AKakeyless
Certificates

POST /create-ssh-cert-issuer

Changed on

Request

  • Base URL
    https://api.akeyless.io
  • URL
    https://api.akeyless.io/create-ssh-cert-issuer
  • Auth
    none declared

Request body

ProviderTypestring
allowed-usersstring required

Users allowed to fetch the certificate, e.g root,ubuntu

delete_protectionstring

Protection from accidental deletion of this object [true/false]

descriptionstring

Description of the object

extensionsobject

Signed certificates with extensions, e.g permit-port-forwarding=""

external-usernamestring

Externally provided username [true/false]

fixed-user-claim-keynamestring

For externally provided users, denotes the key-name of IdP claim to extract the username from (relevant only for external-username=true)

host-providerstring

Host provider type [explicit/target], Default Host provider is explicit, Relevant only for SRA items.

item-custom-fieldsobject

Additional custom fields to associate with the item

jsonboolean

Set output format to JSON

metadatastring

Deprecated - use description

namestring required

SSH certificate issuer name

principalsstring

Signed certificates with principal, e.g example_role1,example_role2

secure-access-apistring

Secure Access SSH control API endpoint. E.g. https://my.sra-server:9900

secure-access-bastion-apistring

Deprecated. use secure-access-api

secure-access-bastion-sshstring

Deprecated. use secure-access-ssh

secure-access-enablestring

Enable/Disable secure remote access [true/false]

secure-access-enforce-hosts-restrictionboolean

Enforce connections only to allowed SRA hosts

secure-access-gatewaystring
secure-access-hoststring[]

Target servers for connections (In case of Linked Target association, host(s) will inherit Linked Target hosts - Relevant only for Dynamic Secrets/producers)

secure-access-sshstring

Bastion's SSH server. E.g. my.sra-server:22

secure-access-ssh-creds-userstring

SSH username to connect to target server, must be in 'Allowed Users' list

secure-access-use-internal-bastionboolean

Deprecated. Use secure-access-use-internal-ssh-access

secure-access-use-internal-ssh-accessboolean

Use internal SSH Access

signer-key-namestring required

A key to sign the certificate with

tagstring[]

List of the tags attached to this key

targetstring[]

A list of targets to be associated with an SRA item, To specify multiple targets use argument multiple times

tokenstring

Authentication token (see /auth and /configure)

ttlinteger required

The requested Time To Live for the certificate, in seconds

uid-tokenstring

The universal identity token, Required only for universal_identity authentication

Response

createSSHCertIssuerResponse wraps response body.

namestring

Changes