Skip to content

Store Types Update - all:latest #346

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
github-actions wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Store Types Update - all:latest #346

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
b93ff3b
Update store_types.json for all:latest
Jul 31, 2026
f982e68
Update store_types.json for all:latest
Aug 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
97 changes: 40 additions & 57 deletions cmd/store_types.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -286,7 +286,7 @@
"SupportedOperations": {
"Add": true,
"Create": false,
"Discovery": false,
"Discovery": true,
"Enrollment": false,
"Remove": true
},
Expand Down Expand Up @@ -410,6 +410,16 @@
"Required": false,
"IsPAMEligible": false,
"Description": "An optional parameter sts:ExternalId to pass with Assume Role calls"
},
{
"Name": "DiscoveryRoleName",
"DisplayName": "Discovery Role Name",
"Type": "String",
"DependsOn": "",
"DefaultValue": "KeyfactorACMDiscoveryRole",
"Required": false,
"IsPAMEligible": false,
"Description": "The IAM role name that exists in each target account. Used during cross-account Discovery to construct the Role ARN for cross-account access (arn:aws:iam::<account-id>:role/<this-value>). During a Discovery job this is supplied via the 'File name patterns to match' dialog field; this store property documents and defaults the value."
}
],
"EntryParameters": [
Expand Down Expand Up @@ -437,7 +447,7 @@
"BlueprintAllowed": true,
"CustomAliasAllowed": "Optional",
"ClientMachineDescription": "This is a full AWS ARN specifying a Role. This is the Role that will be assumed in any Auth scenario performing Assume Role. This will dictate what certificates are usable by the orchestrator. A preceding [profile] name should be included if a Credential Profile is to be used in Default Sdk Auth.",
"StorePathDescription": "A single specified AWS Region the store will operate in. Additional regions should get their own store defined."
"StorePathDescription": "The AWS Region the store operates in (e.g. us-east-1). Stores created by cross-account Discovery instead use a self-contained path of the form '<roleArn>|<region>' (e.g. 'arn:aws:iam::123456789012:role/KeyfactorACMDiscoveryRole|us-east-1') which carries both the Role ARN to assume and the Region; for those stores the Client Machine field is informational only. Additional regions should get their own store defined."
},
{
"Name": "AwsSecretsManager JKS",
Expand Down Expand Up @@ -4170,6 +4180,15 @@
"DefaultValue": "true",
"Required": true,
"Description": "Determine whether the server uses SSL or not (This field is automatically created)"
},
{
"Name": "JEAEndpointName",
"DisplayName": "JEA End Point Name",
"Type": "String",
"DependsOn": "",
"DefaultValue": "",
"Required": false,
"Description": "Name of the JEA endpoint to use for the session (This field is automatically created)"
}
],
"EntryParameters": [
Expand Down Expand Up @@ -5538,15 +5557,6 @@
"Type": "MultipleChoice",
"DefaultValue": "None",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired. No options are initially delivered for RFDER."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -5670,15 +5680,6 @@
"Type": "MultipleChoice",
"DefaultValue": "Apache Tomcat Restart,Jetty Restart",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -5802,15 +5803,6 @@
"Type": "MultipleChoice",
"DefaultValue": "None",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired. No options are initially delivered for RFKDB."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -5934,15 +5926,6 @@
"Type": "MultipleChoice",
"DefaultValue": "None",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired. No options are initially delivered for RFORA."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -6102,15 +6085,6 @@
"Type": "MultipleChoice",
"DefaultValue": "Apache HTTPD Restart,NGNIX Restart,HAProxy Restart,Envoy Proxy Restart",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -6234,15 +6208,6 @@
"Type": "MultipleChoice",
"DefaultValue": "None",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired. No options are initially delivered for RFPkcs12."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -6792,6 +6757,15 @@
"DefaultValue": "true",
"Required": true,
"Description": "Determine whether the server uses SSL or not (This field is automatically created)"
},
{
"Name": "JEAEndpointName",
"DisplayName": "JEA End Point Name",
"Type": "String",
"DependsOn": "",
"DefaultValue": "",
"Required": false,
"Description": "Name of the JEA endpoint to use for the session (This field is automatically created)"
}
],
"EntryParameters": [
Expand Down Expand Up @@ -6834,7 +6808,7 @@
"Add": true,
"Create": false,
"Discovery": false,
"Enrollment": false,
"Enrollment": true,
"Remove": true
},
"Properties": [
Expand Down Expand Up @@ -6900,6 +6874,15 @@
"DefaultValue": "false",
"Required": true,
"Description": "Boolean value (true or false) indicating whether to restart the SQL Server service after installing the certificate. Example: 'true' to enable service restart after installation."
},
{
"Name": "JEAEndpointName",
"DisplayName": "JEA End Point Name",
"Type": "String",
"DependsOn": "",
"DefaultValue": "",
"Required": false,
"Description": "Name of the JEA endpoint to use for the session (This field is automatically created)"
}
],
"EntryParameters": [
Expand Down
97 changes: 40 additions & 57 deletions store_types.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -286,7 +286,7 @@
"SupportedOperations": {
"Add": true,
"Create": false,
"Discovery": false,
"Discovery": true,
"Enrollment": false,
"Remove": true
},
Expand Down Expand Up @@ -410,6 +410,16 @@
"Required": false,
"IsPAMEligible": false,
"Description": "An optional parameter sts:ExternalId to pass with Assume Role calls"
},
{
"Name": "DiscoveryRoleName",
"DisplayName": "Discovery Role Name",
"Type": "String",
"DependsOn": "",
"DefaultValue": "KeyfactorACMDiscoveryRole",
"Required": false,
"IsPAMEligible": false,
"Description": "The IAM role name that exists in each target account. Used during cross-account Discovery to construct the Role ARN for cross-account access (arn:aws:iam::<account-id>:role/<this-value>). During a Discovery job this is supplied via the 'File name patterns to match' dialog field; this store property documents and defaults the value."
}
],
"EntryParameters": [
Expand Down Expand Up @@ -437,7 +447,7 @@
"BlueprintAllowed": true,
"CustomAliasAllowed": "Optional",
"ClientMachineDescription": "This is a full AWS ARN specifying a Role. This is the Role that will be assumed in any Auth scenario performing Assume Role. This will dictate what certificates are usable by the orchestrator. A preceding [profile] name should be included if a Credential Profile is to be used in Default Sdk Auth.",
"StorePathDescription": "A single specified AWS Region the store will operate in. Additional regions should get their own store defined."
"StorePathDescription": "The AWS Region the store operates in (e.g. us-east-1). Stores created by cross-account Discovery instead use a self-contained path of the form '<roleArn>|<region>' (e.g. 'arn:aws:iam::123456789012:role/KeyfactorACMDiscoveryRole|us-east-1') which carries both the Role ARN to assume and the Region; for those stores the Client Machine field is informational only. Additional regions should get their own store defined."
},
{
"Name": "AwsSecretsManager JKS",
Expand Down Expand Up @@ -4170,6 +4180,15 @@
"DefaultValue": "true",
"Required": true,
"Description": "Determine whether the server uses SSL or not (This field is automatically created)"
},
{
"Name": "JEAEndpointName",
"DisplayName": "JEA End Point Name",
"Type": "String",
"DependsOn": "",
"DefaultValue": "",
"Required": false,
"Description": "Name of the JEA endpoint to use for the session (This field is automatically created)"
}
],
"EntryParameters": [
Expand Down Expand Up @@ -5538,15 +5557,6 @@
"Type": "MultipleChoice",
"DefaultValue": "None",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired. No options are initially delivered for RFDER."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -5670,15 +5680,6 @@
"Type": "MultipleChoice",
"DefaultValue": "Apache Tomcat Restart,Jetty Restart",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -5802,15 +5803,6 @@
"Type": "MultipleChoice",
"DefaultValue": "None",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired. No options are initially delivered for RFKDB."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -5934,15 +5926,6 @@
"Type": "MultipleChoice",
"DefaultValue": "None",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired. No options are initially delivered for RFORA."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -6102,15 +6085,6 @@
"Type": "MultipleChoice",
"DefaultValue": "Apache HTTPD Restart,NGNIX Restart,HAProxy Restart,Envoy Proxy Restart",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -6234,15 +6208,6 @@
"Type": "MultipleChoice",
"DefaultValue": "None",
"Description": "Select the command to be run after a Management Add or ODKG job executes. Leave unselected if no command is desired. No options are initially delivered for RFPkcs12."
},
{
"Name": "RequiresLegacyEncryption",
"DisplayName": "Requires Legacy Encryption",
"Required": false,
"DependsOn": "",
"Type": "Bool",
"DefaultValue": "False",
"Description": "Optional setting. If set to true, PkcsObjectIdentifiers.PbeWithShaAnd3KeyTripleDesCbc and PkcsObjectIdentifiers.PbewithShaAnd40BitRC2Cbc algorithms will be used to create the underlying BouncyCastle Pkcs12Store used to feed the certificate store being managed during Management jobs. Should be left not implemented or set to False for most instances."
}
],
"EntryParameters": [],
Expand Down Expand Up @@ -6792,6 +6757,15 @@
"DefaultValue": "true",
"Required": true,
"Description": "Determine whether the server uses SSL or not (This field is automatically created)"
},
{
"Name": "JEAEndpointName",
"DisplayName": "JEA End Point Name",
"Type": "String",
"DependsOn": "",
"DefaultValue": "",
"Required": false,
"Description": "Name of the JEA endpoint to use for the session (This field is automatically created)"
}
],
"EntryParameters": [
Expand Down Expand Up @@ -6834,7 +6808,7 @@
"Add": true,
"Create": false,
"Discovery": false,
"Enrollment": false,
"Enrollment": true,
"Remove": true
},
"Properties": [
Expand Down Expand Up @@ -6900,6 +6874,15 @@
"DefaultValue": "false",
"Required": true,
"Description": "Boolean value (true or false) indicating whether to restart the SQL Server service after installing the certificate. Example: 'true' to enable service restart after installation."
},
{
"Name": "JEAEndpointName",
"DisplayName": "JEA End Point Name",
"Type": "String",
"DependsOn": "",
"DefaultValue": "",
"Required": false,
"Description": "Name of the JEA endpoint to use for the session (This field is automatically created)"
}
],
"EntryParameters": [
Expand Down
Loading