---
title: "Update Cyberark Config"
method: POST
path: "/config_overrides/cyberark"
tags: ["config_overrides"]
---

# Update Cyberark Config

`POST /config_overrides/cyberark`

Update CyberArk Conjur secret manager configuration.
Sets environment variables, encrypts sensitive fields, and stores in DB.
Reinitializes the secret manager on this pod.

## Headers

- `litellm-changed-by` string, nullable — The litellm-changed-by header enables tracking of actions performed by authorized users on behalf of other users, providing an audit trail for accountability

## Request body

- CyberArkConfig — Configuration for CyberArk Conjur secret manager integration.
  - `client_cert` string, nullable — Path to the client TLS certificate for certificate-based authentication
  - `client_key` string, nullable — Path to the client TLS private key for certificate-based authentication
  - `cyberark_account` string, nullable — The Conjur organization account name
  - `cyberark_api_base` string, nullable — The address of the CyberArk Conjur server (e.g., https://conjur.example.com)
  - `cyberark_api_key` string, nullable — API key for Conjur API-key authentication
  - `cyberark_username` string, nullable — The Conjur username (login) to authenticate as
  - `refresh_interval` string, nullable — Auth token cache TTL in seconds (default: 300)
  - `ssl_verify` string, nullable — Set to false to disable SSL verification (e.g., for self-signed certificates)

## Response `200`

Successful Response

- object

## Other responses

- `422` — Validation Error

## Changes

- **2026-09-19** `c357baf422ab` — 2 info
  - api tag `config_overrides` added
  - api tag `Config Overrides` removed
- **2026-09-18** `082b5fabd909` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/flock/apis/litellm-api/changes/config_overrides/cyberark/post.md)

---

[API](https://skmtc.dev/flock/apis/litellm-api.md) · [All operations](https://skmtc.dev/flock/apis/litellm-api/llms.txt) · [OpenAPI document](https://skmtc.dev/flock/apis/litellm-api/revisions/731afbea6a1b?raw)