---
title: "GET /api/v1/cert-manager/syncs/options"
method: GET
path: "/api/v1/cert-manager/syncs/options"
tags: ["PKI Syncs"]
---

# GET /api/v1/cert-manager/syncs/options

`GET /api/v1/cert-manager/syncs/options`

List the available PKI Sync Options.

## Response `200`

Default Response

- object
  - `pkiSyncOptions` object[], required
    - `name` string, required
    - `connection` 'github' | 'github-radar' | 'aws' | 'databricks' | 'gcp' | 'azure-key-vault' | 'azure-app-configuration' | 'azure-client-secrets' | 'azure-devops' | 'azure-adcs' | 'adcs' | 'azure-dns' | 'humanitec' | 'terraform-cloud' | 'vercel' | 'postgres' | 'mssql' | 'mysql' | 'camunda' | 'windmill' | 'auth0' | 'hashicorp-vault' | 'ldap' | 'teamcity' | 'oci' | 'oracledb' | '1password' | 'heroku' | 'render' | 'flyio' | 'trigger-dev' | 'gitlab' | 'cloudflare' | 'dns-made-easy' | 'zabbix' | 'railway' | 'bitbucket' | 'checkly' | 'supabase' | 'digital-ocean' | 'netlify' | 'okta' | 'redis' | 'mongodb' | 'laravel-forge' | 'chef' | 'northflank' | 'octopus-deploy' | 'ssh' | 'dbt' | 'smb' | 'winrm' | 'open-router' | 'openai' | 'circleci' | 'azure-entra-id' | 'venafi' | 'venafi-tpp' | 'external-infisical' | 'doppler' | 'netscaler' | 'anthropic' | 'ovh' | 'devin' | 'ona' | 'digicert' | 'travis-ci' | 'salesforce' | 'snowflake' | 'datadog' | 'f5-big-ip' | 'godaddy' | 'convex' | 'rundeck' | 'hasura-cloud' | 'qovery' | 'cloud-66' | 'litellm' | 'fireworks' | 'kemp-loadmaster' | 'microsoft-intune' | 'nutanix-prism-central' | 'spacelift', required
    - `destination` 'azure-key-vault' | 'aws-certificate-manager' | 'aws-secrets-manager' | 'aws-elastic-load-balancer' | 'chef' | 'gcp-certificate-manager' | 'cloudflare-custom-certificate' | 'netscaler' | 'f5-big-ip' | 'kemp-loadmaster' | 'linux-server' | 'windows-server' | 'nutanix-prism-central', required
    - `canImportCertificates` boolean, required
    - `canRemoveCertificates` boolean, required
    - `canRunPostSyncCommand` boolean
    - `canRunHealthCheckCommand` boolean
    - `maxCertificates` number
    - `defaultCertificateNameSchema` string
    - `forbiddenCharacters` string
    - `allowedCharacterPattern` string
    - `maxCertificateNameLength` number
    - `minCertificateNameLength` number

## Other responses

- `400` — Default Response
- `401` — Default Response
- `403` — Default Response
- `404` — Default Response
- `422` — Default Response
- `500` — Default Response

## Changes

- **2026-08-28** `c339fd54e42e` — 1 warning
  - added the new `gcp-certificate-manager` enum value to the `pkiSyncOptions/items/destination` response property for the response status `200`
- **2026-08-27** `e15904efcbcd` — 1 info
  - added the optional property `pkiSyncOptions/items/canRunHealthCheckCommand` to the response with the `200` status
- **2026-08-05** `f10a4f8c1d41` — 1 info
  - added the optional property `pkiSyncOptions/items/canRunPostSyncCommand` to the response with the `200` status
- **2026-07-31** `edde28ab3c8c` — 2 warning
  - added the new `microsoft-intune` enum value to the `pkiSyncOptions/items/connection` response property for the response status `200`
  - added the new `spacelift` enum value to the `pkiSyncOptions/items/connection` response property for the response status `200`
- **2026-07-26** `53fe4d80973f` — 2 warning
  - added the new `kemp-loadmaster` enum value to the `pkiSyncOptions/items/connection` response property for the response status `200`
  - added the new `kemp-loadmaster` enum value to the `pkiSyncOptions/items/destination` response property for the response status `200`

[Full history](https://skmtc.dev/infisical/apis/infisical-api/changes/api/v1/cert-manager/syncs/options/get.md)

---

[API](https://skmtc.dev/infisical/apis/infisical-api.md) · [All operations](https://skmtc.dev/infisical/apis/infisical-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/infisical/infisical-api/revisions/763e38e78337/schema)