akeyless 5.0.39 → 5.0.40

data/docs/DynamicSecretUpdateEks.md

@@ -23,7 +23,8 @@
 | **new_name** | **String** | Dynamic secret name | [optional] |
 | **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
 | **producer_encryption_key_name** | **String** | Dynamic producer encryption key | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
 | **secure_access_certificate_issuer** | **String** | Path to the SSH Certificate Issuer for your Akeyless Secure Access | [optional] |
 | **secure_access_cluster_endpoint** | **String** | The K8s cluster endpoint URL | [optional] |
@@ -63,6 +64,7 @@ instance = Akeyless::DynamicSecretUpdateEks.new(
   output_rule: null,
   producer_encryption_key_name: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_bastion_issuer: null,
   secure_access_certificate_issuer: null,
   secure_access_cluster_endpoint: null,

data/docs/DynamicSecretUpdateGke.md

@@ -21,7 +21,8 @@
 | **new_name** | **String** | Dynamic secret name | [optional] |
 | **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
 | **producer_encryption_key_name** | **String** | Dynamic producer encryption key | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
 | **secure_access_certificate_issuer** | **String** | Path to the SSH Certificate Issuer for your Akeyless Secure Access | [optional] |
 | **secure_access_cluster_endpoint** | **String** | The K8s cluster endpoint URL | [optional] |
@@ -59,6 +60,7 @@ instance = Akeyless::DynamicSecretUpdateGke.new(
   output_rule: null,
   producer_encryption_key_name: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_bastion_issuer: null,
   secure_access_certificate_issuer: null,
   secure_access_cluster_endpoint: null,

data/docs/DynamicSecretUpdateK8s.md

@@ -29,7 +29,8 @@
 | **new_name** | **String** | Dynamic secret name | [optional] |
 | **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
 | **producer_encryption_key_name** | **String** | Dynamic producer encryption key | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
 | **secure_access_certificate_issuer** | **String** | Path to the SSH Certificate Issuer for your Akeyless Secure Access | [optional] |
 | **secure_access_cluster_endpoint** | **String** | The K8s cluster endpoint URL | [optional] |
@@ -79,6 +80,7 @@ instance = Akeyless::DynamicSecretUpdateK8s.new(
   output_rule: null,
   producer_encryption_key_name: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_bastion_issuer: null,
   secure_access_certificate_issuer: null,
   secure_access_cluster_endpoint: null,

data/docs/EventForwarderCreateEmail.md

@@ -15,7 +15,7 @@
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
 | **key** | **String** | The name of a key that used to encrypt the EventForwarder secret value (if empty, the account default protectionKey key will be used) | [optional] |
 | **name** | **String** | EventForwarder name |  |
-| **override_url** | **String** | Override Akeyless default URL with your Gateway url (port 18888) | [optional] |
+| **override_url** | **String** | Override the Akeyless event link with the cluster URL of an active gateway in this account | [optional] |
 | **runner_type** | **String** |  |  |
 | **targets_event_source_locations** | **Array<String>** | Targets Event sources | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |

data/docs/EventForwarderUpdateEmail.md

@@ -17,7 +17,7 @@
 | **key** | **String** | The name of a key that used to encrypt the EventForwarder secret value (if empty, the account default protectionKey key will be used) | [optional] |
 | **name** | **String** | EventForwarder name |  |
 | **new_name** | **String** | New EventForwarder name | [optional] |
-| **override_url** | **String** | Override Akeyless default URL with your Gateway url (port 18888) | [optional] |
+| **override_url** | **String** | Override the Akeyless event link with the cluster URL of an active gateway in this account | [optional] |
 | **targets_event_source_locations** | **Array<String>** | Targets Event sources | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |

data/docs/GatewayCreateMigration.md

@@ -68,6 +68,7 @@
 | **password_length** | **String** | The length of the password to be generated (between 8 and 50). Relevant only for Active Directory migration when enable-password-policy is true. | [optional] |
 | **port_ranges** | **String** | A comma separated list of port ranges Examples: \"80,443\" or \"80,443,8080-8090\" or \"443\" | [optional][default to '443'] |
 | **protection_key** | **String** | The name of the key that protects the classic key value (if empty, the account default key will be used) | [optional] |
+| **schedule_sync** | **String** | Runs the migration automatically on the specified schedule in UTC. Accepts standard cron syntax. Limited to at most once every 24 hours. | [optional] |
 | **si_auto_rotate** | **String** | Enable/Disable automatic/recurrent rotation for migrated secrets. Default is false: only manual rotation is allowed for migrated secrets. If set to true, this command should be combined with --si-rotation-interval and --si-rotation-hour parameters (Relevant only for Server Inventory migration) | [optional] |
 | **si_rotation_hour** | **Integer** | The hour of the scheduled rotation in UTC (Relevant only for Server Inventory migration) | [optional] |
 | **si_rotation_interval** | **Integer** | The number of days to wait between every automatic rotation [1-365] (Relevant only for Server Inventory migration) | [optional] |
@@ -155,6 +156,7 @@ instance = Akeyless::GatewayCreateMigration.new(
   password_length: null,
   port_ranges: null,
   protection_key: null,
+  schedule_sync: null,
   si_auto_rotate: null,
   si_rotation_hour: null,
   si_rotation_interval: null,

data/docs/GatewayCreateProducerEks.md

@@ -21,7 +21,8 @@
 | **name** | **String** | Dynamic secret name |  |
 | **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
 | **producer_encryption_key_name** | **String** | Dynamic producer encryption key | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
 | **secure_access_certificate_issuer** | **String** | Path to the SSH Certificate Issuer for your Akeyless Secure Access | [optional] |
 | **secure_access_cluster_endpoint** | **String** | The K8s cluster endpoint URL | [optional] |
@@ -59,6 +60,7 @@ instance = Akeyless::GatewayCreateProducerEks.new(
   output_rule: null,
   producer_encryption_key_name: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_bastion_issuer: null,
   secure_access_certificate_issuer: null,
   secure_access_cluster_endpoint: null,

data/docs/GatewayCreateProducerGke.md

@@ -19,7 +19,8 @@
 | **name** | **String** | Dynamic secret name |  |
 | **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
 | **producer_encryption_key_name** | **String** | Dynamic producer encryption key | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
 | **secure_access_certificate_issuer** | **String** | Path to the SSH Certificate Issuer for your Akeyless Secure Access | [optional] |
 | **secure_access_cluster_endpoint** | **String** | The K8s cluster endpoint URL | [optional] |
@@ -55,6 +56,7 @@ instance = Akeyless::GatewayCreateProducerGke.new(
   output_rule: null,
   producer_encryption_key_name: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_bastion_issuer: null,
   secure_access_certificate_issuer: null,
   secure_access_cluster_endpoint: null,

data/docs/GatewayCreateProducerNativeK8S.md

@@ -27,7 +27,8 @@
 | **name** | **String** | Dynamic secret name |  |
 | **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
 | **producer_encryption_key_name** | **String** | Dynamic producer encryption key | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
 | **secure_access_certificate_issuer** | **String** | Path to the SSH Certificate Issuer for your Akeyless Secure Access | [optional] |
 | **secure_access_cluster_endpoint** | **String** | The K8s cluster endpoint URL | [optional] |
@@ -75,6 +76,7 @@ instance = Akeyless::GatewayCreateProducerNativeK8S.new(
   output_rule: null,
   producer_encryption_key_name: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_bastion_issuer: null,
   secure_access_certificate_issuer: null,
   secure_access_cluster_endpoint: null,

data/docs/GatewayUpdateMigration.md

@@ -70,6 +70,7 @@
 | **password_length** | **String** | The length of the password to be generated (between 8 and 50). Relevant only for Active Directory migration when enable-password-policy is true. | [optional] |
 | **port_ranges** | **String** | A comma separated list of port ranges Examples: \"80,443\" or \"80,443,8080-8090\" or \"443\" | [optional][default to '443'] |
 | **protection_key** | **String** | The name of the key that protects the classic key value (if empty, the account default key will be used) | [optional] |
+| **schedule_sync** | **String** | Runs the migration automatically on the specified schedule in UTC. Accepts standard cron syntax. Limited to at most once every 24 hours. | [optional] |
 | **si_auto_rotate** | **String** | Enable/Disable automatic/recurrent rotation for migrated secrets. Default is false: only manual rotation is allowed for migrated secrets. If set to true, this command should be combined with --si-rotation-interval and --si-rotation-hour parameters (Relevant only for Server Inventory migration) | [optional] |
 | **si_rotation_hour** | **Integer** | The hour of the scheduled rotation in UTC (Relevant only for Server Inventory migration) | [optional] |
 | **si_rotation_interval** | **Integer** | The number of days to wait between every automatic rotation [1-365] (Relevant only for Server Inventory migration) | [optional] |
@@ -158,6 +159,7 @@ instance = Akeyless::GatewayUpdateMigration.new(
   password_length: null,
   port_ranges: null,
   protection_key: null,
+  schedule_sync: null,
   si_auto_rotate: null,
   si_rotation_hour: null,
   si_rotation_interval: null,

data/docs/GatewayUpdateProducerEks.md

@@ -22,7 +22,8 @@
 | **new_name** | **String** | Dynamic secret name | [optional] |
 | **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
 | **producer_encryption_key_name** | **String** | Dynamic producer encryption key | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
 | **secure_access_certificate_issuer** | **String** | Path to the SSH Certificate Issuer for your Akeyless Secure Access | [optional] |
 | **secure_access_cluster_endpoint** | **String** | The K8s cluster endpoint URL | [optional] |
@@ -61,6 +62,7 @@ instance = Akeyless::GatewayUpdateProducerEks.new(
   output_rule: null,
   producer_encryption_key_name: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_bastion_issuer: null,
   secure_access_certificate_issuer: null,
   secure_access_cluster_endpoint: null,

data/docs/GatewayUpdateProducerGke.md

@@ -20,7 +20,8 @@
 | **new_name** | **String** | Dynamic secret name | [optional] |
 | **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
 | **producer_encryption_key_name** | **String** | Dynamic producer encryption key | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
 | **secure_access_certificate_issuer** | **String** | Path to the SSH Certificate Issuer for your Akeyless Secure Access | [optional] |
 | **secure_access_cluster_endpoint** | **String** | The K8s cluster endpoint URL | [optional] |
@@ -57,6 +58,7 @@ instance = Akeyless::GatewayUpdateProducerGke.new(
   output_rule: null,
   producer_encryption_key_name: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_bastion_issuer: null,
   secure_access_certificate_issuer: null,
   secure_access_cluster_endpoint: null,

data/docs/GatewayUpdateProducerNativeK8S.md

@@ -28,7 +28,8 @@
 | **new_name** | **String** | Dynamic secret name | [optional] |
 | **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
 | **producer_encryption_key_name** | **String** | Dynamic producer encryption key | [optional] |
-| **secure_access_allow_port_forwading** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
+| **secure_access_allow_port_forwading** | **Boolean** | Deprecated: old misspelled param, kept for backwards-compatibility. Hidden from help; use secure-access-allow-port-forwarding instead. | [optional] |
+| **secure_access_allow_port_forwarding** | **Boolean** | Enable Port forwarding while using CLI access | [optional] |
 | **secure_access_bastion_issuer** | **String** | Deprecated. use secure-access-certificate-issuer | [optional] |
 | **secure_access_certificate_issuer** | **String** | Path to the SSH Certificate Issuer for your Akeyless Secure Access | [optional] |
 | **secure_access_cluster_endpoint** | **String** | The K8s cluster endpoint URL | [optional] |
@@ -77,6 +78,7 @@ instance = Akeyless::GatewayUpdateProducerNativeK8S.new(
   output_rule: null,
   producer_encryption_key_name: null,
   secure_access_allow_port_forwading: null,
+  secure_access_allow_port_forwarding: null,
   secure_access_bastion_issuer: null,
   secure_access_certificate_issuer: null,
   secure_access_cluster_endpoint: null,

data/docs/GetGroupOutput.md

@@ -7,12 +7,18 @@
 | **account_id** | **String** |  | [optional] |
 | **creation_date** | **Time** |  | [optional] |
 | **description** | **String** |  | [optional] |
+| **granted_roles** | [**Array<GrantedRole>**](GrantedRole.md) | GrantedRoles are the roles a member of this group gets at login, through the group's akeyless_groups claim. Read-only, and filled only for the SCIM bearer that owns the group: a group name on its own says nothing about the access it carries, which is what a reviewer certifying the entitlement has to judge. | [optional] |
+| **granted_roles_known** | **Boolean** | GrantedRolesKnown is set when GrantedRoles was computed, so an empty list means \"grants no role\" rather than \"not computed\" (another caller, or an older UAM). | [optional] |
 | **group_alias** | **String** |  | [optional] |
 | **group_id** | **String** |  | [optional] |
 | **group_name** | **String** |  | [optional] |
 | **is_subclaims_with_operator** | **Boolean** |  | [optional] |
 | **modification_date** | **Time** |  | [optional] |
+| **scim_external_id** | **String** |  | [optional] |
+| **scim_managed** | **Boolean** |  | [optional] |
+| **scim_provisioned_access_id** | **String** |  | [optional] |
 | **user_assignments** | [**Array<AccessPermissionAssignment>**](AccessPermissionAssignment.md) |  | [optional] |
+| **version** | **String** | Version identifies the member assignments this group was read with. Pass it back as UpdateGroupInput.ExpectedVersion to make the update conditional. | [optional] |
 
 ## Example
 
@@ -23,12 +29,18 @@ instance = Akeyless::GetGroupOutput.new(
   account_id: null,
   creation_date: null,
   description: null,
+  granted_roles: null,
+  granted_roles_known: null,
   group_alias: null,
   group_id: null,
   group_name: null,
   is_subclaims_with_operator: null,
   modification_date: null,
-  user_assignments: null
+  scim_external_id: null,
+  scim_managed: null,
+  scim_provisioned_access_id: null,
+  user_assignments: null,
+  version: null
 )
 ```
 

data/docs/GetScimStatus.md

@@ -0,0 +1,24 @@
+# Akeyless::GetScimStatus
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **name** | **String** | SAML or OIDC auth method name |  |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::GetScimStatus.new(
+  json: null,
+  name: null,
+  token: null,
+  uid_token: null
+)
+```
+

data/docs/GrantedRole.md

@@ -0,0 +1,20 @@
+# Akeyless::GrantedRole
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **conditional** | **Boolean** | Conditional is set when the role association also needs something besides this group: another claim, or membership in another group (\" AND \"). | [optional] |
+| **name** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::GrantedRole.new(
+  conditional: null,
+  name: null
+)
+```
+

data/docs/Group.md

@@ -7,12 +7,18 @@
 | **account_id** | **String** |  | [optional] |
 | **creation_date** | **Time** |  | [optional] |
 | **description** | **String** |  | [optional] |
+| **granted_roles** | [**Array<GrantedRole>**](GrantedRole.md) | GrantedRoles are the roles a member of this group gets at login, through the group's akeyless_groups claim. Read-only, and filled only for the SCIM bearer that owns the group: a group name on its own says nothing about the access it carries, which is what a reviewer certifying the entitlement has to judge. | [optional] |
+| **granted_roles_known** | **Boolean** | GrantedRolesKnown is set when GrantedRoles was computed, so an empty list means \"grants no role\" rather than \"not computed\" (another caller, or an older UAM). | [optional] |
 | **group_alias** | **String** |  | [optional] |
 | **group_id** | **String** |  | [optional] |
 | **group_name** | **String** |  | [optional] |
 | **is_subclaims_with_operator** | **Boolean** |  | [optional] |
 | **modification_date** | **Time** |  | [optional] |
+| **scim_external_id** | **String** |  | [optional] |
+| **scim_managed** | **Boolean** |  | [optional] |
+| **scim_provisioned_access_id** | **String** |  | [optional] |
 | **user_assignments** | [**Array<AccessPermissionAssignment>**](AccessPermissionAssignment.md) |  | [optional] |
+| **version** | **String** | Version identifies the member assignments this group was read with. Pass it back as UpdateGroupInput.ExpectedVersion to make the update conditional. | [optional] |
 
 ## Example
 
@@ -23,12 +29,18 @@ instance = Akeyless::Group.new(
   account_id: null,
   creation_date: null,
   description: null,
+  granted_roles: null,
+  granted_roles_known: null,
   group_alias: null,
   group_id: null,
   group_name: null,
   is_subclaims_with_operator: null,
   modification_date: null,
-  user_assignments: null
+  scim_external_id: null,
+  scim_managed: null,
+  scim_provisioned_access_id: null,
+  user_assignments: null,
+  version: null
 )
 ```
 

data/docs/ListTargets.md

@@ -8,7 +8,7 @@
 | **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
 | **pagination_token** | **String** | Next page reference | [optional] |
 | **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
-| **type** | **Array<String>** | The target types list . In case it is empty, all types of targets will be returned. options: [hanadb cassandra aws ssh gke eks mysql mongodb snowflake mssql redshift artifactory azure rabbitmq k8s venafi gcp oracle dockerhub cloudflare ldap github chef web salesforce postgres] | [optional] |
+| **type** | **Array<String>** | The target types list . In case it is empty, all types of targets will be returned. options: [hanadb cassandra aws alicloud ssh gke eks mysql mongodb snowflake mssql redshift artifactory azure rabbitmq k8s venafi gcp oracle dockerhub cloudflare ldap github chef web salesforce postgres] | [optional] |
 | **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
 
 ## Example

data/docs/RotatedSecretCreateAliCloud.md

@@ -0,0 +1,90 @@
+# Akeyless::RotatedSecretCreateAliCloud
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **access_key** | **String** | AliCloud RAM user AccessKey secret to rotate (relevant only for rotator-type=access-key) | [optional] |
+| **access_key_id** | **String** | AliCloud RAM user AccessKey ID to rotate (relevant only for rotator-type=access-key). On create with authentication-credentials=use-target-creds it may be empty, then Akeyless creates the AccessKey on the RAM user of the target and manages it | [optional] |
+| **ara_enabled** | **Boolean** | Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs.  AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag. | [optional] |
+| **authentication_credentials** | **String** | The credentials to connect with use-user-creds/use-target-creds | [optional][default to 'use-user-creds'] |
+| **auto_rotate** | **String** |  | [optional] |
+| **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
+| **description** | **String** | Description of the object | [optional] |
+| **enable_agentic_runtime_authority** | **Boolean** | EnableAra is the documented spelling of AraEnabled. Both set the same field; --ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working. | [optional] |
+| **enable_ai_quorum** | **Boolean** | Turns on AI Quorum checks for this item. | [optional] |
+| **grace_rotation** | **String** | Enable graceful rotation (keep both versions temporarily). When enabled, a new secret version is created while the previous version is kept for the grace period, so both versions exist for a limited time. [true/false] | [optional] |
+| **grace_rotation_hour** | **Integer** | The Hour of the grace rotation in UTC | [optional] |
+| **grace_rotation_interval** | **String** | The number of days to wait before deleting the old key (must be bigger than rotation-interval) | [optional] |
+| **grace_rotation_timing** | **String** | When to create the new version relative to the rotation date [after/before] | [optional] |
+| **input_rule** | **Array<String>** | Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) | [optional] |
+| **item_custom_fields** | **Hash<String, String>** | Additional custom fields to associate with the item | [optional] |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **key** | **String** |  | [optional] |
+| **lock_on_read** | **String** | Lock this secret after each successful value read | [optional] |
+| **lock_ttl** | **String** | Lock TTL in minutes | [optional] |
+| **max_versions** | **String** | Set the maximum number of versions, limited by the account settings defaults. | [optional] |
+| **name** | **String** | Rotated secret name |  |
+| **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
+| **password_length** | **String** | The length of the password to be generated | [optional] |
+| **rotate_on_unlock** | **String** | Rotate this secret after it is unlocked | [optional] |
+| **rotation_event_in** | **Array<String>** | How many days before the rotation of the item would you like to be notified | [optional] |
+| **rotation_hour** | **Integer** |  | [optional] |
+| **rotation_interval** | **String** |  | [optional] |
+| **rotator_type** | **String** | The rotator type. options: [target/access-key] |  |
+| **skip_dry_run** | **Boolean** | If set, dry-run will be skipped [true/false] | [optional] |
+| **tags** | **Array<String>** | Add tags attached to this object | [optional] |
+| **target_name** | **String** | The target name to associate |  |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **use_capital_letters** | **String** | Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false] | [optional] |
+| **use_lower_letters** | **String** | Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false] | [optional] |
+| **use_numbers** | **String** | Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false] | [optional] |
+| **use_special_characters** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::RotatedSecretCreateAliCloud.new(
+  access_key: null,
+  access_key_id: null,
+  ara_enabled: null,
+  authentication_credentials: null,
+  auto_rotate: null,
+  delete_protection: null,
+  description: null,
+  enable_agentic_runtime_authority: null,
+  enable_ai_quorum: null,
+  grace_rotation: null,
+  grace_rotation_hour: null,
+  grace_rotation_interval: null,
+  grace_rotation_timing: null,
+  input_rule: null,
+  item_custom_fields: null,
+  json: null,
+  key: null,
+  lock_on_read: null,
+  lock_ttl: null,
+  max_versions: null,
+  name: null,
+  output_rule: null,
+  password_length: null,
+  rotate_on_unlock: null,
+  rotation_event_in: null,
+  rotation_hour: null,
+  rotation_interval: null,
+  rotator_type: null,
+  skip_dry_run: null,
+  tags: null,
+  target_name: null,
+  token: null,
+  uid_token: null,
+  use_capital_letters: null,
+  use_lower_letters: null,
+  use_numbers: null,
+  use_special_characters: ! @ # $. [true/false]
+)
+```
+

data/docs/RotatedSecretCreateAzure.md

@@ -6,7 +6,7 @@
 | ---- | ---- | ----------- | ----- |
 | **api_id** | **String** | API ID to rotate (relevant only for rotator-type=api-key) | [optional] |
 | **api_key** | **String** | API key to rotate (relevant only for rotator-type=api-key) | [optional] |
-| **application_id** | **String** | Id of the azure app that hold the serect to be rotated (relevant only for rotator-type=api-key & authentication-credentials=use-target-creds) | [optional] |
+| **application_id** | **String** | Id of the azure app that hold the serect to be rotated (relevant only for rotator-type=api-key) | [optional] |
 | **ara_enabled** | **Boolean** | Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs.  AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag. | [optional] |
 | **authentication_credentials** | **String** | The credentials to connect with use-user-creds/use-target-creds | [optional][default to 'use-user-creds'] |
 | **auto_rotate** | **String** |  | [optional] |

data/docs/RotatedSecretUpdateAliCloud.md

@@ -0,0 +1,92 @@
+# Akeyless::RotatedSecretUpdateAliCloud
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **access_key** | **String** | AliCloud RAM user AccessKey secret to rotate (relevant only for rotator-type=access-key) | [optional] |
+| **access_key_id** | **String** | AliCloud RAM user AccessKey ID to rotate (relevant only for rotator-type=access-key). On create with authentication-credentials=use-target-creds it may be empty, then Akeyless creates the AccessKey on the RAM user of the target and manages it | [optional] |
+| **add_tag** | **Array<String>** | List of the new tags that will be attached to this item | [optional] |
+| **ara_enabled** | **Boolean** | Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs.  AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag. | [optional] |
+| **authentication_credentials** | **String** | The credentials to connect with use-user-creds/use-target-creds | [optional][default to 'use-user-creds'] |
+| **auto_rotate** | **String** |  | [optional] |
+| **delete_protection** | **String** | Protection from accidental deletion of this object [true/false] | [optional] |
+| **description** | **String** | Description of the object | [optional][default to 'default_metadata'] |
+| **enable_agentic_runtime_authority** | **Boolean** | EnableAra is the documented spelling of AraEnabled. Both set the same field; --ara-enabled shipped first and stays as an undocumented alias so existing scripts and the Terraform provider keep working. | [optional] |
+| **enable_ai_quorum** | **Boolean** | Turns on AI Quorum checks for this item. | [optional] |
+| **grace_rotation** | **String** | Enable graceful rotation (keep both versions temporarily). When enabled, a new secret version is created while the previous version is kept for the grace period, so both versions exist for a limited time. [true/false] | [optional] |
+| **grace_rotation_hour** | **Integer** | The Hour of the grace rotation in UTC | [optional] |
+| **grace_rotation_interval** | **String** | The number of days to wait before deleting the old key (must be bigger than rotation-interval) | [optional] |
+| **grace_rotation_timing** | **String** | When to create the new version relative to the rotation date [after/before] | [optional] |
+| **input_rule** | **Array<String>** | Agentic input rule in name=...,rule=... format (e.g. name=rule1,rule=Sanitize input) | [optional] |
+| **item_custom_fields** | **Hash<String, String>** | Additional custom fields to associate with the item | [optional] |
+| **json** | **Boolean** | Set output format to JSON | [optional][default to false] |
+| **keep_prev_version** | **String** | Whether to keep previous version [true/false]. If not set, use default according to account settings | [optional] |
+| **key** | **String** |  | [optional] |
+| **lock_on_read** | **String** | Lock this secret after each successful value read | [optional] |
+| **lock_ttl** | **String** | Lock TTL in minutes | [optional] |
+| **max_versions** | **String** | Set the maximum number of versions, limited by the account settings defaults. | [optional] |
+| **name** | **String** | Rotated secret name |  |
+| **new_name** | **String** | New item name | [optional] |
+| **output_rule** | **Array<String>** | Agentic output rule in name=...,rule=... format (e.g. name=rule1,rule=Mask secrets) | [optional] |
+| **password_length** | **String** | The length of the password to be generated | [optional] |
+| **rm_tag** | **Array<String>** | List of the existent tags that will be removed from this item | [optional] |
+| **rotate_on_unlock** | **String** | Rotate this secret after it is unlocked | [optional] |
+| **rotation_event_in** | **Array<String>** | How many days before the rotation of the item would you like to be notified | [optional] |
+| **rotation_hour** | **Integer** |  | [optional] |
+| **rotation_interval** | **String** |  | [optional] |
+| **skip_dry_run** | **Boolean** | If set, dry-run will be skipped [true/false] | [optional] |
+| **token** | **String** | Authentication token (see `/auth` and `/configure`) | [optional] |
+| **uid_token** | **String** | The universal identity token, Required only for universal_identity authentication | [optional] |
+| **use_capital_letters** | **String** | Specifies whether the generated temporary password must contain at least one uppercase character from the ISO basic Latin alphabet (A to Z). [true/false] | [optional] |
+| **use_lower_letters** | **String** | Specifies whether the generated temporary password must contain at least one lowercase character from the ISO basic Latin alphabet (a to z). [true/false] | [optional] |
+| **use_numbers** | **String** | Specifies whether the generated temporary password must contain at least one numeric character (0 to 9). [true/false] | [optional] |
+| **use_special_characters** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::RotatedSecretUpdateAliCloud.new(
+  access_key: null,
+  access_key_id: null,
+  add_tag: null,
+  ara_enabled: null,
+  authentication_credentials: null,
+  auto_rotate: null,
+  delete_protection: null,
+  description: null,
+  enable_agentic_runtime_authority: null,
+  enable_ai_quorum: null,
+  grace_rotation: null,
+  grace_rotation_hour: null,
+  grace_rotation_interval: null,
+  grace_rotation_timing: null,
+  input_rule: null,
+  item_custom_fields: null,
+  json: null,
+  keep_prev_version: null,
+  key: null,
+  lock_on_read: null,
+  lock_ttl: null,
+  max_versions: null,
+  name: null,
+  new_name: null,
+  output_rule: null,
+  password_length: null,
+  rm_tag: null,
+  rotate_on_unlock: null,
+  rotation_event_in: null,
+  rotation_hour: null,
+  rotation_interval: null,
+  skip_dry_run: null,
+  token: null,
+  uid_token: null,
+  use_capital_letters: null,
+  use_lower_letters: null,
+  use_numbers: null,
+  use_special_characters: ! @ # $. [true/false]
+)
+```
+

data/docs/RotatedSecretUpdateAzure.md

@@ -7,7 +7,7 @@
 | **add_tag** | **Array<String>** | List of the new tags that will be attached to this item | [optional] |
 | **api_id** | **String** | API ID to rotate (relevant only for rotator-type=api-key) | [optional] |
 | **api_key** | **String** | API key to rotate (relevant only for rotator-type=api-key) | [optional] |
-| **application_id** | **String** | Id of the azure app that hold the serect to be rotated (relevant only for rotator-type=api-key & authentication-credentials=use-target-creds) | [optional] |
+| **application_id** | **String** | Id of the azure app that hold the serect to be rotated (relevant only for rotator-type=api-key) | [optional] |
 | **ara_enabled** | **Boolean** | Enable or disable Agentic Runtime Authority rule enforcement for this item. When false, user-defined input/output rules are stored but not enforced; the base security validation still runs.  AraEnabled is tri-state (nil/true/false), not a plain bool: it self-encodes its wire value (see akl.OptionalBool) so an explicit false survives the curl-proxy relay instead of being dropped like a default-false bool flag. | [optional] |
 | **authentication_credentials** | **String** | The credentials to connect with use-user-creds/use-target-creds | [optional][default to 'use-user-creds'] |
 | **auto_rotate** | **String** |  | [optional] |

data/docs/ScimSettings.md

@@ -0,0 +1,30 @@
+# Akeyless::ScimSettings
+
+## Properties
+
+| Name | Type | Description | Notes |
+| ---- | ---- | ----------- | ----- |
+| **bearer_access_id** | **String** | Access ID of the API Key auth method the IdP uses as the SCIM bearer. | [optional] |
+| **default_identity_type** | **String** |  | [optional] |
+| **enabled** | **Boolean** |  | [optional] |
+| **endpoint** | **String** |  | [optional] |
+| **gateway_url** | **String** | URL of the gateway that serves the SCIM endpoint to the IdP, for the private endpoint. | [optional] |
+| **provisioned_access_id** | **String** | ProvisionedAccessId and ProvisionedType are set on the bearer itself, not on the auth method it provisions. They point back to the SAML or OIDC auth method the bearer provisions, so the gateway can find that auth method from the bearer. | [optional] |
+| **provisioned_type** | **String** |  | [optional] |
+
+## Example
+
+```ruby
+require 'akeyless'
+
+instance = Akeyless::ScimSettings.new(
+  bearer_access_id: null,
+  default_identity_type: null,
+  enabled: null,
+  endpoint: null,
+  gateway_url: null,
+  provisioned_access_id: null,
+  provisioned_type: null
+)
+```
+