pam-types: Fix issue that caused CLI to crash when attempting to read pam-types as store-types
stores import csv: Add flag--syncto allow updating existing stores from CSV.pam-types: New sub CLI to manage PAM Types in Keyfactor Command. docspam delete: Delete PAM provider by Name now supported. docsauth: Prompt for missing auth parameters when--no-promptis not set and auth config is incomplete and/or missing, this allows for password input for each command without storing password in config file or env var.
store-types: Sort store-types list case-insensitivelylogin: Will clear out basic/oauth params if auth type changes for a profile.
store-types: RenameBIPCameratoBoschIPCamerastore-type.store-types: AddAxisIPCamerastore-type.store-types: Update internal definitions to latest from Keyfactor GitHub repos.
store-types: Update internal definitions to latest from Keyfactor GitHub repos.
store-types: AddvCenterstore type and update internal definitions to latest from Keyfactor GitHub repos.
- Silence logging of initial
store-typefetch store-types: Update internal definitions to latest from Keyfactor GitHub repos.versionupdate internal version to1.8.2
docs: Addmigrationauto docsdocs: Refresh auto docsdeps: Update all deps to latest versions
migrate pamwill correctly preserve Inventory Schedules on targeted certificate storesmigrate pamwill migrate matching PAM usages in the Store Password field, or leave value unchangedmigrate checkwill reveal matching PAM usages in the Store Password field
migrate check --pam-usage: Looks up usage of a named PAM Provider, and returns the store IDs of all stores using the Provider. Used in conjunction with themigrate pamcommand.migrate pam: Will migrate legacy CyberArk PAM Provider usage (named "CyberArk") to the "CyberArk-SdkCredentialProvider" type when prompted with a Store ID for a certificate store using a "CyberArk" provider
stores import csv: supports interactive credential input, as well as input via flags and environmental variables. docs
stores import csv: providing aPassword(/StorePassword)does not crash CLI.stores import csv: results CSV retains input header ordering.stores import csv: HandleBOMcharacters in an input CSV file.store-types create: URL encode-bparameter when passed.store-types create: Initialize logger before fetching store-type definitions.stores rot: Re-enabled and improved logging.
version: Correct version is reported forkfutil version
auth: When usingoauthpass empty list forscopesif no scopes are provided, rather than default scopeopenidauth: Output env and config file errors when both are encountered rather than just config file errors.
store-types: Update embeddedstore-typedefinitions to latest.
auth: Added support for authenticating to Keyfactor Command using a oAuth2 client credentials or access token.logout: Added support for logging out of specificprofileandconfig-file.logout: Addedyes|noprompt for logout actions, which can be skipped by using the--no-promptflag.
store-types create: Added support for creating store types from a local file inintegration-manifest.jsonformat.store-types create: Added support for creating store types specified by a Keyfactor repo name and optional branch ref.
- Fixed an issue where the CLI would sometimes terminate with no error messages when calling the
keyfactor-go-client-sdk auth: When passing--configand/or--profileflags, and a failure occurs, the CLI will now return an error message rather attempt environment variable and default config file/profile fallbacks.
import csv: Converts allintproperties tostringsince Keyfactor Command does not supportintproperties.import csv: Returns useful error message when invalidstore-type-nameorstore-type-idare passed rather than panic.
deps: Bumpgoversion to1.23.deps: Bumpazure-sdk-for-go/sdk/azidentityversion tov1.8.0.deps: BumpAzureAD/microsoft-authentication-library-for-gotov1.3.2.deps: Bumpkeyfactor-go-client-sdkversion tov2.0.0.deps: Bumpkeyfactor-go-clientversion tov3.0.0.deps: Bumpcreack/ptytov1.1.24.deps: Bumpstretchr/testifytov1.10.0.deps: Bumpx/cryptotov0.30.0.deps: Bumpx/termtov0.27.0.deps: Bumpx/systov0.28.0.deps: Bumpx/texttov0.21.0.
- fix(pkg): Bump module version to
v1.5.1to fix an issue with the1.5.0release.
- The CLI will now embed the store_type definitions for each release of
kfutil. - Add global flag
--offlineto allow for offline mode. This will prevent the CLI from making requests to GitHub for store types and store type templates and will use embedded store types and templates instead.
stores export --all: Correctly paginates through all stores when exporting.
- No longer log before the
--debugflag is evaluated.
stores import generate-template: New sub CLI to generate a CSV template for bulk importing stores. See docs`.stores delete: Support for user interactive mode.stores delete: Support of delete from CSV file.stores export: Supports--allflag and user interactive mode
- Various null pointer references when nothing and/or empty inputs/responses are received.
- Installer script checksum check now validates properly. #119
stores importsub CLI is now listed and documented #71
- Empty
storepathvalues are no longer passed to the API. #56
- Handle duplicate provider type that is already created without crashing. #139
- Bump deps
cobraversion tov1.8.0,azcoreversion tov1.9.0,ptyversion tov1.1.21
- Bump package version to
1.3.1to fix an issue with the1.3.0release.
- Remove
vprefix from installer URL path to accommodate for the new build process.
- Added
--output-to-integration-manifestflag tokfutil store-types getto download a remote certificate store type definition into anintegration-manifest.jsonfile locally. - Updated usage:
kfutil store-types get [-i <store-type-id> | -n <store-type-name>] [-b <git-ref>] [-g | --output-to-integration-manifest]
store-type templates-fetchnow supports a--git-refflag to specify a specific branch, tag, or commit to fetch templates from.store-types createnow omits theStorePathvalue when not specified. This fixes the issue where theStorePathvalue was being set to "" which Command interpreted as only allowing "" for store paths on created store types.
loginnow un-hidden from CLI help.
- Added support for sourcing credentials from Azure Key Vault using Azure ID
- Added enhanced logging when
KFUTIL_DEBUGis set.
helm uoNew sub CLI to configure UO Helm Chart. See docs
orchs ext: New sub CLI to download orchestrator extensions from GitHub. See docs
stores: Sub CLI is now non-experimental. See docsstores import csv: Bulk import of stores via CSV is now non-experimental. See docsstores delete: Added delete a store from Keyfactor Command, as well as a--alloption that will delete all stores from Keyfactor Command.
store-types create: now supports the--allflag and will attempt to create all store types available from Keyfactor's GitHub org.
- the default
APIPathno longer overwrites preexisting values.
pam: kfutil pam
Initial release of the Keyfactor Command Utility (kfutil)
Production Supported CLIs:
login: kfutil loginstore-types: kfutil store-typesstores rot: kfutil rot