"Release v5.0.20"

Author: akeyless-ci

.openapi-generator/FILES

@@ -2324,10 +2324,3 @@ src/main/java/io/akeyless/client/model/WindowsService.java
 src/main/java/io/akeyless/client/model/WindowsServiceAttributes.java
 src/main/java/io/akeyless/client/model/WindowsTargetDetails.java
 src/main/java/io/akeyless/client/model/ZeroSSLTargetDetails.java
-src/test/java/io/akeyless/client/model/CertificateDiscoveryOutputTest.java
-src/test/java/io/akeyless/client/model/CertificateDiscoveryTest.java
-src/test/java/io/akeyless/client/model/CertificateMigrationTest.java
-src/test/java/io/akeyless/client/model/CertificatePayloadTest.java
-src/test/java/io/akeyless/client/model/CertificateScanTargetTest.java
-src/test/java/io/akeyless/client/model/ScanResultsTest.java
-src/test/java/io/akeyless/client/model/TargetErrorTest.java

api/openapi.yaml

@@ -22052,14 +22052,19 @@ components:
           api_token_ttl: api_token_ttl
           enable_tls: true
           enable_tls_curl: true
+          tls_cert_expiration_events:
+          - seconds_before: 1
+          - seconds_before: 1
           tls_key: tls_key
           enable_tls_configure: true
           tls_cert: tls_cert
           akeyless_url: akeyless_url
           display_name: display_name
+          tls_cert_expiration_date: 2000-01-23T04:56:07.000+00:00
           gw_cluster_url: gw_cluster_url
           enable_tls_hvp: true
           notify_on_status_change: true
+          tls_cert_common_name: tls_cert_common_name
           enable_sni_proxy: true
           hvp_route_version: 1
         ldap:
@@ -22474,11 +22479,17 @@ components:
               gcp_credentials_json: gcp_credentials_json
         ca_certificates:
           certificate_store:
-          - certificate_pem: certificate_pem
+          - expiration_events:
+            - seconds_before: 1
+            - seconds_before: 1
+            certificate_pem: certificate_pem
             name: name
             common_name: common_name
             expiration_date: 2000-01-23T04:56:07.000+00:00
-          - certificate_pem: certificate_pem
+          - expiration_events:
+            - seconds_before: 1
+            - seconds_before: 1
+            certificate_pem: certificate_pem
             name: name
             common_name: common_name
             expiration_date: 2000-01-23T04:56:07.000+00:00
@@ -24812,11 +24823,17 @@ components:
     CaCertificatesConfigPart:
       example:
         certificate_store:
-        - certificate_pem: certificate_pem
+        - expiration_events:
+          - seconds_before: 1
+          - seconds_before: 1
+          certificate_pem: certificate_pem
           name: name
           common_name: common_name
           expiration_date: 2000-01-23T04:56:07.000+00:00
-        - certificate_pem: certificate_pem
+        - expiration_events:
+          - seconds_before: 1
+          - seconds_before: 1
+          certificate_pem: certificate_pem
           name: name
           common_name: common_name
           expiration_date: 2000-01-23T04:56:07.000+00:00
@@ -25809,6 +25826,9 @@ components:
       x-go-package: akeyless.io/akeyless-main-repo/go/src/infra/types
     CertificateStore:
       example:
+        expiration_events:
+        - seconds_before: 1
+        - seconds_before: 1
         certificate_pem: certificate_pem
         name: name
         common_name: common_name
@@ -25824,6 +25844,11 @@ components:
           format: date-time
           type: string
           x-go-name: ExpirationDate
+        expiration_events:
+          items:
+            $ref: '#/components/schemas/CertificateExpirationEvent'
+          type: array
+          x-go-name: ExpirationEvents
         name:
           type: string
           x-go-name: Name
@@ -27276,6 +27301,7 @@ components:
       description: CreateUSC is a command that creates a Universal Secrets Connector
       example:
         target-to-associate: target-to-associate
+        gcp-sm-regions: gcp-sm-regions
         use-prefix-as-filter: "false"
         description: description
         usc-prefix: usc-prefix
@@ -27309,6 +27335,12 @@ components:
           description: GCP Project ID (Relevant only for GCP targets)
           type: string
           x-go-name: GcpProjectId
+        gcp-sm-regions:
+          description: |-
+            GCP Secret Manager regions to query for regional secrets (comma-separated, e.g., us-east1,us-west1). Max 12 regions.
+            Required when listing with object-type=regional-secrets.
+          type: string
+          x-go-name: GcpSmRegions
         item-custom-fields:
           additionalProperties:
             type: string
@@ -29380,6 +29412,7 @@ components:
           name: name
           expiration: 2000-01-23T04:56:07.000+00:00
           location: ""
+          region: region
           status: true
         - secret_id: secret_id
           key_id: key_id
@@ -29394,6 +29427,7 @@ components:
           name: name
           expiration: 2000-01-23T04:56:07.000+00:00
           location: ""
+          region: region
           status: true
       properties:
         secrets_list:
@@ -30051,6 +30085,9 @@ components:
       description: gatewayUpdateTlsCert is a command that updates Gateway TLS certificate
       example:
         json: false
+        expiration-event-in:
+        - expiration-event-in
+        - expiration-event-in
         cert-data: cert-data
         key-data: key-data
         uid-token: uid-token
@@ -30060,6 +30097,13 @@ components:
           description: TLS Certificate (base64 encoded)
           type: string
           x-go-name: CertData
+        expiration-event-in:
+          description: How many days before the expiration of the certificate would
+            you like to be notified.
+          items:
+            type: string
+          type: array
+          x-go-name: ExpirationEventsInDays
         json:
           default: false
           description: Set output format to JSON
@@ -30210,14 +30254,19 @@ components:
         api_token_ttl: api_token_ttl
         enable_tls: true
         enable_tls_curl: true
+        tls_cert_expiration_events:
+        - seconds_before: 1
+        - seconds_before: 1
         tls_key: tls_key
         enable_tls_configure: true
         tls_cert: tls_cert
         akeyless_url: akeyless_url
         display_name: display_name
+        tls_cert_expiration_date: 2000-01-23T04:56:07.000+00:00
         gw_cluster_url: gw_cluster_url
         enable_tls_hvp: true
         notify_on_status_change: true
+        tls_cert_common_name: tls_cert_common_name
         enable_sni_proxy: true
         hvp_route_version: 1
       properties:
@@ -30267,6 +30316,18 @@ components:
         tls_cert:
           type: string
           x-go-name: TLSCert
+        tls_cert_common_name:
+          type: string
+          x-go-name: TlsCertCommonName
+        tls_cert_expiration_date:
+          format: date-time
+          type: string
+          x-go-name: TlsCertExpirationDate
+        tls_cert_expiration_events:
+          items:
+            $ref: '#/components/schemas/CertificateExpirationEvent'
+          type: array
+          x-go-name: TlsCertExpirationEvents
         tls_key:
           type: string
           x-go-name: TLSKey
@@ -30729,8 +30790,8 @@ components:
         extended-key-usage:
           description: "A comma-separated list of extended key usage requests which\
             \ will be used for certificate issuance. Supported values: 'clientauth',\
-            \ 'serverauth'. If critical is present the extension will be marked as\
-            \ critical"
+            \ 'serverauth', 'codesigning'. If critical is present the extension will\
+            \ be marked as critical"
           type: string
           x-go-name: ExtKeyUsage
         extra-extensions:
@@ -43568,6 +43629,7 @@ components:
         name: name
         expiration: 2000-01-23T04:56:07.000+00:00
         location: ""
+        region: region
         status: true
       properties:
         created:
@@ -43593,6 +43655,9 @@ components:
         name:
           type: string
           x-go-name: Name
+        region:
+          type: string
+          x-go-name: Region
         secret_id:
           type: string
           x-go-name: SecretId
@@ -45903,6 +45968,7 @@ components:
           name: name
           expiration: 2000-01-23T04:56:07.000+00:00
           location: ""
+          region: region
           status: true
         - secret_id: secret_id
           key_id: key_id
@@ -45917,6 +45983,7 @@ components:
           name: name
           expiration: 2000-01-23T04:56:07.000+00:00
           location: ""
+          region: region
           status: true
       properties:
         secrets_list:
@@ -98853,8 +98920,8 @@ components:
         extended-key-usage:
           description: "A comma-separated list of extended key usage requests which\
             \ will be used for certificate issuance. Supported values: 'clientauth',\
-            \ 'serverauth'. If critical is present the extension will be marked as\
-            \ critical"
+            \ 'serverauth', 'codesigning'. If critical is present the extension will\
+            \ be marked as critical"
           type: string
           x-go-name: ExtKeyUsage
         extra-extensions:
@@ -115734,6 +115801,12 @@ components:
             type: string
           type: array
           x-go-name: ExpirationEventsInDays
+        gcp-sm-regions:
+          description: |-
+            GCP Secret Manager regions to query for regional secrets (comma-separated, e.g., us-east1,us-west1). Max 12 regions.
+            USC with GCP targets only.
+          type: string
+          x-go-name: GcpSmRegions
         host-provider:
           description: "Host provider type [explicit/target], Default Host provider\
             \ is explicit, Relevant only for Secure Remote Access of ssh cert issuer,\
@@ -118106,6 +118179,12 @@ components:
             \ the pfx certificate (Relevant only for Azure KV certificates)"
           type: string
           x-go-name: PfxPassword
+        region:
+          description: |-
+            Optional, create secret in a specific region (GCP only).
+            If empty, a global secret will be created (provider default).
+          type: string
+          x-go-name: Region
         secret-name:
           description: Name for the new universal secrets
           type: string

build.gradle

@@ -4,7 +4,7 @@ apply plugin: 'java'
 apply plugin: 'com.diffplug.spotless'
 
 group = 'io.akeyless'
-version = '5.0.19'
+version = '5.0.20'
 
 buildscript {
     repositories {

build.sbt

@@ -2,7 +2,7 @@ lazy val root = (project in file(".")).
   settings(
     organization := "io.akeyless",
     name := "akeyless-java",
-    version := "5.0.19",
+    version := "5.0.20",
     scalaVersion := "2.11.4",
     scalacOptions ++= Seq("-feature"),
     javacOptions in compile ++= Seq("-Xlint:deprecation"),

docs/CertificateStore.md

@@ -10,6 +10,7 @@
 |**certificatePem** | **String** |  |  [optional] |
 |**commonName** | **String** |  |  [optional] |
 |**expirationDate** | **OffsetDateTime** |  |  [optional] |
+|**expirationEvents** | [**List<CertificateExpirationEvent>**](CertificateExpirationEvent.md) |  |  [optional] |
 |**name** | **String** |  |  [optional] |
 
 

docs/CreateUSC.md

@@ -12,6 +12,7 @@ CreateUSC is a command that creates a Universal Secrets Connector
 |**deleteProtection** | **String** | Protection from accidental deletion of this object [true/false] |  [optional] |
 |**description** | **String** | Description of the Universal Secrets Connector |  [optional] |
 |**gcpProjectId** | **String** | GCP Project ID (Relevant only for GCP targets) |  [optional] |
+|**gcpSmRegions** | **String** | GCP Secret Manager regions to query for regional secrets (comma-separated, e.g., us-east1,us-west1). Max 12 regions. Required when listing with object-type=regional-secrets. |  [optional] |
 |**itemCustomFields** | **Map<String, String>** | Additional custom fields to associate with the item |  [optional] |
 |**json** | **Boolean** | Set output format to JSON |  [optional] |
 |**k8sNamespace** | **String** | K8s namespace (Relevant to Kubernetes targets) |  [optional] |

docs/GatewayUpdateTlsCert.md

@@ -9,6 +9,7 @@ gatewayUpdateTlsCert is a command that updates Gateway TLS certificate
 | Name | Type | Description | Notes |
 |------------ | ------------- | ------------- | -------------|
 |**certData** | **String** | TLS Certificate (base64 encoded) |  [optional] |
+|**expirationEventIn** | **List<String>** | How many days before the expiration of the certificate would you like to be notified. |  [optional] |
 |**json** | **Boolean** | Set output format to JSON |  [optional] |
 |**keyData** | **String** | TLS Private Key (base64 encoded) |  [optional] |
 |**token** | **String** | Authentication token (see `/auth` and `/configure`) |  [optional] |

docs/GeneralConfigPart.md

@@ -20,6 +20,9 @@
 |**notifyOnStatusChange** | **Boolean** |  |  [optional] |
 |**tcpPort** | **String** |  |  [optional] |
 |**tlsCert** | **String** |  |  [optional] |
+|**tlsCertCommonName** | **String** |  |  [optional] |
+|**tlsCertExpirationDate** | **OffsetDateTime** |  |  [optional] |
+|**tlsCertExpirationEvents** | [**List<CertificateExpirationEvent>**](CertificateExpirationEvent.md) |  |  [optional] |
 |**tlsKey** | **String** |  |  [optional] |
 
 

docs/GetKubeExecCreds.md

@@ -13,7 +13,7 @@ getKubeExecCreds is a command that gets credentials for authentication with Kube
 |**certIssuerName** | **String** | The name of the PKI certificate issuer |  |
 |**commonName** | **String** | The common name to be included in the PKI certificate (if CSR is supplied this flag is ignored and the CSR subject CN is taken) |  [optional] |
 |**csrDataBase64** | **String** | Certificate Signing Request contents encoded in base64 to generate the certificate with |  [optional] |
-|**extendedKeyUsage** | **String** | A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth'. If critical is present the extension will be marked as critical |  [optional] |
+|**extendedKeyUsage** | **String** | A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'. If critical is present the extension will be marked as critical |  [optional] |
 |**extraExtensions** | **String** | A json string that defines the requested extra extensions for the certificate |  [optional] |
 |**json** | **Boolean** | Set output format to JSON |  [optional] |
 |**keyDataBase64** | **String** | PKI key file contents. If this option is used, the certificate will be printed to stdout |  [optional] |

docs/GetPKICertificate.md

@@ -11,7 +11,7 @@
 |**certIssuerName** | **String** | The name of the PKI certificate issuer |  |
 |**commonName** | **String** | The common name to be included in the PKI certificate (if CSR is supplied this flag is ignored and the CSR subject CN is taken) |  [optional] |
 |**csrDataBase64** | **String** | Certificate Signing Request contents encoded in base64 to generate the certificate with |  [optional] |
-|**extendedKeyUsage** | **String** | A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth'. If critical is present the extension will be marked as critical |  [optional] |
+|**extendedKeyUsage** | **String** | A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'. If critical is present the extension will be marked as critical |  [optional] |
 |**extraExtensions** | **String** | A json string that defines the requested extra extensions for the certificate |  [optional] |
 |**json** | **Boolean** | Set output format to JSON |  [optional] |
 |**keyDataBase64** | **String** | PKI key file contents. If this option is used, the certificate will be printed to stdout |  [optional] |