Repository navigation
Releases: pspete/IdentityCommand.SecretsManager
Releases · pspete/IdentityCommand.SecretsManager
Release list
v0.1.0
Fixed
Connect-SMTenantnow performs the CyberArk Identity -> Conjur access token exchange
automatically, using the same bearer-authenticated session every other companion module shares -
no manual token is required for the common case.-ConjurAccessTokenremains as an optional
override for a token obtained some other way.
Added
- Initial release of
IdentityCommand.SecretsManager, wrapping the CyberArk Secrets Manager, SaaS
API and the Secure Workload Access (SWA) API. Connect-SMTenant: resolve the tenant url via platform discovery or a supplied url, then exchange
the CyberArk Identity session for a Conjur access token and set it as the module's authentication
header.- Groups and workloads:
Add-SMGroupMember,Remove-SMGroupMember,Remove-SMWorkloadAnnotation,
Remove-SMWorkload. - Issuers:
Get-,New-,Set-,Remove-SMIssuer(AWS, GCP and Certificate Manager issuer
types), plusNew-SMIssuedCertificateandNew-SMSignedCertificatefor Certificate Manager
issuers. - Authenticators:
Get-,New-,Remove-SMAuthenticatorandSet-SMAuthenticatorState. Get-SMSecretValue: batch retrieval of up to 250 secret values.- SWA trust domains:
Get-,New-,Set-,Remove-SMTrustDomainandGet-SMCABundle. - SWA server groups:
Get-,New-,Set-,Remove-SMServerGroup, including GCP service account
and AWS instance identity document node attestation. - SWA node groups:
Get-,New-,Set-,Remove-SMNodeGroup. - SWA servers:
Get-,New-,Set-,Remove-SMServer. - SWA signing keys:
Get-SMOpenIDConfigurationandGet-SMJwks- both public, requiring no
authentication. Get-SMModuleData: get the module version and session configuration data.