akeyless 5.0.33 → 5.0.35

data/lib/akeyless/models/auth_method_update_ali_cloud.rb

@@ -0,0 +1,497 @@
+=begin
+#Akeyless API
+
+#The purpose of this application is to provide access to Akeyless API.
+
+The version of the OpenAPI document: 3.0
+Contact: support@akeyless.io
+Generated by: https://openapi-generator.tech
+Generator version: 7.10.0
+
+=end
+
+require 'date'
+require 'time'
+
+module Akeyless
+  # authMethodUpdateAliCloud is a command that updates an Auth Method that will be able to authenticate using AliCloud credentials.
+  class AuthMethodUpdateAliCloud
+    # Access expiration date in Unix timestamp (select 0 for access without expiry date)
+    attr_accessor :access_expires
+
+    # limit the auth method usage for specific client types [cli,ui,gateway-admin,sdk,mobile,extension]
+    attr_accessor :allowed_client_type
+
+    # Subclaims to include in audit logs, e.g \"--audit-logs-claims email --audit-logs-claims username\"
+    attr_accessor :audit_logs_claims
+
+    # A list of AliCloud account-IDs that the access is restricted to
+    attr_accessor :bound_account_id
+
+    # A list of full arns that the access is restricted to
+    attr_accessor :bound_arn
+
+    # A CIDR whitelist with the IPs that the access is restricted to
+    attr_accessor :bound_ips
+
+    # A list of full resource ids that the access is restricted to
+    attr_accessor :bound_resource_id
+
+    # A list of full role ids that the access is restricted to
+    attr_accessor :bound_role_id
+
+    # A list of full role-name that the access is restricted to
+    attr_accessor :bound_role_name
+
+    # A list of full user ids that the access is restricted to
+    attr_accessor :bound_user_id
+
+    # A list of full user-name that the access is restricted to
+    attr_accessor :bound_user_name
+
+    # Protection from accidental deletion of this object [true/false]
+    attr_accessor :delete_protection
+
+    # Auth Method description
+    attr_accessor :description
+
+    # How many days before the expiration of the auth method would you like to be notified.
+    attr_accessor :expiration_event_in
+
+    # if true: enforce role-association must include sub claims
+    attr_accessor :force_sub_claims
+
+    # A CIDR whitelist with the GW IPs that the access is restricted to
+    attr_accessor :gw_bound_ips
+
+    # Set output format to JSON
+    attr_accessor :json
+
+    # Jwt TTL
+    attr_accessor :jwt_ttl
+
+    # Auth Method name
+    attr_accessor :name
+
+    # Auth Method new name
+    attr_accessor :new_name
+
+    # Choose the relevant product type for the auth method [sm, sra, pm, dp, ca, ara]
+    attr_accessor :product_type
+
+    # sts URL
+    attr_accessor :sts_url
+
+    # Authentication token (see `/auth` and `/configure`)
+    attr_accessor :token
+
+    # The universal identity token, Required only for universal_identity authentication
+    attr_accessor :uid_token
+
+    # A unique identifier (ID) value which is a \"sub claim\" name that contains details uniquely identifying that resource. This \"sub claim\" is used to distinguish between different identities.
+    attr_accessor :unique_identifier
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    def self.attribute_map
+      {
+        :'access_expires' => :'access-expires',
+        :'allowed_client_type' => :'allowed-client-type',
+        :'audit_logs_claims' => :'audit-logs-claims',
+        :'bound_account_id' => :'bound-account-id',
+        :'bound_arn' => :'bound-arn',
+        :'bound_ips' => :'bound-ips',
+        :'bound_resource_id' => :'bound-resource-id',
+        :'bound_role_id' => :'bound-role-id',
+        :'bound_role_name' => :'bound-role-name',
+        :'bound_user_id' => :'bound-user-id',
+        :'bound_user_name' => :'bound-user-name',
+        :'delete_protection' => :'delete_protection',
+        :'description' => :'description',
+        :'expiration_event_in' => :'expiration-event-in',
+        :'force_sub_claims' => :'force-sub-claims',
+        :'gw_bound_ips' => :'gw-bound-ips',
+        :'json' => :'json',
+        :'jwt_ttl' => :'jwt-ttl',
+        :'name' => :'name',
+        :'new_name' => :'new-name',
+        :'product_type' => :'product-type',
+        :'sts_url' => :'sts-url',
+        :'token' => :'token',
+        :'uid_token' => :'uid-token',
+        :'unique_identifier' => :'unique-identifier'
+      }
+    end
+
+    # Returns all the JSON keys this model knows about
+    def self.acceptable_attributes
+      attribute_map.values
+    end
+
+    # Attribute type mapping.
+    def self.openapi_types
+      {
+        :'access_expires' => :'Integer',
+        :'allowed_client_type' => :'Array<String>',
+        :'audit_logs_claims' => :'Array<String>',
+        :'bound_account_id' => :'Array<String>',
+        :'bound_arn' => :'Array<String>',
+        :'bound_ips' => :'Array<String>',
+        :'bound_resource_id' => :'Array<String>',
+        :'bound_role_id' => :'Array<String>',
+        :'bound_role_name' => :'Array<String>',
+        :'bound_user_id' => :'Array<String>',
+        :'bound_user_name' => :'Array<String>',
+        :'delete_protection' => :'String',
+        :'description' => :'String',
+        :'expiration_event_in' => :'Array<String>',
+        :'force_sub_claims' => :'Boolean',
+        :'gw_bound_ips' => :'Array<String>',
+        :'json' => :'Boolean',
+        :'jwt_ttl' => :'Integer',
+        :'name' => :'String',
+        :'new_name' => :'String',
+        :'product_type' => :'Array<String>',
+        :'sts_url' => :'String',
+        :'token' => :'String',
+        :'uid_token' => :'String',
+        :'unique_identifier' => :'String'
+      }
+    end
+
+    # List of attributes with nullable: true
+    def self.openapi_nullable
+      Set.new([
+      ])
+    end
+
+    # Initializes the object
+    # @param [Hash] attributes Model attributes in the form of hash
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `Akeyless::AuthMethodUpdateAliCloud` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `Akeyless::AuthMethodUpdateAliCloud`. Please check the name to make sure it's valid. List of attributes: " + self.class.attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'access_expires')
+        self.access_expires = attributes[:'access_expires']
+      else
+        self.access_expires = 0
+      end
+
+      if attributes.key?(:'allowed_client_type')
+        if (value = attributes[:'allowed_client_type']).is_a?(Array)
+          self.allowed_client_type = value
+        end
+      end
+
+      if attributes.key?(:'audit_logs_claims')
+        if (value = attributes[:'audit_logs_claims']).is_a?(Array)
+          self.audit_logs_claims = value
+        end
+      end
+
+      if attributes.key?(:'bound_account_id')
+        if (value = attributes[:'bound_account_id']).is_a?(Array)
+          self.bound_account_id = value
+        end
+      end
+
+      if attributes.key?(:'bound_arn')
+        if (value = attributes[:'bound_arn']).is_a?(Array)
+          self.bound_arn = value
+        end
+      end
+
+      if attributes.key?(:'bound_ips')
+        if (value = attributes[:'bound_ips']).is_a?(Array)
+          self.bound_ips = value
+        end
+      end
+
+      if attributes.key?(:'bound_resource_id')
+        if (value = attributes[:'bound_resource_id']).is_a?(Array)
+          self.bound_resource_id = value
+        end
+      end
+
+      if attributes.key?(:'bound_role_id')
+        if (value = attributes[:'bound_role_id']).is_a?(Array)
+          self.bound_role_id = value
+        end
+      end
+
+      if attributes.key?(:'bound_role_name')
+        if (value = attributes[:'bound_role_name']).is_a?(Array)
+          self.bound_role_name = value
+        end
+      end
+
+      if attributes.key?(:'bound_user_id')
+        if (value = attributes[:'bound_user_id']).is_a?(Array)
+          self.bound_user_id = value
+        end
+      end
+
+      if attributes.key?(:'bound_user_name')
+        if (value = attributes[:'bound_user_name']).is_a?(Array)
+          self.bound_user_name = value
+        end
+      end
+
+      if attributes.key?(:'delete_protection')
+        self.delete_protection = attributes[:'delete_protection']
+      end
+
+      if attributes.key?(:'description')
+        self.description = attributes[:'description']
+      end
+
+      if attributes.key?(:'expiration_event_in')
+        if (value = attributes[:'expiration_event_in']).is_a?(Array)
+          self.expiration_event_in = value
+        end
+      end
+
+      if attributes.key?(:'force_sub_claims')
+        self.force_sub_claims = attributes[:'force_sub_claims']
+      end
+
+      if attributes.key?(:'gw_bound_ips')
+        if (value = attributes[:'gw_bound_ips']).is_a?(Array)
+          self.gw_bound_ips = value
+        end
+      end
+
+      if attributes.key?(:'json')
+        self.json = attributes[:'json']
+      else
+        self.json = false
+      end
+
+      if attributes.key?(:'jwt_ttl')
+        self.jwt_ttl = attributes[:'jwt_ttl']
+      else
+        self.jwt_ttl = 0
+      end
+
+      if attributes.key?(:'name')
+        self.name = attributes[:'name']
+      else
+        self.name = nil
+      end
+
+      if attributes.key?(:'new_name')
+        self.new_name = attributes[:'new_name']
+      end
+
+      if attributes.key?(:'product_type')
+        if (value = attributes[:'product_type']).is_a?(Array)
+          self.product_type = value
+        end
+      end
+
+      if attributes.key?(:'sts_url')
+        self.sts_url = attributes[:'sts_url']
+      else
+        self.sts_url = 'https://sts.aliyuncs.com'
+      end
+
+      if attributes.key?(:'token')
+        self.token = attributes[:'token']
+      end
+
+      if attributes.key?(:'uid_token')
+        self.uid_token = attributes[:'uid_token']
+      end
+
+      if attributes.key?(:'unique_identifier')
+        self.unique_identifier = attributes[:'unique_identifier']
+      end
+    end
+
+    # Show invalid properties with the reasons. Usually used together with valid?
+    # @return Array for valid properties with the reasons
+    def list_invalid_properties
+      warn '[DEPRECATED] the `list_invalid_properties` method is obsolete'
+      invalid_properties = Array.new
+      if @name.nil?
+        invalid_properties.push('invalid value for "name", name cannot be nil.')
+      end
+
+      invalid_properties
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    def valid?
+      warn '[DEPRECATED] the `valid?` method is obsolete'
+      return false if @name.nil?
+      true
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param [Object] Object to be compared
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          access_expires == o.access_expires &&
+          allowed_client_type == o.allowed_client_type &&
+          audit_logs_claims == o.audit_logs_claims &&
+          bound_account_id == o.bound_account_id &&
+          bound_arn == o.bound_arn &&
+          bound_ips == o.bound_ips &&
+          bound_resource_id == o.bound_resource_id &&
+          bound_role_id == o.bound_role_id &&
+          bound_role_name == o.bound_role_name &&
+          bound_user_id == o.bound_user_id &&
+          bound_user_name == o.bound_user_name &&
+          delete_protection == o.delete_protection &&
+          description == o.description &&
+          expiration_event_in == o.expiration_event_in &&
+          force_sub_claims == o.force_sub_claims &&
+          gw_bound_ips == o.gw_bound_ips &&
+          json == o.json &&
+          jwt_ttl == o.jwt_ttl &&
+          name == o.name &&
+          new_name == o.new_name &&
+          product_type == o.product_type &&
+          sts_url == o.sts_url &&
+          token == o.token &&
+          uid_token == o.uid_token &&
+          unique_identifier == o.unique_identifier
+    end
+
+    # @see the `==` method
+    # @param [Object] Object to be compared
+    def eql?(o)
+      self == o
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    def hash
+      [access_expires, allowed_client_type, audit_logs_claims, bound_account_id, bound_arn, bound_ips, bound_resource_id, bound_role_id, bound_role_name, bound_user_id, bound_user_name, delete_protection, description, expiration_event_in, force_sub_claims, gw_bound_ips, json, jwt_ttl, name, new_name, product_type, sts_url, token, uid_token, unique_identifier].hash
+    end
+
+    # Builds the object from hash
+    # @param [Hash] attributes Model attributes in the form of hash
+    # @return [Object] Returns the model itself
+    def self.build_from_hash(attributes)
+      return nil unless attributes.is_a?(Hash)
+      attributes = attributes.transform_keys(&:to_sym)
+      transformed_hash = {}
+      openapi_types.each_pair do |key, type|
+        if attributes.key?(attribute_map[key]) && attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = nil
+        elsif type =~ /\AArray<(.*)>/i
+          # check to ensure the input is an array given that the attribute
+          # is documented as an array but the input is not
+          if attributes[attribute_map[key]].is_a?(Array)
+            transformed_hash["#{key}"] = attributes[attribute_map[key]].map { |v| _deserialize($1, v) }
+          end
+        elsif !attributes[attribute_map[key]].nil?
+          transformed_hash["#{key}"] = _deserialize(type, attributes[attribute_map[key]])
+        end
+      end
+      new(transformed_hash)
+    end
+
+    # Deserializes the data based on type
+    # @param string type Data type
+    # @param string value Value to be deserialized
+    # @return [Object] Deserialized data
+    def self._deserialize(type, value)
+      case type.to_sym
+      when :Time
+        Time.parse(value)
+      when :Date
+        Date.parse(value)
+      when :String
+        value.to_s
+      when :Integer
+        value.to_i
+      when :Float
+        value.to_f
+      when :Boolean
+        if value.to_s =~ /\A(true|t|yes|y|1)\z/i
+          true
+        else
+          false
+        end
+      when :Object
+        # generic object (usually a Hash), return directly
+        value
+      when /\AArray<(?<inner_type>.+)>\z/
+        inner_type = Regexp.last_match[:inner_type]
+        value.map { |v| _deserialize(inner_type, v) }
+      when /\AHash<(?<k_type>.+?), (?<v_type>.+)>\z/
+        k_type = Regexp.last_match[:k_type]
+        v_type = Regexp.last_match[:v_type]
+        {}.tap do |hash|
+          value.each do |k, v|
+            hash[_deserialize(k_type, k)] = _deserialize(v_type, v)
+          end
+        end
+      else # model
+        # models (e.g. Pet) or oneOf
+        klass = Akeyless.const_get(type)
+        klass.respond_to?(:openapi_any_of) || klass.respond_to?(:openapi_one_of) ? klass.build(value) : klass.build_from_hash(value)
+      end
+    end
+
+    # Returns the string representation of the object
+    # @return [String] String presentation of the object
+    def to_s
+      to_hash.to_s
+    end
+
+    # to_body is an alias to to_hash (backward compatibility)
+    # @return [Hash] Returns the object in the form of hash
+    def to_body
+      to_hash
+    end
+
+    # Returns the object in the form of hash
+    # @return [Hash] Returns the object in the form of hash
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      hash
+    end
+
+    # Outputs non-array value in the form of hash
+    # For object, use to_hash. Otherwise, just return the value
+    # @param [Object] value Any valid value
+    # @return [Hash] Returns the value in the form of hash
+    def _to_hash(value)
+      if value.is_a?(Array)
+        value.compact.map { |v| _to_hash(v) }
+      elsif value.is_a?(Hash)
+        {}.tap do |hash|
+          value.each { |k, v| hash[k] = _to_hash(v) }
+        end
+      elsif value.respond_to? :to_hash
+        value.to_hash
+      else
+        value
+      end
+    end
+
+  end
+
+end

data/lib/akeyless/models/certificate_chain_info.rb

@@ -50,10 +50,16 @@ module Akeyless
 
     attr_accessor :issuance_status
 
+    # LeafCertificatePem contains only the leaf certificate, derived from CertificatePem. Populated only when the certificate was issued with SplitCertificateChain enabled.
+    attr_accessor :leaf_certificate_pem
+
     attr_accessor :not_before
 
     attr_accessor :renew_before_expiration_in_days
 
+    # SplitCertificateChain reflects whether this certificate was issued while its PKI Cert Issuer had split-certificate-chain enabled. When true, LeafCertificatePem is populated in addition to CertificatePem (which always holds the full chain).
+    attr_accessor :split_certificate_chain
+
     # Attribute mapping from ruby-style variable name to JSON key.
     def self.attribute_map
       {
@@ -74,8 +80,10 @@ module Akeyless
         :'expiration_events' => :'expiration_events',
         :'external_ca_id' => :'external_ca_id',
         :'issuance_status' => :'issuance_status',
+        :'leaf_certificate_pem' => :'leaf_certificate_pem',
         :'not_before' => :'not_before',
-        :'renew_before_expiration_in_days' => :'renew_before_expiration_in_days'
+        :'renew_before_expiration_in_days' => :'renew_before_expiration_in_days',
+        :'split_certificate_chain' => :'split_certificate_chain'
       }
     end
 
@@ -104,8 +112,10 @@ module Akeyless
         :'expiration_events' => :'Array<CertificateExpirationEvent>',
         :'external_ca_id' => :'NullString',
         :'issuance_status' => :'String',
+        :'leaf_certificate_pem' => :'String',
         :'not_before' => :'Time',
-        :'renew_before_expiration_in_days' => :'Integer'
+        :'renew_before_expiration_in_days' => :'Integer',
+        :'split_certificate_chain' => :'Boolean'
       }
     end
 
@@ -202,6 +212,10 @@ module Akeyless
         self.issuance_status = attributes[:'issuance_status']
       end
 
+      if attributes.key?(:'leaf_certificate_pem')
+        self.leaf_certificate_pem = attributes[:'leaf_certificate_pem']
+      end
+
       if attributes.key?(:'not_before')
         self.not_before = attributes[:'not_before']
       end
@@ -209,6 +223,10 @@ module Akeyless
       if attributes.key?(:'renew_before_expiration_in_days')
         self.renew_before_expiration_in_days = attributes[:'renew_before_expiration_in_days']
       end
+
+      if attributes.key?(:'split_certificate_chain')
+        self.split_certificate_chain = attributes[:'split_certificate_chain']
+      end
     end
 
     # Show invalid properties with the reasons. Usually used together with valid?
@@ -248,8 +266,10 @@ module Akeyless
           expiration_events == o.expiration_events &&
           external_ca_id == o.external_ca_id &&
           issuance_status == o.issuance_status &&
+          leaf_certificate_pem == o.leaf_certificate_pem &&
           not_before == o.not_before &&
-          renew_before_expiration_in_days == o.renew_before_expiration_in_days
+          renew_before_expiration_in_days == o.renew_before_expiration_in_days &&
+          split_certificate_chain == o.split_certificate_chain
     end
 
     # @see the `==` method
@@ -261,7 +281,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [auto_renew_certificate, certificate_chain, certificate_format, certificate_has_private_key, certificate_issuer_gw_cluster_id, certificate_issuer_gw_cluster_url, certificate_issuer_item_id, certificate_issuer_name, certificate_pem, certificate_status, common_name, csr_pem, error_message, expiration_date, expiration_events, external_ca_id, issuance_status, not_before, renew_before_expiration_in_days].hash
+      [auto_renew_certificate, certificate_chain, certificate_format, certificate_has_private_key, certificate_issuer_gw_cluster_id, certificate_issuer_gw_cluster_url, certificate_issuer_item_id, certificate_issuer_name, certificate_pem, certificate_status, common_name, csr_pem, error_message, expiration_date, expiration_events, external_ca_id, issuance_status, leaf_certificate_pem, not_before, renew_before_expiration_in_days, split_certificate_chain].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/config_hash.rb

@@ -49,6 +49,8 @@ module Akeyless
 
     attr_accessor :saml
 
+    attr_accessor :saml_sp
+
     attr_accessor :universal_identity
 
     # Attribute mapping from ruby-style variable name to JSON key.
@@ -71,6 +73,7 @@ module Akeyless
         :'producers_status' => :'producers_status',
         :'rotators' => :'rotators',
         :'saml' => :'saml',
+        :'saml_sp' => :'saml_sp',
         :'universal_identity' => :'universal_identity'
       }
     end
@@ -100,6 +103,7 @@ module Akeyless
         :'producers_status' => :'String',
         :'rotators' => :'Object',
         :'saml' => :'String',
+        :'saml_sp' => :'String',
         :'universal_identity' => :'String'
       }
     end
@@ -195,6 +199,10 @@ module Akeyless
         self.saml = attributes[:'saml']
       end
 
+      if attributes.key?(:'saml_sp')
+        self.saml_sp = attributes[:'saml_sp']
+      end
+
       if attributes.key?(:'universal_identity')
         self.universal_identity = attributes[:'universal_identity']
       end
@@ -237,6 +245,7 @@ module Akeyless
           producers_status == o.producers_status &&
           rotators == o.rotators &&
           saml == o.saml &&
+          saml_sp == o.saml_sp &&
           universal_identity == o.universal_identity
     end
 
@@ -249,7 +258,7 @@ module Akeyless
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     def hash
-      [admins, ai_insights, cache, customer_fragements, general, k8s_auths, kmip, ldap, leadership, log_forwarding, m_queue, migration_status, migrations, producers, producers_status, rotators, saml, universal_identity].hash
+      [admins, ai_insights, cache, customer_fragements, general, k8s_auths, kmip, ldap, leadership, log_forwarding, m_queue, migration_status, migrations, producers, producers_status, rotators, saml, saml_sp, universal_identity].hash
     end
 
     # Builds the object from hash

data/lib/akeyless/models/configure.rb

@@ -21,7 +21,7 @@ module Akeyless
     # Access Key
     attr_accessor :access_key
 
-    # Access Type (access_key/password/azure_ad/saml/oidc/aws_iam/gcp/k8s/cert)
+    # Access Type (access_key/password/azure_ad/saml/oidc/aws_iam/alicloud/gcp/k8s/cert/oci/kerberos)
     attr_accessor :access_type
 
     # Account id (relevant only for access-type=password where the email address is associated with more than one account)