akeyless 5.0.38 → 5.0.39

data/docs/LdapTargetDetails.md

@@ -11,6 +11,7 @@
 | **ldap_certificate** | **String** |  | [optional] |
 | **ldap_token_expiration** | **String** |  | [optional] |
 | **ldap_url** | **String** |  | [optional] |
+| **ldap_username** | **String** |  | [optional] |
 
 ## Example
 
@@ -24,7 +25,8 @@ instance = Akeyless::LdapTargetDetails.new(
   ldap_bind_password: null,
   ldap_certificate: null,
   ldap_token_expiration: null,
-  ldap_url: null
+  ldap_url: null,
+  ldap_username: null
 )
 ```
 

data/docs/LetsEncryptTargetDetails.md

@@ -8,8 +8,12 @@
 | **account_url** | **String** | ACME Account URL (returned after registration with Let's Encrypt) Used to retrieve existing account instead of re-registering | [optional] |
 | **acme_environment** | **String** | ACMEEnvironment defines Let's Encrypt ACME directory environment | [optional] |
 | **challenge_type** | **String** | ACMEChallengeType defines ACME challenge type for Let's Encrypt | [optional] |
+| **dns_propagation_wait** | **Integer** | A Duration represents the elapsed time between two instants as an int64 nanosecond count. The representation limits the largest representable duration to approximately 290 years. | [optional] |
+| **dns_resolvers** | **Array<String>** | Custom recursive DNS resolvers (ip:port) for propagation checks. | [optional] |
+| **dns_skip_precheck** | **Boolean** | Skip authoritative nameserver propagation pre-check. | [optional] |
 | **dns_target_name** | **String** | Name of DNS target (transient field - not stored in DB) Used by CLI to pass DNS target name to SDK for creating target_object_assoc Retrieved from target_object_assoc when reading target Required when ChallengeType is \"dns\" | [optional] |
 | **dns_target_type** | **String** |  | [optional] |
+| **dns_timeout** | **Integer** | A Duration represents the elapsed time between two instants as an int64 nanosecond count. The representation limits the largest representable duration to approximately 290 years. | [optional] |
 | **dns_zone** | **String** | Cloudflare zone identifier Required when DNSTargetType is Cloudflare | [optional] |
 | **email** | **String** | Email address for ACME account registration Required | [optional] |
 | **gcp_project** | **String** | GCP Cloud DNS: Project ID Optional - can be derived from service account | [optional] |
@@ -27,8 +31,12 @@ instance = Akeyless::LetsEncryptTargetDetails.new(
   account_url: null,
   acme_environment: null,
   challenge_type: null,
+  dns_propagation_wait: null,
+  dns_resolvers: null,
+  dns_skip_precheck: null,
   dns_target_name: null,
   dns_target_type: null,
+  dns_timeout: null,
   dns_zone: null,
   email: null,
   gcp_project: null,

data/docs/ListSRASessions.md

@@ -5,6 +5,7 @@
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **pagination_token** | **String** | Next page reference | [optional] |
 | **resource_type** | **Array<String>** | session resource type. In case it is empty, all resources type will be returned. options: [mysql, k8s, ssh, mongodb, mssql, postgres, aws, eks, gke, rdp] | [optional] |
 | **status_type** | **Array<String>** | session status type. In case it is empty, only active sessions will be returned. options: [connecting, connected, failed, completed, terminated] | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
@@ -17,6 +18,7 @@ require 'akeyless'
 
 instance = Akeyless::ListSRASessions.new(
   json: null,
+  pagination_token: null,
   resource_type: null,
   status_type: null,
   token: null,

data/docs/ListSraSessionsOutput.md

@@ -4,9 +4,9 @@
 
 | Name | Type | Description | Notes |
 | ---- | ---- | ----------- | ----- |
-| **allowed_gateways** | [**Array<GatewayNameInfo>**](GatewayNameInfo.md) |  | [optional] |
-| **next_page** | **String** |  | [optional] |
-| **sessions** | [**Array<SraSessionEntryOut>**](SraSessionEntryOut.md) |  | [optional] |
+| **allowed_gateways** | [**Array<GatewayNameInfo>**](GatewayNameInfo.md) | Gateways whose sessions the caller may see in full. Omitted when the request asks for own sessions only, and when it carries a pagination token | [optional] |
+| **next_page** | **String** | Cursor for the following page, sent back as the pagination token. Empty when the result set is exhausted, so stop when it is empty rather than waiting for the field to disappear | [optional] |
+| **sessions** | [**Array<SraSessionEntryOut>**](SraSessionEntryOut.md) | The requested page of sessions, newest first by start time then session id | [optional] |
 
 ## Example
 

data/docs/LockItem.md

@@ -6,7 +6,7 @@
 | ---- | ---- | ----------- | ----- |
 | **actions** | **String** | Comma-separated blocked actions (read, update) | [optional] |
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
-| **lock_ttl** | **Integer** | Lock TTL in minutes | [optional] |
+| **lock_ttl** | **Integer** | Lock TTL in minutes. | [optional] |
 | **name** | **String** | Item name |  |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |

data/docs/MigrationGeneral.md

@@ -6,10 +6,13 @@
 | ---- | ---- | ----------- | ----- |
 | **id** | **String** |  | [optional] |
 | **last_migration** | **String** |  | [optional] |
+| **last_modified** | **Time** |  | [optional] |
+| **message** | **String** |  | [optional] |
 | **name** | **String** |  | [optional] |
 | **new_name** | **String** |  | [optional] |
 | **prefix** | **String** |  | [optional] |
 | **protection_key** | **String** |  | [optional] |
+| **schedule** | **String** |  | [optional] |
 | **status** | **String** |  | [optional] |
 | **type** | **String** |  | [optional] |
 
@@ -21,10 +24,13 @@ require 'akeyless'
 instance = Akeyless::MigrationGeneral.new(
   id: null,
   last_migration: null,
+  last_modified: null,
+  message: null,
   name: null,
   new_name: null,
   prefix: null,
   protection_key: null,
+  schedule: null,
   status: null,
   type: null
 )

data/docs/PKICertificateIssueDetails.md

@@ -47,6 +47,8 @@
 | **province** | **Array<String>** |  | [optional] |
 | **renew_before_expiration_in_days** | **Integer** |  | [optional] |
 | **require_cn** | **Boolean** |  | [optional] |
+| **scep_challenge_mode** | **String** | ScepChallengeMode is the SCEP challenge mode. Stage 1 supports only \"static\". | [optional] |
+| **scep_enabled** | **Boolean** | ScepEnabled turns on SCEP enrollment for this dedicated PKI issuer. | [optional] |
 | **server_flag** | **Boolean** |  | [optional] |
 | **split_certificate_chain** | **Boolean** | SplitCertificateChain, when enabled, separates the leaf certificate from the certificate chain. | [optional] |
 | **street_address** | **Array<String>** |  | [optional] |
@@ -100,6 +102,8 @@ instance = Akeyless::PKICertificateIssueDetails.new(
   province: null,
   renew_before_expiration_in_days: null,
   require_cn: null,
+  scep_challenge_mode: null,
+  scep_enabled: null,
   server_flag: null,
   split_certificate_chain: null,
   street_address: null

data/docs/RequestAccess.md

@@ -9,6 +9,7 @@
 | **description** | **String** | Description of the object | [optional] |
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
 | **name** | **String** | Item name |  |
+| **requested_ttl** | **Integer** | Requested access TTL in minutes. Allowed range is 1 to 1440. Defaults to 60 when omitted. | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **type** | **String** | Item type |  |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
@@ -24,6 +25,7 @@ instance = Akeyless::RequestAccess.new(
   description: null,
   json: null,
   name: null,
+  requested_ttl: null,
   token: null,
   type: null,
   uid_token: null

data/docs/RotatedSecretCreateOkta.md

@@ -0,0 +1,82 @@
+# Akeyless::RotatedSecretCreateOkta
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **ara_enabled** | **Boolean** | Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs.  AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag. | [optional] |
+| **authentication_credentials** | **String** | Okta uses the SSWS token from the target. | [optional] |
+| **auto_rotate** | **String** |  | [optional] |
+| **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
+| **description** | **String** | Description of the object. | [optional] |
+| **enable_agentic_runtime_authority** | **Boolean** | EnableAra is the documented spelling of AraEnabled. Both set the same field; --ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working. | [optional] |
+| **enable_ai_quorum** | **Boolean** | Turns on AI Quorum checks for this item. | [optional] |
+| **input_rule** | **Array<String>** | Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) | [optional] |
+| **item_custom_fields** | **Hash<String, String>** | Additional custom fields to associate with the item | [optional] |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **key** | **String** |  | [optional] |
+| **lock_on_read** | **String** | Lock this secret after each successful value read | [optional] |
+| **lock_ttl** | **String** | Lock TTL in minutes | [optional] |
+| **max_versions** | **String** | Set the maximum number of versions, limited by the account settings defaults. | [optional] |
+| **name** | **String** | Rotated secret name |  |
+| **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
+| **password_length** | **String** | The length of the password to be generated | [optional] |
+| **rotate_on_unlock** | **String** | Rotate this secret after it is unlocked | [optional] |
+| **rotated_password** | **String** | rotated-username password (relevant only for rotator-type=password) | [optional] |
+| **rotated_username** | **String** | username to be rotated, if selected use-self-creds at rotator-creds-type, this username will try to rotate it's own password, if use-target-creds is selected, target credentials will be use to rotate the rotated-password (relevant only for rotator-type=password) | [optional] |
+| **rotation_event_in** | **Array<String>** | How many days before the rotation of the item would you like to be notified | [optional] |
+| **rotation_hour** | **Integer** |  | [optional] |
+| **rotation_interval** | **String** |  | [optional] |
+| **rotator_type** | **String** | The Okta rotator supports only password. | [optional] |
+| **skip_dry_run** | **Boolean** | If set, dry-run will be skipped [true/false] | [optional] |
+| **tags** | **Array<String>** | Add tags attached to this object | [optional] |
+| **target_name** | **String** | The Okta target name to associate. |  |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **use_capital_letters** | **String** | Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false] | [optional] |
+| **use_lower_letters** | **String** | Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false] | [optional] |
+| **use_numbers** | **String** | Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false] | [optional] |
+| **use_special_characters** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::RotatedSecretCreateOkta.new(
+  ara_enabled: null,
+  authentication_credentials: null,
+  auto_rotate: null,
+  delete_protection: null,
+  description: null,
+  enable_agentic_runtime_authority: null,
+  enable_ai_quorum: null,
+  input_rule: null,
+  item_custom_fields: null,
+  json: null,
+  key: null,
+  lock_on_read: null,
+  lock_ttl: null,
+  max_versions: null,
+  name: null,
+  output_rule: null,
+  password_length: null,
+  rotate_on_unlock: null,
+  rotated_password: null,
+  rotated_username: null,
+  rotation_event_in: null,
+  rotation_hour: null,
+  rotation_interval: null,
+  rotator_type: null,
+  skip_dry_run: null,
+  tags: null,
+  target_name: null,
+  token: null,
+  uid_token: null,
+  use_capital_letters: null,
+  use_lower_letters: null,
+  use_numbers: null,
+  use_special_characters: ! @ # $. [true/false]
+)
+```
+

data/docs/RotatedSecretUpdateOkta.md

@@ -0,0 +1,84 @@
+# Akeyless::RotatedSecretUpdateOkta
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **add_tag** | **Array<String>** | List of the new tags that will be attached to this item. To specify multiple tags use argument multiple times: --add-tag Tag1 --add-tag Tag2 | [optional] |
+| **ara_enabled** | **Boolean** | Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs.  AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag. | [optional] |
+| **authentication_credentials** | **String** | Okta uses the SSWS token from the target. | [optional] |
+| **auto_rotate** | **String** |  | [optional] |
+| **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
+| **description** | **String** | Description of the object | [optional][default to 'default_metadata'] |
+| **enable_agentic_runtime_authority** | **Boolean** | EnableAra is the documented spelling of AraEnabled. Both set the same field; --ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working. | [optional] |
+| **enable_ai_quorum** | **Boolean** | Turns on AI Quorum checks for this item. | [optional] |
+| **input_rule** | **Array<String>** | Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) | [optional] |
+| **item_custom_fields** | **Hash<String, String>** | Additional custom fields to associate with the item | [optional] |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **keep_prev_version** | **String** | Whether to keep previous version [true/false]. If not set, use default according to account settings | [optional] |
+| **key** | **String** |  | [optional] |
+| **lock_on_read** | **String** | Lock this secret after each successful value read | [optional] |
+| **lock_ttl** | **String** | Lock TTL in minutes | [optional] |
+| **max_versions** | **String** | Set the maximum number of versions, limited by the account settings defaults. | [optional] |
+| **name** | **String** | Rotated secret name |  |
+| **new_name** | **String** | New item name | [optional] |
+| **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
+| **password_length** | **String** | The length of the password to be generated | [optional] |
+| **rm_tag** | **Array<String>** | List of the existent tags that will be removed from this item. To specify multiple tags use argument multiple times: --rm-tag Tag1 --rm-tag Tag2 | [optional] |
+| **rotate_on_unlock** | **String** | Rotate this secret after it is unlocked | [optional] |
+| **rotated_password** | **String** | rotated-username password (relevant only for rotator-type=password) | [optional] |
+| **rotated_username** | **String** | username to be rotated, if selected use-self-creds at rotator-creds-type, this username will try to rotate it's own password, if use-target-creds is selected, target credentials will be use to rotate the rotated-password (relevant only for rotator-type=password) | [optional] |
+| **rotation_event_in** | **Array<String>** | How many days before the rotation of the item would you like to be notified | [optional] |
+| **rotation_hour** | **Integer** |  | [optional] |
+| **rotation_interval** | **String** |  | [optional] |
+| **skip_dry_run** | **Boolean** | If set, dry-run will be skipped [true/false] | [optional] |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **use_capital_letters** | **String** | Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false] | [optional] |
+| **use_lower_letters** | **String** | Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false] | [optional] |
+| **use_numbers** | **String** | Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false] | [optional] |
+| **use_special_characters** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::RotatedSecretUpdateOkta.new(
+  add_tag: null,
+  ara_enabled: null,
+  authentication_credentials: null,
+  auto_rotate: null,
+  delete_protection: null,
+  description: null,
+  enable_agentic_runtime_authority: null,
+  enable_ai_quorum: null,
+  input_rule: null,
+  item_custom_fields: null,
+  json: null,
+  keep_prev_version: null,
+  key: null,
+  lock_on_read: null,
+  lock_ttl: null,
+  max_versions: null,
+  name: null,
+  new_name: null,
+  output_rule: null,
+  password_length: null,
+  rm_tag: null,
+  rotate_on_unlock: null,
+  rotated_password: null,
+  rotated_username: null,
+  rotation_event_in: null,
+  rotation_hour: null,
+  rotation_interval: null,
+  skip_dry_run: null,
+  token: null,
+  uid_token: null,
+  use_capital_letters: null,
+  use_lower_letters: null,
+  use_numbers: null,
+  use_special_characters: ! @ # $. [true/false]
+)
+```
+

data/docs/Target.md

@@ -13,6 +13,7 @@
 | **creation_date** | **Time** |  | [optional] |
 | **delete_protection** | **Boolean** |  | [optional] |
 | **is_access_request_enabled** | **Boolean** |  | [optional] |
+| **last_access_request_status** | **String** |  | [optional] |
 | **last_version** | **Integer** |  | [optional] |
 | **locking_info** | [**LockingInfo**](LockingInfo.md) |  | [optional] |
 | **modification_date** | **Time** |  | [optional] |
@@ -42,6 +43,7 @@ instance = Akeyless::Target.new(
   creation_date: null,
   delete_protection: null,
   is_access_request_enabled: null,
+  last_access_request_status: null,
   last_version: null,
   locking_info: null,
   modification_date: null,

data/docs/TargetCreateDigiCert.md

@@ -8,7 +8,11 @@
 | **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
 | **description** | **String** | Description of the object | [optional] |
 | **digicert_url** | **String** | DigiCert ACME endpoint selector. Options: [us-production/eu-production/us-demo/eu-demo] | [optional][default to 'us-production'] |
+| **dns_propagation_wait** | **String** | Fixed wait after TXT publish (e.g. 30s, 2m). If omitted with pre-check on, no extra sleep (polling only). If omitted with --dns-skip-precheck, gateway uses 30s. DNS challenge only | [optional] |
+| **dns_resolvers** | **Array<String>** | Custom DNS resolvers (ip:port) for DNS-01. Repeat for multiple. If omitted, Lego uses /etc/resolv.conf or Google Public DNS. DNS challenge only | [optional] |
+| **dns_skip_precheck** | **Boolean** | Skip DNS TXT pre-check before CA validation. If --dns-propagation-wait is omitted and this flag is set, gateway waits 30s before CA validation. DNS challenge only | [optional] |
 | **dns_target_creds** | **String** | Name of existing cloud target for DNS credentials. Required when challenge type is dns. Supported providers: AWS, Azure, GCP, Cloudflare | [optional] |
+| **dns_timeout** | **String** | Per-query DNS lookup timeout during pre-check (e.g. 10s), not total poll time. If omitted with pre-check on, Lego library default applies (10s per query on Linux). Ignored when --dns-skip-precheck is set. DNS challenge only | [optional] |
 | **dns_zone** | **String** | Cloudflare DNS zone identifier. Required when DNS credentials target is Cloudflare | [optional] |
 | **eab_hmac_key** | **String** | External Account Binding HMAC key (required for ACME account bootstrap on create) | [optional] |
 | **eab_key_id** | **String** | External Account Binding key identifier (required for ACME account bootstrap on create) | [optional] |
@@ -37,7 +41,11 @@ instance = Akeyless::TargetCreateDigiCert.new(
   delete_protection: null,
   description: null,
   digicert_url: null,
+  dns_propagation_wait: null,
+  dns_resolvers: null,
+  dns_skip_precheck: null,
   dns_target_creds: null,
+  dns_timeout: null,
   dns_zone: null,
   eab_hmac_key: null,
   eab_key_id: null,

data/docs/TargetCreateGoogleTrust.md

@@ -7,7 +7,11 @@
 | **acme_challenge** | **String** | ACME challenge type. Options: [dns] | [optional][default to 'dns'] |
 | **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
 | **description** | **String** | Description of the object | [optional] |
+| **dns_propagation_wait** | **String** | Fixed wait after TXT publish (e.g. 30s, 2m). If omitted with pre-check on, no extra sleep (polling only). If omitted with --dns-skip-precheck, gateway uses 30s. DNS challenge only | [optional] |
+| **dns_resolvers** | **Array<String>** | Custom DNS resolvers (ip:port) for DNS-01. Repeat for multiple. If omitted, Lego uses /etc/resolv.conf or Google Public DNS. DNS challenge only | [optional] |
+| **dns_skip_precheck** | **Boolean** | Skip DNS TXT pre-check before CA validation. If --dns-propagation-wait is omitted and this flag is set, gateway waits 30s before CA validation. DNS challenge only | [optional] |
 | **dns_target_creds** | **String** | Name of existing cloud target for DNS credentials. Required when challenge type is dns. Supported providers: AWS, Azure, GCP, Cloudflare | [optional] |
+| **dns_timeout** | **String** | Per-query DNS lookup timeout during pre-check (e.g. 10s), not total poll time. If omitted with pre-check on, Lego library default applies (10s per query on Linux). Ignored when --dns-skip-precheck is set. DNS challenge only | [optional] |
 | **dns_zone** | **String** | Cloudflare DNS zone identifier. Required when DNS credentials target is Cloudflare | [optional] |
 | **eab_hmac_key** | **String** | External Account Binding HMAC key (required for ACME account bootstrap on create) | [optional] |
 | **eab_key_id** | **String** | External Account Binding key identifier (required for ACME account bootstrap on create) | [optional] |
@@ -36,7 +40,11 @@ instance = Akeyless::TargetCreateGoogleTrust.new(
   acme_challenge: null,
   delete_protection: null,
   description: null,
+  dns_propagation_wait: null,
+  dns_resolvers: null,
+  dns_skip_precheck: null,
   dns_target_creds: null,
+  dns_timeout: null,
   dns_zone: null,
   eab_hmac_key: null,
   eab_key_id: null,

data/docs/TargetCreateLdap.md

@@ -21,6 +21,7 @@
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **token_expiration** | **String** | Token expiration | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **username** | **String** | Username returned for Rotated Secrets. Use the format required by your application, such as sAMAccountName, with or without the domain. | [optional] |
 
 ## Example
 
@@ -44,7 +45,8 @@ instance = Akeyless::TargetCreateLdap.new(
   server_type: null,
   token: null,
   token_expiration: null,
-  uid_token: null
+  uid_token: null,
+  username: null
 )
 ```
 

data/docs/TargetCreateLetsEncrypt.md

@@ -7,7 +7,11 @@
 | **acme_challenge** | **String** |  | [optional][default to 'http'] |
 | **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
 | **description** | **String** | Description of the object | [optional] |
+| **dns_propagation_wait** | **String** | Fixed wait after TXT publish (e.g. 30s, 2m). If omitted with pre-check on, no extra sleep (polling only). If omitted with --dns-skip-precheck, gateway uses 30s. DNS challenge only | [optional] |
+| **dns_resolvers** | **Array<String>** | Custom DNS resolvers (ip:port) for DNS-01. Repeat for multiple. If omitted, Lego uses /etc/resolv.conf or Google Public DNS. DNS challenge only | [optional] |
+| **dns_skip_precheck** | **Boolean** | Skip DNS TXT pre-check before CA validation. If --dns-propagation-wait is omitted and this flag is set, gateway waits 30s before CA validation. DNS challenge only | [optional] |
 | **dns_target_creds** | **String** | Name of existing cloud target for DNS credentials. Required when acme-challenge=dns. Supported: AWS, Azure, GCP, Cloudflare targets | [optional] |
+| **dns_timeout** | **String** | Per-query DNS lookup timeout during pre-check (e.g. 10s), not total poll time. If omitted with pre-check on, Lego library default applies (10s per query on Linux). Ignored when --dns-skip-precheck is set. DNS challenge only | [optional] |
 | **dns_zone** | **String** | Cloudflare DNS zone identifier. Required when dns-target-creds points to Cloudflare target | [optional] |
 | **email** | **String** | Email address for ACME account registration |  |
 | **gcp_project** | **String** | GCP Cloud DNS: Project ID. Optional - can be derived from service account | [optional] |
@@ -34,7 +38,11 @@ instance = Akeyless::TargetCreateLetsEncrypt.new(
   acme_challenge: null,
   delete_protection: null,
   description: null,
+  dns_propagation_wait: null,
+  dns_resolvers: null,
+  dns_skip_precheck: null,
   dns_target_creds: null,
+  dns_timeout: null,
   dns_zone: null,
   email: null,
   gcp_project: null,

data/docs/TargetUpdateDigiCert.md

@@ -8,7 +8,11 @@
 | **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
 | **description** | **String** | Description of the object | [optional] |
 | **digicert_url** | **String** | DigiCert ACME endpoint selector. Options: [us-production/eu-production/us-demo/eu-demo] | [optional][default to 'us-production'] |
+| **dns_propagation_wait** | **String** | Fixed wait after TXT publish (e.g. 30s, 2m). If omitted with pre-check on, no extra sleep (polling only). If omitted with --dns-skip-precheck, gateway uses 30s. DNS challenge only | [optional] |
+| **dns_resolvers** | **Array<String>** | Custom DNS resolvers (ip:port) for DNS-01. Repeat for multiple. If omitted, Lego uses /etc/resolv.conf or Google Public DNS. DNS challenge only | [optional] |
+| **dns_skip_precheck** | **Boolean** | Skip DNS TXT pre-check before CA validation. If --dns-propagation-wait is omitted and this flag is set, gateway waits 30s before CA validation. DNS challenge only | [optional] |
 | **dns_target_creds** | **String** | Name of existing cloud target for DNS credentials. Required when challenge type is dns. Supported providers: AWS, Azure, GCP, Cloudflare | [optional] |
+| **dns_timeout** | **String** | Per-query DNS lookup timeout during pre-check (e.g. 10s), not total poll time. If omitted with pre-check on, Lego library default applies (10s per query on Linux). Ignored when --dns-skip-precheck is set. DNS challenge only | [optional] |
 | **dns_zone** | **String** | Cloudflare DNS zone identifier. Required when DNS credentials target is Cloudflare | [optional] |
 | **eab_hmac_key** | **String** | External Account Binding HMAC key (required for ACME account bootstrap on create) | [optional] |
 | **eab_key_id** | **String** | External Account Binding key identifier (required for ACME account bootstrap on create) | [optional] |
@@ -39,7 +43,11 @@ instance = Akeyless::TargetUpdateDigiCert.new(
   delete_protection: null,
   description: null,
   digicert_url: null,
+  dns_propagation_wait: null,
+  dns_resolvers: null,
+  dns_skip_precheck: null,
   dns_target_creds: null,
+  dns_timeout: null,
   dns_zone: null,
   eab_hmac_key: null,
   eab_key_id: null,

data/docs/TargetUpdateGoogleTrust.md

@@ -7,7 +7,11 @@
 | **acme_challenge** | **String** | ACME challenge type. Options: [dns] | [optional][default to 'dns'] |
 | **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
 | **description** | **String** | Description of the object | [optional] |
+| **dns_propagation_wait** | **String** | Fixed wait after TXT publish (e.g. 30s, 2m). If omitted with pre-check on, no extra sleep (polling only). If omitted with --dns-skip-precheck, gateway uses 30s. DNS challenge only | [optional] |
+| **dns_resolvers** | **Array<String>** | Custom DNS resolvers (ip:port) for DNS-01. Repeat for multiple. If omitted, Lego uses /etc/resolv.conf or Google Public DNS. DNS challenge only | [optional] |
+| **dns_skip_precheck** | **Boolean** | Skip DNS TXT pre-check before CA validation. If --dns-propagation-wait is omitted and this flag is set, gateway waits 30s before CA validation. DNS challenge only | [optional] |
 | **dns_target_creds** | **String** | Name of existing cloud target for DNS credentials. Required when challenge type is dns. Supported providers: AWS, Azure, GCP, Cloudflare | [optional] |
+| **dns_timeout** | **String** | Per-query DNS lookup timeout during pre-check (e.g. 10s), not total poll time. If omitted with pre-check on, Lego library default applies (10s per query on Linux). Ignored when --dns-skip-precheck is set. DNS challenge only | [optional] |
 | **dns_zone** | **String** | Cloudflare DNS zone identifier. Required when DNS credentials target is Cloudflare | [optional] |
 | **eab_hmac_key** | **String** | External Account Binding HMAC key (required for ACME account bootstrap on create) | [optional] |
 | **eab_key_id** | **String** | External Account Binding key identifier (required for ACME account bootstrap on create) | [optional] |
@@ -38,7 +42,11 @@ instance = Akeyless::TargetUpdateGoogleTrust.new(
   acme_challenge: null,
   delete_protection: null,
   description: null,
+  dns_propagation_wait: null,
+  dns_resolvers: null,
+  dns_skip_precheck: null,
   dns_target_creds: null,
+  dns_timeout: null,
   dns_zone: null,
   eab_hmac_key: null,
   eab_key_id: null,

data/docs/TargetUpdateLdap.md

@@ -23,6 +23,7 @@
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **token_expiration** | **String** | Token expiration | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **username** | **String** | Username returned for Rotated Secrets. Use the format required by your application, such as sAMAccountName, with or without the domain. | [optional] |
 
 ## Example
 
@@ -48,7 +49,8 @@ instance = Akeyless::TargetUpdateLdap.new(
   server_type: null,
   token: null,
   token_expiration: null,
-  uid_token: null
+  uid_token: null,
+  username: null
 )
 ```
 

data/docs/TargetUpdateLetsEncrypt.md

@@ -7,7 +7,11 @@
 | **acme_challenge** | **String** |  | [optional][default to 'http'] |
 | **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
 | **description** | **String** | Description of the object | [optional] |
+| **dns_propagation_wait** | **String** | Fixed wait after TXT publish (e.g. 30s, 2m). If omitted with pre-check on, no extra sleep (polling only). If omitted with --dns-skip-precheck, gateway uses 30s. DNS challenge only | [optional] |
+| **dns_resolvers** | **Array<String>** | Custom DNS resolvers (ip:port) for DNS-01. Repeat for multiple. If omitted, Lego uses /etc/resolv.conf or Google Public DNS. DNS challenge only | [optional] |
+| **dns_skip_precheck** | **Boolean** | Skip DNS TXT pre-check before CA validation. If --dns-propagation-wait is omitted and this flag is set, gateway waits 30s before CA validation. DNS challenge only | [optional] |
 | **dns_target_creds** | **String** | Name of existing cloud target for DNS credentials. Required when acme-challenge=dns. Supported: AWS, Azure, GCP, Cloudflare targets | [optional] |
+| **dns_timeout** | **String** | Per-query DNS lookup timeout during pre-check (e.g. 10s), not total poll time. If omitted with pre-check on, Lego library default applies (10s per query on Linux). Ignored when --dns-skip-precheck is set. DNS challenge only | [optional] |
 | **dns_zone** | **String** | Cloudflare DNS zone identifier. Required when dns-target-creds points to Cloudflare target | [optional] |
 | **email** | **String** | Email address for ACME account registration |  |
 | **gcp_project** | **String** | GCP Cloud DNS: Project ID. Optional - can be derived from service account | [optional] |
@@ -36,7 +40,11 @@ instance = Akeyless::TargetUpdateLetsEncrypt.new(
   acme_challenge: null,
   delete_protection: null,
   description: null,
+  dns_propagation_wait: null,
+  dns_resolvers: null,
+  dns_skip_precheck: null,
   dns_target_creds: null,
+  dns_timeout: null,
   dns_zone: null,
   email: null,
   gcp_project: null,

data/docs/UpdateLdapTarget.md

@@ -24,6 +24,7 @@
 | **token_expiration** | **String** | Token expiration | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
 | **update_version** | **Boolean** | Deprecated | [optional] |
+| **username** | **String** | Username returned for Rotated Secrets. Use the format required by your application, such as sAMAccountName, with or without the domain. | [optional] |
 
 ## Example
 
@@ -50,7 +51,8 @@ instance = Akeyless::UpdateLdapTarget.new(
   token: null,
   token_expiration: null,
   uid_token: null,
-  update_version: null
+  update_version: null,
+  username: null
 )
 ```
 

data/docs/UpdatePKICertIssuer.md

@@ -27,6 +27,7 @@
 | **destination_path** | **String** | A path in which to save generated certificates | [optional] |
 | **disable_wildcards** | **Boolean** | If set, generation of wildcard certificates will be disabled. | [optional] |
 | **enable_acme** | **Boolean** | If set, the cert issuer will support the acme protocol | [optional] |
+| **enable_scep** | **Boolean** | If set, the cert issuer will support the scep protocol | [optional] |
 | **expiration_event_in** | **Array<String>** | How many days before the expiration of the certificate would you like to be notified. | [optional] |
 | **gw_cluster_url** | **String** | The GW cluster URL to issue the certificate from. Required in Public CA mode, to allow CRLs on private CA, or to enable ACME | [optional] |
 | **is_ca** | **Boolean** | If set, the basic constraints extension will be added to certificate | [optional] |
@@ -47,6 +48,8 @@
 | **protect_certificates** | **Boolean** | Whether to protect generated certificates from deletion | [optional] |
 | **province** | **String** | A comma-separated list of provinces that will be set in the issued certificate | [optional] |
 | **rm_tag** | **Array<String>** | List of the existent tags that will be removed from this item | [optional] |
+| **scep_challenge_type** | **String** | SCEP challenge type. Only static is supported in this stage | [optional] |
+| **scep_password** | **String** | SCEP static challenge password. Request-only; never returned by Describe | [optional] |
 | **scheduled_renew** | **Integer** | Number of days before expiration to renew certificates | [optional] |
 | **server_flag** | **Boolean** | If set, certificates will be flagged for server auth use | [optional] |
 | **signer_key_name** | **String** | A key to sign the certificate with, required in Private CA mode | [optional] |
@@ -85,6 +88,7 @@ instance = Akeyless::UpdatePKICertIssuer.new(
   destination_path: null,
   disable_wildcards: null,
   enable_acme: null,
+  enable_scep: null,
   expiration_event_in: null,
   gw_cluster_url: null,
   is_ca: null,
@@ -105,6 +109,8 @@ instance = Akeyless::UpdatePKICertIssuer.new(
   protect_certificates: null,
   province: null,
   rm_tag: null,
+  scep_challenge_type: null,
+  scep_password: null,
   scheduled_renew: null,
   server_flag: null,
   signer_key_name: null,