Skip to content

New Pull Request - all:latest #282

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Sep 10, 2025
Merged

New Pull Request - all:latest #282

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
581a304
fix(ci): Generate PR into caller branch for store-type updates.
spbsoluble Sep 10, 2025
2bcb76a
Update store_types.json for all:latest
Sep 10, 2025
075a980
Merge branch 'stype-deps-bump' into all
spbsoluble Sep 10, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/update-stores.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -191,7 +191,7 @@ jobs:
console.log("Commit to ${{env.KFUTIL_ARG}} for PR")
const owner = context.repo.owner;
const repo = context.repo.repo;

// Get the current branch name that the workflow is running on
const baseBranch = context.payload.ref ?
context.payload.ref.replace('refs/heads/', '') : 'main';
Expand Down
317 changes: 316 additions & 1 deletion cmd/store_types.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -421,6 +421,34 @@
"ClientMachineDescription": "This is a full AWS ARN specifying a Role. This is the Role that will be assumed in any Auth scenario performing Assume Role. This will dictate what certificates are usable by the orchestrator. A preceding [profile] name should be included if a Credential Profile is to be used in Default Sdk Auth.",
"StorePathDescription": "A single specified AWS Region the store will operate in. Additional regions should get their own store defined."
},
{
"Name": "Airlock Application Firewall Certificate",
"ShortName": "AirlockWAF",
"Capability": "AirlockWAF",
"LocalStore": false,
"SupportedOperations": {
"Add": false,
"Create": false,
"Discovery": true,
"Enrollment": false,
"Remove": false
},
"Properties": [],
"EntryParameters": [],
"PasswordOptions": {
"EntrySupported": false,
"StoreRequired": true,
"Style": "Default"
},
"StorePathType": "",
"StorePathValue": "",
"PrivateKeyAllowed": "Required",
"JobProperties": [],
"ServerRequired": true,
"PowerShell": false,
"BlueprintAllowed": false,
"CustomAliasAllowed": "Allowed"
},
{
"Name": "Akamai Certificate Provisioning Service",
"ShortName": "Akamai",
Expand Down Expand Up @@ -2086,7 +2114,7 @@
"DependsOn": "",
"DefaultValue": "",
"Options": "",
"Description": "One to many comma delimited F5 SSL Profile names the certificate is bound to"
"Description": "One to many comma delimited F5 SSL Profiles to bind the certificate to (new certificates ONLY)"
}
]
},
Expand Down Expand Up @@ -3618,6 +3646,51 @@
"BlueprintAllowed": false,
"CustomAliasAllowed": "Forbidden"
},
{
"Name": "MyOrchestratorStoreType",
"ShortName": "MOST",
"Capability": "MOST",
"LocalStore": false,
"SupportedOperations": {
"Add": false,
"Create": false,
"Discovery": true,
"Enrollment": false,
"Remove": false
},
"Properties": [
{
"Name": "CustomField1",
"DisplayName": "CustomField1",
"Type": "String",
"DependsOn": "",
"DefaultValue": "default",
"Required": true
},
{
"Name": "CustomField2",
"DisplayName": "CustomField2",
"Type": "String",
"DependsOn": "",
"DefaultValue": null,
"Required": true
}
],
"EntryParameters": [],
"PasswordOptions": {
"EntrySupported": false,
"StoreRequired": false,
"Style": "Default"
},
"StorePathType": "",
"StorePathValue": "",
"PrivateKeyAllowed": "Forbidden",
"JobProperties": [],
"ServerRequired": true,
"PowerShell": false,
"BlueprintAllowed": false,
"CustomAliasAllowed": "Forbidden"
},
{
"Name": "Nmap Orchestrator",
"ShortName": "Nmap",
Expand Down Expand Up @@ -3647,6 +3720,135 @@
"BlueprintAllowed": false,
"CustomAliasAllowed": "Optional"
},
{
"Name": "OktaApp",
"ShortName": "OktaApp",
"LocalStore": false,
"StorePathDescription": "This should contain the Okta App ID (please see overview for description).",
"ClientMachineDescription": "This should contain your Okta URL (e.g. https://trial-1111.okta.com).",
"SupportedOperations": {
"Add": false,
"Create": false,
"Discovery": true,
"Enrollment": true,
"Remove": false
},
"Properties": [
{
"Name": "DefaultValidityYears",
"DisplayName": "DefaultValidityYears",
"Type": "String",
"DependsOn": null,
"DefaultValue": "1",
"Required": true,
"Description": "Number of years the certificate will be valid for by default. Required by Okta."
}
],
"EntryParameters": [
{
"Name": "SANList",
"DisplayName": "SANList",
"Type": "String",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": true
},
"DependsOn": "",
"DefaultValue": "",
"Options": "",
"Description": "This is a comma-separated list of Subject Alternative Names (SANs) to be included in the certificate. Required by Okta. Must contain at least one SAN."
},
{
"Name": "ActivateCredential",
"DisplayName": "ActivateCredential",
"Type": "Bool",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": true
},
"DependsOn": "",
"DefaultValue": "false",
"Options": "",
"Description": "This is a boolean indicating whether to activate the certificate in Okta after reenrollment/ODKG."
}
],
"PasswordOptions": {
"EntrySupported": false,
"StoreRequired": false,
"Style": "Default"
},
"PrivateKeyAllowed": "Forbidden",
"ServerRequired": true,
"CustomAliasAllowed": "Forbidden"
},
{
"Name": "OktaIdP",
"ShortName": "OktaIdP",
"StorePathDescription": "This should contain the Okta IdP ID (please see overview for description).",
"ClientMachineDescription": "This should contain your Okta URL (e.g. https://trial-1111.okta.com).",
"SupportedOperations": {
"Add": false,
"Create": false,
"Discovery": true,
"Enrollment": true,
"Remove": false
},
"Properties": [
{
"Name": "DefaultValidityYears",
"DisplayName": "DefaultValidityYears",
"Type": "String",
"DependsOn": null,
"DefaultValue": "1",
"Required": true,
"Description": "Number of years the certificate will be valid for by default. Required by Okta."
}
],
"EntryParameters": [
{
"Name": "SANList",
"DisplayName": "SANList",
"Type": "String",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": true
},
"DependsOn": "",
"DefaultValue": "",
"Options": "",
"Description": "This is a comma-separated list of Subject Alternative Names (SANs) to be included in the certificate. Required by Okta. Must contain at least one SAN."
},
{
"Name": "ActivateCredential",
"DisplayName": "ActivateCredential",
"Type": "Bool",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": true
},
"DependsOn": "",
"DefaultValue": "true",
"Options": "",
"Description": "This is a boolean indicating whether to activate the certificate in Okta after reenrollment/ODKG."
}
],
"PasswordOptions": {
"EntrySupported": false,
"StoreRequired": false,
"Style": "Default"
},
"PrivateKeyAllowed": "Forbidden",
"ServerRequired": true,
"CustomAliasAllowed": "Forbidden"
},
{
"Name": "PaloAlto",
"ShortName": "PaloAlto",
Expand Down Expand Up @@ -4474,6 +4676,119 @@
"ClientMachineDescription": "The Client Machine field should contain the DNS name or IP address of the remote orchestrated server for Linux orchestrated servers, formatted as a URL (protocol://dns-or-ip:port) for Windows orchestrated servers, or '1.1.1.1|LocalMachine' for local agents. Example: 'https://myserver.mydomain.com:5986' or '1.1.1.1|LocalMachine' for local access.",
"StorePathDescription": "The Store Path field should contain the full path and file name, including file extension if applicable, beginning with a forward slash (/) for Linux orchestrated servers or a drive letter (i.e., c:\\folder\\path\\storename.p12) for Windows orchestrated servers. Example: '/folder/path/storename.p12' or 'c:\\folder\\path\\storename.p12'."
},
{
"Name": "Sample Orchestrator Solution",
"ShortName": "SOS",
"Capability": "SOS",
"LocalStore": false,
"StorePathDescription": "Path points to a local .json file. Orchestrator and its account should have read/write access.",
"ClientMachineDescription": "Runs on a Windows based machine.",
"SupportedOperations": {
"Add": true,
"Create": true,
"Discovery": true,
"Enrollment": true,
"Remove": true
},
"Properties": [
{
"Name": "StoreNameString",
"DisplayName": "Store Name",
"Type": "String",
"Required": false,
"Description": "The Store name for the particular SOS store."
},
{
"Name": "ForTestingOnlyBool",
"DisplayName": "For Testing Only",
"Type": "Bool",
"DefaultValue": "true",
"Required": false,
"Description": "Test bool variable."
},
{
"Name": "CollectionNameMultipleChoice",
"DisplayName": "Collection Name",
"Type": "MultipleChoice",
"DefaultValue": "internal",
"Options": "internal,public,single use,ssl",
"Required": true,
"Description": "A test collection."
},
{
"Name": "PrivateDetailsSecret",
"DisplayName": "Private Details",
"Type": "Secret",
"Required": false,
"DefaultValue": "test",
"Description": "A test secret."
}
],
"EntryParameters": [
{
"Name": "CommaSeparatedSansString",
"DisplayName": "SANs",
"Type": "String",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
},
"Description": "SAN string."
},
{
"Name": "CertColorMultipleChoice",
"DisplayName": "Certificate Color",
"Type": "MultipleChoice",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
},
"DefaultValue": "red",
"Options": "red,green,blue,orange",
"Description": "A test variable with multiple choice."
},
{
"Name": "ForTestingOnlyBool",
"DisplayName": "For Testing Only",
"Type": "Bool",
"RequiredWhen": {
"HasPrivateKey": true,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
},
"DefaultValue": "true",
"Description": "Another test boolean."
},
{
"Name": "PrivateCertDetailsSecret",
"DisplayName": "Private Cert Details",
"Type": "Secret",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
},
"DefaultValue": "test",
"Description": "A per cert secret."
}
],
"PasswordOptions": {
"EntrySupported": true,
"StoreRequired": false,
"Style": "Default"
},
"PrivateKeyAllowed": "Optional",
"ServerRequired": true,
"PowerShell": false,
"BlueprintAllowed": true,
"CustomAliasAllowed": "Optional"
},
{
"Name": "Signum",
"ShortName": "Signum",
Expand Down
Loading
Loading