Attach

cURL

curl --request POST \
  --url https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "allowedNamespaces": "<string>",
  "allowedNames": "<string>",
  "templateId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "kubernetesHost": "<string>",
  "caCert": "<string>",
  "verifyTlsCertificate": true,
  "tokenReviewerJwt": "<string>",
  "allowedAudience": "<string>",
  "gatewayId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "gatewayPoolId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "accessTokenTrustedIps": [
    {
      "ipAddress": "0.0.0.0/0"
    },
    {
      "ipAddress": "::/0"
    }
  ],
  "accessTokenTTL": 2592000,
  "accessTokenMaxTTL": 2592000,
  "accessTokenNumUsesLimit": 0
}
'

import requests

url = "https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}"

payload = {
    "allowedNamespaces": "<string>",
    "allowedNames": "<string>",
    "templateId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "kubernetesHost": "<string>",
    "caCert": "<string>",
    "verifyTlsCertificate": True,
    "tokenReviewerJwt": "<string>",
    "allowedAudience": "<string>",
    "gatewayId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "gatewayPoolId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "accessTokenTrustedIps": [{ "ipAddress": "0.0.0.0/0" }, { "ipAddress": "::/0" }],
    "accessTokenTTL": 2592000,
    "accessTokenMaxTTL": 2592000,
    "accessTokenNumUsesLimit": 0
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    allowedNamespaces: '<string>',
    allowedNames: '<string>',
    templateId: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    kubernetesHost: '<string>',
    caCert: '<string>',
    verifyTlsCertificate: true,
    tokenReviewerJwt: '<string>',
    allowedAudience: '<string>',
    gatewayId: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    gatewayPoolId: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    accessTokenTrustedIps: [{ipAddress: '0.0.0.0/0'}, {ipAddress: '::/0'}],
    accessTokenTTL: 2592000,
    accessTokenMaxTTL: 2592000,
    accessTokenNumUsesLimit: 0
  })
};

fetch('https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'allowedNamespaces' => '<string>',
    'allowedNames' => '<string>',
    'templateId' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'kubernetesHost' => '<string>',
    'caCert' => '<string>',
    'verifyTlsCertificate' => true,
    'tokenReviewerJwt' => '<string>',
    'allowedAudience' => '<string>',
    'gatewayId' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'gatewayPoolId' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'accessTokenTrustedIps' => [
        [
                'ipAddress' => '0.0.0.0/0'
        ],
        [
                'ipAddress' => '::/0'
        ]
    ],
    'accessTokenTTL' => 2592000,
    'accessTokenMaxTTL' => 2592000,
    'accessTokenNumUsesLimit' => 0
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}"

	payload := strings.NewReader("{\n  \"allowedNamespaces\": \"<string>\",\n  \"allowedNames\": \"<string>\",\n  \"templateId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"kubernetesHost\": \"<string>\",\n  \"caCert\": \"<string>\",\n  \"verifyTlsCertificate\": true,\n  \"tokenReviewerJwt\": \"<string>\",\n  \"allowedAudience\": \"<string>\",\n  \"gatewayId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"gatewayPoolId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"accessTokenTrustedIps\": [\n    {\n      \"ipAddress\": \"0.0.0.0/0\"\n    },\n    {\n      \"ipAddress\": \"::/0\"\n    }\n  ],\n  \"accessTokenTTL\": 2592000,\n  \"accessTokenMaxTTL\": 2592000,\n  \"accessTokenNumUsesLimit\": 0\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"allowedNamespaces\": \"<string>\",\n  \"allowedNames\": \"<string>\",\n  \"templateId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"kubernetesHost\": \"<string>\",\n  \"caCert\": \"<string>\",\n  \"verifyTlsCertificate\": true,\n  \"tokenReviewerJwt\": \"<string>\",\n  \"allowedAudience\": \"<string>\",\n  \"gatewayId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"gatewayPoolId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"accessTokenTrustedIps\": [\n    {\n      \"ipAddress\": \"0.0.0.0/0\"\n    },\n    {\n      \"ipAddress\": \"::/0\"\n    }\n  ],\n  \"accessTokenTTL\": 2592000,\n  \"accessTokenMaxTTL\": 2592000,\n  \"accessTokenNumUsesLimit\": 0\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"allowedNamespaces\": \"<string>\",\n  \"allowedNames\": \"<string>\",\n  \"templateId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"kubernetesHost\": \"<string>\",\n  \"caCert\": \"<string>\",\n  \"verifyTlsCertificate\": true,\n  \"tokenReviewerJwt\": \"<string>\",\n  \"allowedAudience\": \"<string>\",\n  \"gatewayId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"gatewayPoolId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"accessTokenTrustedIps\": [\n    {\n      \"ipAddress\": \"0.0.0.0/0\"\n    },\n    {\n      \"ipAddress\": \"::/0\"\n    }\n  ],\n  \"accessTokenTTL\": 2592000,\n  \"accessTokenMaxTTL\": 2592000,\n  \"accessTokenNumUsesLimit\": 0\n}"

response = http.request(request)
puts response.read_body

{
  "identityKubernetesAuth": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z",
    "identityId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "allowedNamespaces": "<string>",
    "allowedNames": "<string>",
    "allowedAudience": "<string>",
    "caCert": "<string>",
    "accessTokenTTL": 7200,
    "accessTokenMaxTTL": 7200,
    "accessTokenNumUsesLimit": 0,
    "accessTokenTrustedIps": "<unknown>",
    "tokenReviewMode": "api",
    "kubernetesHost": "<string>",
    "gatewayId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "gatewayPoolId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "verifyTlsCertificate": false,
    "templateId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "isTokenReviewerJwtTemplateSourced": false,
    "tokenReviewerJwt": "<string>"
  }
}

{
  "reqId": "<string>",
  "statusCode": 400,
  "message": "<string>",
  "error": "<string>",
  "details": "<unknown>"
}

{
  "reqId": "<string>",
  "statusCode": 401,
  "message": "<string>",
  "error": "<string>"
}

{
  "reqId": "<string>",
  "statusCode": 403,
  "message": "<string>",
  "error": "<string>",
  "details": "<unknown>"
}

{
  "reqId": "<string>",
  "statusCode": 404,
  "message": "<string>",
  "error": "<string>"
}

{
  "reqId": "<string>",
  "statusCode": 422,
  "error": "<string>",
  "message": "<unknown>"
}

{
  "reqId": "<string>",
  "statusCode": 500,
  "message": "<string>",
  "error": "<string>"
}

POST

api

auth

kubernetes-auth

identities

{identityId}

cURL

curl --request POST \
  --url https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "allowedNamespaces": "<string>",
  "allowedNames": "<string>",
  "templateId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "kubernetesHost": "<string>",
  "caCert": "<string>",
  "verifyTlsCertificate": true,
  "tokenReviewerJwt": "<string>",
  "allowedAudience": "<string>",
  "gatewayId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "gatewayPoolId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "accessTokenTrustedIps": [
    {
      "ipAddress": "0.0.0.0/0"
    },
    {
      "ipAddress": "::/0"
    }
  ],
  "accessTokenTTL": 2592000,
  "accessTokenMaxTTL": 2592000,
  "accessTokenNumUsesLimit": 0
}
'

import requests

url = "https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}"

payload = {
    "allowedNamespaces": "<string>",
    "allowedNames": "<string>",
    "templateId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "kubernetesHost": "<string>",
    "caCert": "<string>",
    "verifyTlsCertificate": True,
    "tokenReviewerJwt": "<string>",
    "allowedAudience": "<string>",
    "gatewayId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "gatewayPoolId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "accessTokenTrustedIps": [{ "ipAddress": "0.0.0.0/0" }, { "ipAddress": "::/0" }],
    "accessTokenTTL": 2592000,
    "accessTokenMaxTTL": 2592000,
    "accessTokenNumUsesLimit": 0
}
headers = {
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
  body: JSON.stringify({
    allowedNamespaces: '<string>',
    allowedNames: '<string>',
    templateId: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    kubernetesHost: '<string>',
    caCert: '<string>',
    verifyTlsCertificate: true,
    tokenReviewerJwt: '<string>',
    allowedAudience: '<string>',
    gatewayId: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    gatewayPoolId: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    accessTokenTrustedIps: [{ipAddress: '0.0.0.0/0'}, {ipAddress: '::/0'}],
    accessTokenTTL: 2592000,
    accessTokenMaxTTL: 2592000,
    accessTokenNumUsesLimit: 0
  })
};

fetch('https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'allowedNamespaces' => '<string>',
    'allowedNames' => '<string>',
    'templateId' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'kubernetesHost' => '<string>',
    'caCert' => '<string>',
    'verifyTlsCertificate' => true,
    'tokenReviewerJwt' => '<string>',
    'allowedAudience' => '<string>',
    'gatewayId' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'gatewayPoolId' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'accessTokenTrustedIps' => [
        [
                'ipAddress' => '0.0.0.0/0'
        ],
        [
                'ipAddress' => '::/0'
        ]
    ],
    'accessTokenTTL' => 2592000,
    'accessTokenMaxTTL' => 2592000,
    'accessTokenNumUsesLimit' => 0
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}"

	payload := strings.NewReader("{\n  \"allowedNamespaces\": \"<string>\",\n  \"allowedNames\": \"<string>\",\n  \"templateId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"kubernetesHost\": \"<string>\",\n  \"caCert\": \"<string>\",\n  \"verifyTlsCertificate\": true,\n  \"tokenReviewerJwt\": \"<string>\",\n  \"allowedAudience\": \"<string>\",\n  \"gatewayId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"gatewayPoolId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"accessTokenTrustedIps\": [\n    {\n      \"ipAddress\": \"0.0.0.0/0\"\n    },\n    {\n      \"ipAddress\": \"::/0\"\n    }\n  ],\n  \"accessTokenTTL\": 2592000,\n  \"accessTokenMaxTTL\": 2592000,\n  \"accessTokenNumUsesLimit\": 0\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}")
  .header("Authorization", "Bearer <token>")
  .header("Content-Type", "application/json")
  .body("{\n  \"allowedNamespaces\": \"<string>\",\n  \"allowedNames\": \"<string>\",\n  \"templateId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"kubernetesHost\": \"<string>\",\n  \"caCert\": \"<string>\",\n  \"verifyTlsCertificate\": true,\n  \"tokenReviewerJwt\": \"<string>\",\n  \"allowedAudience\": \"<string>\",\n  \"gatewayId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"gatewayPoolId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"accessTokenTrustedIps\": [\n    {\n      \"ipAddress\": \"0.0.0.0/0\"\n    },\n    {\n      \"ipAddress\": \"::/0\"\n    }\n  ],\n  \"accessTokenTTL\": 2592000,\n  \"accessTokenMaxTTL\": 2592000,\n  \"accessTokenNumUsesLimit\": 0\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://us.infisical.com/api/v1/auth/kubernetes-auth/identities/{identityId}")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"allowedNamespaces\": \"<string>\",\n  \"allowedNames\": \"<string>\",\n  \"templateId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"kubernetesHost\": \"<string>\",\n  \"caCert\": \"<string>\",\n  \"verifyTlsCertificate\": true,\n  \"tokenReviewerJwt\": \"<string>\",\n  \"allowedAudience\": \"<string>\",\n  \"gatewayId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"gatewayPoolId\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"accessTokenTrustedIps\": [\n    {\n      \"ipAddress\": \"0.0.0.0/0\"\n    },\n    {\n      \"ipAddress\": \"::/0\"\n    }\n  ],\n  \"accessTokenTTL\": 2592000,\n  \"accessTokenMaxTTL\": 2592000,\n  \"accessTokenNumUsesLimit\": 0\n}"

response = http.request(request)
puts response.read_body

{
  "identityKubernetesAuth": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z",
    "identityId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "allowedNamespaces": "<string>",
    "allowedNames": "<string>",
    "allowedAudience": "<string>",
    "caCert": "<string>",
    "accessTokenTTL": 7200,
    "accessTokenMaxTTL": 7200,
    "accessTokenNumUsesLimit": 0,
    "accessTokenTrustedIps": "<unknown>",
    "tokenReviewMode": "api",
    "kubernetesHost": "<string>",
    "gatewayId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "gatewayPoolId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "verifyTlsCertificate": false,
    "templateId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "isTokenReviewerJwtTemplateSourced": false,
    "tokenReviewerJwt": "<string>"
  }
}

{
  "reqId": "<string>",
  "statusCode": 400,
  "message": "<string>",
  "error": "<string>",
  "details": "<unknown>"
}

{
  "reqId": "<string>",
  "statusCode": 401,
  "message": "<string>",
  "error": "<string>"
}

{
  "reqId": "<string>",
  "statusCode": 403,
  "message": "<string>",
  "error": "<string>",
  "details": "<unknown>"
}

{
  "reqId": "<string>",
  "statusCode": 404,
  "message": "<string>",
  "error": "<string>"
}

{
  "reqId": "<string>",
  "statusCode": 422,
  "error": "<string>",
  "message": "<unknown>"
}

{
  "reqId": "<string>",
  "statusCode": 500,
  "message": "<string>",
  "error": "<string>"
}

Authorizations

Authorization

string

header

required

An access token in Infisical

Path Parameters

identityId

string

required

The ID of the machine identity to attach the configuration onto.

Body

application/json

allowedNamespaces

string

required

The comma-separated list of trusted namespaces that service accounts must belong to authenticate with Infisical.

allowedNames

string

required

The comma-separated list of trusted service account names that can authenticate with Infisical.

templateId

string<uuid>

The ID of the Kubernetes auth template to source connection settings from. When provided, the host, CA certificate, token reviewer JWT, token review mode, gateway, and allowed audience are taken from the template and cannot be set individually.

kubernetesHost

string | null

The host string, host:port pair, or URL to the base of the Kubernetes API server.

Required string length: 1 - 255

caCert

string

The PEM-encoded CA certificate used to validate the Kubernetes API server's TLS certificate. Required when verifyTlsCertificate is true. Supplying a non-empty caCert always implies verifyTlsCertificate=true; explicitly setting the toggle to false in the same request is rejected.

verifyTlsCertificate

boolean

Whether to verify the Kubernetes API server's TLS certificate against the configured CA certificate. When true, caCert is required. When false, the connection is still over HTTPS but the API server's certificate is not verified, and caCert must be empty. If omitted, defaults to true when caCert is provided and false otherwise.

tokenReviewerJwt

string

Optional JWT token for accessing Kubernetes TokenReview API. If provided, this long-lived token will be used to validate service account tokens during authentication. If omitted, the client's own JWT will be used instead, which requires the client to have the system:auth-delegator ClusterRole binding.

tokenReviewMode

enum<string>

The mode to use for token review. Must be one of: 'api', 'gateway'. Defaults to 'api' when omitted. If gateway is selected, the gateway must be deployed in Kubernetes, and the gateway must have the system:auth-delegator ClusterRole binding.

Available options:

api,

gateway

allowedAudience

string

The optional audience claim that the service account JWT token must have to authenticate with Infisical.

Maximum string length: 1000

gatewayId

string<uuid> | null

The ID of the gateway to use when performing kubernetes API requests.

gatewayPoolId

string<uuid> | null

accessTokenTrustedIps

object[]

The IPs or CIDR ranges that access tokens can be used from.

Minimum array length: 1

Show child attributes

accessTokenTTL

integer

default:2592000

The lifetime for an access token in seconds.

Required range: 0 <= x <= 315360000

accessTokenMaxTTL

integer

default:2592000

The maximum lifetime for an access token in seconds.

Required range: 0 <= x <= 315360000

accessTokenNumUsesLimit

integer

default:0

The maximum number of times that an access token can be used.

Required range: x >= 0

Response

Default Response

identityKubernetesAuth

object

required

Show child attributes

Overview

Organization

Project

Shared

Identity auth

Secrets management

Certificate management

Secret scanning

Secret sharing

Infisical KMS

KMIP servers

Gateways

External migrations

Other

Authorizations

Path Parameters

Body

Response