|
51 | 51 | <li class="toctree-l3"><a class="reference internal" href="#custom-tls-certificates">Custom TLS Certificates</a> |
52 | 52 | <ul> |
53 | 53 | <li class="toctree-l4"><a class="reference internal" href="#examples">Examples</a> |
| 54 | + </li> |
| 55 | + </ul> |
| 56 | + </li> |
| 57 | + <li class="toctree-l3"><a class="reference internal" href="#global-settings">Global Settings</a> |
| 58 | + <ul> |
| 59 | + <li class="toctree-l4"><a class="reference internal" href="#credential_backend">credential_backend</a> |
| 60 | + </li> |
| 61 | + <li class="toctree-l4"><a class="reference internal" href="#default_tenant">default_tenant</a> |
| 62 | + </li> |
| 63 | + <li class="toctree-l4"><a class="reference internal" href="#output_format">output_format</a> |
| 64 | + </li> |
| 65 | + <li class="toctree-l4"><a class="reference internal" href="#auto_refresh_kube_config">auto_refresh_kube_config</a> |
| 66 | + </li> |
| 67 | + <li class="toctree-l4"><a class="reference internal" href="#auto_refresh_profile_cache">auto_refresh_profile_cache</a> |
| 68 | + </li> |
| 69 | + <li class="toctree-l4"><a class="reference internal" href="#ca_bundle">ca_bundle</a> |
| 70 | + </li> |
| 71 | + <li class="toctree-l4"><a class="reference internal" href="#my_access_retrieval_limit">my_access_retrieval_limit</a> |
| 72 | + </li> |
| 73 | + <li class="toctree-l4"><a class="reference internal" href="#my_resources_retrieval_limit">my_resources_retrieval_limit</a> |
54 | 74 | </li> |
55 | 75 | </ul> |
56 | 76 | </li> |
@@ -282,6 +302,35 @@ <h4 id="examples">Examples</h4> |
282 | 302 | <p><strong>windows (cmd):</strong></p> |
283 | 303 | <pre><code class="language-bat">set REQUESTS_CA_BUNDLE="C:\Users\User\AppData\Local\corp-proxy\cacert.pem" |
284 | 304 | </code></pre> |
| 305 | +<h3 id="global-settings">Global Settings</h3> |
| 306 | +<h4 id="credential_backend"><code>credential_backend</code></h4> |
| 307 | +<p>The backend used to store temporary access tokens to authenticate against the Britive tenant.</p> |
| 308 | +<p><em>Allowed value:</em> <code>encrypted-file</code> or <code>file</code></p> |
| 309 | +<h4 id="default_tenant"><code>default_tenant</code></h4> |
| 310 | +<p>The name of the tenant used by default: [tenant].britive-app.com.</p> |
| 311 | +<p><em>Allowed value:</em> the name of a configured tenant alias, e.g. <code>[tenant-sigma]</code> would be <code>sigma</code>.</p> |
| 312 | +<h4 id="output_format"><code>output_format</code></h4> |
| 313 | +<p>Display output format.</p> |
| 314 | +<p>If <code>table</code> is used, an optional table format can be specified as <code>table-format</code>, formats can be found here: <a href="https://github.com/astanin/python-tabulate#table_format">table_format</a>.</p> |
| 315 | +<p><em>Allowed value:</em> <code>json</code>, <code>yaml</code>, <code>csv</code>, or <code>table[-format]</code></p> |
| 316 | +<blockquote> |
| 317 | +<p><em>NOTE:</em> the following global config settings are NOT available directly via <code>pybritive configure global</code></p> |
| 318 | +</blockquote> |
| 319 | +<h4 id="auto_refresh_kube_config"><code>auto_refresh_kube_config</code></h4> |
| 320 | +<p>Auto refresh the cached Britive managed kube config.</p> |
| 321 | +<p><em>Allowed value:</em> <code>true</code> or <code>false</code></p> |
| 322 | +<h4 id="auto_refresh_profile_cache"><code>auto_refresh_profile_cache</code></h4> |
| 323 | +<p>Auto refresh the cached Britive profiles.</p> |
| 324 | +<p><em>Allowed value:</em> <code>true</code> or <code>false</code></p> |
| 325 | +<h4 id="ca_bundle"><code>ca_bundle</code></h4> |
| 326 | +<p>The custom TLS certificate to use when making HTTP requests.</p> |
| 327 | +<p><em>Allowed value:</em> the path to a custom TLS certificate, e.g. <code>/location/of/the/CA_BUNDLE_FILE.pem</code></p> |
| 328 | +<h4 id="my_access_retrieval_limit"><code>my_access_retrieval_limit</code></h4> |
| 329 | +<p>Limit the number of "My Access" profiles to be retrieved.</p> |
| 330 | +<p><em>Allowed value:</em> an integer greater than <code>0</code></p> |
| 331 | +<h4 id="my_resources_retrieval_limit"><code>my_resources_retrieval_limit</code></h4> |
| 332 | +<p>Limit the number of "My Resources" items to be retrieved.</p> |
| 333 | +<p><em>Allowed value:</em> an integer greater than <code>0</code></p> |
285 | 334 | <h2 id="tenant-configuration">Tenant Configuration</h2> |
286 | 335 | <p>Before <code>pybritive</code> can connect to a Britive tenant, it needs to know some details about that tenant. |
287 | 336 | This is where <code>pybritive configure</code> will help us.</p> |
@@ -338,7 +387,7 @@ <h2 id="profile-parameter-construction-checkout-and-checkin"><code>PROFILE</code |
338 | 387 | <li>Google Workspace</li> |
339 | 388 | </ul> |
340 | 389 | <p>The list can be generated (assuming the caller has the required permissions) on demand with the following command.</p> |
341 | | -<pre><code class="language-sh">pybritive api applications.catalog \ |
| 390 | +<pre><code class="language-sh">pybritive api application_management.applications.catalog \ |
342 | 391 | --query '[*].{"application type": name,"2 part format allowed":requiresHierarchicalModel}' \ |
343 | 392 | --format table |
344 | 393 | </code></pre> |
@@ -508,16 +557,16 @@ <h2 id="api-command-use-the-britive-python-sdk-via-the-cli"><code>api</code> Com |
508 | 557 | <h3 id="api-examples"><code>api</code> examples</h3> |
509 | 558 | <p>Usage examples of: (<code>pybritive api method --parameter1 value1 --parameter2 value2 [--parameterX valueX]</code>)</p> |
510 | 559 | <pre><code class="language-sh"># list all users in the britive tenant |
511 | | -pybritive api users.list |
| 560 | +pybritive api identity_management.users.list |
512 | 561 |
|
513 | 562 | # create a tag |
514 | | -pybritive api tags.create --name testtag --description "test tag" |
| 563 | +pybritive api identity_management.tags.create --name testtag --description "test tag" |
515 | 564 |
|
516 | 565 | # list all users and output just the email address of each user via jmespath query |
517 | | -pybritive api users.list --query '[].email' |
| 566 | +pybritive api identity_management.users.list --query '[].email' |
518 | 567 |
|
519 | 568 | # create a profile |
520 | | -pybritive api profiles.create --application-id <id> --name testprofile |
| 569 | +pybritive api application_management.profiles.create --application-id <id> --name testprofile |
521 | 570 |
|
522 | 571 | # create a secret |
523 | 572 | pybritive api secrets_manager.secrets.create --name test --vault-id <id> --value '{"Note": {"secret1": "abc"}}' |
@@ -793,10 +842,10 @@ <h3 id="shell-completion-profiles-local-cache">Shell Completion - Profiles - Loc |
793 | 842 | as the tenant may not be provided yet).</p> |
794 | 843 | <p>The cache will not be updated over time. In order to update the cache more regularly run the following command. |
795 | 844 | Note that this config flag is NOT available directly via <code>pybritive configure global ...</code>.</p> |
796 | | -<pre><code class="language-sh">pybritive configure update global auto-refresh-profile-cache true |
| 845 | +<pre><code class="language-sh">pybritive configure update global auto_refresh_profile_cache true |
797 | 846 | </code></pre> |
798 | 847 | <p>To turn the feature off run</p> |
799 | | -<pre><code class="language-sh">pybritive configure update global auto-refresh-profile-cache false |
| 848 | +<pre><code class="language-sh">pybritive configure update global auto_refresh_profile_cache false |
800 | 849 | pybritive cache clear |
801 | 850 | </code></pre> |
802 | 851 | <h2 id="pybritive-with-the-aws-credential_process"><code>pybritive</code> with the AWS <code>credential_process</code></h2> |
@@ -876,16 +925,16 @@ <h4 id="pybritive-api">pybritive api</h4> |
876 | 925 | <p>generic: pybritive api method --parameter1 value1 --parameter2 value2 [--parameterX valueX]</p> |
877 | 926 | </li> |
878 | 927 | <li> |
879 | | -<p>pybritive api users.list</p> |
| 928 | +<p>pybritive api identity_management.users.list</p> |
880 | 929 | </li> |
881 | 930 | <li> |
882 | | -<p>pybritive api tags.create --name testtag --description "test tag"</p> |
| 931 | +<p>pybritive api identity_management.tags.create --name testtag --description "test tag"</p> |
883 | 932 | </li> |
884 | 933 | <li> |
885 | | -<p>pybritive api users.list --query '[].email'</p> |
| 934 | +<p>pybritive api identity_management.users.list --query '[].email'</p> |
886 | 935 | </li> |
887 | 936 | <li> |
888 | | -<p>pybritive api profiles.create --application-id <id> --name testprofile</p> |
| 937 | +<p>pybritive api application_management.profiles.create --application-id <id> --name testprofile</p> |
889 | 938 | </li> |
890 | 939 | </ul> |
891 | 940 | <p><strong>Usage:</strong></p> |
@@ -1295,6 +1344,18 @@ <h4 id="pybritive-checkout">pybritive checkout</h4> |
1295 | 1344 | <td>None</td> |
1296 | 1345 | </tr> |
1297 | 1346 | <tr> |
| 1347 | +<td><code>--ticket-type</code></td> |
| 1348 | +<td>text</td> |
| 1349 | +<td>Ticket type for the ITSM process, if a profile requires a ticket.</td> |
| 1350 | +<td>None</td> |
| 1351 | +</tr> |
| 1352 | +<tr> |
| 1353 | +<td><code>--ticket-id</code></td> |
| 1354 | +<td>text</td> |
| 1355 | +<td>Ticket ID for the ITSM process, if a profile requires a ticket.</td> |
| 1356 | +<td>None</td> |
| 1357 | +</tr> |
| 1358 | +<tr> |
1298 | 1359 | <td><code>--otp</code>, <code>-o</code></td> |
1299 | 1360 | <td>text</td> |
1300 | 1361 | <td>OTP to checkout a profile, download a secret, or view a secret, if MFA is required.</td> |
@@ -2350,6 +2411,18 @@ <h5 id="pybritive-request-submit">pybritive request submit</h5> |
2350 | 2411 | </thead> |
2351 | 2412 | <tbody> |
2352 | 2413 | <tr> |
| 2414 | +<td><code>--ticket-type</code></td> |
| 2415 | +<td>text</td> |
| 2416 | +<td>Ticket type for the ITSM process, if a profile requires a ticket.</td> |
| 2417 | +<td>None</td> |
| 2418 | +</tr> |
| 2419 | +<tr> |
| 2420 | +<td><code>--ticket-id</code></td> |
| 2421 | +<td>text</td> |
| 2422 | +<td>Ticket ID for the ITSM process, if a profile requires a ticket.</td> |
| 2423 | +<td>None</td> |
| 2424 | +</tr> |
| 2425 | +<tr> |
2353 | 2426 | <td><code>--justification</code>, <code>-j</code></td> |
2354 | 2427 | <td>text</td> |
2355 | 2428 | <td>Justification for the approval process, if a profile checkout or secret access requires approval.</td> |
@@ -2988,7 +3061,7 @@ <h4 id="pybritive-user">pybritive user</h4> |
2988 | 3061 |
|
2989 | 3062 | <div role="contentinfo"> |
2990 | 3063 | <!-- Copyright etc --> |
2991 | | - <p>2024 Britive, Inc.</p> |
| 3064 | + <p>2025 Britive, Inc.</p> |
2992 | 3065 | </div> |
2993 | 3066 |
|
2994 | 3067 | Built with <a href="https://www.mkdocs.org/">MkDocs</a> using a <a href="https://github.com/readthedocs/sphinx_rtd_theme">theme</a> provided by <a href="https://readthedocs.org">Read the Docs</a>. |
@@ -3028,5 +3101,5 @@ <h4 id="pybritive-user">pybritive user</h4> |
3028 | 3101 |
|
3029 | 3102 | <!-- |
3030 | 3103 | MkDocs version : 1.6.0 |
3031 | | -Build Date UTC : 2025-02-20 14:52:01.392307+00:00 |
| 3104 | +Build Date UTC : 2025-03-10 21:26:53.604912+00:00 |
3032 | 3105 | --> |
0 commit comments