-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathintegration-manifest.json
More file actions
134 lines (133 loc) · 6.75 KB
/
integration-manifest.json
File metadata and controls
134 lines (133 loc) · 6.75 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
{
"$schema": "https://keyfactor.github.io/v2/integration-manifest-schema.json",
"integration_type": "orchestrator",
"name": "GCP Secret Manager Universal Orchestrator",
"status": "production",
"link_github": true,
"update_catalog": true,
"support_level": "kf-supported",
"release_dir": "GCPSecretManager/bin/Release",
"release_project": "GCPSecretManager/GCPSecretManager.csproj",
"description": "This orchestrator extension manages certificates stored as secrets in Google Secret Manager.",
"about": {
"orchestrator": {
"UOFramework": "10.4",
"pam_support": true,
"keyfactor_platform_version": "10.4",
"store_types": [
{
"Name": "GCPScrtMgr",
"ShortName": "GCPScrtMgr",
"Capability": "GCPScrtMgr",
"ServerRequired": false,
"BlueprintAllowed": true,
"CustomAliasAllowed": "Required",
"PowerShell": false,
"PrivateKeyAllowed": "Optional",
"SupportedOperations": {
"Add": true,
"Create": false,
"Discovery": false,
"Enrollment": false,
"Remove": true
},
"PasswordOptions": {
"EntrySupported": false,
"StoreRequired": true,
"Style": "Default",
"StorePassword": {
"Description": "Password used to encrypt the private key of ALL certificate secrets. Please see [Certificate Encryption Details](#certificate-encryption-details) for more information",
"IsPAMEligible": true
}
},
"Properties": [
{
"Name": "PasswordSecretSuffix",
"DisplayName": "Password Secret Location Suffix",
"Type": "String",
"DependsOn": "",
"DefaultValue": "",
"Required": false,
"IsPAMEligible": false,
"Description": "If storing a certificate with an encrypted private key, this is the suffix to add to the certificate (secret) alias name where the encrypted private key password will be stored. Please see [Certificate Encryption Details](#certificate-encryption-details) for more information"
},
{
"Name": "IncludeChain",
"DisplayName": "Include Chain",
"Type": "Bool",
"DependsOn": "",
"DefaultValue": "True",
"Required": false,
"IsPAMEligible": false,
"Description": "Determines whether to include the certificate chain when adding a certificate as a secret."
}
],
"EntryParameters": [
{
"Name": "tags",
"DisplayName": "Tags",
"Type": "String",
"Description": "An optional list of one-to-many comma delimited Organization level tag Key:Value combinations. Values should be entered as tagKey1:tagVal1,tagKey2:tagVal2,...tagKeyN:tagValN",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
}
},
{
"Name": "labels",
"DisplayName": "Labels",
"Type": "String",
"Description": "An optional list of one-to-many comma delimited label key:value pairs to assign to the secret. Values should be entered as key1:value1,key2:value2,...,keyN:valueN.",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
}
},
{
"Name": "replicationRegions",
"DisplayName": "Replication Regions",
"Type": "String",
"Description": "An optional list of valid comma delimited GCP regions to replicate secrets to (user managed replication). If left blank, GCP default behavior (automatic replication) will be executed. Values can also be entered as region1:path1,region2:path2,...,regionN:pathN if providing a kmsKeyName path for each region is desired.",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
}
},
{
"Name": "ttlDuration",
"DisplayName": "TTL Duration",
"Type": "String",
"Description": "An optional number of days to provide after which a secret will be deleted. If not provided, secret will stay around until explicitly deleted.",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
}
},
{
"Name": "versionDestroyTtlDuration",
"DisplayName": "Version Destroy TTL Duration",
"Type": "String",
"Description": "An optional number of days to provide after a secret is destroyed that its versions will stay around. If not provided, versions will be permanently destroyed when the secret is destroyed.",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
}
}
],
"ClientMachineDescription": "Not used",
"StorePathDescription": "The Project ID of the Google Secret Manager being managed."
}
]
}
}
}