Attach

Attach Kubernetes Auth configuration onto identity

Authorizations

Authorization

string

headerrequired

An access token in Infisical

Path Parameters

identityId

string

required

The ID of the identity to attach the configuration onto.

Body

application/json

kubernetesHost

string

required

The host string, host:port pair, or URL to the base of the Kubernetes API server.

caCert

string

default:

The PEM-encoded CA cert for the Kubernetes API server.

tokenReviewerJwt

string

required

The long-lived service account JWT token for Infisical to access the TokenReview API to validate other service account JWT tokens submitted by applications/pods.

allowedNamespaces

string

required

The comma-separated list of trusted namespaces that service accounts must belong to authenticate with Infisical.

allowedNames

string

required

The comma-separated list of trusted service account names that can authenticate with Infisical.

allowedAudience

string

required

The optional audience claim that the service account JWT token must have to authenticate with Infisical.

accessTokenTrustedIps

object[]

The IPs or CIDR ranges that access tokens can be used from.

Show child attributes

accessTokenTTL

integer

default: 2592000

The lifetime for an acccess token in seconds.

accessTokenMaxTTL

integer

default: 2592000

The maximum lifetime for an acccess token in seconds.

accessTokenNumUsesLimit

integer

default: 0

The maximum number of times that an access token can be used.

Response

200 - application/json

identityKubernetesAuth

object

required

Show child attributes