From fd4f2d8e352eb09e970ca43423994edc4eabc84b Mon Sep 17 00:00:00 2001 From: Achille Mascia Date: Wed, 26 Nov 2025 17:37:04 +0100 Subject: [PATCH] chore: remove signature verification --- .mise-tasks/install-helm-plugins | 2 +- charts/ggscout/values.schema.json | 507 +++ docs/index.html | 6534 ++++++++++++++++++++--------- 3 files changed, 5134 insertions(+), 1909 deletions(-) diff --git a/.mise-tasks/install-helm-plugins b/.mise-tasks/install-helm-plugins index b06c283..7819305 100755 --- a/.mise-tasks/install-helm-plugins +++ b/.mise-tasks/install-helm-plugins @@ -5,5 +5,5 @@ IFS=$'\n\t' plugins=$(helm plugin list) if ! echo "$plugins" | grep -q 'unittest'; then - helm plugin install https://github.com/helm-unittest/helm-unittest.git + helm plugin install https://github.com/helm-unittest/helm-unittest.git --verify=false # `verify` flag was added in helm v4 - topic is dicussed here https://github.com/helm-unittest/helm-unittest/issues/777 fi diff --git a/charts/ggscout/values.schema.json b/charts/ggscout/values.schema.json index f3c9e1c..24e283f 100644 --- a/charts/ggscout/values.schema.json +++ b/charts/ggscout/values.schema.json @@ -51,6 +51,93 @@ } }, "$defs": { + "APIAuth": { + "type": "object", + "required": [ + "login", + "api_key" + ], + "properties": { + "api_key": { + "description": "API key for authenticating", + "type": "string" + }, + "login": { + "description": "Login (including host/ in case of a workload)", + "type": "string" + } + } + }, + "AWSIAMConfig": { + "type": "object", + "required": [ + "aws_account_id" + ], + "properties": { + "aws_account_id": { + "type": "string" + }, + "env": { + "anyOf": [ + { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Env" + }, + { + "const": null, + "nullable": true + } + ] + }, + "exclude": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "external_id": { + "type": "string", + "nullable": true + }, + "include": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "mode": { + "description": "The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.", + "type": "string", + "enum": [ + "read", + "write", + "read/write" + ], + "default": "read" + }, + "profile_name": { + "type": "string", + "nullable": true + }, + "resource_discovery": { + "description": "Optional resource discovery configuration\nIf not specified, resource discovery is disabled", + "anyOf": [ + { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/ResourceDiscoveryConfig" + }, + { + "const": null, + "nullable": true + } + ] + }, + "role_arn": { + "type": "string", + "nullable": true + } + } + }, "Accessibility": { "type": "string", "enum": [ @@ -523,6 +610,154 @@ } } }, + "ConjurConfig": { + "type": "object", + "oneOf": [ + { + "type": "object", + "required": [ + "username", + "password", + "auth_mode", + "server_url", + "account", + "fetch_all_versions" + ], + "properties": { + "password": { + "description": "Secret for authenticating", + "type": "string" + }, + "username": { + "type": "string" + }, + "auth_mode": { + "type": "string", + "const": "user" + }, + "accept_invalid_certs": { + "title": "Accept invalid/self-signed certificates (for development only)", + "default": false, + "type": "boolean" + }, + "account": { + "title": "The Conjur account name", + "type": "string" + }, + "env": { + "anyOf": [ + { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Env" + }, + { + "const": null, + "nullable": true + } + ] + }, + "exclude": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "fetch_all_versions": { + "title": "Whether or not to collect all secret versions", + "type": "boolean" + }, + "include": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "mode": { + "default": "read", + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Mode" + }, + "server_url": { + "title": "The Conjur server URL", + "type": "string" + } + }, + "title": "User authentication" + }, + { + "type": "object", + "required": [ + "login", + "api_key", + "auth_mode", + "server_url", + "account", + "fetch_all_versions" + ], + "properties": { + "api_key": { + "description": "API key for authenticating", + "type": "string" + }, + "login": { + "description": "Login (including host/ in case of a workload)", + "type": "string" + }, + "auth_mode": { + "type": "string", + "const": "api" + }, + "accept_invalid_certs": { + "title": "Accept invalid/self-signed certificates (for development only)", + "default": false, + "type": "boolean" + }, + "account": { + "title": "The Conjur account name", + "type": "string" + }, + "env": { + "anyOf": [ + { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Env" + }, + { + "const": null, + "nullable": true + } + ] + }, + "exclude": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "fetch_all_versions": { + "title": "Whether or not to collect all secret versions", + "type": "boolean" + }, + "include": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "mode": { + "default": "read", + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Mode" + }, + "server_url": { + "title": "The Conjur server URL", + "type": "string" + } + }, + "title": "API authentication" + } + ] + }, "ConjurWorkloadAuth": { "type": "object", "required": [ @@ -963,6 +1198,83 @@ } ] }, + { + "type": "object", + "required": [ + "aws_account_id", + "type" + ], + "properties": { + "aws_account_id": { + "type": "string" + }, + "env": { + "anyOf": [ + { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Env" + }, + { + "const": null, + "nullable": true + } + ] + }, + "exclude": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "external_id": { + "type": "string", + "nullable": true + }, + "include": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "mode": { + "description": "The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.", + "type": "string", + "enum": [ + "read", + "write", + "read/write" + ], + "default": "read" + }, + "profile_name": { + "type": "string", + "nullable": true + }, + "resource_discovery": { + "description": "Optional resource discovery configuration\nIf not specified, resource discovery is disabled", + "anyOf": [ + { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/ResourceDiscoveryConfig" + }, + { + "const": null, + "nullable": true + } + ] + }, + "role_arn": { + "type": "string", + "nullable": true + }, + "type": { + "type": "string", + "const": "awsiam" + } + }, + "title": "AWS IAM", + "description": "AWS IAM fetcher for IAM users, roles, groups, and policies" + }, { "type": "object", "required": [ @@ -1409,6 +1721,164 @@ "title": "Conjur Cloud", "description": "Conjur Cloud fetcher" }, + { + "type": "object", + "oneOf": [ + { + "type": "object", + "required": [ + "username", + "password", + "auth_mode", + "server_url", + "account", + "fetch_all_versions", + "type" + ], + "properties": { + "password": { + "description": "Secret for authenticating", + "type": "string" + }, + "username": { + "type": "string" + }, + "auth_mode": { + "type": "string", + "const": "user" + }, + "accept_invalid_certs": { + "title": "Accept invalid/self-signed certificates (for development only)", + "default": false, + "type": "boolean" + }, + "account": { + "title": "The Conjur account name", + "type": "string" + }, + "env": { + "anyOf": [ + { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Env" + }, + { + "const": null, + "nullable": true + } + ] + }, + "exclude": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "fetch_all_versions": { + "title": "Whether or not to collect all secret versions", + "type": "boolean" + }, + "include": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "mode": { + "default": "read", + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Mode" + }, + "server_url": { + "title": "The Conjur server URL", + "type": "string" + }, + "type": { + "type": "string", + "const": "conjur" + } + }, + "title": "User authentication" + }, + { + "type": "object", + "required": [ + "login", + "api_key", + "auth_mode", + "server_url", + "account", + "fetch_all_versions", + "type" + ], + "properties": { + "api_key": { + "description": "API key for authenticating", + "type": "string" + }, + "login": { + "description": "Login (including host/ in case of a workload)", + "type": "string" + }, + "auth_mode": { + "type": "string", + "const": "api" + }, + "accept_invalid_certs": { + "title": "Accept invalid/self-signed certificates (for development only)", + "default": false, + "type": "boolean" + }, + "account": { + "title": "The Conjur account name", + "type": "string" + }, + "env": { + "anyOf": [ + { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Env" + }, + { + "const": null, + "nullable": true + } + ] + }, + "exclude": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "fetch_all_versions": { + "title": "Whether or not to collect all secret versions", + "type": "boolean" + }, + "include": { + "type": "array", + "items": { + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/FilteringRule" + }, + "nullable": true + }, + "mode": { + "default": "read", + "$ref": "#/definitions/https%3A~1~1gitguardian.com~1inventory-config/$defs/Mode" + }, + "server_url": { + "title": "The Conjur server URL", + "type": "string" + }, + "type": { + "type": "string", + "const": "conjur" + } + }, + "title": "API authentication" + } + ] + }, { "type": "object", "oneOf": [ @@ -2144,6 +2614,27 @@ "read/write" ] }, + "ResourceDiscoveryConfig": { + "description": "Configuration for AWS resource discovery\n\nResource discovery fetches actual AWS resources (S3 buckets, EC2 instances, etc.)\nto match against IAM policy ResourceSelectors and create GrantsAccessTo edges.\n\n# Default Behavior\nIf `resource_discovery` is not specified in config, resource discovery is disabled.\n\n# Examples\n```toml\n# Enable resource discovery for all supported services\n[sources.aws-iam.resource_discovery]\nenabled = true\n\n# Enable but exclude specific services (performance optimization)\n[sources.aws-iam.resource_discovery]\nenabled = true\nexclude_services = [\"ec2\"] # EC2 has too many instances\n```", + "type": "object", + "required": [ + "enabled" + ], + "properties": { + "enabled": { + "description": "Enable resource discovery", + "type": "boolean" + }, + "exclude_services": { + "description": "Services to exclude from resource discovery (opt-out model)\nIf not specified, all supported services will be fetched.\nExample: [\"ec2\", \"lambda\"] to skip EC2 and Lambda resources", + "type": "array", + "items": { + "type": "string" + }, + "nullable": true + } + } + }, "RuleElement": { "type": "string" }, @@ -2204,6 +2695,22 @@ "nullable": true } } + }, + "UserAuth": { + "type": "object", + "required": [ + "username", + "password" + ], + "properties": { + "password": { + "description": "Secret for authenticating", + "type": "string" + }, + "username": { + "type": "string" + } + } } } }, diff --git a/docs/index.html b/docs/index.html index 3aa87b5..08f0650 100644 --- a/docs/index.html +++ b/docs/index.html @@ -327,41 +327,51 @@

AWS Secrets Manager + >AWS IAM
  • GCP Secret Manager + >AWS Secrets Manager
  • Azure Key Vault + >GCP Secret Manager
  • GitLab CI + >Azure Key Vault
  • GitLab Personal Access Tokens + >GitLab CI
  • Conjur Cloud + >GitLab Personal Access Tokens
  • Akeyless + >Conjur Cloud
  • Conjur +
  • + Akeyless +
  • + Delinea Secret Server
    • d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - AWS Secrets Manager

    AWS Secrets Manager

    Type: object
    -

    AWS Secrets Manager fetcher

    + AWS IAM

    AWS IAM

    Type: object
    +

    AWS IAM fetcher for IAM users, roles, groups, and policies

     @@ -4368,6 +4378,67 @@

    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 2 + + + + aws_account_id
    Type: string
    + + + + + + + +
    +
    +
    +
    @@ -4670,18 +4741,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -4719,7 +4790,7 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    + external_id
    Type: string
    @@ -4970,18 +5041,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -5019,16 +5090,24 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - regions

    Type: array of string
    - - - - - - - No Additional Items

    Each item of this array must be:

    -
    -
    + resource_discovery

    +

    Optional resource discovery configuration
    +If not specified, resource discovery is disabled

    +

    + +

    +
    root @@ -5066,39 +5145,71 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - regions + resource_discovery + + + + anyOf - regions items

    Type: string
    + ResourceDiscoveryConfig
    Type: object
    +
    +

    Configuration for AWS resource discovery

    + +

    Resource discovery fetches actual AWS resources (S3 buckets, EC2 instances, etc.)
    +to match against IAM policy ResourceSelectors and create GrantsAccessTo edges.

    + +

    Default Behavior

    + +

    If resource_discovery is not specified in config, resource discovery is disabled.

    +

    Examples

    + +
    +
    # Enable resource discovery for all supported services
+[sources.aws-iam.resource_discovery]
+enabled = true
+
+# Enable but exclude specific services (performance optimization)
+[sources.aws-iam.resource_discovery]
+enabled = true
+exclude_services = ["ec2"]  # EC2 has too many instances
+
    +
    + +
    +
    + +
    + + -
    -
    -
    -
    -
    -
    -
    +
    -
    +

    - +

    -
    +
    root @@ -5129,80 +5240,59 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - AWS Secrets Manager - - - - type

    Type: const
    -Specific value: "awssecretsmanager" - - - - - - -
    -
    -
    -
    -
    - - -
    root + item 2 - sources + resource_discovery - additionalProperties + anyOf - oneOf + item 0 - GCP Secret Manager

    GCP Secret Manager

    Type: object
    -

    GCP Secret Manager fetcher

    + enabled
    Type: boolean
    +

    Enable resource discovery

     - - -
    +
    +
    +
    +
    +
    -
    +

    - +

    -
    +
    root @@ -5233,111 +5323,48 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 - - - - auth

    Type: object Default: {"auth_mode": "application_default"}
    -

    Authentication method for GCP
    -If not specified, defaults to Application Default Credentials

    -     - -

    - -

    -
    - - -
    root - - - - sources - - - - additionalProperties - - - - oneOf + item 2 - item 3 + resource_discovery - auth + anyOf - oneOf + item 0 - Service Account Key File

    Service Account Key File

    Type: object
    -

    Use a service account key file for authentication

    + exclude_services
    Type: array of string
    +

    Services to exclude from resource discovery (opt-out model)
    +If not specified, all supported services will be fetched.
    +Example: ["ec2", "lambda"] to skip EC2 and Lambda resources

     - -
    + No Additional Items

    Each item of this array must be:

    -
    -

    - -

    -
    - -
    -
    +
    +
    root @@ -5367,59 +5394,58 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 2 + + + + resource_discovery - auth + anyOf - oneOf + item 0 - Service Account Key File + exclude_services - auth_mode

    Type: const
    -Specific value: "service_account_key_file" + exclude_services items
    Type: string
    + +
    +
    -
    -
    -
    -

    - -

    -
    - -
    -
    +
    +
    root @@ -5449,37 +5475,37 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 - - - - auth + item 2 - oneOf + resource_discovery - Service Account Key File + anyOf - key_file

    Type: string
    + item 1
    Type: const
    +Specific value: null + + + + +
    + @@ -5489,9 +5515,19 @@

    -
    - +
    +
    +
    +

    + +

    +
    + +
    +
    root @@ -5521,49 +5557,37 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 - - - - auth + item 2 - oneOf - - - - Kubernetes Workload Identity Federation

    Kubernetes Workload Identity Federation

    Type: object
    -

    Use Kubernetes API to get service account tokens and authenticate via WIF.
    -This is the most secure and cloud-native authentication method.

    -     + role_arn
    Type: string
    + -
    +
    +
    +
    +
    +
    -
    +

    - +

    -
    +
    root @@ -5594,60 +5618,80 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + AWS IAM + + + + type

    Type: const
    +Specific value: "awsiam" + + + + + + +
    +
    +
    +
    +
    + + +
    root - auth + sources - oneOf + additionalProperties - Kubernetes Workload Identity Federation + oneOf - audience
    Type: string
    -

    Custom audience for the WIF provider. If not specified, defaults to the standard
    -WIF provider URL format: //iam.googleapis.com/projects/{projectnumber}/locations/global/workloadIdentityPools/{poolid}/providers/{provider_id}

    + AWS Secrets Manager

    AWS Secrets Manager

    Type: object
    +

    AWS Secrets Manager fetcher

     + + -
    -
    -
    -
    -
    +
    -
    +

    - +

    -
    +
    root @@ -5685,52 +5729,23 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - auth - - - - oneOf - - - - Kubernetes Workload Identity Federation - - - - auth_mode

    Type: const
    -Specific value: "k8s" - - - - - - -
    -
    -
    -
    -
    -
    -
    -

    - -

    -
    - -
    -
    + env

    +

    + +

    +
    +
    root @@ -5767,53 +5782,26 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - auth - - - - oneOf + env - Kubernetes Workload Identity Federation + anyOf - gcp_service_account_name

    Type: string
    -

    Google Service Account name (without @project.iam.gserviceaccount.com)

    -     - - - - - - -
    -
    -
    -
    -
    -
    -
    -

    - -

    -
    - -
    +
    root @@ -5850,30 +5838,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - auth - - - - oneOf + env - Kubernetes Workload Identity Federation + anyOf - kubernetes_namespace

    Type: string
    -

    Kubernetes namespace where the service account is located

    -     + item 1
    Type: const
    +Specific value: null + + + + + + +
    @@ -5884,18 +5871,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -5933,113 +5920,119 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - auth + exclude

    Type: array
    + + + + + + + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root - oneOf + sources - Kubernetes Workload Identity Federation + additionalProperties - kubernetes_service_account
    Type: string
    -

    Kubernetes service account name to use for authentication

    -     - - - - - - -
    -
    -
    -
    - +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root - item 3 + sources - auth + additionalProperties - oneOf + oneOf - Kubernetes Workload Identity Federation + item 3 - pool_id
    Type: string
    -

    Workload Identity Pool ID

    -     + fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    + @@ -6050,18 +6043,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -6099,113 +6092,125 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - auth - - include

    Type: array
    + + + + + + + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root + + - oneOf + sources - Kubernetes Workload Identity Federation + additionalProperties - project_id
    Type: string
    -

    GCP Project ID where the service account is located

    -     - - - - - - -
    -
    -
    -
    -
    -
    -
    -

    - -

    -
    - - +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root - item 3 + sources - auth + additionalProperties - oneOf + oneOf - Kubernetes Workload Identity Federation + item 3 - project_number
    Type: string
    -

    GCP Project Number

    + mode
    Type: enum (of string) Default: "read"
    +

    The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.

     + +
    +

    Must be one of:

    +
    • "read"
    • "write"
    • "read/write"
    +
    @@ -6216,18 +6221,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -6265,30 +6270,8 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - auth - - - - oneOf - - - - Kubernetes Workload Identity Federation - - - - provider_id

    Type: string
    -

    Workload Identity Provider ID

    -     + profile_name
    Type: string
    + @@ -6299,18 +6282,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -6348,42 +6331,16 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - auth - - - - oneOf - - - - Kubernetes Workload Identity Federation - - - - token_expiration_seconds

    Type: integerFormat: int64 Default: 1800
    -

    Token expiration time in seconds. Default to 30 minutes

    -     + regions
    Type: array of string
    + - -
    -
    -
    -
    -
    + No Additional Items

    Each item of this array must be:

    +
    +
    root @@ -6421,43 +6378,39 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - auth - - - - oneOf + regions - Application Default Configuration

    Application Default Configuration

    Type: object
    -

    This will infer its configuration based on its environment.
    -Works with the GOOGLEAPPLICATIONCREDENTIALS environment variable
    -or by automatically calling GCP's metadata endpoint (if run as a GCE or GKE workload).

    -     + regions items
    Type: string
    + -
    +
    +
    +
    +
    +
    +
    +
    -
    +

    - +

    -
    +
    root @@ -6488,69 +6441,80 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + AWS Secrets Manager + + + + type

    Type: const
    +Specific value: "awssecretsmanager" + + + + + + +
    +
    +
    +
    +
    + + +
    root - auth + sources - oneOf + additionalProperties - Application Default Configuration + oneOf - auth_mode
    Type: const
    -Specific value: "default" - - - - + GCP Secret Manager

    GCP Secret Manager

    Type: object
    +

    GCP Secret Manager fetcher

    +     - -
    -
    -
    -
    -
    + -
    -
    -
    -
    -
    +
    -
    +

    - +

    -
    +
    root @@ -6581,29 +6545,38 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - env


    -

    - -

    Type: object Default: {"auth_mode": "application_default"}
    +

    Authentication method for GCP
    +If not specified, defaults to Application Default Credentials

    +     + +

    + +

    + id="tab-pane_sources_additionalProperties_oneOf_i4_auth_oneOf_i0" role="tabpanel">
    root @@ -6634,33 +6607,49 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - env + auth - anyOf + oneOf - Env

    Type: object
    -

    Declare an environment

    -    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0 -
    - + Service Account Key File

    Service Account Key File

    Type: object
    +

    Use a service account key file for authentication

    +     + + + + + + +
    +
    +
    +

    + +

    +
    + +
    +
    root @@ -6690,36 +6679,36 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - env + auth - anyOf + oneOf - item 1

    Type: const
    -Specific value: null - - - - - - -
    + Service Account Key File + + + + auth_mode
    Type: const
    +Specific value: "service_account_key_file" @@ -6730,18 +6719,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -6772,23 +6761,48 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - exclude

    Type: array
    + auth + + + + oneOf + + + + Service Account Key File + + + + key_file
    Type: string
    - No Additional Items

    Each item of this array must be:

    -
    -
    + +
    +
    +
    +
    +
    root @@ -6819,40 +6833,49 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - exclude + auth - FilteringRule

    Type: object
    -Same definition as sources_additionalProperties_oneOf_i0_exclude_items -
    -
    -
    -
    -
    -
    -

    Kubernetes Workload Identity Federation

    Type: object
    +

    Use Kubernetes API to get service account tokens and authenticate via WIF.
    +This is the most secure and cloud-native authentication method.

    +     + + + + + + +
    -
    +

    - +

    -
    +
    root @@ -6883,15 +6906,38 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    - + auth + + + + oneOf + + + + Kubernetes Workload Identity Federation + + + + audience
    Type: string
    +

    Custom audience for the WIF provider. If not specified, defaults to the standard
    +WIF provider URL format: //iam.googleapis.com/projects/{projectnumber}/locations/global/workloadIdentityPools/{poolid}/providers/{provider_id}

    +     @@ -6902,18 +6948,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -6944,24 +6990,59 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - include

    Type: array
    - + auth + + + + oneOf + + + + Kubernetes Workload Identity Federation + + + + auth_mode
    Type: const
    +Specific value: "k8s" - No Additional Items

    Each item of this array must be:

    + +
    +
    +
    +
    +
    -
    - +
    +

    + +

    +
    + +
    +
    root @@ -6991,40 +7072,59 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - include + auth - FilteringRule

    Type: object
    -Same definition as sources_additionalProperties_oneOf_i0_exclude_items -
    -
    + oneOf + + + + Kubernetes Workload Identity Federation + + + + gcp_service_account_name
    Type: string
    +

    Google Service Account name (without @project.iam.gserviceaccount.com)

    +     + + + + + +
    -
    +
    -
    +

    - +

    -
    +
    root @@ -7055,21 +7155,37 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - mode

    Type: enum (of string) Default: "read"
    -

    The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.

    + auth + + + + oneOf + + + + Kubernetes Workload Identity Federation + + + + kubernetes_namespace
    Type: string
    +

    Kubernetes namespace where the service account is located

     - -
    -

    Must be one of:

    -
    • "read"
    • "write"
    • "read/write"
    -
    @@ -7080,18 +7196,18 @@

    Must be one of:

    -
    +
    -
    +

    - +

    -
    +
    root @@ -7122,24 +7238,60 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - projects

    Type: array of string
    - + auth + + + + oneOf + + + + Kubernetes Workload Identity Federation + + + + kubernetes_service_account
    Type: string
    +

    Kubernetes service account name to use for authentication

    +     - No Additional Items

    Each item of this array must be:

    + +
    +
    +
    +
    +
    -
    - +
    +

    + +

    +
    + +
    +
    root @@ -7169,46 +7321,59 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 3 + item 4 - projects + auth - projects items

    Type: string
    - + oneOf + + + + Kubernetes Workload Identity Federation + + + + pool_id
    Type: string
    +

    Workload Identity Pool ID

    +     -
    -
    -
    +
    -
    +

    - +

    -
    +
    root @@ -7239,80 +7404,59 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - GCP Secret Manager - - - - type

    Type: const
    -Specific value: "gcpsecretmanager" - - - - - - -
    -
    -
    -
    -
    - - -
    root + item 4 - sources + auth - additionalProperties + oneOf - oneOf + Kubernetes Workload Identity Federation - Azure Key Vault

    Azure Key Vault

    Type: object
    -

    Azure Key Vault fetcher

    + project_id
    Type: string
    +

    GCP Project ID where the service account is located

     - - -
    +
    +
    +
    +
    +
    -
    +

    - +

    -
    +
    root @@ -7350,23 +7494,53 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - env


    -

    - -

    -
    - + auth + + + + oneOf + + + + Kubernetes Workload Identity Federation + + + + project_number
    Type: string
    +

    GCP Project Number

    +     + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    root @@ -7403,26 +7577,53 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - env + auth - anyOf + oneOf - Env

    Type: object
    -

    Declare an environment

    -    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0 -
    - + Kubernetes Workload Identity Federation + + + + provider_id
    Type: string
    +

    Workload Identity Provider ID

    +     + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    root @@ -7459,29 +7660,30 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - env + auth - anyOf + oneOf - item 1

    Type: const
    -Specific value: null - - - - - - -
    + Kubernetes Workload Identity Federation + + + + token_expiration_seconds
    Type: integerFormat: int64 Default: 1800
    +

    Token expiration time in seconds. Default to 30 minutes

    +     @@ -7492,19 +7694,9 @@

    -
    -
    -
    -

    - -

    -
    - -
    -
    +
    +
    root @@ -7541,17 +7733,44 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - exclude

    Type: array
    - + auth + + + + oneOf + + + + Application Default Configuration

    Application Default Configuration

    Type: object
    +

    This will infer its configuration based on its environment.
    +Works with the GOOGLEAPPLICATIONCREDENTIALS environment variable
    +or by automatically calling GCP's metadata endpoint (if run as a GCE or GKE workload).

    +     - No Additional Items

    Each item of this array must be:

    + +
    -
    - +
    +

    + +

    +
    + +
    +
    root @@ -7588,33 +7807,62 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - exclude + auth - FilteringRule

    Type: object
    -Same definition as sources_additionalProperties_oneOf_i0_exclude_items + oneOf + + + + Application Default Configuration + + + + auth_mode
    Type: const
    +Specific value: "default" + + + + + + +
    +
    +
    + + + + + +
    -
    +
    -
    +

    - +

    -
    +
    root @@ -7652,8 +7900,2116 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    - + env

    +

    + +

    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + env + + + + anyOf + + + + Env
    Type: object
    +

    Declare an environment

    +    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0 +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + env + + + + anyOf + + + + item 1
    Type: const
    +Specific value: null + + + + + + +
    + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + exclude
    Type: array
    + + + + + + + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + exclude + + + + FilteringRule
    Type: object
    +Same definition as sources_additionalProperties_oneOf_i0_exclude_items +
    +
    +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    + + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + include
    Type: array
    + + + + + + + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + include + + + + FilteringRule
    Type: object
    +Same definition as sources_additionalProperties_oneOf_i0_exclude_items +
    +
    +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + mode
    Type: enum (of string) Default: "read"
    +

    The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.

    +     + +
    +

    Must be one of:

    +
    • "read"
    • "write"
    • "read/write"
    +
    + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + projects
    Type: array of string
    + + + + + + + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 4 + + + + projects + + + + projects items
    Type: string
    + + + + + + + +
    +
    +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + GCP Secret Manager + + + + type
    Type: const
    +Specific value: "gcpsecretmanager" + + + + + + +
    +
    +
    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + Azure Key Vault

    Azure Key Vault

    Type: object
    +

    Azure Key Vault fetcher

    +     + + + + + + + + +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + env

    +

    + +

    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + env + + + + anyOf + + + + Env
    Type: object
    +

    Declare an environment

    +    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0 +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + env + + + + anyOf + + + + item 1
    Type: const
    +Specific value: null + + + + + + +
    + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + exclude
    Type: array
    + + + + + + + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + exclude + + + + FilteringRule
    Type: object
    +Same definition as sources_additionalProperties_oneOf_i0_exclude_items +
    +
    +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    + + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + include
    Type: array
    + + + + + + + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + include + + + + FilteringRule
    Type: object
    +Same definition as sources_additionalProperties_oneOf_i0_exclude_items +
    +
    +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + mode
    Type: enum (of string) Default: "read"
    +

    The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.

    +     + +
    +

    Must be one of:

    +
    • "read"
    • "write"
    • "read/write"
    +
    + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 5 + + + + subscription_id
    Type: string
    + + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + Azure Key Vault + + + + type
    Type: const
    +Specific value: "azurekeyvault" + + + + + + +
    +
    +
    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + GitLab CI

    GitLab CI

    Type: object
    +

    GitLab CI fetcher

    +     + + + + + + + + +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 6 + + + + env

    +

    + +

    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 6 + + + + env + + + + anyOf + + + + Env
    Type: object
    +

    Declare an environment

    +    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0 +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 6 + + + + env + + + + anyOf + + + + item 1
    Type: const
    +Specific value: null + + + + + + +
    + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 6 + + + + exclude
    Type: array
    + + + + + + + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 6 + + + + exclude + + + + FilteringRule
    Type: object
    +Same definition as sources_additionalProperties_oneOf_i0_exclude_items +
    +
    +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 6 + + + + include
    Type: array
    + + + + + + + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 6 + + + + include + + + + FilteringRule
    Type: object
    +Same definition as sources_additionalProperties_oneOf_i0_exclude_items +
    +
    +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 6 + + + + token
    Type: string
    + + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 6 + + + + url
    Type: stringFormat: uri
    + + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + GitLab CI + + + + type
    Type: const
    +Specific value: "gitlabci" + + + + + + +
    +
    +
    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + GitLab Personal Access Tokens

    GitLab Personal Access Tokens

    Type: object
    +

    GitLab Personal Access Token fetcher

    +     + + + + + + + + +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 7 + + + + admin_token
    Type: string
    +

    Admin token needed for PAT API access (requires admin privileges)

    +     @@ -7664,18 +10020,210 @@

    -
    +
    -
    +

    - + +

    +
    + +
    +
    + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 7 + + + + env

    +

    Environment designation for this configuration

    +

    + +

    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 7 + + + + env + + + + anyOf + + + + Env
    Type: object
    +

    Declare an environment

    +    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0 +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 7 + + + + env + + + + anyOf + + + + item 1
    Type: const
    +Specific value: null + + + + + + +
    + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    +

    -
    +
    root @@ -7706,14 +10254,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 4 + item 7 - include

    Type: array
    + exclude
    Type: array
    @@ -7722,7 +10270,7 @@

    No Additional Items

    Each item of this array must be:

    -
    +
    root @@ -7753,21 +10301,21 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 4 + item 7 - include + exclude - FilteringRule

    Type: object
    + FilteringRule
    Type: object
    Same definition as sources_additionalProperties_oneOf_i0_exclude_items
    @@ -7775,18 +10323,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -7817,43 +10365,87 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 4 + item 7 - mode

    Type: enum (of string) Default: "read"
    -

    The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.

    -     + include
    Type: array
    -
    -

    Must be one of:

    -
    • "read"
    • "write"
    • "read/write"
    -
    - + No Additional Items

    Each item of this array must be:

    +
    +
    + + +
    root + + + + sources + + + + additionalProperties + + + + oneOf + + + + item 7 + + + + include + + + + FilteringRule
    Type: object
    +Same definition as sources_additionalProperties_oneOf_i0_exclude_items +
    +
    -
    +
    -
    +

    - +

    -
    +
    root @@ -7884,15 +10476,16 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 4 + item 7 - subscription_id

    Type: string
    - + url
    Type: stringFormat: uri
    +

    GitLab instance URL (e.g., "https://gitlab.com" or "https://gitlab.example.com")

    +     @@ -7903,18 +10496,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -7945,15 +10538,15 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - Azure Key Vault + GitLab Personal Access Tokens - type

    Type: const
    -Specific value: "azurekeyvault" + type
    Type: const
    +Specific value: "gitlabpat" @@ -7965,7 +10558,7 @@

    + id="tab-pane_sources_additionalProperties_oneOf_i8" role="tabpanel">
    root @@ -7996,8 +10589,8 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - GitLab CI

    GitLab CI

    Type: object
    -

    GitLab CI fetcher

    + Conjur Cloud

    Conjur Cloud

    Type: object
    +

    Conjur Cloud fetcher

     @@ -8007,18 +10600,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -8049,29 +10642,36 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 5 + item 8 - env


    -

    - -

    Type: object
    + + +

    + +

    + id="tab-pane_sources_additionalProperties_oneOf_i8_auth_oneOf_i0" role="tabpanel">
    root @@ -8102,33 +10702,50 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 5 + item 8 - env + auth - anyOf + oneOf - Env

    Type: object
    -

    Declare an environment

    -    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0 -
    - + CyberArk authentication

    CyberArk authentication

    Type: object
    + + + + + + + + + +
    +
    +
    +

    + +

    +
    + +
    +
    root @@ -8158,36 +10775,37 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 5 + item 8 - env + auth - anyOf + oneOf - item 1

    Type: const
    -Specific value: null - - - - - - -
    + item 0 + + + + client_id
    Type: string
    +

    CyberArk client ID or Conjur workload Client ID

    +     @@ -8198,18 +10816,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -8240,24 +10858,60 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 5 + item 8 - exclude

    Type: array
    - + auth + + + + oneOf + + + + item 0 + + + + client_secret
    Type: string
    +

    Secret for authenticating

    +     - No Additional Items

    Each item of this array must be:

    + +
    +
    +
    +
    +
    -
    - +
    +

    + +

    +
    + +
    +
    root @@ -8266,61 +10920,80 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - sources + sources + + + + additionalProperties + + + + oneOf - additionalProperties + item 8 - oneOf + auth - item 5 + oneOf - exclude + item 0 - FilteringRule

    Type: object
    -Same definition as sources_additionalProperties_oneOf_i0_exclude_items -
    -
    + tenant_id
    Type: string
    +

    Cyberark Cloud tenant ID

    +     + + + + + +
    -
    +
    -
    +

    - +

    -
    +
    root @@ -8351,23 +11024,48 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 5 + item 8 - include

    Type: array
    - + auth + + + + oneOf + + + + CyberArk authentication + + + + auth_mode
    Type: const
    +Specific value: "cyber_ark" - No Additional Items

    Each item of this array must be:

    -
    -
    + +
    +
    +
    +
    +
    root @@ -8398,40 +11096,49 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 5 + item 8 - include + auth - FilteringRule

    Type: object
    -Same definition as sources_additionalProperties_oneOf_i0_exclude_items -
    -
    -
    -
    -
    -
    -

    Workload authentication

    Type: object
    + + + + + + + + + +
    -
    +

    - +

    -
    +
    root @@ -8462,15 +11169,37 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 5 + item 8 - token

    Type: string
    - + auth + + + + oneOf + + + + item 1 + + + + api_key
    Type: string
    +

    Workload API key for authenticating

    +     @@ -8481,18 +11210,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -8523,15 +11252,37 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 5 + item 8 - url

    Type: stringFormat: uri
    - + auth + + + + oneOf + + + + item 1 + + + + login
    Type: string
    +

    Workload login (ID) for authenticating

    +     @@ -8542,18 +11293,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -8584,15 +11335,36 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - GitLab CI + item 8 - type

    Type: const
    -Specific value: "gitlabci" + auth + + + + oneOf + + + + Workload authentication + + + + auth_mode
    Type: const
    +Specific value: "workload" @@ -8604,7 +11376,7 @@

    + id="tab-pane_sources_additionalProperties_oneOf_i8_auth_oneOf_i2" role="tabpanel">
    root @@ -8635,29 +11407,47 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - GitLab Personal Access Tokens

    GitLab Personal Access Tokens

    Type: object
    -

    GitLab Personal Access Token fetcher

    -     + item 8 + + + + auth + + + + oneOf + + + + Kubernetes authentication

    Kubernetes authentication

    Type: object
    - -
    +
    -
    +

    - +

    -
    +
    root @@ -8688,16 +11478,36 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 6 + item 8 - admin_token

    Type: string
    -

    Admin token needed for PAT API access (requires admin privileges)

    -     + auth + + + + oneOf + + + + Kubernetes authentication + + + + auth_mode
    Type: const
    +Specific value: "k8s" @@ -8708,18 +11518,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -8750,146 +11560,203 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 6 + item 8 + + + + auth + + + + oneOf + + + + Kubernetes authentication + + + + host_id

    Type: string
    +

    Optional Host ID for the K8s authenticator

    +     + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root + + + + sources - env

    -

    Environment designation for this configuration

    -

    - -

    -
    - - -
    root + additionalProperties - sources + oneOf - additionalProperties + item 8 - oneOf + auth - item 6 + oneOf - env + Kubernetes authentication - anyOf + namespace
    Type: string
    +

    Kubernetes namespace where service account is defined

    +     + + + + + + +
    +
    +
    +
    +
    +
    +
    +

    + +

    +
    + +
    +
    + +
    root - Env
    Type: object
    -

    Declare an environment

    -    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0 -
    - - -
    root + sources - sources + additionalProperties - additionalProperties + oneOf - oneOf + item 8 - item 6 + auth - env + oneOf - anyOf + Kubernetes authentication - item 1
    Type: const
    -Specific value: null - - - - - - -
    + service_account
    Type: string
    +

    Kubernetes service account used for authentication

    +     @@ -8900,18 +11767,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -8942,24 +11809,60 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 6 + item 8 - exclude

    Type: array
    - + auth + + + + oneOf + + + + Kubernetes authentication + + + + service_id
    Type: string Default: "kubernetes"
    +

    Service ID for the K8s authenticator

    +     - No Additional Items

    Each item of this array must be:

    + +
    +
    +
    +
    +
    -
    - +
    +

    + +

    +
    + +
    +
    root @@ -8989,40 +11892,70 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 6 + item 8 - exclude + auth - FilteringRule

    Type: object
    -Same definition as sources_additionalProperties_oneOf_i0_exclude_items + oneOf + + + + Kubernetes authentication + + + + token_expiration_seconds
    Type: integerFormat: int64 Default: 1800
    +

    Token expiration time in seconds. Default to 30 minutes

    +     + + + + + + +
    +
    +
    + + + + + +
    -
    +
    -
    +

    - +

    -
    +
    root @@ -9053,23 +11986,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 6 + item 8 - include

    Type: array
    - - - - - - - No Additional Items

    Each item of this array must be:

    -
    -
    + env

    +

    + +

    +
    root @@ -9100,41 +12039,33 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 6 + item 8 - include + env - FilteringRule

    Type: object
    -Same definition as sources_additionalProperties_oneOf_i0_exclude_items -
    -
    -
    -
    -
    -
    -
    -
    -
    -

    - -

    -
    - -
    -
    + anyOf + + + + Env
    Type: object
    +

    Declare an environment

    +    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0 +
    +
    root @@ -9164,16 +12095,36 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 6 + item 8 + + + + env + + + + anyOf - url

    Type: stringFormat: uri
    -

    GitLab instance URL (e.g., "https://gitlab.com" or "https://gitlab.example.com")

    -     + item 1
    Type: const
    +Specific value: null + + + + + + +
    @@ -9184,18 +12135,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -9226,27 +12177,23 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - GitLab Personal Access Tokens + item 8 - type

    Type: const
    -Specific value: "gitlabpat" + exclude
    Type: array
    + - -
    -
    -
    -
    -
    + No Additional Items

    Each item of this array must be:

    +
    +
    root @@ -9277,29 +12224,40 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - Conjur Cloud

    Conjur Cloud

    Type: object
    -

    Conjur Cloud fetcher

    -     - - - - - - - - -
    + item 8 + + + + exclude + + + + FilteringRule
    Type: object
    +Same definition as sources_additionalProperties_oneOf_i0_exclude_items +
    +
    +
    +
    +
    +
    +
    -
    +

    - +

    -
    +
    root @@ -9330,37 +12288,38 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 8 - auth

    Type: object
    + fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    + - +
    +
    +
    +
    +

    + +

    +
    + +
    +
    root @@ -9390,50 +12349,24 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth - - - - oneOf + item 8 - CyberArk authentication

    CyberArk authentication

    Type: object
    - + include
    Type: array
    - - -
    + No Additional Items

    Each item of this array must be:

    -
    -

    - -

    -
    - -
    -
    +
    +
    root @@ -9463,59 +12396,40 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth - - - - oneOf + item 8 - item 0 + include - client_id

    Type: string
    -

    CyberArk client ID or Conjur workload Client ID

    -     - - - - - - + FilteringRule
    Type: object
    +Same definition as sources_additionalProperties_oneOf_i0_exclude_items +
    +
    -
    +
    -
    +

    - +

    -
    +
    root @@ -9546,37 +12460,21 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth - - - - oneOf - - - - item 0 + item 8 - client_secret

    Type: string
    -

    Secret for authenticating

    + mode
    Type: enum (of string) Default: "read"
    +

    The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.

     + +
    +

    Must be one of:

    +
    • "read"
    • "write"
    • "read/write"
    +
    @@ -9587,18 +12485,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -9629,37 +12527,15 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth - - - - oneOf - - - - item 0 + item 8 - tenant_id

    Type: string
    -

    Cyberark Cloud tenant ID

    -     + subdomain

    The Conjur Cloud subdomain

    Type: string
    + @@ -9670,18 +12546,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -9691,57 +12567,36 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - sources - - - - additionalProperties - - - - oneOf - - - - item 7 + sources - auth + additionalProperties - oneOf + oneOf - CyberArk authentication + Conjur Cloud - auth_mode

    Type: const
    -Specific value: "cyber_ark" + type
    Type: const
    +Specific value: "conjurcloud" @@ -9753,7 +12608,7 @@

    + id="tab-pane_sources_additionalProperties_oneOf_i9" role="tabpanel">
    root @@ -9784,50 +12639,26 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth - - - - oneOf - - - - Workload authentication

    Workload authentication

    Type: object
    - - - - - - - - - -
    -
    -
    -

    - -

    -
    + Conjur

    Conjur

    Type: object
    +

    Conjur fetcher (supports both OSS and Enterprise)

    +     -
    -
    +

    + +

    +
    +
    root @@ -9857,59 +12688,42 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth - - - - oneOf + item 9 - item 1 + oneOf - api_key

    Type: string
    -

    Workload API key for authenticating

    -     + User authentication

    User authentication

    Type: object
    + + + -
    -
    -
    -
    -
    +
    -
    +

    - +

    -
    +
    root @@ -9940,36 +12754,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth + item 9 - oneOf + oneOf - item 1 + item 0 - login

    Type: string
    -

    Workload login (ID) for authenticating

    + password
    Type: string
    +

    Secret for authenticating

     @@ -9981,18 +12788,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -10023,36 +12830,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth + item 9 - oneOf + oneOf - Workload authentication + item 0 - auth_mode

    Type: const
    -Specific value: "workload" + username
    Type: string
    + @@ -10063,9 +12863,19 @@

    -
    - +
    +
    +
    +

    + +

    +
    + +
    +
    root @@ -10095,48 +12905,42 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - auth + oneOf - oneOf + User authentication - Kubernetes authentication

    Kubernetes authentication

    Type: object
    - + auth_mode
    Type: const
    +Specific value: "user" -
    -
    -
    -

    - -

    +
    - -
    -
    +
    +
    +
    +
    root @@ -10166,58 +12970,42 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth - - - - oneOf + item 9 - Kubernetes authentication + oneOf - auth_mode

    Type: const
    -Specific value: "k8s" + API authentication

    API authentication

    Type: object
    + + + -
    -
    -
    -
    -
    +
    -
    +

    - +

    -
    +
    root @@ -10248,36 +13036,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth + item 9 - oneOf + oneOf - Kubernetes authentication + item 1 - host_id

    Type: string
    -

    Optional Host ID for the K8s authenticator

    + api_key
    Type: string
    +

    API key for authenticating

     @@ -10289,18 +13070,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -10331,36 +13112,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth + item 9 - oneOf + oneOf - Kubernetes authentication + item 1 - namespace

    Type: string
    -

    Kubernetes namespace where service account is defined

    + login
    Type: string
    +

    Login (including host/ in case of a workload)

     @@ -10372,18 +13146,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -10414,37 +13188,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth + item 9 - oneOf + oneOf - Kubernetes authentication + API authentication - service_account

    Type: string
    -

    Kubernetes service account used for authentication

    -     + auth_mode
    Type: const
    +Specific value: "api" @@ -10455,18 +13221,25 @@

    -
    +
    + + + + + + +
    -
    +

    - +

    -
    +
    root @@ -10497,37 +13270,15 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth - - - - oneOf - - - - Kubernetes authentication + item 9 - service_id

    Type: string Default: "kubernetes"
    -

    Service ID for the K8s authenticator

    -     + accept_invalid_certs

    Accept invalid/self-signed certificates (for development only)

    Type: boolean Default: false
    + @@ -10538,18 +13289,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -10580,49 +13331,16 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 - - - - auth - - - - oneOf - - - - Kubernetes authentication + item 9 - token_expiration_seconds

    Type: integerFormat: int64 Default: 1800
    -

    Token expiration time in seconds. Default to 30 minutes

    -     - - - - + account

    The Conjur account name

    Type: string
    -
    -
    -
    -
    -
    - @@ -10632,18 +13350,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -10674,29 +13392,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - env


    -

    + env


    +

    -

    + id="tab-pane_sources_additionalProperties_oneOf_i9_env_anyOf_i0" role="tabpanel">
    root @@ -10727,32 +13445,32 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - env + env - anyOf + anyOf - Env

    Type: object
    + Env
    Type: object

    Declare an environment

    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0
    + id="tab-pane_sources_additionalProperties_oneOf_i9_env_anyOf_i1" role="tabpanel">
    root @@ -10783,29 +13501,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - env + env - anyOf + anyOf - item 1

    Type: const
    -Specific value: null + item 1
    Type: const
    +Specific value: null @@ -10823,18 +13541,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -10865,14 +13583,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - exclude

    Type: array
    + exclude
    Type: array
    @@ -10881,7 +13599,7 @@

    No Additional Items

    Each item of this array must be:

    -
    +
    root @@ -10912,21 +13630,21 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - exclude + exclude - FilteringRule

    Type: object
    + FilteringRule
    Type: object
    Same definition as sources_additionalProperties_oneOf_i0_exclude_items
    @@ -10934,18 +13652,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -10976,14 +13694,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    + fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    @@ -10995,18 +13713,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11037,14 +13755,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - include

    Type: array
    + include
    Type: array
    @@ -11053,7 +13771,7 @@

    No Additional Items

    Each item of this array must be:

    -
    +
    root @@ -11084,21 +13802,21 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - include + include - FilteringRule

    Type: object
    + FilteringRule
    Type: object
    Same definition as sources_additionalProperties_oneOf_i0_exclude_items
    @@ -11106,18 +13824,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11148,14 +13866,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - mode

    Type: enum (of string) Default: "read"
    + mode
    Type: enum (of string) Default: "read"

    The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.

     @@ -11173,18 +13891,18 @@

    Must be one of:

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11215,14 +13933,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 7 + item 9 - subdomain

    The Conjur Cloud subdomain

    Type: string
    + server_url

    The Conjur server URL

    Type: string
    @@ -11234,18 +13952,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11276,15 +13994,15 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - Conjur Cloud + Conjur - type

    Type: const
    -Specific value: "conjurcloud" + type
    Type: const
    +Specific value: "conjur" @@ -11296,7 +14014,7 @@

    + id="tab-pane_sources_additionalProperties_oneOf_i10" role="tabpanel">
    root @@ -11327,7 +14045,7 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - Akeyless

    Akeyless

    Type: object
    + Akeyless

    Akeyless

    Type: object

    Akeyless fetcher

     @@ -11340,18 +14058,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11382,14 +14100,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - access_id

    Type: string
    + access_id
    Type: string

    Akeyless Access ID

     @@ -11402,18 +14120,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11444,14 +14162,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - access_key

    Type: string
    + access_key
    Type: string

    Akeyless Access Key

     @@ -11464,18 +14182,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11506,17 +14224,17 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - accessibility

    Type: enum (of string) Default: "regular"
    + accessibility
    Type: enum (of string) Default: "regular"
    -
    +

    Must be one of:

    • "regular"
    • "personal"
    @@ -11530,18 +14248,18 @@

    Must be one of:

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11572,14 +14290,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - api_url

    Type: stringFormat: uri Default: "https://api.akeyless.io/"
    + api_url
    Type: stringFormat: uri Default: "https://api.akeyless.io/"

    Akeyless API v2 URL. Default to https://api.akeyless.io/.
    If you use an Akeyless Gateway, you must use the complete URL. Example: https://my-akeyless-gw.com/api/v2/

     @@ -11593,18 +14311,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11635,29 +14353,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - env


    -

    + env


    +

    -

    + id="tab-pane_sources_additionalProperties_oneOf_i10_env_anyOf_i0" role="tabpanel">
    root @@ -11688,32 +14406,32 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - env + env - anyOf + anyOf - Env

    Type: object
    + Env
    Type: object

    Declare an environment

    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0
    + id="tab-pane_sources_additionalProperties_oneOf_i10_env_anyOf_i1" role="tabpanel">
    root @@ -11744,29 +14462,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - env + env - anyOf + anyOf - item 1

    Type: const
    -Specific value: null + item 1
    Type: const
    +Specific value: null @@ -11784,18 +14502,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11826,14 +14544,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - exclude

    Type: array
    + exclude
    Type: array
    @@ -11842,7 +14560,7 @@

    No Additional Items

    Each item of this array must be:

    -
    +
    root @@ -11873,21 +14591,21 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - exclude + exclude - FilteringRule

    Type: object
    + FilteringRule
    Type: object
    Same definition as sources_additionalProperties_oneOf_i0_exclude_items
    @@ -11895,18 +14613,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11937,14 +14655,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    + fetch_all_versions

    Whether or not to collect all secret versions

    Type: boolean
    @@ -11956,18 +14674,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -11998,14 +14716,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - include

    Type: array
    + include
    Type: array
    @@ -12014,7 +14732,7 @@

    No Additional Items

    Each item of this array must be:

    -
    +
    root @@ -12045,21 +14763,21 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - include + include - FilteringRule

    Type: object
    + FilteringRule
    Type: object
    Same definition as sources_additionalProperties_oneOf_i0_exclude_items
    @@ -12067,18 +14785,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12109,14 +14827,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - mode

    Type: enum (of string) Default: "read"
    + mode
    Type: enum (of string) Default: "read"

    The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.

     @@ -12134,18 +14852,18 @@

    Must be one of:

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12176,15 +14894,15 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 8 + item 10 - auth_mode

    Type: const
    -Specific value: "apikey" + auth_mode
    Type: const
    +Specific value: "apikey" @@ -12195,18 +14913,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12237,15 +14955,15 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - Akeyless + Akeyless - type

    Type: const
    -Specific value: "akeyless" + type
    Type: const
    +Specific value: "akeyless" @@ -12257,7 +14975,7 @@

    + id="tab-pane_sources_additionalProperties_oneOf_i11" role="tabpanel">
    root @@ -12288,7 +15006,7 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - Delinea Secret Server

    Delinea Secret Server

    Type: object
    + Delinea Secret Server

    Delinea Secret Server

    Type: object

    Delinea SecretServer fetcher

     @@ -12301,18 +15019,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12343,14 +15061,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - client_id

    Type: string
    + client_id
    Type: string
    @@ -12362,18 +15080,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12404,14 +15122,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - client_secret

    Type: string
    + client_secret
    Type: string
    @@ -12423,18 +15141,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12465,29 +15183,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - env


    -

    + env


    +

    -

    + id="tab-pane_sources_additionalProperties_oneOf_i11_env_anyOf_i0" role="tabpanel">
    root @@ -12518,32 +15236,32 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - env + env - anyOf + anyOf - Env

    Type: object
    + Env
    Type: object

    Declare an environment

    Same definition as sources_additionalProperties_oneOf_i0_env_anyOf_i0
    + id="tab-pane_sources_additionalProperties_oneOf_i11_env_anyOf_i1" role="tabpanel">
    root @@ -12574,29 +15292,29 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - env + env - anyOf + anyOf - item 1

    Type: const
    -Specific value: null + item 1
    Type: const
    +Specific value: null @@ -12614,18 +15332,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12656,14 +15374,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - exclude

    Type: array
    + exclude
    Type: array
    @@ -12672,7 +15390,7 @@

    No Additional Items

    Each item of this array must be:

    -
    +
    root @@ -12703,21 +15421,21 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - exclude + exclude - FilteringRule

    Type: object
    + FilteringRule
    Type: object
    Same definition as sources_additionalProperties_oneOf_i0_exclude_items
    @@ -12725,18 +15443,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12767,14 +15485,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - include

    Type: array
    + include
    Type: array
    @@ -12783,7 +15501,7 @@

    No Additional Items

    Each item of this array must be:

    -
    +
    root @@ -12814,21 +15532,21 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - include + include - FilteringRule

    Type: object
    + FilteringRule
    Type: object
    Same definition as sources_additionalProperties_oneOf_i0_exclude_items
    @@ -12836,18 +15554,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12878,14 +15596,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - mode

    Type: enum (of string) Default: "read"
    + mode
    Type: enum (of string) Default: "read"

    The mode gives an additional layer of permissions allowing to configure a Scout instance, giving read-only, write-only, or read and write permissions to that source. Default is read-only.

     @@ -12903,18 +15621,18 @@

    Must be one of:

    -
    +
    -
    +

    - +

    -
    +
    root @@ -12945,14 +15663,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - tenant

    Type: string
    + tenant
    Type: string

    Delinea tenant

     @@ -12965,18 +15683,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -13007,14 +15725,14 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - tld

    Type: string Default: "com"
    + tld
    Type: string Default: "com"

    Top-level domain
    This can be found by clicking on "Token API documentation" in the Settings > REST API section of the Secret Server UI

     @@ -13028,18 +15746,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -13070,15 +15788,15 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - item 9 + item 11 - auth_mode

    Type: const
    -Specific value: "oauth" + auth_mode
    Type: const
    +Specific value: "oauth" @@ -13089,18 +15807,18 @@

    -
    +
    -
    +

    - +

    -
    +
    root @@ -13131,15 +15849,15 @@

    d="M4 8a.5.5 0 0 1 .5-.5h5.793L8.146 5.354a.5.5 0 1 1 .708-.708l3 3a.5.5 0 0 1 0 .708l-3 3a.5.5 0 0 1-.708-.708L10.293 8.5H4.5A.5.5 0 0 1 4 8z" /> - Delinea Secret Server + Delinea Secret Server - type

    Type: const
    -Specific value: "delineasecretserver" + type
    Type: const
    +Specific value: "delineasecretserver"