Skip to content

Commit 80e84e7

Browse files
spbsolublespbsoluble
authored
Merge pull request #282 from Keyfactor/all
New Pull Request - all:latest
2 parents ecd705a + 075a980 commit 80e84e7

File tree

3 files changed

+633
-3
lines changed

3 files changed

+633
-3
lines changed

‎.github/workflows/update-stores.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -191,7 +191,7 @@ jobs:
191191
console.log("Commit to ${{env.KFUTIL_ARG}} for PR")
192192
const owner = context.repo.owner;
193193
const repo = context.repo.repo;
194-
194+
195195
// Get the current branch name that the workflow is running on
196196
const baseBranch = context.payload.ref ?
197197
context.payload.ref.replace('refs/heads/', '') : 'main';

‎cmd/store_types.json‎

Lines changed: 316 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -421,6 +421,34 @@
421421
"ClientMachineDescription": "This is a full AWS ARN specifying a Role. This is the Role that will be assumed in any Auth scenario performing Assume Role. This will dictate what certificates are usable by the orchestrator. A preceding [profile] name should be included if a Credential Profile is to be used in Default Sdk Auth.",
422422
"StorePathDescription": "A single specified AWS Region the store will operate in. Additional regions should get their own store defined."
423423
},
424+
{
425+
"Name": "Airlock Application Firewall Certificate",
426+
"ShortName": "AirlockWAF",
427+
"Capability": "AirlockWAF",
428+
"LocalStore": false,
429+
"SupportedOperations": {
430+
"Add": false,
431+
"Create": false,
432+
"Discovery": true,
433+
"Enrollment": false,
434+
"Remove": false
435+
},
436+
"Properties": [],
437+
"EntryParameters": [],
438+
"PasswordOptions": {
439+
"EntrySupported": false,
440+
"StoreRequired": true,
441+
"Style": "Default"
442+
},
443+
"StorePathType": "",
444+
"StorePathValue": "",
445+
"PrivateKeyAllowed": "Required",
446+
"JobProperties": [],
447+
"ServerRequired": true,
448+
"PowerShell": false,
449+
"BlueprintAllowed": false,
450+
"CustomAliasAllowed": "Allowed"
451+
},
424452
{
425453
"Name": "Akamai Certificate Provisioning Service",
426454
"ShortName": "Akamai",
@@ -2086,7 +2114,7 @@
20862114
"DependsOn": "",
20872115
"DefaultValue": "",
20882116
"Options": "",
2089-
"Description": "One to many comma delimited F5 SSL Profile names the certificate is bound to"
2117+
"Description": "One to many comma delimited F5 SSL Profiles to bind the certificate to (new certificates ONLY)"
20902118
}
20912119
]
20922120
},
@@ -3618,6 +3646,51 @@
36183646
"BlueprintAllowed": false,
36193647
"CustomAliasAllowed": "Forbidden"
36203648
},
3649+
{
3650+
"Name": "MyOrchestratorStoreType",
3651+
"ShortName": "MOST",
3652+
"Capability": "MOST",
3653+
"LocalStore": false,
3654+
"SupportedOperations": {
3655+
"Add": false,
3656+
"Create": false,
3657+
"Discovery": true,
3658+
"Enrollment": false,
3659+
"Remove": false
3660+
},
3661+
"Properties": [
3662+
{
3663+
"Name": "CustomField1",
3664+
"DisplayName": "CustomField1",
3665+
"Type": "String",
3666+
"DependsOn": "",
3667+
"DefaultValue": "default",
3668+
"Required": true
3669+
},
3670+
{
3671+
"Name": "CustomField2",
3672+
"DisplayName": "CustomField2",
3673+
"Type": "String",
3674+
"DependsOn": "",
3675+
"DefaultValue": null,
3676+
"Required": true
3677+
}
3678+
],
3679+
"EntryParameters": [],
3680+
"PasswordOptions": {
3681+
"EntrySupported": false,
3682+
"StoreRequired": false,
3683+
"Style": "Default"
3684+
},
3685+
"StorePathType": "",
3686+
"StorePathValue": "",
3687+
"PrivateKeyAllowed": "Forbidden",
3688+
"JobProperties": [],
3689+
"ServerRequired": true,
3690+
"PowerShell": false,
3691+
"BlueprintAllowed": false,
3692+
"CustomAliasAllowed": "Forbidden"
3693+
},
36213694
{
36223695
"Name": "Nmap Orchestrator",
36233696
"ShortName": "Nmap",
@@ -3647,6 +3720,135 @@
36473720
"BlueprintAllowed": false,
36483721
"CustomAliasAllowed": "Optional"
36493722
},
3723+
{
3724+
"Name": "OktaApp",
3725+
"ShortName": "OktaApp",
3726+
"LocalStore": false,
3727+
"StorePathDescription": "This should contain the Okta App ID (please see overview for description).",
3728+
"ClientMachineDescription": "This should contain your Okta URL (e.g. https://trial-1111.okta.com).",
3729+
"SupportedOperations": {
3730+
"Add": false,
3731+
"Create": false,
3732+
"Discovery": true,
3733+
"Enrollment": true,
3734+
"Remove": false
3735+
},
3736+
"Properties": [
3737+
{
3738+
"Name": "DefaultValidityYears",
3739+
"DisplayName": "DefaultValidityYears",
3740+
"Type": "String",
3741+
"DependsOn": null,
3742+
"DefaultValue": "1",
3743+
"Required": true,
3744+
"Description": "Number of years the certificate will be valid for by default. Required by Okta."
3745+
}
3746+
],
3747+
"EntryParameters": [
3748+
{
3749+
"Name": "SANList",
3750+
"DisplayName": "SANList",
3751+
"Type": "String",
3752+
"RequiredWhen": {
3753+
"HasPrivateKey": false,
3754+
"OnAdd": false,
3755+
"OnRemove": false,
3756+
"OnReenrollment": true
3757+
},
3758+
"DependsOn": "",
3759+
"DefaultValue": "",
3760+
"Options": "",
3761+
"Description": "This is a comma-separated list of Subject Alternative Names (SANs) to be included in the certificate. Required by Okta. Must contain at least one SAN."
3762+
},
3763+
{
3764+
"Name": "ActivateCredential",
3765+
"DisplayName": "ActivateCredential",
3766+
"Type": "Bool",
3767+
"RequiredWhen": {
3768+
"HasPrivateKey": false,
3769+
"OnAdd": false,
3770+
"OnRemove": false,
3771+
"OnReenrollment": true
3772+
},
3773+
"DependsOn": "",
3774+
"DefaultValue": "false",
3775+
"Options": "",
3776+
"Description": "This is a boolean indicating whether to activate the certificate in Okta after reenrollment/ODKG."
3777+
}
3778+
],
3779+
"PasswordOptions": {
3780+
"EntrySupported": false,
3781+
"StoreRequired": false,
3782+
"Style": "Default"
3783+
},
3784+
"PrivateKeyAllowed": "Forbidden",
3785+
"ServerRequired": true,
3786+
"CustomAliasAllowed": "Forbidden"
3787+
},
3788+
{
3789+
"Name": "OktaIdP",
3790+
"ShortName": "OktaIdP",
3791+
"StorePathDescription": "This should contain the Okta IdP ID (please see overview for description).",
3792+
"ClientMachineDescription": "This should contain your Okta URL (e.g. https://trial-1111.okta.com).",
3793+
"SupportedOperations": {
3794+
"Add": false,
3795+
"Create": false,
3796+
"Discovery": true,
3797+
"Enrollment": true,
3798+
"Remove": false
3799+
},
3800+
"Properties": [
3801+
{
3802+
"Name": "DefaultValidityYears",
3803+
"DisplayName": "DefaultValidityYears",
3804+
"Type": "String",
3805+
"DependsOn": null,
3806+
"DefaultValue": "1",
3807+
"Required": true,
3808+
"Description": "Number of years the certificate will be valid for by default. Required by Okta."
3809+
}
3810+
],
3811+
"EntryParameters": [
3812+
{
3813+
"Name": "SANList",
3814+
"DisplayName": "SANList",
3815+
"Type": "String",
3816+
"RequiredWhen": {
3817+
"HasPrivateKey": false,
3818+
"OnAdd": false,
3819+
"OnRemove": false,
3820+
"OnReenrollment": true
3821+
},
3822+
"DependsOn": "",
3823+
"DefaultValue": "",
3824+
"Options": "",
3825+
"Description": "This is a comma-separated list of Subject Alternative Names (SANs) to be included in the certificate. Required by Okta. Must contain at least one SAN."
3826+
},
3827+
{
3828+
"Name": "ActivateCredential",
3829+
"DisplayName": "ActivateCredential",
3830+
"Type": "Bool",
3831+
"RequiredWhen": {
3832+
"HasPrivateKey": false,
3833+
"OnAdd": false,
3834+
"OnRemove": false,
3835+
"OnReenrollment": true
3836+
},
3837+
"DependsOn": "",
3838+
"DefaultValue": "true",
3839+
"Options": "",
3840+
"Description": "This is a boolean indicating whether to activate the certificate in Okta after reenrollment/ODKG."
3841+
}
3842+
],
3843+
"PasswordOptions": {
3844+
"EntrySupported": false,
3845+
"StoreRequired": false,
3846+
"Style": "Default"
3847+
},
3848+
"PrivateKeyAllowed": "Forbidden",
3849+
"ServerRequired": true,
3850+
"CustomAliasAllowed": "Forbidden"
3851+
},
36503852
{
36513853
"Name": "PaloAlto",
36523854
"ShortName": "PaloAlto",
@@ -4474,6 +4676,119 @@
44744676
"ClientMachineDescription": "The Client Machine field should contain the DNS name or IP address of the remote orchestrated server for Linux orchestrated servers, formatted as a URL (protocol://dns-or-ip:port) for Windows orchestrated servers, or '1.1.1.1|LocalMachine' for local agents. Example: 'https://myserver.mydomain.com:5986' or '1.1.1.1|LocalMachine' for local access.",
44754677
"StorePathDescription": "The Store Path field should contain the full path and file name, including file extension if applicable, beginning with a forward slash (/) for Linux orchestrated servers or a drive letter (i.e., c:\\folder\\path\\storename.p12) for Windows orchestrated servers. Example: '/folder/path/storename.p12' or 'c:\\folder\\path\\storename.p12'."
44764678
},
4679+
{
4680+
"Name": "Sample Orchestrator Solution",
4681+
"ShortName": "SOS",
4682+
"Capability": "SOS",
4683+
"LocalStore": false,
4684+
"StorePathDescription": "Path points to a local .json file. Orchestrator and its account should have read/write access.",
4685+
"ClientMachineDescription": "Runs on a Windows based machine.",
4686+
"SupportedOperations": {
4687+
"Add": true,
4688+
"Create": true,
4689+
"Discovery": true,
4690+
"Enrollment": true,
4691+
"Remove": true
4692+
},
4693+
"Properties": [
4694+
{
4695+
"Name": "StoreNameString",
4696+
"DisplayName": "Store Name",
4697+
"Type": "String",
4698+
"Required": false,
4699+
"Description": "The Store name for the particular SOS store."
4700+
},
4701+
{
4702+
"Name": "ForTestingOnlyBool",
4703+
"DisplayName": "For Testing Only",
4704+
"Type": "Bool",
4705+
"DefaultValue": "true",
4706+
"Required": false,
4707+
"Description": "Test bool variable."
4708+
},
4709+
{
4710+
"Name": "CollectionNameMultipleChoice",
4711+
"DisplayName": "Collection Name",
4712+
"Type": "MultipleChoice",
4713+
"DefaultValue": "internal",
4714+
"Options": "internal,public,single use,ssl",
4715+
"Required": true,
4716+
"Description": "A test collection."
4717+
},
4718+
{
4719+
"Name": "PrivateDetailsSecret",
4720+
"DisplayName": "Private Details",
4721+
"Type": "Secret",
4722+
"Required": false,
4723+
"DefaultValue": "test",
4724+
"Description": "A test secret."
4725+
}
4726+
],
4727+
"EntryParameters": [
4728+
{
4729+
"Name": "CommaSeparatedSansString",
4730+
"DisplayName": "SANs",
4731+
"Type": "String",
4732+
"RequiredWhen": {
4733+
"HasPrivateKey": false,
4734+
"OnAdd": false,
4735+
"OnRemove": false,
4736+
"OnReenrollment": false
4737+
},
4738+
"Description": "SAN string."
4739+
},
4740+
{
4741+
"Name": "CertColorMultipleChoice",
4742+
"DisplayName": "Certificate Color",
4743+
"Type": "MultipleChoice",
4744+
"RequiredWhen": {
4745+
"HasPrivateKey": false,
4746+
"OnAdd": false,
4747+
"OnRemove": false,
4748+
"OnReenrollment": false
4749+
},
4750+
"DefaultValue": "red",
4751+
"Options": "red,green,blue,orange",
4752+
"Description": "A test variable with multiple choice."
4753+
},
4754+
{
4755+
"Name": "ForTestingOnlyBool",
4756+
"DisplayName": "For Testing Only",
4757+
"Type": "Bool",
4758+
"RequiredWhen": {
4759+
"HasPrivateKey": true,
4760+
"OnAdd": false,
4761+
"OnRemove": false,
4762+
"OnReenrollment": false
4763+
},
4764+
"DefaultValue": "true",
4765+
"Description": "Another test boolean."
4766+
},
4767+
{
4768+
"Name": "PrivateCertDetailsSecret",
4769+
"DisplayName": "Private Cert Details",
4770+
"Type": "Secret",
4771+
"RequiredWhen": {
4772+
"HasPrivateKey": false,
4773+
"OnAdd": false,
4774+
"OnRemove": false,
4775+
"OnReenrollment": false
4776+
},
4777+
"DefaultValue": "test",
4778+
"Description": "A per cert secret."
4779+
}
4780+
],
4781+
"PasswordOptions": {
4782+
"EntrySupported": true,
4783+
"StoreRequired": false,
4784+
"Style": "Default"
4785+
},
4786+
"PrivateKeyAllowed": "Optional",
4787+
"ServerRequired": true,
4788+
"PowerShell": false,
4789+
"BlueprintAllowed": true,
4790+
"CustomAliasAllowed": "Optional"
4791+
},
44774792
{
44784793
"Name": "Signum",
44794794
"ShortName": "Signum",

0 commit comments

Comments
 (0)