Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update azure docs to include new param #27680

Merged
merged 2 commits into from
Jul 3, 2024
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions website/content/api-docs/secret/azure.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -216,6 +216,8 @@ information about roles.
Accepts time suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine default TTL time.
- `max_ttl` (`string: ""`) – Specifies the maximum TTL for service principals generated using this role. Accepts time
suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
- `explicit_max_ttl` (`string: ""`) – Specifies the explicit maximum lifetime of the lease and service principal.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How about:

Limits the lifetime of the service principal secret in Azure and sets an upper bound on the corresponding lease's TTL. This lifetime cannot be changed once a lease is created, and the lease cannot be renewed beyond the expiration of this lifetime. If not set or set to zero, the service principal secret will be created with a default duration of 10 years and deleted once the corresponding lease in Vault expires.

If not set or set to 0, will use the system default (10 years).
- `permanently_delete` (`bool: false`) - Specifies whether to permanently delete Applications and Service Principals that are dynamically
created by Vault. If `application_object_id` is present, `permanently_delete` must be `false`.
- `sign_in_audience` (`string: ""`) - Specifies the security principal types that are allowed to sign in to the application.
Expand All @@ -237,8 +239,8 @@ information about roles.
}
]",
"ttl": 3600,
"max_ttl": "24h"
"sign_in_audience": "AzureADMyOrg"
"max_ttl": "24h",
"sign_in_audience": "AzureADMyOrg",
"tags": "team:engineering","environment:development"
}
```
Expand Down
Loading