
+| **metadata** | **String** | Deprecated - use description | [optional] |
+| **name** | **String** | Secret name |  |
+| **oauth_client_id** | **String** | OAuth client ID | [optional] |
+| **oauth_client_secret** | **String** | OAuth client secret | [optional] |
+| **oauth_redirect_uri** | **String** | OAuth redirect URI | [optional] |
+| **oauth_refresh_token** | **String** | OAuth refresh token | [optional] |
+| **oauth_scopes** | **Array<String>** | OAuth scopes | [optional] |
+| **oauth_token_url** | **String** | OAuth token URL | [optional] |
+| **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
+| **protection_key** | **String** |  | [optional] |
+| **tags** | **Array<String>** | Add tags attached to this object | [optional] |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **url** | **String** | URL of the service | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::CreateMcpSecretOAuthAuthCode.new(
+  accessibility: null,
+  delete_protection: null,
+  description: null,
+  input_rule: null,
+  json: null,
+  max_versions: null,
+  metadata: null,
+  name: null,
+  oauth_client_id: null,
+  oauth_client_secret: null,
+  oauth_redirect_uri: null,
+  oauth_refresh_token: null,
+  oauth_scopes: null,
+  oauth_token_url: null,
+  output_rule: null,
+  protection_key: null,
+  tags: null,
+  token: null,
+  uid_token: null,
+  url: null
+)
+```
+

data/docs/CreateMcpSecretOAuthClientCreds.md

@@ -0,0 +1,52 @@
+# Akeyless::CreateMcpSecretOAuthClientCreds
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **accessibility** | **String** | for personal password manager | [optional][default to 'regular'] |
+| **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
+| **description** | **String** | Description of the object | [optional] |
+| **input_rule** | **Array<String>** | Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) | [optional] |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **max_versions** | **String** | Set the maximum number of versions, limited by the account settings defaults. | [optional] |
+| **metadata** | **String** | Deprecated - use description | [optional] |
+| **name** | **String** | Secret name |  |
+| **oauth_client_id** | **String** | OAuth client ID | [optional] |
+| **oauth_client_secret** | **String** | OAuth client secret | [optional] |
+| **oauth_scopes** | **Array<String>** | OAuth scopes | [optional] |
+| **oauth_token_url** | **String** | OAuth token URL | [optional] |
+| **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
+| **protection_key** | **String** |  | [optional] |
+| **tags** | **Array<String>** | Add tags attached to this object | [optional] |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **url** | **String** | URL of the service | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::CreateMcpSecretOAuthClientCreds.new(
+  accessibility: null,
+  delete_protection: null,
+  description: null,
+  input_rule: null,
+  json: null,
+  max_versions: null,
+  metadata: null,
+  name: null,
+  oauth_client_id: null,
+  oauth_client_secret: null,
+  oauth_scopes: null,
+  oauth_token_url: null,
+  output_rule: null,
+  protection_key: null,
+  tags: null,
+  token: null,
+  uid_token: null,
+  url: null
+)
+```
+

data/docs/CreatePKICertIssuer.md

@@ -51,7 +51,7 @@
 | **street_address** | **String** | A comma-separated list of street addresses that will be set in the issued certificate | [optional] |
 | **tag** | **Array<String>** | List of the tags attached to this key | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
-| **ttl** | **String** | The maximum requested Time To Live for issued certificates, in seconds. In case of Public CA, this is based on the CA target's supported maximum TTLs |  |
+| **ttl** | **String** | The maximum requested Time To Live for issued certificates, in seconds. In case of Public CA, this is based on the CA target's supported maximum TTLs. Not supported for Let's Encrypt, which always uses the CA default lifetime (about 90 days). |  |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
 
 ## Example

data/docs/CustomDnsTargetDetails.md

@@ -0,0 +1,20 @@
+# Akeyless::CustomDnsTargetDetails
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **parameters** | **Hash<String, String>** |  | [optional] |
+| **provider_type** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::CustomDnsTargetDetails.new(
+  parameters: null,
+  provider_type: null
+)
+```
+

data/docs/DSProducerDetails.md

@@ -245,6 +245,7 @@
 | **sf_warehouse_name** | **String** |  | [optional] |
 | **should_stop** | **String** | TODO delete this after migration | [optional] |
 | **signing_algorithm** | **String** |  | [optional] |
+| **skip_server_name_validation** | **String** | (Optional) SkipServerNameValidation disables server name verification while still validating the certificate chain. Postgres treats empty as legacy \"skip hostname validation\"; MySQL treats empty as false. | [optional] |
 | **ssl_connection_certificate** | **String** | (Optional) SSLConnectionCertificate defines the certificate for SSL connection. Must be base64 certificate loaded by UI using file loader field | [optional] |
 | **ssl_connection_mode** | **Boolean** | (Optional) SSLConnectionMode defines if SSL mode will be used to connect to DB | [optional] |
 | **subject_dn** | **String** |  | [optional] |
@@ -524,6 +525,7 @@ instance = Akeyless::DSProducerDetails.new(
   sf_warehouse_name: null,
   should_stop: null,
   signing_algorithm: null,
+  skip_server_name_validation: null,
   ssl_connection_certificate: null,
   ssl_connection_mode: null,
   subject_dn: null,

data/docs/DbTargetDetails.md

@@ -25,6 +25,7 @@
 | **enable_mtls** | **Boolean** | (Optional) EnableMTLS defines if mutual TLS will be used to connect to DB | [optional] |
 | **oracle_wallet_details** | [**WalletDetails**](WalletDetails.md) |  | [optional] |
 | **sf_account** | **String** |  | [optional] |
+| **skip_server_name_validation** | **String** | (Optional) SkipServerNameValidation disables server name verification while still validating the certificate chain. Postgres treats empty as legacy \"skip hostname validation\"; MySQL treats empty as false. | [optional] |
 | **ssl_connection_certificate** | **String** | (Optional) SSLConnectionCertificate defines the certificate for SSL connection. Must be base64 certificate loaded by UI using file loader field | [optional] |
 | **ssl_connection_mode** | **Boolean** | (Optional) SSLConnectionMode defines if SSL mode will be used to connect to DB | [optional] |
 
@@ -55,6 +56,7 @@ instance = Akeyless::DbTargetDetails.new(
   enable_mtls: null,
   oracle_wallet_details: null,
   sf_account: null,
+  skip_server_name_validation: null,
   ssl_connection_certificate: null,
   ssl_connection_mode: null
 )

data/docs/DecryptGPG.md

@@ -14,6 +14,7 @@
 | **passphrase** | **String** | Passphrase that was used to generate the key | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **version** | **Integer** | key version (relevant only for classic key) | [optional] |
 
 ## Example
 
@@ -30,7 +31,8 @@ instance = Akeyless::DecryptGPG.new(
   output_format: null,
   passphrase: null,
   token: null,
-  uid_token: null
+  uid_token: null,
+  version: null
 )
 ```
 

data/docs/EmailCustomization.md

@@ -0,0 +1,28 @@
+# Akeyless::EmailCustomization
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_information_fields** | [**EmailCustomizationAccountInformation**](EmailCustomizationAccountInformation.md) |  | [optional] |
+| **account_information_values** | [**EmailCustomizationAccountInformationValues**](EmailCustomizationAccountInformationValues.md) |  | [optional] |
+| **footer_html** | **String** |  | [optional] |
+| **sender_name** | **String** |  | [optional] |
+| **show_background_image** | **Boolean** |  | [optional] |
+| **subject** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::EmailCustomization.new(
+  account_information_fields: null,
+  account_information_values: null,
+  footer_html: null,
+  sender_name: null,
+  show_background_image: null,
+  subject: null
+)
+```
+

data/docs/EmailCustomizationAccountInformation.md

@@ -0,0 +1,24 @@
+# Akeyless::EmailCustomizationAccountInformation
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_id** | **Boolean** |  | [optional] |
+| **alias_name** | **Boolean** |  | [optional] |
+| **company_name** | **Boolean** |  | [optional] |
+| **tenant_name** | **Boolean** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::EmailCustomizationAccountInformation.new(
+  account_id: null,
+  alias_name: null,
+  company_name: null,
+  tenant_name: null
+)
+```
+

data/docs/EmailCustomizationAccountInformationValues.md

@@ -0,0 +1,24 @@
+# Akeyless::EmailCustomizationAccountInformationValues
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **account_id** | **String** |  | [optional] |
+| **alias_name** | **String** |  | [optional] |
+| **company_name** | **String** |  | [optional] |
+| **tenant_name** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::EmailCustomizationAccountInformationValues.new(
+  account_id: null,
+  alias_name: null,
+  company_name: null,
+  tenant_name: null
+)
+```
+

data/docs/EncryptGPG.md

@@ -12,6 +12,7 @@
 | **plaintext** | **String** | Data to be encrypted |  |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **version** | **Integer** | key version (relevant only for classic key) | [optional] |
 
 ## Example
 
@@ -26,7 +27,8 @@ instance = Akeyless::EncryptGPG.new(
   key_name: null,
   plaintext: null,
   token: null,
-  uid_token: null
+  uid_token: null,
+  version: null
 )
 ```
 

data/docs/EsmGetSecretOutput.md

@@ -4,8 +4,10 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
+| **activation_date** | **Time** |  | [optional] |
 | **binary_value** | **Boolean** |  | [optional] |
 | **encryption_key** | **String** |  | [optional] |
+| **expiration** | **Time** |  | [optional] |
 | **id** | **String** |  | [optional] |
 | **metadata** | **Object** |  | [optional] |
 | **name** | **String** |  | [optional] |
@@ -20,8 +22,10 @@
 require 'akeyless'
 
 instance = Akeyless::EsmGetSecretOutput.new(
+  activation_date: null,
   binary_value: null,
   encryption_key: null,
+  expiration: null,
   id: null,
   metadata: null,
   name: null,

data/docs/FileDownloadInstructions.md

@@ -0,0 +1,20 @@
+# Akeyless::FileDownloadInstructions
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **expires_at** | **Time** |  | [optional] |
+| **url** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::FileDownloadInstructions.new(
+  expires_at: null,
+  url: null
+)
+```
+

data/docs/FileInfo.md

@@ -0,0 +1,50 @@
+# Akeyless::FileInfo
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **blob_storage_key** | **String** |  | [optional] |
+| **client_file_sha256** | **String** |  | [optional] |
+| **content_type** | **String** |  | [optional] |
+| **derivation_data** | **String** |  | [optional] |
+| **encrypted_blob_sha256** | **String** |  | [optional] |
+| **encrypted_size_bytes** | **Integer** |  | [optional] |
+| **etag_at_complete** | **String** |  | [optional] |
+| **extension** | **String** |  | [optional] |
+| **file_id** | **String** |  | [optional] |
+| **filename** | **String** |  | [optional] |
+| **plain_size_bytes** | **Integer** |  | [optional] |
+| **previous_active_file_info** | [**FileInfo**](FileInfo.md) |  | [optional] |
+| **previous_blob_storage_key** | **String** |  | [optional] |
+| **protection_key_name** | **String** |  | [optional] |
+| **protection_key_version** | **Integer** |  | [optional] |
+| **status** | **String** |  | [optional] |
+| **transaction_owner** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::FileInfo.new(
+  blob_storage_key: null,
+  client_file_sha256: null,
+  content_type: null,
+  derivation_data: null,
+  encrypted_blob_sha256: null,
+  encrypted_size_bytes: null,
+  etag_at_complete: null,
+  extension: null,
+  file_id: null,
+  filename: null,
+  plain_size_bytes: null,
+  previous_active_file_info: null,
+  previous_blob_storage_key: null,
+  protection_key_name: null,
+  protection_key_version: null,
+  status: null,
+  transaction_owner: null
+)
+```
+

data/docs/GatewayCreateMigration.md

@@ -43,6 +43,7 @@
 | **conjur_url** | **String** | Conjur server base URL (relevant only for Conjur migration). If conjur-url is HTTPS and Conjur uses a private CA/self-signed certificate, make the CA bundle available on the Gateway and set CONJUR_SSL_CERT_PATH to its path. | [optional] |
 | **conjur_username** | **String** | Conjur username used to authenticate (relevant only for Conjur migration). | [optional] |
 | **delete_remote** | **Boolean** | Delete the secret from the remote target as well, relevant only when usc-name is not empty (relevant only for HasiCorp Vault migration) | [optional] |
+| **exclude_hosts** | **String** | A comma separated list of IPs, CIDR ranges, or DNS names to exclude from the scan | [optional] |
 | **expiration_event_in** | **Array<String>** | How many days before the expiration of the certificate would you like to be notified. | [optional] |
 | **gcp_key** | **String** | Base64-encoded GCP Service Account private key text with sufficient permissions to Secrets Manager, Minimum required permission is Secret Manager Secret Accessor, e.g. 'roles/secretmanager.secretAccessor' (relevant only for GCP migration) | [optional] |
 | **gcp_project_id** | **String** | GCP Project ID (cross-project override) | [optional] |
@@ -74,6 +75,7 @@
 | **si_users_ignore** | **String** | Comma-separated list of Local Users which should not be migrated (Relevant only for Server Inventory migration) | [optional] |
 | **si_users_path_template** | **String** | Path location template for migrating users as Rotated Secrets e.g.: .../Users/{{COMPUTER_NAME}}/{{USERNAME}} (Relevant only for Server Inventory migration) |  |
 | **target_location** | **String** | Target location in Akeyless for imported secrets |  |
+| **target_name** | **String** | Name of existing target to use to create the migration | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **type** | **String** | Migration type (hashi/aws/gcp/k8s/azure_kv/conjur/active_directory/server_inventory/certificate) | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
@@ -125,6 +127,7 @@ instance = Akeyless::GatewayCreateMigration.new(
   conjur_url: null,
   conjur_username: null,
   delete_remote: null,
+  exclude_hosts: null,
   expiration_event_in: null,
   gcp_key: null,
   gcp_project_id: null,
@@ -156,6 +159,7 @@ instance = Akeyless::GatewayCreateMigration.new(
   si_users_ignore: null,
   si_users_path_template: null,
   target_location: null,
+  target_name: null,
   token: null,
   type: null,
   uid_token: null,

data/docs/GatewayUpdateMigration.md

@@ -43,6 +43,7 @@
 | **conjur_url** | **String** | Conjur server base URL (relevant only for Conjur migration). If conjur-url is HTTPS and Conjur uses a private CA/self-signed certificate, make the CA bundle available on the Gateway and set CONJUR_SSL_CERT_PATH to its path. | [optional] |
 | **conjur_username** | **String** | Conjur username used to authenticate (relevant only for Conjur migration). | [optional] |
 | **delete_remote** | **Boolean** | Delete the secret from the remote target as well, relevant only when usc-name is not empty (relevant only for HasiCorp Vault migration) | [optional] |
+| **exclude_hosts** | **String** | A comma separated list of IPs, CIDR ranges, or DNS names to exclude from the scan | [optional] |
 | **expiration_event_in** | **Array<String>** | How many days before the expiration of the certificate would you like to be notified. | [optional] |
 | **gcp_key** | **String** | Base64-encoded GCP Service Account private key text with sufficient permissions to Secrets Manager, Minimum required permission is Secret Manager Secret Accessor, e.g. 'roles/secretmanager.secretAccessor' (relevant only for GCP migration) | [optional] |
 | **gcp_project_id** | **String** | GCP Project ID (cross-project override) | [optional] |
@@ -76,6 +77,7 @@
 | **si_users_ignore** | **String** | Comma-separated list of Local Users which should not be migrated (Relevant only for Server Inventory migration) | [optional] |
 | **si_users_path_template** | **String** | Path location template for migrating users as Rotated Secrets e.g.: .../Users/{{COMPUTER_NAME}}/{{USERNAME}} (Relevant only for Server Inventory migration) |  |
 | **target_location** | **String** | Target location in Akeyless for imported secrets |  |
+| **target_name** | **String** | Name of existing target to use to create the migration | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
 | **usc_name** | **String** | Universal Secret Connector name | [optional] |
@@ -126,6 +128,7 @@ instance = Akeyless::GatewayUpdateMigration.new(
   conjur_url: null,
   conjur_username: null,
   delete_remote: null,
+  exclude_hosts: null,
   expiration_event_in: null,
   gcp_key: null,
   gcp_project_id: null,
@@ -159,6 +162,7 @@ instance = Akeyless::GatewayUpdateMigration.new(
   si_users_ignore: null,
   si_users_path_template: null,
   target_location: null,
+  target_name: null,
   token: null,
   uid_token: null,
   usc_name: null,

data/docs/GetKubeExecCreds.md

@@ -15,7 +15,7 @@
 | **key_data_base64** | **String** | PKI key file contents. If this option is used, the certificate will be printed to stdout | [optional] |
 | **max_path_len** | **Integer** | The maximum path length for the generated certificate. -1, means unlimited unless the signing certificate has a maximum path length set | [optional][default to -1] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
-| **ttl** | **String** | Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL) | [optional] |
+| **ttl** | **String** | Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL). Ignored for Let's Encrypt public CA issuers, which always use the CA default lifetime (about 90 days). | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
 | **uri_sans** | **String** | The URI Subject Alternative Names to be included in the PKI certificate (in a comma-separated list) (if CSR is supplied this flag is ignored and any URI.* names are taken from it) | [optional] |
 

data/docs/GetPKICertificate.md

@@ -14,7 +14,7 @@
 | **key_data_base64** | **String** | PKI key file contents. If this option is used, the certificate will be printed to stdout | [optional] |
 | **max_path_len** | **Integer** | The maximum path length for the generated certificate. -1, means unlimited unless the signing certificate has a maximum path length set | [optional][default to -1] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
-| **ttl** | **String** | Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL) | [optional] |
+| **ttl** | **String** | Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL). Ignored for Let's Encrypt public CA issuers, which always use the CA default lifetime (about 90 days). | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
 | **uri_sans** | **String** | The URI Subject Alternative Names to be included in the PKI certificate (in a comma-separated list) (if CSR is supplied this flag is ignored and any URI.* names are taken from it) | [optional] |
 

data/docs/GrokTargetDetails.md

@@ -0,0 +1,22 @@
+# Akeyless::GrokTargetDetails
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **api_key** | **String** |  | [optional] |
+| **grok_url** | **String** |  | [optional] |
+| **team_id** | **String** | TeamID is the xAI team this API key belongs to. Stored only; not sent to xAI by the gateway. | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::GrokTargetDetails.new(
+  api_key: null,
+  grok_url: null,
+  team_id: null
+)
+```
+

data/docs/HashiPayload.md

@@ -5,6 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **delete_sync_on_deletion** | **Boolean** |  | [optional] |
+| **hashi_target_id** | **Integer** |  | [optional] |
 | **import_as_json** | **Boolean** |  | [optional] |
 | **metadata_mode** | **String** |  | [optional] |
 | **namespaces** | **Array<String>** |  | [optional] |
@@ -19,6 +20,7 @@ require 'akeyless'
 
 instance = Akeyless::HashiPayload.new(
   delete_sync_on_deletion: null,
+  hashi_target_id: null,
   import_as_json: null,
   metadata_mode: null,
   namespaces: null,

data/docs/Item.md

@@ -18,6 +18,7 @@
 | **delete_protection** | **Boolean** |  | [optional] |
 | **deletion_date** | **Time** |  | [optional] |
 | **display_id** | **String** |  | [optional] |
+| **file_download** | [**FileDownloadInstructions**](FileDownloadInstructions.md) |  | [optional] |
 | **gateway_details** | [**Array<GatewayDetailsForItemReplyObj>**](GatewayDetailsForItemReplyObj.md) |  | [optional] |
 | **is_access_request_enabled** | **Boolean** |  | [optional] |
 | **is_enabled** | **Boolean** |  | [optional] |
@@ -69,6 +70,7 @@ instance = Akeyless::Item.new(
   delete_protection: null,
   deletion_date: null,
   display_id: null,
+  file_download: null,
   gateway_details: null,
   is_access_request_enabled: null,
   is_enabled: null,

data/docs/KeycloakTargetDetails.md

@@ -0,0 +1,24 @@
+# Akeyless::KeycloakTargetDetails
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **keycloak_client_id** | **String** |  | [optional] |
+| **keycloak_client_secret** | **String** |  | [optional] |
+| **keycloak_realm** | **String** |  | [optional] |
+| **keycloak_url** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::KeycloakTargetDetails.new(
+  keycloak_client_id: null,
+  keycloak_client_secret: null,
+  keycloak_realm: null,
+  keycloak_url: null
+)
+```
+

data/docs/OktaTargetDetails.md

@@ -0,0 +1,20 @@
+# Akeyless::OktaTargetDetails
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **okta_api_token** | **String** |  | [optional] |
+| **okta_url** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::OktaTargetDetails.new(
+  okta_api_token: null,
+  okta_url: null
+)
+```
+

data/docs/RuntimeAuthorityCommand.md

@@ -7,6 +7,8 @@
 | **agent_id** | **String** | Agent identifier for auditing |  |
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
 | **name** | **String** | Secret name (dynamic secret or rotated secret) |  |
+| **original_prompt** | **String** | Original natural-language prompt from the user (optional, for auditing) | [optional] |
+| **original_user** | **String** | Human end-user behind the agent (optional, for auditing) | [optional] |
 | **payload** | **String** | Query or action payload (SQL, natural language, or CLI-style) |  |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
@@ -20,6 +22,8 @@ instance = Akeyless::RuntimeAuthorityCommand.new(
   agent_id: null,
   json: null,
   name: null,
+  original_prompt: null,
+  original_user: null,
   payload: null,
   token: null,
   uid_token: null

data/docs/SAMLAccessRules.md

@@ -9,6 +9,7 @@
 | **idp_metadata_url** | **String** | IDP metadata url | [optional] |
 | **idp_metadata_xml** | **String** | IDP metadata XML | [optional] |
 | **unique_identifier** | **String** | A unique identifier to distinguish different users | [optional] |
+| **use_dedicated_saml_urls** | **Boolean** | When true, the login AuthnRequest is signed with this access method's dedicated SP identity (Entity ID https://<sp>/saml/sp/{access_id} and ACS https://<sp>/saml/acs/{access_id}) instead of the shared global identity. Default false keeps the legacy global identity for backward compatibility. | [optional] |
 
 ## Example
 
@@ -20,7 +21,8 @@ instance = Akeyless::SAMLAccessRules.new(
   bound_attributes: null,
   idp_metadata_url: null,
   idp_metadata_xml: null,
-  unique_identifier: null
+  unique_identifier: null,
+  use_dedicated_saml_urls: null
 )
 ```