gatewayCreateK8SAuth is a command that creates k8s auth config
Name | Type | Description | Notes |
---|---|---|---|
access_id | str | The access ID of the Kubernetes auth method | |
cluster_api_type | str | Cluster access type. options: [native_k8s, rancher] | [optional] [default to 'native_k8s'] |
disable_issuer_validation | str | Disable issuer validation [true/false] | [optional] |
json | bool | Set output format to JSON | [optional] [default to False] |
k8s_auth_type | str | K8S auth type [token/certificate]. (relevant for "native_k8s" only) | [optional] [default to 'token'] |
k8s_ca_cert | str | The CA Certificate (base64 encoded) to use to call into the kubernetes API server | [optional] |
k8s_client_certificate | str | Content of the k8 client certificate (PEM format) in a Base64 format (relevant for "native_k8s" only) | [optional] |
k8s_client_key | str | Content of the k8 client private key (PEM format) in a Base64 format (relevant for "native_k8s" only) | [optional] |
k8s_host | str | The URL of the kubernetes API server | |
k8s_issuer | str | The Kubernetes JWT issuer name. K8SIssuer is the claim that specifies who issued the Kubernetes token | [optional] [default to 'kubernetes/serviceaccount'] |
name | str | K8S Auth config name | |
rancher_api_key | str | The api key used to access the TokenReview API to validate other JWTs (relevant for "rancher" only) | [optional] |
rancher_cluster_id | str | The cluster id as define in rancher (relevant for "rancher" only) | [optional] |
signing_key | str | The private key (base64 encoded) associated with the public key defined in the Kubernetes auth | |
token | str | Authentication token (see `/auth` and `/configure`) | [optional] |
token_exp | int | Time in seconds of expiration of the Akeyless Kube Auth Method token | [optional] [default to 300] |
token_reviewer_jwt | str | A Kubernetes service account JWT used to access the TokenReview API to validate other JWTs (relevant for "native_k8s" only). If not set, the JWT submitted in the authentication process will be used to access the Kubernetes TokenReview API. | [optional] |
uid_token | str | The universal identity token, Required only for universal_identity authentication | [optional] |
use_gw_service_account | bool | Use the GW's service account | [optional] |