-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathintegration-manifest.json
148 lines (148 loc) · 8.15 KB
/
integration-manifest.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
{
"$schema": "https://keyfactor.github.io/integration-manifest-schema.json",
"integration_type": "orchestrator",
"name": "F5 BigIQ",
"status": "production",
"support_level": "kf-supported",
"description": "The F5 Big IQ Orchestrator allows for the remote management of F5 Big IQ certificate stores. Inventory, Management, and Reenrollment functions are supported.",
"link_github": true,
"update_catalog": true,
"release_project": "F5BigIQ/F5BigIQ.csproj",
"release_dir": "F5BigIQ/bin/Release",
"about": {
"orchestrator": {
"UOFramework": "10.4",
"keyfactor_platform_version": "10.3",
"pam_support": true,
"store_types": [
{
"Name": "F5 Big IQ",
"ShortName": "F5-BigIQ",
"Capability": "F5-BigIQ",
"PrivateKeyAllowed": "Required",
"ServerRequired": true,
"PowerShell": false,
"BlueprintAllowed": true,
"CustomAliasAllowed": "Required",
"SupportedOperations": {
"Add": true,
"Create": false,
"Discovery": false,
"Enrollment": true,
"Remove": true
},
"PasswordOptions": {
"EntrySupported": false,
"StoreRequired": false,
"Style": "Default"
},
"Properties": [
{
"Name": "DeployCertificateOnRenewal",
"DisplayName": "Deploy Certificate to Linked Big IP on Renewal",
"Type": "Bool",
"DependsOn": "",
"DefaultValue": "false",
"Required": false,
"Description": "This optional setting determines whether renewed certificates (Management-Add jobs with Overwrite selected) will be deployed to all linked Big IP devices. Linked devices are determined by looking at all of the client-ssl profiles that reference the renewed certificate that have an associated virtual server linked to a Big IP device. An immediate deployment is then scheduled within F5 Big IQ for each linked Big IP device."
},
{
"Name": "IgnoreSSLWarning",
"DisplayName": "Ignore SSL Warning",
"Type": "Bool",
"DependsOn": "",
"DefaultValue": "false",
"Required": false,
"Description": "If you use a self signed certificate for the F5 Big IQ portal, you will need to add this optional Custom Field and set the value to True on the managed certificate store."
},
{
"Name": "UseTokenAuth",
"DisplayName": "Use Token Authentication",
"Type": "Bool",
"DependsOn": "",
"DefaultValue": "false",
"Required": false,
"Description": "If you prefer to use F5 Big IQ's Token Authentication to authenticate F5 Big IQ API calls, you will need to add this optional Custom Field and set the value to True on the managed certificate store. If set to True for the store, the userid/password credentials you set for the certificate store will be used once to receive a token. This token is then used for all subsequent API calls for the duration of the job. If this option does not exist or is set to False, the userid/password credentials you set for the certificate store will be used for all API calls."
},
{
"Name": "LoginProviderName",
"DisplayName": "Authentication Provider Name",
"Type": "String",
"DependsOn": "UseTokenAuth",
"DefaultValue": "",
"Required": false,
"Description": "If Use Token Authentication is selected, you may optionally add a value for the authentication provider F5 Big IQ will use to retrieve the auth token. If you choose not to add this field or leave it blank on the certificate store (with no default value set), the default of \"TMOS\" will be used."
},
{
"Name": "ServerUsername",
"DisplayName": "Server Username",
"Type": "Secret",
"DependsOn": "",
"DefaultValue": "",
"IsPAMEligible": true,
"Required": false,
"Description": "Login credential for the F5 Big IQ device. MUST be an Admin account."
},
{
"Name": "ServerPassword",
"DisplayName": "Server Password",
"Type": "Secret",
"DependsOn": "",
"DefaultValue": "",
"IsPAMEligible": true,
"Required": false,
"Description": "Login password for the F5 Big IQ device."
}
],
"EntryParameters": [
{
"Name": "Alias",
"DisplayName": "Alias (Reenrollment only)",
"Type": "String",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": true
},
"DependsOn": "",
"DefaultValue": "",
"Options": "",
"Description": "The name F5 Big IQ uses to identify the certificate"
},
{
"Name": "Overwrite",
"DisplayName": "Overwrite (Reenrollment only)",
"Type": "Bool",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": true
},
"DependsOn": "",
"DefaultValue": "False",
"Options": "",
"Description": "Allow overwriting an existing certificate when reenrolling?"
},
{
"Name": "SANs",
"DisplayName": "SANs (Reenrollment only)",
"Type": "String",
"RequiredWhen": {
"HasPrivateKey": false,
"OnAdd": false,
"OnRemove": false,
"OnReenrollment": false
},
"DependsOn": "",
"DefaultValue": "",
"Options": "",
"Description": "External SANs for the requested certificate. Each SAN must be prefixed with the type (DNS: or IP:) and multiple SANs must be delimitted by an ampersand (&). Example: DNS:server.domain.com&IP:127.0.0.1&DNS:server2.domain.com. This is an optional field."
}
]
}
]
}
}
}