auth tune
The auth tune
command tunes the configuration options for the auth method at
the given PATH. The argument corresponds to the PATH where the auth method is
enabled, not the TYPE!
Examples
Before tuning the auth method configuration, view the current configuration of the auth method enabled at "github/".
The default lease for the auth method enabled at "github/" is currently set to 768 hours. Tune this value to 72 hours.
You can specify multiple audit non-hmac request keys.
Usage
The following flags are available in addition to the standard set of flags included on all commands.
-allowed-response-headers
(string: "")
- response header values that the auth method will be allowed to set.-audit-non-hmac-request-keys
(string: "")
- Key that will not be HMAC'd by audit devices in the request data object. Note that multiple keys may be specified by providing this option multiple times, each time with 1 key.-audit-non-hmac-response-keys
(string: "")
- Key that will not be HMAC'd by audit devices in the response data object. Note that multiple keys may be specified by providing this option multiple times, each time with 1 key.-default-lease-ttl
(duration: "")
- The default lease TTL for this auth method. If unspecified, this defaults to the Vault server's globally configured default lease TTL, or a previously configured value for the auth method.-description
(string: "")
- Specifies the description of the auth method. This overrides the current stored value, if any.-listing-visibility
(string: "")
- The flag to toggle whether to show the mount in the UI-specific listing endpoint. Valid values are"unauth"
or"hidden"
. Passing empty string leaves the current setting unchanged.-max-lease-ttl
(duration: "")
- The maximum lease TTL for this auth method. If unspecified, this defaults to the Vault server's globally configured maximum lease TTL, or a previously configured value for the auth method. This value is allowed to override the server's global max TTL; it can be longer or shorter.-passthrough-request-headers
(string: "")
- request header values that will be sent to the auth method. Note that multiple keys may be specified by providing this option multiple times, each time with 1 key.-token-type
(string: "")
- Specifies the type of tokens that should be returned by the auth method. Note that multiple keys may be specified by providing this option multiple times, each time with 1 key.