Skip to content

v0.1.0

Latest

Choose a tag to compare

@pspete pspete released this 07 Oct 22:10
· 1 commit to main since this release

Fixed

  • Connect-SMTenant now performs the CyberArk Identity -> Conjur access token exchange
    automatically, using the same bearer-authenticated session every other companion module shares -
    no manual token is required for the common case. -ConjurAccessToken remains as an optional
    override for a token obtained some other way.

Added

  • Initial release of IdentityCommand.SecretsManager, wrapping the CyberArk Secrets Manager, SaaS
    API and the Secure Workload Access (SWA) API.
  • Connect-SMTenant: resolve the tenant url via platform discovery or a supplied url, then exchange
    the CyberArk Identity session for a Conjur access token and set it as the module's authentication
    header.
  • Groups and workloads: Add-SMGroupMember, Remove-SMGroupMember, Remove-SMWorkloadAnnotation,
    Remove-SMWorkload.
  • Issuers: Get-, New-, Set-, Remove-SMIssuer (AWS, GCP and Certificate Manager issuer
    types), plus New-SMIssuedCertificate and New-SMSignedCertificate for Certificate Manager
    issuers.
  • Authenticators: Get-, New-, Remove-SMAuthenticator and Set-SMAuthenticatorState.
  • Get-SMSecretValue: batch retrieval of up to 250 secret values.
  • SWA trust domains: Get-, New-, Set-, Remove-SMTrustDomain and Get-SMCABundle.
  • SWA server groups: Get-, New-, Set-, Remove-SMServerGroup, including GCP service account
    and AWS instance identity document node attestation.
  • SWA node groups: Get-, New-, Set-, Remove-SMNodeGroup.
  • SWA servers: Get-, New-, Set-, Remove-SMServer.
  • SWA signing keys: Get-SMOpenIDConfiguration and Get-SMJwks - both public, requiring no
    authentication.
  • Get-SMModuleData: get the module version and session configuration data.