diff --git a/CHANGELOG.md b/CHANGELOG.md index fcdfbab58..9cac408a6 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,23 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +### Changed + +- Updated to Frodo Lib 4.0.0 + +### Added + +- Added `frodo config-manager` (`fr-config-manager`) commands. +- Added support for Node Designer Nodes through several API and Ops functions to allow for doing exports, imports, deletes, etc. with custom node configurations.

+ Just like with journeys, custom nodes get exported and imported in the same way as they do from AIC/AM, so you can import Frodo exported custom nodes into AIC/AM and vice versa.

+ Additionally, journeys were updated to include custom node dependencies during exports. Even if a journey is exported with Frodo and contains these dependencies in the export JSON, they can still be imported into AIC/AM using the admin UI as it should ignore the custom node dependencies (since AIC/AM doesn't support exporting them yet). +- Added `--retry ` option to all commands. +- Added the ability to authenticate to an AM classic deployment using Amster credentials (i.e. a public/private key pair). The private key can be in a variety of formats such as PKCS, JWK, and OpenSSH, but is ultimately stored in PKCS#8 format. You can also use encrypted private keys by providing the passphrase when creating the connection profile. + +### Fixed + +- \#XXX: + ## [4.0.0-2] - 2026-01-27 ## [4.0.0-1] - 2026-01-26 diff --git a/package-lock.json b/package-lock.json index 7f6e0c1f9..2c06258ed 100644 --- a/package-lock.json +++ b/package-lock.json @@ -12,7 +12,7 @@ "frodo": "dist/launch.cjs" }, "devDependencies": { - "@rockcarver/frodo-lib": "4.0.0-2", + "@rockcarver/frodo-lib": "4.0.0-3", "@types/colors": "^1.2.1", "@types/fs-extra": "^11.0.1", "@types/jest": "^29.2.3", @@ -92,7 +92,6 @@ "integrity": "sha512-2BCOP7TN8M+gVDj7/ht3hsaO/B/n5oDbiAyyvnRlNOs+u1o+JWNYTQrmpuNp1/Wq2gcFrI01JAW+paEKDMx/CA==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@babel/code-frame": "^7.27.1", "@babel/generator": "^7.28.3", @@ -1871,9 +1870,9 @@ } }, "node_modules/@rockcarver/frodo-lib": { - "version": "4.0.0-2", - "resolved": "https://registry.npmjs.org/@rockcarver/frodo-lib/-/frodo-lib-4.0.0-2.tgz", - "integrity": "sha512-SL23eUJHovV4zVeGDvtbstQ021svdW32Hv+2mGpKebNSHkUSfr5cDrE9rTe0xRAUup60E+vxLCZUZ8NOcYbo/A==", + "version": "4.0.0-3", + "resolved": "https://registry.npmjs.org/@rockcarver/frodo-lib/-/frodo-lib-4.0.0-3.tgz", + "integrity": "sha512-DAGEAddJCLVyxPweB9Eyyt5tZMblGjNKyJWXT0XWAh5MCKNdGpT7RUdtpM79aFoZIZKk9hrGgs8ukhIsPUdnlw==", "dev": true, "license": "MIT", "engines": { @@ -2400,7 +2399,6 @@ "integrity": "sha512-94EQTWZ40mzBc42ATNIBimBEDltSJ9RQHCC8vc/PDbxi4k8dVwUAv4o98dk50M1zB+JGFxp43FP7f8+FP8R6Sw==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@eslint-community/regexpp": "^4.10.0", "@typescript-eslint/scope-manager": "7.18.0", @@ -2435,7 +2433,6 @@ "integrity": "sha512-4Z+L8I2OqhZV8qA132M4wNL30ypZGYOQVBfMgxDH/K5UX0PNqTu1c6za9ST5r9+tavvHiTWmBnKzpCJ/GlVFtg==", "dev": true, "license": "BSD-2-Clause", - "peer": true, "dependencies": { "@typescript-eslint/scope-manager": "7.18.0", "@typescript-eslint/types": "7.18.0", @@ -2646,7 +2643,6 @@ "integrity": "sha512-NZyJarBfL7nWwIq+FDL6Zp/yHEhePMNnnJ0y3qfieCrmNvYct8uvtiV41UvlSe6apAfk0fY1FbWx+NwfmpvtTg==", "dev": true, "license": "MIT", - "peer": true, "bin": { "acorn": "bin/acorn" }, @@ -3219,7 +3215,6 @@ } ], "license": "MIT", - "peer": true, "dependencies": { "caniuse-lite": "^1.0.30001737", "electron-to-chromium": "^1.5.211", @@ -4229,7 +4224,6 @@ "dev": true, "hasInstallScript": true, "license": "MIT", - "peer": true, "bin": { "esbuild": "bin/esbuild" }, @@ -4295,7 +4289,6 @@ "deprecated": "This version is no longer supported. Please see https://eslint.org/version-support for other options.", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@eslint-community/eslint-utils": "^4.2.0", "@eslint-community/regexpp": "^4.6.1", @@ -4352,7 +4345,6 @@ "integrity": "sha512-82GZUjRS0p/jganf6q1rEO25VSoHH0hKPCTrgillPjdI/3bgBhAE1QzHrHTizjpRvy6pGAvKjDJtk2pF9NDq8w==", "dev": true, "license": "MIT", - "peer": true, "bin": { "eslint-config-prettier": "bin/cli.js" }, @@ -6279,7 +6271,6 @@ "integrity": "sha512-NIy3oAFp9shda19hy4HK0HRTWKtPJmGdnvywu01nOqNC2vZg+Z+fvJDxpMQA88eb2I9EcafcdjYgsDthnYTvGw==", "dev": true, "license": "MIT", - "peer": true, "dependencies": { "@jest/core": "^29.7.0", "@jest/types": "^29.6.3", @@ -8178,7 +8169,6 @@ "integrity": "sha512-I7AIg5boAr5R0FFtJ6rCfD+LFsWHp81dolrFD8S79U9tb8Az2nGrJncnMSnys+bpQJfRUzqs9hnA81OAA3hCuQ==", "dev": true, "license": "MIT", - "peer": true, "bin": { "prettier": "bin/prettier.cjs" }, @@ -9992,7 +9982,6 @@ "integrity": "sha512-CWBzXQrc/qOkhidw1OzBTQuYRbfyxDXJMVJ1XNwUHGROVmuaeiEm3OslpZ1RV96d7SKKjZKrSJu3+t/xlw3R9A==", "dev": true, "license": "Apache-2.0", - "peer": true, "bin": { "tsc": "bin/tsc", "tsserver": "bin/tsserver" diff --git a/package.json b/package.json index 6422ae0b2..7ee2a6005 100644 --- a/package.json +++ b/package.json @@ -95,7 +95,7 @@ ] }, "devDependencies": { - "@rockcarver/frodo-lib": "4.0.0-2", + "@rockcarver/frodo-lib": "4.0.0-3", "@types/colors": "^1.2.1", "@types/fs-extra": "^11.0.1", "@types/jest": "^29.2.3", diff --git a/src/cli/FrodoCommand.ts b/src/cli/FrodoCommand.ts index dfcf77315..4040a5d2b 100644 --- a/src/cli/FrodoCommand.ts +++ b/src/cli/FrodoCommand.ts @@ -21,6 +21,7 @@ const { RETRY_STRATEGIES, RETRY_NOTHING_KEY, } = frodo.utils.constants; +const { convertPrivateKeyToPem } = frodo.utils.crypto; const hostArgument = new Argument( '[host]', @@ -68,6 +69,16 @@ const serviceAccountJwkFileOption = new Option( 'File containing the JSON Web Key (JWK) associated with the the service account.' ); +const amsterPrivateKeyPassphraseOption = new Option( + '--passphrase ', + 'The passphrase for the Amster private key if it is encrypted.' +); + +const amsterPrivateKeyFileOption = new Option( + '--private-key ', + 'File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK.' +); + const deploymentOption = new Option( '-m, --type ', 'Override auto-detected deployment type. Valid values for type: \n\ @@ -135,6 +146,8 @@ const defaultOpts = [ loginRedirectUri, serviceAccountIdOption, serviceAccountJwkFileOption, + amsterPrivateKeyPassphraseOption, + amsterPrivateKeyFileOption, deploymentOption, directoryOption, insecureOption, @@ -171,6 +184,35 @@ const stateMap = { ); } }, + [amsterPrivateKeyPassphraseOption.attributeName()]: (passphrase: string) => { + // This is needed in the case the passphrase is an option, but the private key is an environment variable. + process.env.FRODO_AMSTER_PASSPHRASE = passphrase; + }, + [amsterPrivateKeyFileOption.attributeName()]: ( + file: string, + options: Record + ) => { + const passphrase = + (options[amsterPrivateKeyPassphraseOption.attributeName()] as string) || + process.env.FRODO_AMSTER_PASSPHRASE; + try { + // Store as PEM format (PKCS#8 variant specifically) since Jose supports PEM and since PKCS#8 supports more algorithms than PKCS#1 + state.setAmsterPrivateKey( + convertPrivateKeyToPem( + fs.readFileSync(file, 'utf8'), + passphrase, + file + .replaceAll('\\', '/') + .substring(file.replaceAll('\\', '/').lastIndexOf('/') + 1) + ) + ); + } catch (error) { + printMessage( + `Error parsing private key from file ${file}: ${error.message}`, + 'error' + ); + } + }, [deploymentOption.attributeName()]: (type: string) => state.setDeploymentType(type), [directoryOption.attributeName()]: (directory: string) => @@ -298,6 +340,8 @@ export class FrodoCommand extends FrodoStubCommand { ` FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option.\n` + ` FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option.\n` + ` FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name.\n` + + ` FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option.\n` + + ` FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK.\n` + ` FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option.\n` + ` FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'.\n` + ('frodo conn save' === this.name() @@ -309,7 +353,7 @@ export class FrodoCommand extends FrodoStubCommand { ` FRODO_LOG_SECRET: Log API secret. Overridden by 'password' argument.\n` : ``) + ` FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'.\n` + - ` FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use.\n` + + ` FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey.\n` + ` FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'.\n` + ` FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file.\n` + ` FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH.\n` @@ -359,7 +403,7 @@ export class FrodoCommand extends FrodoStubCommand { ); // eslint-disable-next-line @typescript-eslint/no-explicit-any const handler: any = stateMap[k]; - handler(v); + handler(v, options); } else { debugMessage( `FrodoCommand.handleDefaultArgsAndOpts: Ignoring non-default option '${k}'.` diff --git a/src/cli/conn/conn-save.ts b/src/cli/conn/conn-save.ts index 98e511aa4..2e8dc990d 100644 --- a/src/cli/conn/conn-save.ts +++ b/src/cli/conn/conn-save.ts @@ -57,6 +57,10 @@ export default function setup() { ` $ frodo conn save ${s.amBaseUrl} ${s.username} '${s.password}'\n`[ 'brightCyan' ] + + ` Create a connection profile using Amster private key credentials (PingAM classic deployments only):\n` + + ` $ frodo conn save --private-key ${s.amsterPrivateKey} ${s.amClassicBaseUrl}\n`[ + 'brightCyan' + ] + ` Save an existing service account to an existing or new connection profile:\n` + ` $ frodo conn save --sa-id ${s.saId} --sa-jwk-file ${s.saJwkFile} ${s.amBaseUrl}\n`[ 'brightCyan' @@ -72,6 +76,10 @@ export default function setup() { ` Update an existing connection profile with a custom header override for a freshly Proxy Connect-protected PingOne Advanced Identity Cloud environment:\n` + ` $ frodo conn save --authentication-header-overrides '{"MY-SECRET-HEADER": "proxyconnect secret header value"}' ${s.connId}\n`[ 'brightCyan' + ] + + ` Update an existing connection profile to use Amster private key credentials with a custom Amster journey (PingAM classic deployments only):\n` + + ` $ frodo conn save --private-key ${s.amsterPrivateKey} --authentication-service ${s.customAmsterService} ${s.classicConnId}\n`[ + 'brightCyan' ] ) .action( @@ -94,6 +102,7 @@ export default function setup() { JSON.parse(options.authenticationHeaderOverrides) ); } + const needAmsterLogin = !!options.privateKey; const needSa = options.sa && !state.getServiceAccountId() && @@ -103,7 +112,7 @@ export default function setup() { !state.getLogApiKey() && !state.getLogApiSecret() && needSa; - const forceLoginAsUser = needSa || needLogApiKey; + const forceLoginAsUser = !needAmsterLogin && (needSa || needLogApiKey); if ( (options.validate && (await getTokens(forceLoginAsUser))) || !options.validate diff --git a/src/help/SampleData.ts b/src/help/SampleData.ts index 031526051..0d7cba170 100644 --- a/src/help/SampleData.ts +++ b/src/help/SampleData.ts @@ -9,3 +9,8 @@ export const connId2 = 'zion'; export const username2 = 'neo@nebuchadnezzar.zion.com'; export const password2 = 'R3dP!ll3d'; export const realm = '/alpha'; +export const amClassicBaseUrl = 'https://am.example.com:8443/am'; +export const classicConnId = 'am.example'; +export const amsterPrivateKey = + '/home/trinity/am/security/keys/amster/amster_rsa'; +export const customAmsterService = 'AmsterLogin'; diff --git a/src/ops/ConnectionProfileOps.ts b/src/ops/ConnectionProfileOps.ts index 44d4291dc..8fa6acfa7 100644 --- a/src/ops/ConnectionProfileOps.ts +++ b/src/ops/ConnectionProfileOps.ts @@ -34,6 +34,7 @@ export function listConnectionProfiles(long: boolean = false): void { 'Service Account', 'Username', 'Log API Key', + 'Authentication Service', ]); Object.keys(connectionsData).forEach((c) => { table.push([ @@ -41,6 +42,7 @@ export function listConnectionProfiles(long: boolean = false): void { connectionsData[c].svcacctName || connectionsData[c].svcacctId, connectionsData[c].username, connectionsData[c].logApiKey, + connectionsData[c].authenticationService, ]); }); printMessage(table.toString(), 'data'); @@ -76,10 +78,12 @@ export async function describeConnectionProfile( debugMessage(profile); const present = '[present]'; const jwk = profile.svcacctJwk; + const privateKey = profile.amsterPrivateKey; if (!showSecrets) { if (profile.password) profile.password = present; if (profile.logApiSecret) profile.logApiSecret = present; if (profile.svcacctJwk) (profile as unknown)['svcacctJwk'] = present; + if (profile.amsterPrivateKey) profile.amsterPrivateKey = present; } if (!profile.idmHost) { delete profile.idmHost; @@ -122,9 +126,15 @@ export async function describeConnectionProfile( // do nothing } } + if (!profile.amsterPrivateKey) { + delete profile.amsterPrivateKey; + } if (showSecrets && jwk) { (profile as unknown)['svcacctJwk'] = 'see below'; } + if (showSecrets && privateKey) { + profile.amsterPrivateKey = 'see below'; + } if (!profile.authenticationService) { delete profile.authenticationService; } @@ -141,12 +151,16 @@ export async function describeConnectionProfile( svcacctId: 'Service Account Id', svcacctJwk: 'Service Account JWK', svcacctScope: 'Service Account Scope', + amsterPrivateKey: 'Amster Private Key', }; const table = createObjectTable(profile, keyMap); printMessage(table.toString(), 'data'); if (showSecrets && jwk) { printMessage(JSON.stringify(jwk), 'data'); } + if (showSecrets && privateKey) { + printMessage(privateKey, 'data'); + } } else { printMessage(`No connection profile ${host} found`); } diff --git a/test/client_cli/en/__snapshots__/admin-add-autoid-static-user-mapping.test.js.snap b/test/client_cli/en/__snapshots__/admin-add-autoid-static-user-mapping.test.js.snap index db84e316b..0f4b0a0ad 100644 --- a/test/client_cli/en/__snapshots__/admin-add-autoid-static-user-mapping.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-add-autoid-static-user-mapping.test.js.snap @@ -71,6 +71,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -101,10 +108,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-create-oauth2-client-with-admin-privileges.test.js.snap b/test/client_cli/en/__snapshots__/admin-create-oauth2-client-with-admin-privileges.test.js.snap index 0ec035732..f03533a1a 100644 --- a/test/client_cli/en/__snapshots__/admin-create-oauth2-client-with-admin-privileges.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-create-oauth2-client-with-admin-privileges.test.js.snap @@ -97,6 +97,13 @@ Options: output to console instead. This option only applies if used with the --llt option. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -127,10 +134,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-get-access-token.test.js.snap b/test/client_cli/en/__snapshots__/admin-get-access-token.test.js.snap index d41fcf26d..fffdc69f1 100644 --- a/test/client_cli/en/__snapshots__/admin-get-access-token.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-get-access-token.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -108,10 +115,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-grant-oauth2-client-admin-privileges.test.js.snap b/test/client_cli/en/__snapshots__/admin-grant-oauth2-client-admin-privileges.test.js.snap index 6cb4c8493..911d4973c 100644 --- a/test/client_cli/en/__snapshots__/admin-grant-oauth2-client-admin-privileges.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-grant-oauth2-client-admin-privileges.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-hide-generic-extension-attributes.test.js.snap b/test/client_cli/en/__snapshots__/admin-hide-generic-extension-attributes.test.js.snap index 3989e7411..dce4f039a 100644 --- a/test/client_cli/en/__snapshots__/admin-hide-generic-extension-attributes.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-hide-generic-extension-attributes.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-list-oauth2-clients-with-admin-privileges.test.js.snap b/test/client_cli/en/__snapshots__/admin-list-oauth2-clients-with-admin-privileges.test.js.snap index 3ad1c3508..5ee240eac 100644 --- a/test/client_cli/en/__snapshots__/admin-list-oauth2-clients-with-admin-privileges.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-list-oauth2-clients-with-admin-privileges.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-list-oauth2-clients-with-custom-privileges.test.js.snap b/test/client_cli/en/__snapshots__/admin-list-oauth2-clients-with-custom-privileges.test.js.snap index b6800ed08..4b4e3258b 100644 --- a/test/client_cli/en/__snapshots__/admin-list-oauth2-clients-with-custom-privileges.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-list-oauth2-clients-with-custom-privileges.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-list-static-user-mappings.test.js.snap b/test/client_cli/en/__snapshots__/admin-list-static-user-mappings.test.js.snap index a96a44ab6..27e7a0ec4 100644 --- a/test/client_cli/en/__snapshots__/admin-list-static-user-mappings.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-list-static-user-mappings.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-remove-static-user-mapping.test.js.snap b/test/client_cli/en/__snapshots__/admin-remove-static-user-mapping.test.js.snap index df639d62e..4812fee57 100644 --- a/test/client_cli/en/__snapshots__/admin-remove-static-user-mapping.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-remove-static-user-mapping.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-repair-org-model.test.js.snap b/test/client_cli/en/__snapshots__/admin-repair-org-model.test.js.snap index 8e749a427..c788006a1 100644 --- a/test/client_cli/en/__snapshots__/admin-repair-org-model.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-repair-org-model.test.js.snap @@ -79,6 +79,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -109,10 +116,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-revoke-oauth2-client-admin-privileges.test.js.snap b/test/client_cli/en/__snapshots__/admin-revoke-oauth2-client-admin-privileges.test.js.snap index 2ec2268fa..c0e5a8bd0 100644 --- a/test/client_cli/en/__snapshots__/admin-revoke-oauth2-client-admin-privileges.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-revoke-oauth2-client-admin-privileges.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/admin-show-generic-extension-attributes.test.js.snap b/test/client_cli/en/__snapshots__/admin-show-generic-extension-attributes.test.js.snap index 86228dc4d..9fc80ec04 100644 --- a/test/client_cli/en/__snapshots__/admin-show-generic-extension-attributes.test.js.snap +++ b/test/client_cli/en/__snapshots__/admin-show-generic-extension-attributes.test.js.snap @@ -78,6 +78,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -108,10 +115,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-delete.test.js.snap b/test/client_cli/en/__snapshots__/agent-delete.test.js.snap index fcbbc84a8..7787427e0 100644 --- a/test/client_cli/en/__snapshots__/agent-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-delete.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-describe.test.js.snap b/test/client_cli/en/__snapshots__/agent-describe.test.js.snap index 03b5492f0..c76416e62 100644 --- a/test/client_cli/en/__snapshots__/agent-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-describe.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-export.test.js.snap b/test/client_cli/en/__snapshots__/agent-export.test.js.snap index b516acfbc..457f3d05a 100644 --- a/test/client_cli/en/__snapshots__/agent-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-export.test.js.snap @@ -85,6 +85,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-gateway-delete.test.js.snap b/test/client_cli/en/__snapshots__/agent-gateway-delete.test.js.snap index 435067701..7833a9fb0 100644 --- a/test/client_cli/en/__snapshots__/agent-gateway-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-gateway-delete.test.js.snap @@ -77,6 +77,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-gateway-describe.test.js.snap b/test/client_cli/en/__snapshots__/agent-gateway-describe.test.js.snap index 7dd37271f..33c59e268 100644 --- a/test/client_cli/en/__snapshots__/agent-gateway-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-gateway-describe.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-gateway-export.test.js.snap b/test/client_cli/en/__snapshots__/agent-gateway-export.test.js.snap index 9004865a3..cc9efdf5a 100644 --- a/test/client_cli/en/__snapshots__/agent-gateway-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-gateway-export.test.js.snap @@ -85,6 +85,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-gateway-import.test.js.snap b/test/client_cli/en/__snapshots__/agent-gateway-import.test.js.snap index 0c42a7a24..0506a4159 100644 --- a/test/client_cli/en/__snapshots__/agent-gateway-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-gateway-import.test.js.snap @@ -84,6 +84,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -114,10 +121,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-gateway-list.test.js.snap b/test/client_cli/en/__snapshots__/agent-gateway-list.test.js.snap index a2fa9a82f..62f91e026 100644 --- a/test/client_cli/en/__snapshots__/agent-gateway-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-gateway-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-import.test.js.snap b/test/client_cli/en/__snapshots__/agent-import.test.js.snap index 58252ebd7..1e570390d 100644 --- a/test/client_cli/en/__snapshots__/agent-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-import.test.js.snap @@ -84,6 +84,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -114,10 +121,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-java-delete.test.js.snap b/test/client_cli/en/__snapshots__/agent-java-delete.test.js.snap index f64854d9b..2bfa8c668 100644 --- a/test/client_cli/en/__snapshots__/agent-java-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-java-delete.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-java-describe.test.js.snap b/test/client_cli/en/__snapshots__/agent-java-describe.test.js.snap index 895d9ae80..3276d27e1 100644 --- a/test/client_cli/en/__snapshots__/agent-java-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-java-describe.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-java-export.test.js.snap b/test/client_cli/en/__snapshots__/agent-java-export.test.js.snap index e6e4c823e..6a1c2214c 100644 --- a/test/client_cli/en/__snapshots__/agent-java-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-java-export.test.js.snap @@ -84,6 +84,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -114,10 +121,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-java-import.test.js.snap b/test/client_cli/en/__snapshots__/agent-java-import.test.js.snap index 5b97ef7c4..378f60f0e 100644 --- a/test/client_cli/en/__snapshots__/agent-java-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-java-import.test.js.snap @@ -83,6 +83,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -113,10 +120,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-java-list.test.js.snap b/test/client_cli/en/__snapshots__/agent-java-list.test.js.snap index e780558ab..88144880e 100644 --- a/test/client_cli/en/__snapshots__/agent-java-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-java-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-list.test.js.snap b/test/client_cli/en/__snapshots__/agent-list.test.js.snap index 360028c06..bd6146b6e 100644 --- a/test/client_cli/en/__snapshots__/agent-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-list.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-web-delete.test.js.snap b/test/client_cli/en/__snapshots__/agent-web-delete.test.js.snap index 2a64e0df3..6256568bb 100644 --- a/test/client_cli/en/__snapshots__/agent-web-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-web-delete.test.js.snap @@ -77,6 +77,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-web-describe.test.js.snap b/test/client_cli/en/__snapshots__/agent-web-describe.test.js.snap index b95c7a796..df573dffd 100644 --- a/test/client_cli/en/__snapshots__/agent-web-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-web-describe.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-web-export.test.js.snap b/test/client_cli/en/__snapshots__/agent-web-export.test.js.snap index eec50bad2..c35814d05 100644 --- a/test/client_cli/en/__snapshots__/agent-web-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-web-export.test.js.snap @@ -84,6 +84,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -114,10 +121,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-web-import.test.js.snap b/test/client_cli/en/__snapshots__/agent-web-import.test.js.snap index 581338e31..0eefd3a11 100644 --- a/test/client_cli/en/__snapshots__/agent-web-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-web-import.test.js.snap @@ -83,6 +83,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -113,10 +120,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/agent-web-list.test.js.snap b/test/client_cli/en/__snapshots__/agent-web-list.test.js.snap index 82e79c33a..ba06436ee 100644 --- a/test/client_cli/en/__snapshots__/agent-web-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/agent-web-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/app-delete.test.js.snap b/test/client_cli/en/__snapshots__/app-delete.test.js.snap index 7938757ca..7316f769b 100644 --- a/test/client_cli/en/__snapshots__/app-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/app-delete.test.js.snap @@ -80,6 +80,13 @@ Options: --no-cache Disable token cache for this operation. --no-deep No deep delete. This leaves orphaned configuration artifacts behind. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -110,10 +117,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/app-export.test.js.snap b/test/client_cli/en/__snapshots__/app-export.test.js.snap index 92ccc5708..e8e20b3ce 100644 --- a/test/client_cli/en/__snapshots__/app-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/app-export.test.js.snap @@ -87,6 +87,13 @@ Options: --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies (scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -117,10 +124,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/app-import.test.js.snap b/test/client_cli/en/__snapshots__/app-import.test.js.snap index 48a88e3aa..5b6f6c15a 100644 --- a/test/client_cli/en/__snapshots__/app-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/app-import.test.js.snap @@ -85,6 +85,13 @@ Options: --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies (scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/app-list.test.js.snap b/test/client_cli/en/__snapshots__/app-list.test.js.snap index 85d7d75cd..609d8be81 100644 --- a/test/client_cli/en/__snapshots__/app-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/app-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authn-describe.test.js.snap b/test/client_cli/en/__snapshots__/authn-describe.test.js.snap index acd95e218..18cb3daa5 100644 --- a/test/client_cli/en/__snapshots__/authn-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/authn-describe.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authn-export.test.js.snap b/test/client_cli/en/__snapshots__/authn-export.test.js.snap index da36ac056..4bfbe6f6d 100644 --- a/test/client_cli/en/__snapshots__/authn-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/authn-export.test.js.snap @@ -78,6 +78,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -108,10 +115,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authn-import.test.js.snap b/test/client_cli/en/__snapshots__/authn-import.test.js.snap index 33b974296..26c8300ea 100644 --- a/test/client_cli/en/__snapshots__/authn-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/authn-import.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-policy-delete.test.js.snap b/test/client_cli/en/__snapshots__/authz-policy-delete.test.js.snap index cb488f174..7e2773831 100644 --- a/test/client_cli/en/__snapshots__/authz-policy-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-policy-delete.test.js.snap @@ -78,6 +78,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -109,10 +116,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-policy-describe.test.js.snap b/test/client_cli/en/__snapshots__/authz-policy-describe.test.js.snap index bd435ded9..f76b9f04d 100644 --- a/test/client_cli/en/__snapshots__/authz-policy-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-policy-describe.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-policy-export.test.js.snap b/test/client_cli/en/__snapshots__/authz-policy-export.test.js.snap index 90d93af36..527d4d185 100644 --- a/test/client_cli/en/__snapshots__/authz-policy-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-policy-export.test.js.snap @@ -85,8 +85,15 @@ Options: file. --no-cache Disable token cache for this operation. --no-deps Do not include dependencies (scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. --prereqs Include prerequisites (policy sets, resource types). + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -119,10 +126,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-policy-import.test.js.snap b/test/client_cli/en/__snapshots__/authz-policy-import.test.js.snap index a1d704b0f..6bc1040ec 100644 --- a/test/client_cli/en/__snapshots__/authz-policy-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-policy-import.test.js.snap @@ -86,9 +86,16 @@ Options: --no-deps Do not import dependencies (scripts) even if they are available in the import file. + --passphrase The passphrase for the Amster private + key if it is encrypted. --prereqs Import prerequisites (policy sets, resource types) if they are available in the import file. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -120,10 +127,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-policy-list.test.js.snap b/test/client_cli/en/__snapshots__/authz-policy-list.test.js.snap index 34e789c22..8f121e18c 100644 --- a/test/client_cli/en/__snapshots__/authz-policy-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-policy-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-set-delete.test.js.snap b/test/client_cli/en/__snapshots__/authz-set-delete.test.js.snap index 940c5abed..a70011e65 100644 --- a/test/client_cli/en/__snapshots__/authz-set-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-set-delete.test.js.snap @@ -77,6 +77,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-set-describe.test.js.snap b/test/client_cli/en/__snapshots__/authz-set-describe.test.js.snap index c95c8b987..dbd098595 100644 --- a/test/client_cli/en/__snapshots__/authz-set-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-set-describe.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-set-export.test.js.snap b/test/client_cli/en/__snapshots__/authz-set-export.test.js.snap index 82d2a344a..1bb3fe6b3 100644 --- a/test/client_cli/en/__snapshots__/authz-set-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-set-export.test.js.snap @@ -87,7 +87,14 @@ Options: --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies (policies, scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. --prereqs Include prerequisites (resource types). + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -118,10 +125,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-set-import.test.js.snap b/test/client_cli/en/__snapshots__/authz-set-import.test.js.snap index 6340f4e92..610cc2156 100644 --- a/test/client_cli/en/__snapshots__/authz-set-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-set-import.test.js.snap @@ -86,7 +86,14 @@ Options: --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies (policies, scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. --prereqs Include prerequisites (resource types). + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -117,10 +124,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-type-delete.test.js.snap b/test/client_cli/en/__snapshots__/authz-type-delete.test.js.snap index be82d9bb1..6c7088541 100644 --- a/test/client_cli/en/__snapshots__/authz-type-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-type-delete.test.js.snap @@ -80,6 +80,13 @@ Options: -n, --type-name Resource type name. If specified, -a is ignored. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -110,10 +117,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-type-describe.test.js.snap b/test/client_cli/en/__snapshots__/authz-type-describe.test.js.snap index 4fb2c0bb5..2b4ac1019 100644 --- a/test/client_cli/en/__snapshots__/authz-type-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-type-describe.test.js.snap @@ -77,6 +77,13 @@ Options: "forgeops") -n, --type-name Resource type name. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-type-export.test.js.snap b/test/client_cli/en/__snapshots__/authz-type-export.test.js.snap index 80ff54f41..7712e3e26 100644 --- a/test/client_cli/en/__snapshots__/authz-type-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-type-export.test.js.snap @@ -87,6 +87,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -117,10 +124,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-type-import.test.js.snap b/test/client_cli/en/__snapshots__/authz-type-import.test.js.snap index 2f1fb6067..48200183c 100644 --- a/test/client_cli/en/__snapshots__/authz-type-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-type-import.test.js.snap @@ -85,6 +85,13 @@ Options: -n, --type-name Resource type name. If specified, -a and -A are ignored. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/authz-type-list.test.js.snap b/test/client_cli/en/__snapshots__/authz-type-list.test.js.snap index 7a0cf090f..728706b71 100644 --- a/test/client_cli/en/__snapshots__/authz-type-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/authz-type-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-export.test.js.snap b/test/client_cli/en/__snapshots__/config-export.test.js.snap index ea25a37cb..29e7a1828 100644 --- a/test/client_cli/en/__snapshots__/config-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-export.test.js.snap @@ -108,6 +108,13 @@ Options: -o, --separate-objects Export managed.idm.json objects separately in their own directory. Ignored with -a. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. -r, --realm-only Export only the config for the active realm. If -g, --global-only is also active, then the global config will also @@ -160,10 +167,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-import.test.js.snap b/test/client_cli/en/__snapshots__/config-import.test.js.snap index 3885b6700..070e2065b 100644 --- a/test/client_cli/en/__snapshots__/config-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-import.test.js.snap @@ -96,6 +96,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --re-uuid-custom-nodes Create new UUIDs for the custom nodes upon import. Use this to duplicate custom nodes or create a new versions of @@ -143,10 +150,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-access-config.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-access-config.test.js.snap index dcf885764..72bec52c0 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-access-config.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-access-config.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-all-static.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-all-static.test.js.snap index 38613281b..d13b928d4 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-all-static.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-all-static.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-all.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-all.test.js.snap index 006f68c91..a4231ba08 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-all.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-all.test.js.snap @@ -29,6 +29,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -48,10 +50,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-audit.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-audit.test.js.snap index 18f4e4682..d5224c954 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-audit.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-audit.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-authentication.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-authentication.test.js.snap index 1b35c537f..b8c1624fd 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-authentication.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-authentication.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. -r, --realm Specifies the realm to export from. Only the entity object from this realm will be exported. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-authz-policies.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-authz-policies.test.js.snap index 6b6606748..1516e85f0 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-authz-policies.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-authz-policies.test.js.snap @@ -80,6 +80,13 @@ Options: -n, --policy-name Get only a specific policy set with the name. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. -r, --realm Specifies the realm to export from. Only policy sets from this realm will be exported. Ignored with -f @@ -113,10 +120,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-connector-definitions.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-connector-definitions.test.js.snap index 18882c637..ac31689e3 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-connector-definitions.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-connector-definitions.test.js.snap @@ -76,6 +76,13 @@ Options: -n, --name Get connector-definition from specified name/id, without the type prefix. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-connector-mappings.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-connector-mappings.test.js.snap index 9194efb18..83fe13fa6 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-connector-mappings.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-connector-mappings.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-cookie-domains.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-cookie-domains.test.js.snap index 800107643..149abfa5b 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-cookie-domains.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-cookie-domains.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-cors.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-cors.test.js.snap index 94fd1a957..19975efa6 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-cors.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-cors.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-csp.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-csp.test.js.snap index abc692fb8..5afd612f4 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-csp.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-csp.test.js.snap @@ -77,6 +77,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-email-provider.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-email-provider.test.js.snap index 3cebbb1b4..359a004e6 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-email-provider.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-email-provider.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-email-templates.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-email-templates.test.js.snap index 12a0a2218..48f2a49a0 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-email-templates.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-email-templates.test.js.snap @@ -76,6 +76,13 @@ Options: -n, --name Email-templates name, It only export the endpoint with the name --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-endpoints.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-endpoints.test.js.snap index e284a4227..18d24da3b 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-endpoints.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-endpoints.test.js.snap @@ -76,6 +76,13 @@ Options: -n, --name Endpoint name, It only export the endpoint with the name --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-internal-roles.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-internal-roles.test.js.snap index d72671fd1..13fd66880 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-internal-roles.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-internal-roles.test.js.snap @@ -76,6 +76,13 @@ Options: -n, --name Internal role name, It only export the endpoint with the name --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-journeys.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-journeys.test.js.snap index 1af33ceaf..c8147250b 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-journeys.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-journeys.test.js.snap @@ -77,6 +77,13 @@ Options: -n, --name Journey name, It only export the journey with the name. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. -r, --realm Specific realm to get journeys from (overrides environment) --retry Retry failed operations. Valid values @@ -109,10 +116,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-kba.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-kba.test.js.snap index 980669439..37e1f0669 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-kba.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-kba.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-locales.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-locales.test.js.snap index 66dc9c280..a49e37d4b 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-locales.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-locales.test.js.snap @@ -76,6 +76,13 @@ Options: -n, --name locale name, It only export the locale with the name --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-managed-objects.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-managed-objects.test.js.snap index 020407644..140a1ac9a 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-managed-objects.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-managed-objects.test.js.snap @@ -76,6 +76,13 @@ Options: -n, --name Endpoint name, It only export the endpoint with the name --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-password-policy.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-password-policy.test.js.snap index 99a1913f6..5ee2972e0 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-password-policy.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-password-policy.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. -r, --realm Specifies the realm to export from. Only the entity object from this realm will be exported. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-raw.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-raw.test.js.snap index 103b12dbe..7b609556f 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-raw.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-raw.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-remote-servers.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-remote-servers.test.js.snap index d12393f51..d2e670426 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-remote-servers.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-remote-servers.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-saml.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-saml.test.js.snap index fad02ca69..204c20585 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-saml.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-saml.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-schedules.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-schedules.test.js.snap index 89dc960b3..1964bdafe 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-schedules.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-schedules.test.js.snap @@ -76,6 +76,13 @@ Options: -n, --name schedule name, It only export the endpoint with the name --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-scripts.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-scripts.test.js.snap index 07a4dfaff..fc94a95e7 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-scripts.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-scripts.test.js.snap @@ -86,6 +86,13 @@ Options: --no-cache Disable token cache for this operation. -p, --prefix Export all scripts that start with a certain prefix. Ignored with -n + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. -r, --realm Specifies the realm to export from. Only the scripts from this realm will be exported. @@ -121,10 +128,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-secret-mappings.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-secret-mappings.test.js.snap index 0ad7c0a08..76392c127 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-secret-mappings.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-secret-mappings.test.js.snap @@ -77,6 +77,13 @@ Options: export secret mapping with the name. Works both with mapping._id or alias. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. -r, --realm Specific realm to get secret mappings from (overrides environment) --retry Retry failed operations. Valid values @@ -109,10 +116,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-secrets.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-secrets.test.js.snap index 9a2459640..58a0f12da 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-secrets.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-secrets.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-service-objects.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-service-objects.test.js.snap index 16f548946..74b8a1541 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-service-objects.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-service-objects.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-services.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-services.test.js.snap index 3d5cfb51a..4bcd9b7f4 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-services.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-services.test.js.snap @@ -76,6 +76,13 @@ Options: -n, --name Service name, It only export the service with the name. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. -r, --realm Specific realm to get service from --retry Retry failed operations. Valid values for strategy: @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-terms-and-conditions.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-terms-and-conditions.test.js.snap index 2415e407a..4d296a9ba 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-terms-and-conditions.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-terms-and-conditions.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-themes.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-themes.test.js.snap index 9e94b8297..3256b9382 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-themes.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-themes.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-ui-config.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-ui-config.test.js.snap index 65301b81f..965a19da7 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-ui-config.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-ui-config.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/config-manager-export-variables.test.js.snap b/test/client_cli/en/__snapshots__/config-manager-export-variables.test.js.snap index 8eeea09a2..9b2b109ab 100644 --- a/test/client_cli/en/__snapshots__/config-manager-export-variables.test.js.snap +++ b/test/client_cli/en/__snapshots__/config-manager-export-variables.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/conn-delete.test.js.snap b/test/client_cli/en/__snapshots__/conn-delete.test.js.snap index 5a76d1a6d..a6338f733 100644 --- a/test/client_cli/en/__snapshots__/conn-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/conn-delete.test.js.snap @@ -40,6 +40,13 @@ Options: with your custom OAuth2 client (efault: "/platform/appAuthHelperRedirect.html"). --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -70,10 +77,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/conn-describe.test.js.snap b/test/client_cli/en/__snapshots__/conn-describe.test.js.snap index 4fb10db19..5262253d2 100644 --- a/test/client_cli/en/__snapshots__/conn-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/conn-describe.test.js.snap @@ -40,6 +40,13 @@ Options: with your custom OAuth2 client (efault: "/platform/appAuthHelperRedirect.html"). --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -71,10 +78,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/conn-list.test.js.snap b/test/client_cli/en/__snapshots__/conn-list.test.js.snap index f306d133d..bf47698e2 100644 --- a/test/client_cli/en/__snapshots__/conn-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/conn-list.test.js.snap @@ -35,6 +35,13 @@ Options: with your custom OAuth2 client (efault: "/platform/appAuthHelperRedirect.html"). --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -65,10 +72,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/conn-save.test.js.snap b/test/client_cli/en/__snapshots__/conn-save.test.js.snap index b40d45e7c..8984607a1 100644 --- a/test/client_cli/en/__snapshots__/conn-save.test.js.snap +++ b/test/client_cli/en/__snapshots__/conn-save.test.js.snap @@ -33,6 +33,8 @@ Options: --no-log-api Do not create and add log API key and secret. --no-sa Do not create and add service account. --no-validate Do not validate connection. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -52,12 +54,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by '--log-api-key' option. FRODO_LOG_SECRET: Log API secret. Overridden by '--log-api-secret' option. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. @@ -65,6 +69,8 @@ Environment Variables: Usage Examples: Create a connection profile with a new log API key and secret and a new service account:  $ frodo conn save https://openam-matrix.id.forgerock.io/am thomas.anderson@metacortex.com 'Blu3P!ll3d' + Create a connection profile using Amster private key credentials (PingAM classic deployments only): + $ frodo conn save --private-key /home/trinity/am/security/keys/amster/amster_rsa https://am.example.com:8443/am  Save an existing service account to an existing or new connection profile:  $ frodo conn save --sa-id b672336b-41ef-428d-ae4a-e0c082875377 --sa-jwk-file ./matrix-sa_privateKey.jwk https://openam-matrix.id.forgerock.io/am  Save an existing service account to an existing connection profile (partial host URL only updates an existing profile): @@ -73,6 +79,8 @@ Usage Examples:  $ frodo conn save --authentication-header-overrides '{"MY-SECRET-HEADER": "proxyconnect secret header value"}' https://openam-matrix.id.forgerock.io/am thomas.anderson@metacortex.com 'Blu3P!ll3d'  Update an existing connection profile with a custom header override for a freshly Proxy Connect-protected PingOne Advanced Identity Cloud environment:  $ frodo conn save --authentication-header-overrides '{"MY-SECRET-HEADER": "proxyconnect secret header value"}' matrix + Update an existing connection profile to use Amster private key credentials with a custom Amster journey (PingAM classic deployments only): + $ frodo conn save --private-key /home/trinity/am/security/keys/amster/amster_rsa --authentication-service AmsterLogin am.example  " `; @@ -110,6 +118,8 @@ Options: --no-log-api Do not create and add log API key and secret. --no-sa Do not create and add service account. --no-validate Do not validate connection. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -129,12 +139,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by '--log-api-key' option. FRODO_LOG_SECRET: Log API secret. Overridden by '--log-api-secret' option. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. @@ -142,6 +154,8 @@ Environment Variables: Usage Examples: Create a connection profile with a new log API key and secret and a new service account:  $ frodo conn save https://openam-matrix.id.forgerock.io/am thomas.anderson@metacortex.com 'Blu3P!ll3d' + Create a connection profile using Amster private key credentials (PingAM classic deployments only): + $ frodo conn save --private-key /home/trinity/am/security/keys/amster/amster_rsa https://am.example.com:8443/am  Save an existing service account to an existing or new connection profile:  $ frodo conn save --sa-id b672336b-41ef-428d-ae4a-e0c082875377 --sa-jwk-file ./matrix-sa_privateKey.jwk https://openam-matrix.id.forgerock.io/am  Save an existing service account to an existing connection profile (partial host URL only updates an existing profile): @@ -150,6 +164,8 @@ Usage Examples:  $ frodo conn save --authentication-header-overrides '{"MY-SECRET-HEADER": "proxyconnect secret header value"}' https://openam-matrix.id.forgerock.io/am thomas.anderson@metacortex.com 'Blu3P!ll3d'  Update an existing connection profile with a custom header override for a freshly Proxy Connect-protected PingOne Advanced Identity Cloud environment:  $ frodo conn save --authentication-header-overrides '{"MY-SECRET-HEADER": "proxyconnect secret header value"}' matrix + Update an existing connection profile to use Amster private key credentials with a custom Amster journey (PingAM classic deployments only): + $ frodo conn save --private-key /home/trinity/am/security/keys/amster/amster_rsa --authentication-service AmsterLogin am.example  " `; @@ -187,6 +203,8 @@ Options: --no-log-api Do not create and add log API key and secret. --no-sa Do not create and add service account. --no-validate Do not validate connection. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -206,12 +224,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by '--log-api-key' option. FRODO_LOG_SECRET: Log API secret. Overridden by '--log-api-secret' option. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. @@ -219,6 +239,8 @@ Environment Variables: Usage Examples: Create a connection profile with a new log API key and secret and a new service account:  $ frodo conn save https://openam-matrix.id.forgerock.io/am thomas.anderson@metacortex.com 'Blu3P!ll3d' + Create a connection profile using Amster private key credentials (PingAM classic deployments only): + $ frodo conn save --private-key /home/trinity/am/security/keys/amster/amster_rsa https://am.example.com:8443/am  Save an existing service account to an existing or new connection profile:  $ frodo conn save --sa-id b672336b-41ef-428d-ae4a-e0c082875377 --sa-jwk-file ./matrix-sa_privateKey.jwk https://openam-matrix.id.forgerock.io/am  Save an existing service account to an existing connection profile (partial host URL only updates an existing profile): @@ -227,6 +249,8 @@ Usage Examples:  $ frodo conn save --authentication-header-overrides '{"MY-SECRET-HEADER": "proxyconnect secret header value"}' https://openam-matrix.id.forgerock.io/am thomas.anderson@metacortex.com 'Blu3P!ll3d'  Update an existing connection profile with a custom header override for a freshly Proxy Connect-protected PingOne Advanced Identity Cloud environment:  $ frodo conn save --authentication-header-overrides '{"MY-SECRET-HEADER": "proxyconnect secret header value"}' matrix + Update an existing connection profile to use Amster private key credentials with a custom Amster journey (PingAM classic deployments only): + $ frodo conn save --private-key /home/trinity/am/security/keys/amster/amster_rsa --authentication-service AmsterLogin am.example  " `; @@ -264,6 +288,8 @@ Options: --no-log-api Do not create and add log API key and secret. --no-sa Do not create and add service account. --no-validate Do not validate connection. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -283,12 +309,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by '--log-api-key' option. FRODO_LOG_SECRET: Log API secret. Overridden by '--log-api-secret' option. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. @@ -296,6 +324,8 @@ Environment Variables: Usage Examples: Create a connection profile with a new log API key and secret and a new service account:  $ frodo conn save https://openam-matrix.id.forgerock.io/am thomas.anderson@metacortex.com 'Blu3P!ll3d' + Create a connection profile using Amster private key credentials (PingAM classic deployments only): + $ frodo conn save --private-key /home/trinity/am/security/keys/amster/amster_rsa https://am.example.com:8443/am  Save an existing service account to an existing or new connection profile:  $ frodo conn save --sa-id b672336b-41ef-428d-ae4a-e0c082875377 --sa-jwk-file ./matrix-sa_privateKey.jwk https://openam-matrix.id.forgerock.io/am  Save an existing service account to an existing connection profile (partial host URL only updates an existing profile): @@ -304,6 +334,8 @@ Usage Examples:  $ frodo conn save --authentication-header-overrides '{"MY-SECRET-HEADER": "proxyconnect secret header value"}' https://openam-matrix.id.forgerock.io/am thomas.anderson@metacortex.com 'Blu3P!ll3d'  Update an existing connection profile with a custom header override for a freshly Proxy Connect-protected PingOne Advanced Identity Cloud environment:  $ frodo conn save --authentication-header-overrides '{"MY-SECRET-HEADER": "proxyconnect secret header value"}' matrix + Update an existing connection profile to use Amster private key credentials with a custom Amster journey (PingAM classic deployments only): + $ frodo conn save --private-key /home/trinity/am/security/keys/amster/amster_rsa --authentication-service AmsterLogin am.example  " `; diff --git a/test/client_cli/en/__snapshots__/email-template-delete.test.js.snap b/test/client_cli/en/__snapshots__/email-template-delete.test.js.snap index a2c9c8c2a..6791a6b2b 100644 --- a/test/client_cli/en/__snapshots__/email-template-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/email-template-delete.test.js.snap @@ -78,6 +78,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -108,10 +115,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/email-template-export.test.js.snap b/test/client_cli/en/__snapshots__/email-template-export.test.js.snap index 650bbf052..42f481754 100644 --- a/test/client_cli/en/__snapshots__/email-template-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/email-template-export.test.js.snap @@ -86,6 +86,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,10 +123,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/email-template-import.test.js.snap b/test/client_cli/en/__snapshots__/email-template-import.test.js.snap index f7aa68dc7..2bb065641 100644 --- a/test/client_cli/en/__snapshots__/email-template-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/email-template-import.test.js.snap @@ -83,6 +83,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --raw Import raw email template files. Raw templates do not contain the id/name, therefore when using -A or -f without @@ -121,10 +128,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/email-template-list.test.js.snap b/test/client_cli/en/__snapshots__/email-template-list.test.js.snap index 1404cce9d..61f451689 100644 --- a/test/client_cli/en/__snapshots__/email-template-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/email-template-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-apply.test.js.snap b/test/client_cli/en/__snapshots__/esv-apply.test.js.snap index 2049d14e2..a9b3b9039 100644 --- a/test/client_cli/en/__snapshots__/esv-apply.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-apply.test.js.snap @@ -78,6 +78,13 @@ Options: --no-cache Disable token cache for this operation. --no-wait Don't wait for the updates to finish applying. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -114,10 +121,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-create.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-create.test.js.snap index 23a6ee436..dc3a1c2b4 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-create.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-create.test.js.snap @@ -78,6 +78,13 @@ Options: "forgeops") --no-cache Disable token cache for this operation. --no-use-in-placeholders Secret cannot be used in placeholders. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -109,10 +116,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-delete.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-delete.test.js.snap index 161c254cd..e38e676cb 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-delete.test.js.snap @@ -73,6 +73,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -103,10 +110,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-describe.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-describe.test.js.snap index 0bf774c85..00e89de08 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-describe.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,10 +123,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-export.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-export.test.js.snap index ea5fd0e28..442a06709 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-export.test.js.snap @@ -87,6 +87,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -124,10 +131,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-import.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-import.test.js.snap index 163462471..2296b8572 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-import.test.js.snap @@ -86,6 +86,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -123,10 +130,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-list.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-list.test.js.snap index deb099872..025c3dd88 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-list.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,10 +123,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-set.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-set.test.js.snap index 03c5b862a..3ac402edb 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-set.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-set.test.js.snap @@ -72,6 +72,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -102,10 +109,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-version-activate.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-version-activate.test.js.snap index eeaa68a81..aefda2086 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-version-activate.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-version-activate.test.js.snap @@ -71,6 +71,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -102,10 +109,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-version-create.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-version-create.test.js.snap index 11881eba6..9426a3859 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-version-create.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-version-create.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-version-deactivate.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-version-deactivate.test.js.snap index 2ec386e91..bd549140e 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-version-deactivate.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-version-deactivate.test.js.snap @@ -71,6 +71,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -102,10 +109,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-version-delete.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-version-delete.test.js.snap index b40142d97..350962967 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-version-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-version-delete.test.js.snap @@ -73,6 +73,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-secret-version-list.test.js.snap b/test/client_cli/en/__snapshots__/esv-secret-version-list.test.js.snap index ee526869f..279bd2901 100644 --- a/test/client_cli/en/__snapshots__/esv-secret-version-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-secret-version-list.test.js.snap @@ -72,6 +72,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -102,10 +109,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-variable-create.test.js.snap b/test/client_cli/en/__snapshots__/esv-variable-create.test.js.snap index 86fa92847..ccea96392 100644 --- a/test/client_cli/en/__snapshots__/esv-variable-create.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-variable-create.test.js.snap @@ -72,6 +72,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-variable-delete.test.js.snap b/test/client_cli/en/__snapshots__/esv-variable-delete.test.js.snap index d89884271..4839cd961 100644 --- a/test/client_cli/en/__snapshots__/esv-variable-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-variable-delete.test.js.snap @@ -76,6 +76,13 @@ Options: --no-cache Disable token cache for this operation. --no-deep No deep delete. This leaves orphaned configuration artifacts behind. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-variable-describe.test.js.snap b/test/client_cli/en/__snapshots__/esv-variable-describe.test.js.snap index 47a534169..a657afb3b 100644 --- a/test/client_cli/en/__snapshots__/esv-variable-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-variable-describe.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,10 +123,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-variable-export.test.js.snap b/test/client_cli/en/__snapshots__/esv-variable-export.test.js.snap index c2a45e955..77063393b 100644 --- a/test/client_cli/en/__snapshots__/esv-variable-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-variable-export.test.js.snap @@ -82,6 +82,13 @@ Options: --no-cache Disable token cache for this operation. --no-decode Do not include decoded variable value in export + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -112,10 +119,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-variable-import.test.js.snap b/test/client_cli/en/__snapshots__/esv-variable-import.test.js.snap index 21fe4cbbf..4f37e4289 100644 --- a/test/client_cli/en/__snapshots__/esv-variable-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-variable-import.test.js.snap @@ -79,6 +79,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -109,10 +116,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-variable-list.test.js.snap b/test/client_cli/en/__snapshots__/esv-variable-list.test.js.snap index 1077a5fa9..00a08c491 100644 --- a/test/client_cli/en/__snapshots__/esv-variable-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-variable-list.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,10 +123,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/esv-variable-set.test.js.snap b/test/client_cli/en/__snapshots__/esv-variable-set.test.js.snap index 26e82462f..99e433b51 100644 --- a/test/client_cli/en/__snapshots__/esv-variable-set.test.js.snap +++ b/test/client_cli/en/__snapshots__/esv-variable-set.test.js.snap @@ -72,6 +72,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -103,10 +110,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idm-count.test.js.snap b/test/client_cli/en/__snapshots__/idm-count.test.js.snap index b5625cf40..8da7dfcc2 100644 --- a/test/client_cli/en/__snapshots__/idm-count.test.js.snap +++ b/test/client_cli/en/__snapshots__/idm-count.test.js.snap @@ -77,6 +77,13 @@ Options: -o, --managed-object Type of managed object to count. E.g. "alpha_user", "alpha_role", "user", "role". + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idm-delete.test.js.snap b/test/client_cli/en/__snapshots__/idm-delete.test.js.snap index a7ef42f59..596d17ffe 100644 --- a/test/client_cli/en/__snapshots__/idm-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/idm-delete.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idm-export.test.js.snap b/test/client_cli/en/__snapshots__/idm-export.test.js.snap index a875b5ab5..64b73a7dc 100644 --- a/test/client_cli/en/__snapshots__/idm-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/idm-export.test.js.snap @@ -95,6 +95,13 @@ Options: -o, --separate-objects Export managed.idm.json objects separately in their own directory. Ignored with -a. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -127,10 +134,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idm-import.test.js.snap b/test/client_cli/en/__snapshots__/idm-import.test.js.snap index 9ad068b3a..73e21ba57 100644 --- a/test/client_cli/en/__snapshots__/idm-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/idm-import.test.js.snap @@ -88,6 +88,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -118,10 +125,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idm-list.test.js.snap b/test/client_cli/en/__snapshots__/idm-list.test.js.snap index 15b1e629b..f72eb351f 100644 --- a/test/client_cli/en/__snapshots__/idm-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/idm-list.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idm-schema-object-export.test.js.snap b/test/client_cli/en/__snapshots__/idm-schema-object-export.test.js.snap index ab2576d4a..d98352ffd 100644 --- a/test/client_cli/en/__snapshots__/idm-schema-object-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/idm-schema-object-export.test.js.snap @@ -78,6 +78,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -108,10 +115,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idm-schema-object-import.test.js.snap b/test/client_cli/en/__snapshots__/idm-schema-object-import.test.js.snap index ab2576d4a..d98352ffd 100644 --- a/test/client_cli/en/__snapshots__/idm-schema-object-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/idm-schema-object-import.test.js.snap @@ -78,6 +78,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -108,10 +115,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idp-delete.test.js.snap b/test/client_cli/en/__snapshots__/idp-delete.test.js.snap index 9df21ded4..922fb20a3 100644 --- a/test/client_cli/en/__snapshots__/idp-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/idp-delete.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idp-export.test.js.snap b/test/client_cli/en/__snapshots__/idp-export.test.js.snap index 4e4d0d2a2..67229b5b8 100644 --- a/test/client_cli/en/__snapshots__/idp-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/idp-export.test.js.snap @@ -85,6 +85,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idp-import.test.js.snap b/test/client_cli/en/__snapshots__/idp-import.test.js.snap index 7a4d04d8d..d098342d3 100644 --- a/test/client_cli/en/__snapshots__/idp-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/idp-import.test.js.snap @@ -85,6 +85,13 @@ Options: --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies (scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/idp-list.test.js.snap b/test/client_cli/en/__snapshots__/idp-list.test.js.snap index 233845b0b..47ba48621 100644 --- a/test/client_cli/en/__snapshots__/idp-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/idp-list.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/info.test.js.snap b/test/client_cli/en/__snapshots__/info.test.js.snap index dc3c12e75..1cb9b5447 100644 --- a/test/client_cli/en/__snapshots__/info.test.js.snap +++ b/test/client_cli/en/__snapshots__/info.test.js.snap @@ -71,6 +71,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -101,10 +108,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/journey-delete.test.js.snap b/test/client_cli/en/__snapshots__/journey-delete.test.js.snap index a34c59323..762265c44 100644 --- a/test/client_cli/en/__snapshots__/journey-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/journey-delete.test.js.snap @@ -80,6 +80,13 @@ Options: --no-cache Disable token cache for this operation. --no-deep No deep delete. This leaves orphaned configuration artifacts behind. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -113,10 +120,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/journey-describe.test.js.snap b/test/client_cli/en/__snapshots__/journey-describe.test.js.snap index d2a80ea79..2fa7c0a4c 100644 --- a/test/client_cli/en/__snapshots__/journey-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/journey-describe.test.js.snap @@ -91,6 +91,13 @@ Options: environment (e.g. in preparation of migrating from on-prem to ForgeRock Identity Cloud. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -121,10 +128,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/journey-disable.test.js.snap b/test/client_cli/en/__snapshots__/journey-disable.test.js.snap index c2886873d..68e01e4d9 100644 --- a/test/client_cli/en/__snapshots__/journey-disable.test.js.snap +++ b/test/client_cli/en/__snapshots__/journey-disable.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/journey-enable.test.js.snap b/test/client_cli/en/__snapshots__/journey-enable.test.js.snap index 7c30113ed..cef466c64 100644 --- a/test/client_cli/en/__snapshots__/journey-enable.test.js.snap +++ b/test/client_cli/en/__snapshots__/journey-enable.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/journey-export.test.js.snap b/test/client_cli/en/__snapshots__/journey-export.test.js.snap index 7bea5f275..90e00d561 100644 --- a/test/client_cli/en/__snapshots__/journey-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/journey-export.test.js.snap @@ -91,6 +91,13 @@ Options: (scripts, email templates, SAML entity providers and circles of trust, social identity providers, themes). + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -124,10 +131,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/journey-import.test.js.snap b/test/client_cli/en/__snapshots__/journey-import.test.js.snap index ee258d66e..e22c26140 100644 --- a/test/client_cli/en/__snapshots__/journey-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/journey-import.test.js.snap @@ -87,6 +87,13 @@ Options: (scripts, email templates, SAML entity providers and circles of trust, social identity providers, themes). + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --re-uuid Generate new UUIDs for all nodes during import. (default: off) --retry Retry failed operations. Valid values @@ -119,10 +126,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/journey-list.test.js.snap b/test/client_cli/en/__snapshots__/journey-list.test.js.snap index 344388dc0..860fb1525 100644 --- a/test/client_cli/en/__snapshots__/journey-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/journey-list.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/journey-prune.test.js.snap b/test/client_cli/en/__snapshots__/journey-prune.test.js.snap index f699dba0e..ec3e587ba 100644 --- a/test/client_cli/en/__snapshots__/journey-prune.test.js.snap +++ b/test/client_cli/en/__snapshots__/journey-prune.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/log-fetch.test.js.snap b/test/client_cli/en/__snapshots__/log-fetch.test.js.snap index b03f3ce40..c8301fa4f 100644 --- a/test/client_cli/en/__snapshots__/log-fetch.test.js.snap +++ b/test/client_cli/en/__snapshots__/log-fetch.test.js.snap @@ -95,6 +95,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -128,12 +135,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by 'username' argument. FRODO_LOG_SECRET: Log API secret. Overridden by 'password' argument. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. @@ -236,6 +245,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -269,12 +285,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by 'username' argument. FRODO_LOG_SECRET: Log API secret. Overridden by 'password' argument. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/log-list.test.js.snap b/test/client_cli/en/__snapshots__/log-list.test.js.snap index 361bc6e7b..ee8e1cf15 100644 --- a/test/client_cli/en/__snapshots__/log-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/log-list.test.js.snap @@ -70,6 +70,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -100,12 +107,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by 'username' argument. FRODO_LOG_SECRET: Log API secret. Overridden by 'password' argument. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. @@ -183,6 +192,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -213,12 +229,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by 'username' argument. FRODO_LOG_SECRET: Log API secret. Overridden by 'password' argument. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/log-tail.test.js.snap b/test/client_cli/en/__snapshots__/log-tail.test.js.snap index e6cc0d9ae..99dd68319 100644 --- a/test/client_cli/en/__snapshots__/log-tail.test.js.snap +++ b/test/client_cli/en/__snapshots__/log-tail.test.js.snap @@ -85,6 +85,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,12 +123,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by 'username' argument. FRODO_LOG_SECRET: Log API secret. Overridden by 'password' argument. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. @@ -214,6 +223,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -245,12 +261,14 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_LOG_KEY: Log API key. Overridden by 'username' argument. FRODO_LOG_SECRET: Log API secret. Overridden by 'password' argument. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/mapping-delete.test.js.snap b/test/client_cli/en/__snapshots__/mapping-delete.test.js.snap index 838dccb02..7bdf5249c 100644 --- a/test/client_cli/en/__snapshots__/mapping-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/mapping-delete.test.js.snap @@ -30,6 +30,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -50,10 +52,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/mapping-export.test.js.snap b/test/client_cli/en/__snapshots__/mapping-export.test.js.snap index bb47cf8ef..6878ca7a3 100644 --- a/test/client_cli/en/__snapshots__/mapping-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/mapping-export.test.js.snap @@ -34,6 +34,8 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies in export. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -55,10 +57,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/mapping-import.test.js.snap b/test/client_cli/en/__snapshots__/mapping-import.test.js.snap index 60cf39314..99c9f1615 100644 --- a/test/client_cli/en/__snapshots__/mapping-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/mapping-import.test.js.snap @@ -85,6 +85,13 @@ Options: "forgeops") --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/mapping-list.test.js.snap b/test/client_cli/en/__snapshots__/mapping-list.test.js.snap index 85c6fdf6e..6cde48d0a 100644 --- a/test/client_cli/en/__snapshots__/mapping-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/mapping-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/mapping-rename.test.js.snap b/test/client_cli/en/__snapshots__/mapping-rename.test.js.snap index 2897eef38..01e1e0d82 100644 --- a/test/client_cli/en/__snapshots__/mapping-rename.test.js.snap +++ b/test/client_cli/en/__snapshots__/mapping-rename.test.js.snap @@ -88,6 +88,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -118,10 +125,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/node-delete.test.js.snap b/test/client_cli/en/__snapshots__/node-delete.test.js.snap index 991824fc7..547c238d9 100644 --- a/test/client_cli/en/__snapshots__/node-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/node-delete.test.js.snap @@ -83,6 +83,13 @@ Options: only one custom node is deleted and the options -a and -A are ignored. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -113,10 +120,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/node-describe.test.js.snap b/test/client_cli/en/__snapshots__/node-describe.test.js.snap index 27a6f44d2..ea9bff17a 100644 --- a/test/client_cli/en/__snapshots__/node-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/node-describe.test.js.snap @@ -77,6 +77,13 @@ Options: "forgeops") -n, --node-name Custom node display name. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/node-export.test.js.snap b/test/client_cli/en/__snapshots__/node-export.test.js.snap index 653229d7b..ff6c59058 100644 --- a/test/client_cli/en/__snapshots__/node-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/node-export.test.js.snap @@ -89,6 +89,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -124,10 +131,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/node-import.test.js.snap b/test/client_cli/en/__snapshots__/node-import.test.js.snap index 52c2e1f02..2f5fdabc5 100644 --- a/test/client_cli/en/__snapshots__/node-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/node-import.test.js.snap @@ -87,6 +87,13 @@ Options: only one custom node is imported and the options -a and -A are ignored. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --re-uuid Re-UUID. Create a new UUID (and service name) for the custom node upon import. Use this to duplicate a custom node or @@ -124,10 +131,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/node-list.test.js.snap b/test/client_cli/en/__snapshots__/node-list.test.js.snap index a665b8647..863488a72 100644 --- a/test/client_cli/en/__snapshots__/node-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/node-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/oauth-client-delete.test.js.snap b/test/client_cli/en/__snapshots__/oauth-client-delete.test.js.snap index 5c9622480..002ea1fac 100644 --- a/test/client_cli/en/__snapshots__/oauth-client-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/oauth-client-delete.test.js.snap @@ -80,6 +80,13 @@ Options: --no-cache Disable token cache for this operation. --no-deep No deep delete. This leaves orphaned configuration artifacts behind. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -110,10 +117,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/oauth-client-export.test.js.snap b/test/client_cli/en/__snapshots__/oauth-client-export.test.js.snap index 96921d017..5a0f9a10a 100644 --- a/test/client_cli/en/__snapshots__/oauth-client-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/oauth-client-export.test.js.snap @@ -86,6 +86,13 @@ Options: --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies (scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,10 +123,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/oauth-client-import.test.js.snap b/test/client_cli/en/__snapshots__/oauth-client-import.test.js.snap index 927330f16..ba9eab758 100644 --- a/test/client_cli/en/__snapshots__/oauth-client-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/oauth-client-import.test.js.snap @@ -85,6 +85,13 @@ Options: --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies (scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/oauth-client-list.test.js.snap b/test/client_cli/en/__snapshots__/oauth-client-list.test.js.snap index d5a7a75a3..e32819ecc 100644 --- a/test/client_cli/en/__snapshots__/oauth-client-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/oauth-client-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/promote.test.js.snap b/test/client_cli/en/__snapshots__/promote.test.js.snap index 67ebe42b6..170feb71c 100644 --- a/test/client_cli/en/__snapshots__/promote.test.js.snap +++ b/test/client_cli/en/__snapshots__/promote.test.js.snap @@ -82,6 +82,13 @@ Options: -P --print-diff Outputs the diff to a file in the directory where the command was run. (default: false) + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --propmt-prune Will prompt for Frodo Journey Prune on all realms (default: false) --retry Retry failed operations. Valid values @@ -130,10 +137,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/realm-add-custom-domain.test.js.snap b/test/client_cli/en/__snapshots__/realm-add-custom-domain.test.js.snap index caa94b748..ca6edbc27 100644 --- a/test/client_cli/en/__snapshots__/realm-add-custom-domain.test.js.snap +++ b/test/client_cli/en/__snapshots__/realm-add-custom-domain.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/realm-describe.test.js.snap b/test/client_cli/en/__snapshots__/realm-describe.test.js.snap index 0c2b24bc1..36057c542 100644 --- a/test/client_cli/en/__snapshots__/realm-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/realm-describe.test.js.snap @@ -74,6 +74,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -104,10 +111,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/realm-export.test.js.snap b/test/client_cli/en/__snapshots__/realm-export.test.js.snap index 752a80c1b..68faca7e2 100644 --- a/test/client_cli/en/__snapshots__/realm-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/realm-export.test.js.snap @@ -86,6 +86,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,10 +123,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/realm-import.test.js.snap b/test/client_cli/en/__snapshots__/realm-import.test.js.snap index c1e3074a5..285a8ae22 100644 --- a/test/client_cli/en/__snapshots__/realm-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/realm-import.test.js.snap @@ -86,6 +86,13 @@ Options: is imported and the options -a and -A are ignored. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,10 +123,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/realm-list.test.js.snap b/test/client_cli/en/__snapshots__/realm-list.test.js.snap index f4d263fb0..7399394c7 100644 --- a/test/client_cli/en/__snapshots__/realm-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/realm-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/realm-remove-custom-domain.test.js.snap b/test/client_cli/en/__snapshots__/realm-remove-custom-domain.test.js.snap index 0b8a739b8..cdfb83a64 100644 --- a/test/client_cli/en/__snapshots__/realm-remove-custom-domain.test.js.snap +++ b/test/client_cli/en/__snapshots__/realm-remove-custom-domain.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/role-export.test.js.snap b/test/client_cli/en/__snapshots__/role-export.test.js.snap index 3063e2ed5..452d145ea 100644 --- a/test/client_cli/en/__snapshots__/role-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/role-export.test.js.snap @@ -89,6 +89,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -119,10 +126,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/role-import.test.js.snap b/test/client_cli/en/__snapshots__/role-import.test.js.snap index 2af3dd565..b70df76e1 100644 --- a/test/client_cli/en/__snapshots__/role-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/role-import.test.js.snap @@ -87,6 +87,13 @@ Options: one internal role is imported and the options -a and -A are ignored. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -117,10 +124,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/role-list.test.js.snap b/test/client_cli/en/__snapshots__/role-list.test.js.snap index d1dad2b18..cf320e1b4 100644 --- a/test/client_cli/en/__snapshots__/role-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/role-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/saml-cot-export.test.js.snap b/test/client_cli/en/__snapshots__/saml-cot-export.test.js.snap index 362b0dbf1..c0a1040af 100644 --- a/test/client_cli/en/__snapshots__/saml-cot-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/saml-cot-export.test.js.snap @@ -86,6 +86,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -116,10 +123,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/saml-cot-import.test.js.snap b/test/client_cli/en/__snapshots__/saml-cot-import.test.js.snap index f382c5fca..01a865ab5 100644 --- a/test/client_cli/en/__snapshots__/saml-cot-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/saml-cot-import.test.js.snap @@ -85,6 +85,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/saml-cot-list.test.js.snap b/test/client_cli/en/__snapshots__/saml-cot-list.test.js.snap index 4dba6d71a..4b21a0ecb 100644 --- a/test/client_cli/en/__snapshots__/saml-cot-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/saml-cot-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/saml-delete.test.js.snap b/test/client_cli/en/__snapshots__/saml-delete.test.js.snap index eab5f71c6..f94c40768 100644 --- a/test/client_cli/en/__snapshots__/saml-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/saml-delete.test.js.snap @@ -77,6 +77,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/saml-describe.test.js.snap b/test/client_cli/en/__snapshots__/saml-describe.test.js.snap index a81a6e807..af9ca0d8e 100644 --- a/test/client_cli/en/__snapshots__/saml-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/saml-describe.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/saml-export.test.js.snap b/test/client_cli/en/__snapshots__/saml-export.test.js.snap index a33fd3d9a..2df99b17e 100644 --- a/test/client_cli/en/__snapshots__/saml-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/saml-export.test.js.snap @@ -90,6 +90,13 @@ Options: --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies (scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -120,10 +127,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/saml-import.test.js.snap b/test/client_cli/en/__snapshots__/saml-import.test.js.snap index 760f60a05..1fe9a3c8c 100644 --- a/test/client_cli/en/__snapshots__/saml-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/saml-import.test.js.snap @@ -87,6 +87,13 @@ Options: --no-cache Disable token cache for this operation. --no-deps Do not include any dependencies (scripts). + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -117,10 +124,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/saml-list.test.js.snap b/test/client_cli/en/__snapshots__/saml-list.test.js.snap index 16ad891c1..b27c16d6a 100644 --- a/test/client_cli/en/__snapshots__/saml-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/saml-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/saml-metadata-export.test.js.snap b/test/client_cli/en/__snapshots__/saml-metadata-export.test.js.snap index 512208de6..3d8ff9eca 100644 --- a/test/client_cli/en/__snapshots__/saml-metadata-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/saml-metadata-export.test.js.snap @@ -80,6 +80,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -110,10 +117,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/script-delete.test.js.snap b/test/client_cli/en/__snapshots__/script-delete.test.js.snap index 6579662fd..2bfb96e33 100644 --- a/test/client_cli/en/__snapshots__/script-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/script-delete.test.js.snap @@ -80,6 +80,13 @@ Options: -n, --script-name Name of the script. If specified, -a and -A are ignored. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -110,10 +117,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/script-describe.test.js.snap b/test/client_cli/en/__snapshots__/script-describe.test.js.snap index ed742c7f1..a22ee323b 100644 --- a/test/client_cli/en/__snapshots__/script-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/script-describe.test.js.snap @@ -81,6 +81,13 @@ Options: "forgeops") -n, --script-name Name of the script. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -121,10 +128,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/script-export.test.js.snap b/test/client_cli/en/__snapshots__/script-export.test.js.snap index 1ffb912c5..a53ce1c28 100644 --- a/test/client_cli/en/__snapshots__/script-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/script-export.test.js.snap @@ -91,6 +91,13 @@ Options: --no-deps Do not include script dependencies (i.e. library scripts). Ignored with -a and -A. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -126,10 +133,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/script-import.test.js.snap b/test/client_cli/en/__snapshots__/script-import.test.js.snap index 92b5909d3..a037d7b42 100644 --- a/test/client_cli/en/__snapshots__/script-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/script-import.test.js.snap @@ -87,6 +87,13 @@ Options: --no-deps Do not include script dependencies (i.e. library scripts). Can only be used with -n or -i. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --re-uuid Re-UUID. Create a new UUID for the script upon import. Use this to duplicate a script or create a new @@ -130,10 +137,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/script-list.test.js.snap b/test/client_cli/en/__snapshots__/script-list.test.js.snap index 92d5f25b8..4cdf6ada8 100644 --- a/test/client_cli/en/__snapshots__/script-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/script-list.test.js.snap @@ -80,6 +80,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -120,10 +127,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-delete.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-delete.test.js.snap index c8c94d74f..dc361a4e4 100644 --- a/test/client_cli/en/__snapshots__/secretstore-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-delete.test.js.snap @@ -30,6 +30,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -50,10 +52,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-describe.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-describe.test.js.snap index b29455c1c..f51688b4d 100644 --- a/test/client_cli/en/__snapshots__/secretstore-describe.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-describe.test.js.snap @@ -29,6 +29,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -49,10 +51,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-export.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-export.test.js.snap index c62eb576d..eb93707e8 100644 --- a/test/client_cli/en/__snapshots__/secretstore-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-export.test.js.snap @@ -33,6 +33,8 @@ Options: The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -53,10 +55,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-import.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-import.test.js.snap index 0b91c5fa3..a29466e43 100644 --- a/test/client_cli/en/__snapshots__/secretstore-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-import.test.js.snap @@ -32,6 +32,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -52,10 +54,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-list.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-list.test.js.snap index 2cf940c87..000f936d1 100644 --- a/test/client_cli/en/__snapshots__/secretstore-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-list.test.js.snap @@ -77,6 +77,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-mapping-alias-activate.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-mapping-alias-activate.test.js.snap index 88034da98..e802dbb21 100644 --- a/test/client_cli/en/__snapshots__/secretstore-mapping-alias-activate.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-mapping-alias-activate.test.js.snap @@ -30,6 +30,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -51,10 +53,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-mapping-alias-create.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-mapping-alias-create.test.js.snap index 12da8d0d8..f14922434 100644 --- a/test/client_cli/en/__snapshots__/secretstore-mapping-alias-create.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-mapping-alias-create.test.js.snap @@ -31,6 +31,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -52,10 +54,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-mapping-alias-delete.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-mapping-alias-delete.test.js.snap index 9076d4a30..26400cbfa 100644 --- a/test/client_cli/en/__snapshots__/secretstore-mapping-alias-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-mapping-alias-delete.test.js.snap @@ -31,6 +31,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -52,10 +54,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-mapping-alias-list.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-mapping-alias-list.test.js.snap index d2e6fbcaf..3e8b4aacd 100644 --- a/test/client_cli/en/__snapshots__/secretstore-mapping-alias-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-mapping-alias-list.test.js.snap @@ -30,6 +30,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -51,10 +53,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-mapping-create.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-mapping-create.test.js.snap index ebe3be56c..a905aeeee 100644 --- a/test/client_cli/en/__snapshots__/secretstore-mapping-create.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-mapping-create.test.js.snap @@ -30,6 +30,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -51,10 +53,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-mapping-delete.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-mapping-delete.test.js.snap index d4e0ee5f5..56aa09933 100644 --- a/test/client_cli/en/__snapshots__/secretstore-mapping-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-mapping-delete.test.js.snap @@ -30,6 +30,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -51,10 +53,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/secretstore-mapping-list.test.js.snap b/test/client_cli/en/__snapshots__/secretstore-mapping-list.test.js.snap index 007c3fcd2..bbb0e28e9 100644 --- a/test/client_cli/en/__snapshots__/secretstore-mapping-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/secretstore-mapping-list.test.js.snap @@ -30,6 +30,8 @@ Options: forgeops: A ForgeOps CDK or CDM deployment. The detected or provided deployment type controls certain behavior like obtaining an Identity Management admin token or not and whether to export/import referenced email templates or how to walk through the tenant admin login flow of Identity Cloud and handle MFA (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private key if it is encrypted. + --private-key File containing the private key for authenticating with Amster. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. network: Retry only network-related failed operations. @@ -50,10 +52,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/server-export.test.js.snap b/test/client_cli/en/__snapshots__/server-export.test.js.snap index ee471f006..61591335a 100644 --- a/test/client_cli/en/__snapshots__/server-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/server-export.test.js.snap @@ -87,6 +87,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -125,10 +132,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/server-import.test.js.snap b/test/client_cli/en/__snapshots__/server-import.test.js.snap index 3558b7b51..2574c3336 100644 --- a/test/client_cli/en/__snapshots__/server-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/server-import.test.js.snap @@ -85,6 +85,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -120,10 +127,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/server-list.test.js.snap b/test/client_cli/en/__snapshots__/server-list.test.js.snap index db29af4ab..65ca5d542 100644 --- a/test/client_cli/en/__snapshots__/server-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/server-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/service-delete.test.js.snap b/test/client_cli/en/__snapshots__/service-delete.test.js.snap index f2d346043..dff6a4494 100644 --- a/test/client_cli/en/__snapshots__/service-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/service-delete.test.js.snap @@ -77,6 +77,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -107,10 +114,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/service-export.test.js.snap b/test/client_cli/en/__snapshots__/service-export.test.js.snap index d8686cd22..31bcff51d 100644 --- a/test/client_cli/en/__snapshots__/service-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/service-export.test.js.snap @@ -84,6 +84,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -114,10 +121,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/service-import.test.js.snap b/test/client_cli/en/__snapshots__/service-import.test.js.snap index 337675011..22cdd1ab4 100644 --- a/test/client_cli/en/__snapshots__/service-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/service-import.test.js.snap @@ -85,6 +85,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. -r, --current-realm Import service(s) into the current realm. Use this flag if you exported a service from one realm and are importing @@ -119,10 +126,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/service-list.test.js.snap b/test/client_cli/en/__snapshots__/service-list.test.js.snap index aa3cfdbbb..2fd0535e0 100644 --- a/test/client_cli/en/__snapshots__/service-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/service-list.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/shell.test.js.snap b/test/client_cli/en/__snapshots__/shell.test.js.snap index e57f43fc9..fe0ad4dc0 100644 --- a/test/client_cli/en/__snapshots__/shell.test.js.snap +++ b/test/client_cli/en/__snapshots__/shell.test.js.snap @@ -76,6 +76,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -106,10 +113,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/theme-delete.test.js.snap b/test/client_cli/en/__snapshots__/theme-delete.test.js.snap index 0e96cb85f..dee8f621e 100644 --- a/test/client_cli/en/__snapshots__/theme-delete.test.js.snap +++ b/test/client_cli/en/__snapshots__/theme-delete.test.js.snap @@ -80,6 +80,13 @@ Options: -n, --theme-name Name of the theme. If specified, -a and -A are ignored. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -110,10 +117,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/theme-export.test.js.snap b/test/client_cli/en/__snapshots__/theme-export.test.js.snap index 4af2803f4..0e0678e18 100644 --- a/test/client_cli/en/__snapshots__/theme-export.test.js.snap +++ b/test/client_cli/en/__snapshots__/theme-export.test.js.snap @@ -87,6 +87,13 @@ Options: -N, --no-metadata Does not include metadata in the export file. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -117,10 +124,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/theme-import.test.js.snap b/test/client_cli/en/__snapshots__/theme-import.test.js.snap index 2041373bd..7ec5a050e 100644 --- a/test/client_cli/en/__snapshots__/theme-import.test.js.snap +++ b/test/client_cli/en/__snapshots__/theme-import.test.js.snap @@ -85,6 +85,13 @@ Options: -n, --theme-name Name of the theme. If specified, -a and -A are ignored. --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -115,10 +122,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/client_cli/en/__snapshots__/theme-list.test.js.snap b/test/client_cli/en/__snapshots__/theme-list.test.js.snap index de5a1d6a3..e4e88d924 100644 --- a/test/client_cli/en/__snapshots__/theme-list.test.js.snap +++ b/test/client_cli/en/__snapshots__/theme-list.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/e2e/__snapshots__/authz-policy-delete.e2e.test.js.snap b/test/e2e/__snapshots__/authz-policy-delete.e2e.test.js.snap index 1cf938671..1367ac262 100644 --- a/test/e2e/__snapshots__/authz-policy-delete.e2e.test.js.snap +++ b/test/e2e/__snapshots__/authz-policy-delete.e2e.test.js.snap @@ -14,7 +14,7 @@ exports[`frodo authz policy delete "frodo authz policy delete --policy-id 'Test - Deleting Test Policy... ✖ Error deleting policy Test Policy Error deleting alpha realm policy Test Policy - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/am/json/realms/root/realms/alpha/policies/Test Policy Status: 404 Code: ERR_BAD_REQUEST diff --git a/test/e2e/__snapshots__/authz-set-delete.e2e.test.js.snap b/test/e2e/__snapshots__/authz-set-delete.e2e.test.js.snap index a28853098..0b11a2dc2 100644 --- a/test/e2e/__snapshots__/authz-set-delete.e2e.test.js.snap +++ b/test/e2e/__snapshots__/authz-set-delete.e2e.test.js.snap @@ -12,7 +12,7 @@ exports[`frodo authz set delete "frodo authz set delete --set-id test-policy-set - Deleting test-policy-set... ✖ Error deleting policy set test-policy-set Error deleting alpha realm policy set test-policy-set - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/am/json/realms/root/realms/alpha/applications/test-policy-set Status: 404 Code: ERR_BAD_REQUEST diff --git a/test/e2e/__snapshots__/authz-type-delete.e2e.test.js.snap b/test/e2e/__snapshots__/authz-type-delete.e2e.test.js.snap index 534a91207..982c70b6f 100644 --- a/test/e2e/__snapshots__/authz-type-delete.e2e.test.js.snap +++ b/test/e2e/__snapshots__/authz-type-delete.e2e.test.js.snap @@ -5,7 +5,7 @@ exports[`frodo authz type delete "frodo authz type delete --type-id 0aa5ed25-0c6 - Deleting 0aa5ed25-0c62-4ff5-9a42-3bda8c5cbb76... ✖ Error deleting resource type 0aa5ed25-0c62-4ff5-9a42-3bda8c5cbb76 Error deleting alpha realm resource type 0aa5ed25-0c62-4ff5-9a42-3bda8c5cbb76 - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/am/json/realms/root/realms/alpha/resourcetypes/0aa5ed25-0c62-4ff5-9a42-3bda8c5cbb76 Status: 404 Code: ERR_BAD_REQUEST @@ -20,7 +20,7 @@ exports[`frodo authz type delete "frodo authz type delete --type-name FrodoTestR ✖ Error deleting resource type FrodoTestResourceType13 Error deleting alpha realm resource type FrodoTestResourceType13 Error reading alpha realm resource type FrodoTestResourceType13 - Resource Type with name FrodoTestResourceType13 does not exist in realm alpha + Resource Type with name FrodoTestResourceType13 does not exist in realm alpha " `; diff --git a/test/e2e/__snapshots__/conn-describe.e2e.test.js.snap b/test/e2e/__snapshots__/conn-describe.e2e.test.js.snap index 654b49a46..5f9a91475 100644 --- a/test/e2e/__snapshots__/conn-describe.e2e.test.js.snap +++ b/test/e2e/__snapshots__/conn-describe.e2e.test.js.snap @@ -1,5 +1,15 @@ // Jest Snapshot v1, https://goo.gl/fbAQLP +exports[`frodo conn describe "frodo conn describe http://openam-frodo-dev.classic.com:8080/am": should describe the classic connection 1`] = ` +"Host │http://openam-frodo-dev.classic.com:8080/am +Deployment Type │classic +Username │amadmin +Password │ +Authentication Service│MockAmsterService +Amster Private Key │[present] +" +`; + exports[`frodo conn describe "frodo conn describe https://openam-frodo-dev.forgeblocks.com/am": should describe the connection 1`] = ` "Host │https://openam-frodo-dev.forgeblocks.com/am Deployment Type │cloud diff --git a/test/e2e/__snapshots__/conn-list.e2e.test.js.snap b/test/e2e/__snapshots__/conn-list.e2e.test.js.snap index f737599f5..4c54de7f6 100644 --- a/test/e2e/__snapshots__/conn-list.e2e.test.js.snap +++ b/test/e2e/__snapshots__/conn-list.e2e.test.js.snap @@ -1,18 +1,21 @@ // Jest Snapshot v1, https://goo.gl/fbAQLP exports[`frodo conn list "frodo conn list --long": should list the connection hosts, service accounts, usernames, and log API keys. 1`] = ` -"Host │Service Account │Username │Log API Key -https://openam-frodo-dev.forgeblocks.com/am│Frodo-SA-1687293271764│volker.scheuber@forgerock.com│2e3e7162c6861fdc50a10b6353ada65a +"Host │Service Account │Username │Log API Key │Authentication Service +https://openam-frodo-dev.forgeblocks.com/am│Frodo-SA-1687293271764│volker.scheuber@forgerock.com│2e3e7162c6861fdc50a10b6353ada65a│ +http://openam-frodo-dev.classic.com:8080/am│ │amadmin │ │MockAmsterService " `; exports[`frodo conn list "frodo conn list -l": should list the connection hosts, service accounts, usernames, and log API keys. 1`] = ` -"Host │Service Account │Username │Log API Key -https://openam-frodo-dev.forgeblocks.com/am│Frodo-SA-1687293271764│volker.scheuber@forgerock.com│2e3e7162c6861fdc50a10b6353ada65a +"Host │Service Account │Username │Log API Key │Authentication Service +https://openam-frodo-dev.forgeblocks.com/am│Frodo-SA-1687293271764│volker.scheuber@forgerock.com│2e3e7162c6861fdc50a10b6353ada65a│ +http://openam-frodo-dev.classic.com:8080/am│ │amadmin │ │MockAmsterService " `; exports[`frodo conn list "frodo conn list": should list the connection hosts 1`] = ` "https://openam-frodo-dev.forgeblocks.com/am +http://openam-frodo-dev.classic.com:8080/am " `; diff --git a/test/e2e/__snapshots__/conn-save.e2e.test.js.snap b/test/e2e/__snapshots__/conn-save.e2e.test.js.snap index 97afe17ce..f7ee31994 100644 --- a/test/e2e/__snapshots__/conn-save.e2e.test.js.snap +++ b/test/e2e/__snapshots__/conn-save.e2e.test.js.snap @@ -1,10 +1,22 @@ // Jest Snapshot v1, https://goo.gl/fbAQLP +exports[`frodo conn save "frodo conn save --no-validate --private-key /home/user/am/security/keys/amster/amster_rsa --authentication-service MockAmsterService http://openam-frodo-dev.classic.com:8080/am": save new classic connection profile with private key and custom authentication service. 1`] = ` +"Error parsing private key from file /home/user/am/security/keys/amster/amster_rsa: ENOENT: no such file or directory, open '/home/user/am/security/keys/amster/amster_rsa' +Advanced setting: Authentication Service: MockAmsterService +Saved connection profile http://openam-frodo-dev.classic.com:8080/am +" +`; + exports[`frodo conn save "frodo conn save --no-validate --sa-id b672336b-41ef-428d-ae4a-e0c082875377 --sa-jwk-file test/fs_tmp/conn-save-jwk.json https://openam-frodo-dev.forgeblocks.com/am": save new connection profile with existing service account and without admin account. 1`] = ` "Saved connection profile https://openam-frodo-dev.forgeblocks.com/am " `; +exports[`frodo conn save "frodo conn save --no-validate http://openam-frodo-dev.classic.com:8080/am amAdmin Sup3rS3cr3t!": save new classic connection profile using an admin account. 1`] = ` +"Saved connection profile http://openam-frodo-dev.classic.com:8080/am +" +`; + exports[`frodo conn save "frodo conn save --no-validate https://openam-frodo-dev.forgeblocks.com/am volker.scheuber@forgerock.com Sup3rS3cr3t!": save new connection profile using an admin account. 1`] = ` "Saved connection profile https://openam-frodo-dev.forgeblocks.com/am " diff --git a/test/e2e/__snapshots__/esv-secret-create.e2e.test.js.snap b/test/e2e/__snapshots__/esv-secret-create.e2e.test.js.snap index 789af42be..8bac4e678 100644 --- a/test/e2e/__snapshots__/esv-secret-create.e2e.test.js.snap +++ b/test/e2e/__snapshots__/esv-secret-create.e2e.test.js.snap @@ -92,6 +92,13 @@ Options: "forgeops") --no-cache Disable token cache for this operation. --no-use-in-placeholders Secret cannot be used in placeholders. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -123,10 +130,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/e2e/__snapshots__/esv-secret-describe.e2e.test.js.snap b/test/e2e/__snapshots__/esv-secret-describe.e2e.test.js.snap index 1baaa4c2a..fb543d123 100644 --- a/test/e2e/__snapshots__/esv-secret-describe.e2e.test.js.snap +++ b/test/e2e/__snapshots__/esv-secret-describe.e2e.test.js.snap @@ -119,12 +119,12 @@ exports[`frodo esv secret describe "frodo esv secret describe -ui esv-test-secre "Connected to https://openam-frodo-dev.forgeblocks.com/am [alpha] as service account Frodo-SA-1720799681233 [b672336b-41ef-428d-ae4a-e0c082875377] Error exporting idm config entity fidc/federation-EntraID Error reading config entity fidc/federation-EntraID - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID - Status: 403 - Code: ERR_BAD_REQUEST - Reason: Forbidden - Message: Access denied + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID + Status: 403 + Code: ERR_BAD_REQUEST + Reason: Forbidden + Message: Access denied - Reading secret versions... ✔ Successfully read 1 secret versions. " diff --git a/test/e2e/__snapshots__/esv-secret-list.e2e.test.js.snap b/test/e2e/__snapshots__/esv-secret-list.e2e.test.js.snap index 88576e975..bb400951c 100644 --- a/test/e2e/__snapshots__/esv-secret-list.e2e.test.js.snap +++ b/test/e2e/__snapshots__/esv-secret-list.e2e.test.js.snap @@ -77,12 +77,12 @@ exports[`frodo esv secret list "frodo esv secret list -lu": should list the ids, ✔ Successfully read 13 secrets. Error exporting idm config entity fidc/federation-EntraID Error reading config entity fidc/federation-EntraID - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID - Status: 403 - Code: ERR_BAD_REQUEST - Reason: Forbidden - Message: Access denied + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID + Status: 403 + Code: ERR_BAD_REQUEST + Reason: Forbidden + Message: Access denied " `; @@ -118,12 +118,12 @@ exports[`frodo esv secret list "frodo esv secret list -u": should list the usage ✔ Successfully read 13 secrets. Error exporting idm config entity fidc/federation-EntraID Error reading config entity fidc/federation-EntraID - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID - Status: 403 - Code: ERR_BAD_REQUEST - Reason: Forbidden - Message: Access denied + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID + Status: 403 + Code: ERR_BAD_REQUEST + Reason: Forbidden + Message: Access denied " `; diff --git a/test/e2e/__snapshots__/esv-secret-version-deactivate.e2e.test.js.snap b/test/e2e/__snapshots__/esv-secret-version-deactivate.e2e.test.js.snap index 2616975b7..13f835778 100644 --- a/test/e2e/__snapshots__/esv-secret-version-deactivate.e2e.test.js.snap +++ b/test/e2e/__snapshots__/esv-secret-version-deactivate.e2e.test.js.snap @@ -5,7 +5,7 @@ exports[`frodo esv secret version deactivate "frodo esv secret version deactivat - Deactivating version 2 of secret esv-test-secret-pi-generic... ✖ Error deactivating version 2 of secret esv-test-secret-pi-generic Error disabling version 2 of secret esv-test-secret-pi-generic - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/environment/secrets/esv-test-secret-pi-generic/versions/2?_action=changestatus Status: 400 Code: ERR_BAD_REQUEST diff --git a/test/e2e/__snapshots__/esv-variable-create.e2e.test.js.snap b/test/e2e/__snapshots__/esv-variable-create.e2e.test.js.snap index add44c90f..2c8437d8d 100644 --- a/test/e2e/__snapshots__/esv-variable-create.e2e.test.js.snap +++ b/test/e2e/__snapshots__/esv-variable-create.e2e.test.js.snap @@ -6,13 +6,13 @@ exports[`frodo esv variable create "frodo esv variable create --variable-id esv- "Connected to https://openam-frodo-dev.forgeblocks.com/am [alpha] as service account Frodo-SA-1701807230743 [b672336b-41ef-428d-ae4a-e0c082875377] - Creating variable esv-test-var-pi-unknown... ✖ Error updating variable esv-test-var-pi-unknown - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/environment/variables/esv-test-var-pi-unknown Status: 400 Code: ERR_BAD_REQUEST Message: request body has an error: doesn't match schema #/components/schemas/esvVariableCreateUpdateRequest: Error at "/expressionType": value is not one of the allowed values ["string","list","array","object","bool","int","number","base64encodedinlined","keyvaluelist"] Error updating variable esv-test-var-pi-unknown - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/environment/variables/esv-test-var-pi-unknown Status: 400 Code: ERR_BAD_REQUEST diff --git a/test/e2e/__snapshots__/esv-variable-delete.e2e.test.js.snap b/test/e2e/__snapshots__/esv-variable-delete.e2e.test.js.snap index e52f4458d..6b5ef57b6 100644 --- a/test/e2e/__snapshots__/esv-variable-delete.e2e.test.js.snap +++ b/test/e2e/__snapshots__/esv-variable-delete.e2e.test.js.snap @@ -5,7 +5,7 @@ exports[`frodo esv variable delete "frodo esv variable delete --variable-id esv- - Deleting variable esv-test-var-pi... ✖ Error deleting variable esv-test-var-pi Error deleting variable esv-test-var-pi - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/environment/variables/esv-test-var-pi Status: 404 Code: ERR_BAD_REQUEST diff --git a/test/e2e/__snapshots__/esv-variable-describe.e2e.test.js.snap b/test/e2e/__snapshots__/esv-variable-describe.e2e.test.js.snap index c8e3e0a7f..3e7721365 100644 --- a/test/e2e/__snapshots__/esv-variable-describe.e2e.test.js.snap +++ b/test/e2e/__snapshots__/esv-variable-describe.e2e.test.js.snap @@ -73,12 +73,12 @@ exports[`frodo esv variable describe "frodo esv variable describe -ui esv-test-v "Connected to https://openam-frodo-dev.forgeblocks.com/am [alpha] as service account Frodo-SA-1720799681233 [b672336b-41ef-428d-ae4a-e0c082875377] Error exporting idm config entity fidc/federation-EntraID Error reading config entity fidc/federation-EntraID - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID - Status: 403 - Code: ERR_BAD_REQUEST - Reason: Forbidden - Message: Access denied + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID + Status: 403 + Code: ERR_BAD_REQUEST + Reason: Forbidden + Message: Access denied " `; diff --git a/test/e2e/__snapshots__/esv-variable-list.e2e.test.js.snap b/test/e2e/__snapshots__/esv-variable-list.e2e.test.js.snap index a8db50b5f..0d8ab82ac 100644 --- a/test/e2e/__snapshots__/esv-variable-list.e2e.test.js.snap +++ b/test/e2e/__snapshots__/esv-variable-list.e2e.test.js.snap @@ -64,12 +64,12 @@ exports[`frodo esv variable list "frodo esv variable list -lu": should list the ✔ Successfully read 12 variables. Error exporting idm config entity fidc/federation-EntraID Error reading config entity fidc/federation-EntraID - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID - Status: 403 - Code: ERR_BAD_REQUEST - Reason: Forbidden - Message: Access denied + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID + Status: 403 + Code: ERR_BAD_REQUEST + Reason: Forbidden + Message: Access denied " `; @@ -103,12 +103,12 @@ exports[`frodo esv variable list "frodo esv variable list -u": should list the u ✔ Successfully read 12 variables. Error exporting idm config entity fidc/federation-EntraID Error reading config entity fidc/federation-EntraID - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID - Status: 403 - Code: ERR_BAD_REQUEST - Reason: Forbidden - Message: Access denied + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID + Status: 403 + Code: ERR_BAD_REQUEST + Reason: Forbidden + Message: Access denied " `; diff --git a/test/e2e/__snapshots__/idm-import.e2e.test.js.snap b/test/e2e/__snapshots__/idm-import.e2e.test.js.snap index 0524a36cb..1639874a8 100644 --- a/test/e2e/__snapshots__/idm-import.e2e.test.js.snap +++ b/test/e2e/__snapshots__/idm-import.e2e.test.js.snap @@ -4,7 +4,7 @@ exports[`frodo idm import "frodo idm import --all --file all.idm.json -D test/e2 "Connected to https://openam-frodo-dev.forgeblocks.com/am [alpha] as service account Frodo-SA-1720799681233 [b672336b-41ef-428d-ae4a-e0c082875377] - Importing config entities from test/e2e/exports/all/all.idm.json... Error updating config entity bravoOrgPrivileges - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/bravoOrgPrivileges Status: 403 Code: ERR_BAD_REQUEST @@ -22,14 +22,14 @@ exports[`frodo idm import "frodo idm import -AD test/e2e/exports/all-separate/cl "Connected to https://openam-frodo-dev.forgeblocks.com/am [alpha] as service account Frodo-SA-1720799681233 [b672336b-41ef-428d-ae4a-e0c082875377] - Importing config entities from test/e2e/exports/all-separate/cloud/global/idm... Error updating config entity endpoint/Test - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/endpoint/Test Status: 401 Code: ERR_BAD_REQUEST Reason: Unauthorized Message: Access Denied Error updating config entity endpoint/testEndpoint2 - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/endpoint/testEndpoint2 Status: 401 Code: ERR_BAD_REQUEST diff --git a/test/e2e/__snapshots__/idp-delete.e2e.test.js.snap b/test/e2e/__snapshots__/idp-delete.e2e.test.js.snap index eb019df57..26cc9b305 100644 --- a/test/e2e/__snapshots__/idp-delete.e2e.test.js.snap +++ b/test/e2e/__snapshots__/idp-delete.e2e.test.js.snap @@ -75,6 +75,13 @@ Options: (choices: "classic", "cloud", "forgeops") --no-cache Disable token cache for this operation. + --passphrase The passphrase for the Amster private + key if it is encrypted. + --private-key File containing the private key for + authenticating with Amster. Supported + formats include PEM (both PKCS#1 and + PKCS#8 variants), OpenSSH, DNSSEC, and + JWK. --retry Retry failed operations. Valid values for strategy: everything: Retry all failed operations. @@ -105,10 +112,12 @@ Environment Variables: FRODO_LOGIN_REDIRECT_URI: Redirect Uri for custom OAuth2 client id. Overridden by '--login-redirect-uri' option. FRODO_SA_ID: Service account uuid. Overridden by '--sa-id' option. FRODO_SA_JWK: Service account JWK. Overridden by '--sa-jwk-file' option but takes the actual JWK as a value, not a file name. + FRODO_AMSTER_PASSPHRASE: Passphrase for the Amster private key if it is encrypted. Overridden by '--passphrase' option. + FRODO_AMSTER_PRIVATE_KEY: Amster private key. Overridden by '--private-key' option but takes the actual private key as a value (i.e. the file contents), not a file name. Supported formats include PEM (both PKCS#1 and PKCS#8 variants), OpenSSH, DNSSEC, and JWK. FRODO_NO_CACHE: Disable token cache. Same as '--no-cache' option. FRODO_TOKEN_CACHE_PATH: Use this token cache file instead of '~/.frodo/TokenCache.json'. FRODO_CONNECTION_PROFILES_PATH: Use this connection profiles file instead of '~/.frodo/Connections.json'. - FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. + FRODO_AUTHENTICATION_SERVICE: Name of a login journey to use. When using an Amster private key, specifies which journey to use for Amster authentication as opposed to the default 'amsterService' journey. FRODO_DEBUG: Set to any value to enable debug output. Same as '--debug'. FRODO_MASTER_KEY_PATH: Use this master key file instead of '~/.frodo/masterkey.key' file. FRODO_MASTER_KEY: Use this master key instead of what's in '~/.frodo/masterkey.key'. Takes precedence over FRODO_MASTER_KEY_PATH. diff --git a/test/e2e/__snapshots__/node-delete.e2e.test.js.snap b/test/e2e/__snapshots__/node-delete.e2e.test.js.snap index 8cb1f51b8..d701d7a48 100644 --- a/test/e2e/__snapshots__/node-delete.e2e.test.js.snap +++ b/test/e2e/__snapshots__/node-delete.e2e.test.js.snap @@ -5,52 +5,52 @@ exports[`frodo node delete "frodo node delete --all": should not delete any node - Deleting custom nodes... Error deleting custom node Display Callback Error deleting custom node Display Callback - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/ef81b1a52c914710b3388caebfe7233a-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/ef81b1a52c914710b3388caebfe7233a-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node Has Session AM Error deleting custom node Has Session AM - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/session-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/session-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node Display State Error deleting custom node Display State - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/8ab9f1aad4b4460a9c45d15fb148e221-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/8ab9f1aad4b4460a9c45d15fb148e221-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node Vector ALU Error deleting custom node Vector ALU - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c15e2efb3deb4d4ea338c74a6440b69f-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c15e2efb3deb4d4ea338c74a6440b69f-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node Has Session Error deleting custom node Has Session - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c605506774a848f7877b4d17a453bd39-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c605506774a848f7877b4d17a453bd39-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node ALU Error deleting custom node ALU - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c6063fb2f5dc42dd9772bedc93898bd8-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c6063fb2f5dc42dd9772bedc93898bd8-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use ✔ Deleted custom nodes. " `; @@ -60,7 +60,7 @@ exports[`frodo node delete "frodo node delete --node-id c605506774a848f7877b4d17 - Deleting c605506774a848f7877b4d17a453bd39-1... ✖ Error: Error deleting custom node c605506774a848f7877b4d17a453bd39-1 Error deleting custom node c605506774a848f7877b4d17a453bd39-1 - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c605506774a848f7877b4d17a453bd39-1 Status: 400 Code: ERR_BAD_REQUEST @@ -75,7 +75,7 @@ exports[`frodo node delete "frodo node delete --node-name 'Unknown'": should dis ✖ Error: Error deleting custom node Unknown Error deleting custom node Unknown Error reading custom node Unknown - Custom node 'Unknown' not found + Custom node 'Unknown' not found " `; @@ -84,52 +84,52 @@ exports[`frodo node delete "frodo node delete -a": should delete all nodes that - Deleting custom nodes... Error deleting custom node Display Callback Error deleting custom node Display Callback - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/ef81b1a52c914710b3388caebfe7233a-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/ef81b1a52c914710b3388caebfe7233a-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node Has Session AM Error deleting custom node Has Session AM - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/session-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/session-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node Display State Error deleting custom node Display State - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/8ab9f1aad4b4460a9c45d15fb148e221-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/8ab9f1aad4b4460a9c45d15fb148e221-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node Vector ALU Error deleting custom node Vector ALU - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c15e2efb3deb4d4ea338c74a6440b69f-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c15e2efb3deb4d4ea338c74a6440b69f-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node Has Session Error deleting custom node Has Session - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c605506774a848f7877b4d17a453bd39-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c605506774a848f7877b4d17a453bd39-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use Error deleting custom node ALU Error deleting custom node ALU - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c6063fb2f5dc42dd9772bedc93898bd8-1 - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: Cannot delete node type that is in use + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/node-designer/node-type/c6063fb2f5dc42dd9772bedc93898bd8-1 + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: Cannot delete node type that is in use ✔ Deleted custom nodes. " `; diff --git a/test/e2e/__snapshots__/script-describe.e2e.test.js.snap b/test/e2e/__snapshots__/script-describe.e2e.test.js.snap index 7d8cb55c9..f5324405d 100644 --- a/test/e2e/__snapshots__/script-describe.e2e.test.js.snap +++ b/test/e2e/__snapshots__/script-describe.e2e.test.js.snap @@ -180,12 +180,12 @@ exports[`frodo script describe "frodo script describe -un shared": should descri "Connected to https://openam-frodo-dev.forgeblocks.com/am [alpha] as service account Frodo-SA-1720799681233 [b672336b-41ef-428d-ae4a-e0c082875377] Error exporting idm config entity fidc/federation-EntraID Error reading config entity fidc/federation-EntraID - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID - Status: 403 - Code: ERR_BAD_REQUEST - Reason: Forbidden - Message: Access denied + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID + Status: 403 + Code: ERR_BAD_REQUEST + Reason: Forbidden + Message: Access denied " `; diff --git a/test/e2e/__snapshots__/script-list.e2e.test.js.snap b/test/e2e/__snapshots__/script-list.e2e.test.js.snap index 467e28a16..1dda4878d 100644 --- a/test/e2e/__snapshots__/script-list.e2e.test.js.snap +++ b/test/e2e/__snapshots__/script-list.e2e.test.js.snap @@ -892,12 +892,12 @@ exports[`frodo script list "frodo script list -lu": should list the names, uuids ✔ Successfully read 67 scripts. Error exporting idm config entity fidc/federation-EntraID Error reading config entity fidc/federation-EntraID - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID - Status: 403 - Code: ERR_BAD_REQUEST - Reason: Forbidden - Message: Access denied + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID + Status: 403 + Code: ERR_BAD_REQUEST + Reason: Forbidden + Message: Access denied " `; @@ -1058,12 +1058,12 @@ exports[`frodo script list "frodo script list -u": should list the usage of the ✔ Successfully read 67 scripts. Error exporting idm config entity fidc/federation-EntraID Error reading config entity fidc/federation-EntraID - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID - Status: 403 - Code: ERR_BAD_REQUEST - Reason: Forbidden - Message: Access denied + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/openidm/config/fidc/federation-EntraID + Status: 403 + Code: ERR_BAD_REQUEST + Reason: Forbidden + Message: Access denied " `; diff --git a/test/e2e/__snapshots__/secretstore-delete.e2e.test.js.snap b/test/e2e/__snapshots__/secretstore-delete.e2e.test.js.snap index 47932c754..9b061409f 100644 --- a/test/e2e/__snapshots__/secretstore-delete.e2e.test.js.snap +++ b/test/e2e/__snapshots__/secretstore-delete.e2e.test.js.snap @@ -3,7 +3,7 @@ exports[`frodo secretstore delete "frodo secretstore delete --all": should fail deleting any secret store 1`] = ` "Error getting tokens Service account login error - Unsupported deployment type: 'cloud' not in classic + Unsupported deployment type: 'cloud' not in classic Unrecognized combination of options or no options... " `; @@ -23,7 +23,7 @@ exports[`frodo secretstore delete "frodo secretstore delete -agm classic": shoul "Connected to http://openam-frodo-dev.classic.com:8080/am [/] as user amAdmin - Deleting secret stores... Error deleting the / realm secret store EnvironmentAndSystemPropertySecretStore - HTTP client error + Network error: URL: http://openam-frodo-dev.classic.com:8080/am/json/global-config/secrets/stores/EnvironmentAndSystemPropertySecretStore/ Status: 400 Code: ERR_BAD_REQUEST @@ -40,7 +40,7 @@ exports[`frodo secretstore delete "frodo secretstore delete -g --secretstore-id - Deleting EnvironmentAndSystemPropertySecretStore... ✖ Error: Error deleting the / realm secret store EnvironmentAndSystemPropertySecretStore Error deleting the / realm secret store EnvironmentAndSystemPropertySecretStore - HTTP client error + Network error: URL: http://openam-frodo-dev.classic.com:8080/am/json/global-config/secrets/stores/EnvironmentAndSystemPropertySecretStore/ Status: 400 Code: ERR_BAD_REQUEST @@ -54,7 +54,7 @@ exports[`frodo secretstore delete "frodo secretstore delete -g --secretstore-id exports[`frodo secretstore delete "frodo secretstore delete -i ESV": should fail deleting ESV secret store 1`] = ` "Error getting tokens Service account login error - Unsupported deployment type: 'cloud' not in classic + Unsupported deployment type: 'cloud' not in classic Unrecognized combination of options or no options... " `; diff --git a/test/e2e/__snapshots__/secretstore-mapping-create.e2e.test.js.snap b/test/e2e/__snapshots__/secretstore-mapping-create.e2e.test.js.snap index b5a33e474..375bc4f28 100644 --- a/test/e2e/__snapshots__/secretstore-mapping-create.e2e.test.js.snap +++ b/test/e2e/__snapshots__/secretstore-mapping-create.e2e.test.js.snap @@ -14,7 +14,7 @@ exports[`frodo secretstore mapping create "frodo secretstore mapping create --gl - Creating the mapping am.uma.resource.sets.mtls.cert in the secret store default-keystore... ✖ Error: Error creating mapping 'am.uma.resource.sets.mtls.cert' for the / realm secret store 'default-keystore' Error creating mapping 'am.uma.resource.sets.mtls.cert' for the / realm secret store 'default-keystore' - HTTP client error + Network error: URL: http://openam-frodo-dev.classic.com:8080/am/json/global-config/secrets/stores/KeyStoreSecretStore/default-keystore/mappings?_action=create Status: 400 Code: ERR_BAD_REQUEST @@ -30,7 +30,7 @@ exports[`frodo secretstore mapping create "frodo secretstore mapping create --se - Creating the mapping am.services.uma.pct.encryption in the secret store ESV... ✖ Error: Error creating mapping 'am.services.uma.pct.encryption' for the alpha realm secret store 'ESV' Error creating mapping 'am.services.uma.pct.encryption' for the alpha realm secret store 'ESV' - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/am/json/realms/root/realms/alpha/realm-config/secrets/stores/GoogleSecretManagerSecretStoreProvider/ESV/mappings?_action=create Status: 400 Code: ERR_BAD_REQUEST @@ -53,7 +53,7 @@ exports[`frodo secretstore mapping create "frodo secretstore mapping create -gi - Creating the mapping unknown.label in the secret store default-keystore... ✖ Error: Error creating mapping 'unknown.label' for the / realm secret store 'default-keystore' Error creating mapping 'unknown.label' for the / realm secret store 'default-keystore' - HTTP client error + Network error: URL: http://openam-frodo-dev.classic.com:8080/am/json/global-config/secrets/stores/KeyStoreSecretStore/default-keystore/mappings?_action=create Status: 400 Code: ERR_BAD_REQUEST @@ -78,7 +78,7 @@ exports[`frodo secretstore mapping create "frodo secretstore mapping create -i E - Creating the mapping am.services.httpclient.mtls.servertrustcerts.testServerCert.secret in the secret store ESV... ✖ Error: Error creating mapping 'am.services.httpclient.mtls.servertrustcerts.testServerCert.secret' for the alpha realm secret store 'ESV' Error creating mapping 'am.services.httpclient.mtls.servertrustcerts.testServerCert.secret' for the alpha realm secret store 'ESV' - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/am/json/realms/root/realms/alpha/realm-config/secrets/stores/GoogleSecretManagerSecretStoreProvider/ESV/mappings?_action=create Status: 409 Code: ERR_BAD_REQUEST diff --git a/test/e2e/__snapshots__/secretstore-mapping-delete.e2e.test.js.snap b/test/e2e/__snapshots__/secretstore-mapping-delete.e2e.test.js.snap index b803183af..da0c22772 100644 --- a/test/e2e/__snapshots__/secretstore-mapping-delete.e2e.test.js.snap +++ b/test/e2e/__snapshots__/secretstore-mapping-delete.e2e.test.js.snap @@ -48,7 +48,7 @@ exports[`frodo secretstore mapping delete "frodo secretstore mapping delete -i E - Deleting unknown.label from secret store ESV... ✖ Error: Error deleting the secret store mapping unknown.label from the alpha realm secret store ESV Error deleting the secret store mapping unknown.label from the alpha realm secret store ESV - HTTP client error + Network error: URL: https://openam-frodo-dev.forgeblocks.com/am/json/realms/root/realms/alpha/realm-config/secrets/stores/GoogleSecretManagerSecretStoreProvider/ESV/mappings/unknown.label Status: 404 Code: ERR_BAD_REQUEST diff --git a/test/e2e/__snapshots__/service-import.e2e.test.js.snap b/test/e2e/__snapshots__/service-import.e2e.test.js.snap index 18572434d..3051577c8 100644 --- a/test/e2e/__snapshots__/service-import.e2e.test.js.snap +++ b/test/e2e/__snapshots__/service-import.e2e.test.js.snap @@ -6,22 +6,22 @@ exports[`frodo service import "frodo service import --clean --global --all --fil "Connected to https://openam-frodo-dev.forgeblocks.com/am [alpha] as service account Frodo-SA-1720799681233 [b672336b-41ef-428d-ae4a-e0c082875377] Error importing services Error putting global full service configs - Error putting global full service config CorsService - Error deleting service 'CorsService' before import - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/global-config/services/CorsService - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: The singleton resource cannot be deleted - Error putting global full service config dashboard - Error deleting service 'dashboard' before import - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/global-config/services/dashboard - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: The singleton resource cannot be deleted + Error putting global full service config CorsService + Error deleting service 'CorsService' before import + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/global-config/services/CorsService + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: The singleton resource cannot be deleted + Error putting global full service config dashboard + Error deleting service 'dashboard' before import + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/global-config/services/dashboard + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: The singleton resource cannot be deleted " `; @@ -33,13 +33,13 @@ exports[`frodo service import "frodo service import --clean --global --file test ✖ Error importing first service Error importing service CorsService Error putting global full service config CorsService - Error deleting service 'CorsService' before import - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/global-config/services/CorsService - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: The singleton resource cannot be deleted + Error deleting service 'CorsService' before import + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/global-config/services/CorsService + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: The singleton resource cannot be deleted " `; @@ -49,13 +49,13 @@ exports[`frodo service import "frodo service import --clean -g --service-id dash ✖ Error importing dashboard. Error importing service dashboard Error putting global full service config dashboard - Error deleting service 'dashboard' before import - HTTP client error - URL: https://openam-frodo-dev.forgeblocks.com/am/json/global-config/services/dashboard - Status: 400 - Code: ERR_BAD_REQUEST - Reason: Bad Request - Message: The singleton resource cannot be deleted + Error deleting service 'dashboard' before import + Network error: + URL: https://openam-frodo-dev.forgeblocks.com/am/json/global-config/services/dashboard + Status: 400 + Code: ERR_BAD_REQUEST + Reason: Bad Request + Message: The singleton resource cannot be deleted " `; diff --git a/test/e2e/conn-describe.e2e.test.js b/test/e2e/conn-describe.e2e.test.js index e0d166f41..d890e51f2 100644 --- a/test/e2e/conn-describe.e2e.test.js +++ b/test/e2e/conn-describe.e2e.test.js @@ -58,7 +58,7 @@ import cp from 'child_process'; import { promisify } from 'util'; import { getEnv, removeAnsiEscapeCodes, testif } from './utils/TestUtils'; -import { connection as c } from './utils/TestConfig'; +import { connection as c, classic_connection as cc } from './utils/TestConfig'; const exec = promisify(cp.exec); @@ -77,6 +77,15 @@ describe('frodo conn describe', () => { } ); + testif(process.env['FRODO_MASTER_KEY'])( + `"frodo conn describe ${cc.host}": should describe the classic connection`, + async () => { + const CMD = `frodo conn describe ${cc.host}`; + const { stdout } = await exec(CMD, env); + expect(removeAnsiEscapeCodes(stdout)).toMatchSnapshot(); + } + ); + testif(process.env['FRODO_MASTER_KEY'])( `"frodo conn describe --show-secrets ${c.host}": should describe the connection and show the associated secrets`, async () => { @@ -86,4 +95,14 @@ describe('frodo conn describe', () => { expect(removeAnsiEscapeCodes(stdout).includes("[present]")).toBeFalsy(); } ); + + testif(process.env['FRODO_MASTER_KEY'])( + `"frodo conn describe --show-secrets ${cc.host}": should describe the classic connection and show the associated secrets`, + async () => { + const CMD = `frodo conn describe --show-secrets ${cc.host}`; + const { stdout } = await exec(CMD, env); + //Don't test with snapshot, otherwise the snapshot would contain secrets. Instead, just check to make sure "[present]" doesn't exist anywhere. + expect(removeAnsiEscapeCodes(stdout).includes("[present]")).toBeFalsy(); + } + ); }); diff --git a/test/e2e/conn-save.e2e.test.js b/test/e2e/conn-save.e2e.test.js index c5eb71e6c..fb905d1a2 100644 --- a/test/e2e/conn-save.e2e.test.js +++ b/test/e2e/conn-save.e2e.test.js @@ -48,7 +48,7 @@ import cp from 'child_process'; import { promisify } from 'util'; import {getEnv, removeAnsiEscapeCodes, testif} from './utils/TestUtils'; -import { connection as c } from './utils/TestConfig'; +import { connection as c, classic_connection as cc } from './utils/TestConfig'; import { writeFileSync, rmSync } from 'fs'; const exec = promisify(cp.exec); @@ -90,4 +90,22 @@ describe('frodo conn save', () => { expect(removeAnsiEscapeCodes(stderr)).toMatchSnapshot(); } ); + + testif(process.env['FRODO_MASTER_KEY'])( + `"frodo conn save --no-validate ${cc.host} ${cc.user} ${cc.pass}": save new classic connection profile using an admin account.`, + async () => { + const CMD = `frodo conn save --no-validate ${cc.host} ${cc.user} ${cc.pass}`; + const { stderr } = await exec(CMD, env); + expect(removeAnsiEscapeCodes(stderr)).toMatchSnapshot(); + } + ); + + testif(process.env['FRODO_MASTER_KEY'])( + `"frodo conn save --no-validate --private-key ${cc.pk} --authentication-service ${cc.authService} ${cc.host}": save new classic connection profile with private key and custom authentication service.`, + async () => { + const CMD = `frodo conn save --no-validate --private-key ${cc.pk} --authentication-service ${cc.authService} ${cc.host}`; + const { stderr } = await exec(CMD, env); + expect(removeAnsiEscapeCodes(stderr)).toMatchSnapshot(); + } + ); }); diff --git a/test/e2e/env/Connections.json b/test/e2e/env/Connections.json index b4326d4b1..cd132b2c0 100644 --- a/test/e2e/env/Connections.json +++ b/test/e2e/env/Connections.json @@ -8,5 +8,11 @@ "svcacctId": "b672336b-41ef-428d-ae4a-e0c082875377", "svcacctName": "Frodo-SA-1687293271764", "username": "volker.scheuber@forgerock.com" + }, + "http://openam-frodo-dev.classic.com:8080/am": { + "authenticationService": "MockAmsterService", + "deploymentType": "classic", + "encodedAmsterPrivateKey": "dO2BtThkez9VERnJNlu3Yzs5E9qlx7xijrmtQnW3WKexDko21gxG5dGG2oaWgkaw5YxJsXU4lAi1xe7TBTezfoWyRT7gik00IHk06wR43gpLjOFdLd6qo/oQso93Q09qOJfuZtrg2HvuYbH5a7q3/4F95GCiGbRFH6z1atrKgTs18ZKaUYMjV6bMY1KIW7t1QYNgtb5f/6Nnz4kv35ilBJUF0irHRJPRXdnk1bzHYt9TcjTpWap8m3nK9CuLOTX3E0yF9RL8tTPIKofbtH6IUvzabyMWDAAFbJiRdTVVo5tW7JXEcx4GHvuHd/oBVwGqhQxLFRwEJGZWMKeqQ+MDOuwOFtqH7cA9ewbQGZCGjTdzUjoidu3aBwHQaZ4Zo5ctf5CURndEdRDbyAwYwtszLzPAt/y1KAKqyGXHjYQU6ZgtXLuZrdhqvs06g6x4hnWUICJY+gz5xWoFvrKCBipMPL3nKL8WmJwuTdVY5IuMZCAvrP+XMQRsSKiG7Ewk2yb44nBSETboAlBIO1kq+X77zPu2ga9kTmJXh3snjut8UCZbnZPIwiU2nHJ2krhXEV9hpD3/QiXdfX8XeMb3py5uYBnsYJH6Ijr1dMTNnPam9lVHfpecaf0Uk1eK+o4wsqzHpw94qN0UqmBSzehpOwesJTKduEnvDRQO9fENzyHKSBmIb5bAig88S0u/YYTO4YUTYwdNoIrevGRTZJM3um3pFdeVmBji4kFFAo5DmCjhOhmgBgwYvRWJDrGojhSxMFRLYbEdryMqZR+1lYF/igRVWvtrANGwYQhh0w0eOuifs7OiMb0giVtaXIBeFG4tcuWBDVKcYE3VWMt4ClwqoE8FVg572ITYRRZS3yZRizabnpswOHZEngjiru1BKz1FB1tdPuFkmFUzosRO7dh5umu4SgbmGG6PWptFlGDyGvMeyJtIC1fykPGvJ+gNj+5mSn/RmDeAwsrUSluLfJpSb0aaeGghjpDxM7NuMpAqEC4UwamNx2OdQMDdl+JaAteW9CbbZK2MddMwBAzpXHSeK2956PBKOYK5LcplSMoBib+jtBpzYZyJwb4ldLSidOtnUFUS/JoJga1oEQv2aQYfmx1tzFbsicgWrqrSK1h7TJgJmYCLViLojtPiV0X1V/v/1bCXg7zaNvZ+uWwFDAVFflMpfg+hcWENGlijQ35joIExbeEbgx7CNXTCNQYi951b2KRbSu+jqYTTYjePbu1uCCc5snhmSCRN+X7WrccP2Pbar3+Sh95BkWdbVhROiJy9X5umIp/O1Wj37Yt3OqUkVhSUYhZVB+LKojdY07KqGYs//JCDAxdFXJuWBcoM/HKEwcw0sB8bwbsN8f8XpdUpeBvwQZZjJ9BA62p+1f1LaDQ/Zgasigj8ih8toETk5u00f4Bfz9xPETLIMMFpTzM4L8nZQxkTxexzOkZqzxcJk21N7jyYDipCaXhKsA9yQn+L63aRuF46eTxRMhqDaPCMyOIFjGy6gr8sQnnN5B7YkXiHyOqSBhw/RbTca10FQwk8StLebo/qsL+JxFyoOB2cMVjuA1pMIEAIkvaHn3urnddnE/2dw1LQsxVGGBXNElFJlyOnss6OM2v2zA3HtH0htS04mTWFgRdNiWeKC3WekQ5hUJPt7pWnyInn5fNPn36pIloNwuLQUlLTUqAgMkaiwL2b0PXw7FUns8jsGjnwHAJbHhcp1vnw3D/66QqHcL5Bmc01wcmyxIM+YSsjhLc8N2JqvxRTlZ/TmddWi5BE+LVApja3VQnpb8v8sm1S3kzddEZdWtd/ggkvnfyFvSyMSfOYeNsBROVzEdSItN9aCqx8yUUmq3lsVBZezwjHgHbDemOauTetnpYKl5jBz6b68zRfmARawXD7IclzUiQclS7qO1umrlrwlECP5gsM2LRAhj7IiD1hCBtq/3vGlTuHW1uj3l+ErdBN2NUlJVwmt1egNnRLDWLNG7aILhdjEdd2EA6CJRRSKcSpCq0qXFZisS5gZi5dmJ0g66JZKKOukRj21aGt74Ui97iNAFo0wtjh+wByce2FMukiX2peLYFqql/hCERz7a+2vXcfbV27OIHwltbou5dXbnKC4IGnSK+Gz/PJWiFv+qk6dY3/JQVhbNsnAmzgcp15gZbhnGFF6WNPE+X9bOng9EwVo8v7R2HiMUtWSk/10qG5reCYqn8viUaJyG85Z819XiIDZpp96VwA7P7U7xBIMIhQxvn5/QjeTSS8DVQ+8msHTXzExdDzpuZ8HX1hUKdw9NH8I0T0itzOa2ncROcTJtbSgZ+pgT1ooRHtxuZ0iNXEWvQbSzDliO5DRn76nRR/Ji4xcJWY4U08yAJZtT9kJqFqUO7TOavXCNVgqrp3XznBGgVOAJObH3o4n4XwJJAoTRrZokHkQ7jyydASyfuRwFfEjT/mllYsYAZeJPmng8tr21KtSrpWn47b7oblTunIK2LRpyUjoICooJyNpG1P4ZGFAYdwuSxpEKrt89lcUaBEv9SdnUZMl8k6yhx1Sd57jSsipOZvePTMM95CfSm+4SCU/mkKJc47+Y4juGAQcn/3U8TkdlUZWlRRzMGJu5NYqCp/CS9bFTYlZue7mcA6fg4gTZcEEh0TAQE5oGwbyTXdEa5QH+g84+gMiZmjZ0byAKtsmaGcBndqVS0B1cZIV7kCO82dXbEBL/a5LVzxWETQdmK/VgbOz4Kun+1u4VeBQKr3bA7XW8VudQbStCf2IHpr659Xz6zi1xtBeoVVlV34K2ZsBM6SlprvNq12XAChy+rHraBChi0oP2bmIl2LcOGitsH6NimIifPZOMtENNLF3tdTcNnKaqSUMrOkzeJUPZ2UqoyJD1o5mcKYsPIGLIBGWcIlCqzFh0peul8o9aB1ZaQ2mE3fqK7Ak5BBBmGK+NYwDwCepExZvYcWntZ6ITPzpjFmrImRtsJbYMrg6zi2wilPWWqoygVLXhXcQX357z5F2is7xb3U2jRFk10qtA7NK/kNOQLabCCVYinrvF+N22biwWAh87HAwuq8R6lulvTu2OV0WnkbLE7MB4bIAQzEYjZFLKrZ5yiEez1gqS56qo5Zl8PiIqiovDUDyeYIh8d691y+W0O9q7QCYTBCyl4e1a4BLFciyjueg/lInPcBYExJj+rGzrIGQkbNw60hgUVBiB1tvEFTBJ47uCxi3iubLhg9KcI8W/CtLVgoWl8FNWxTQ5DVIRlho/PcAmN618IrQ/E6d7LVKIkWuNd87TcKK7YHTTIAui5rTiBOgOK9xAZnemBWK/ivFAV84NigI47HdrHnRulSh09ITzhMb9q+k6EtH78FIiP+MX90/hsonKXUjMvNRI6yUJlzNoDSMLBidNS8g1QHo2ICVSruUUGUrXxqDtPhtCH43ct/gPsStqc1iw9eOzMGxEFw/x98dhoq7aQoNN602n7HifO1oJ6oYRvOLtK/RnibJ5EYtY1DjD07OqO8fMSJRsLRtVQ8Q+9r/Jm6KxoT0O/GSQBWooMxP7vjuz/3v1Zg9+acGljhd5hmpZC3Ii0xKvyGvO0fw9Ai7DmFEPGvdZNx2JeA1e7fVgWWMH/q7qRVT1RDHAJPS/Q6E/pROp/fAO34JorCwJun", + "username": "amadmin" } } diff --git a/test/e2e/utils/TestConfig.js b/test/e2e/utils/TestConfig.js index f9bc8facb..c6bdafe9a 100644 --- a/test/e2e/utils/TestConfig.js +++ b/test/e2e/utils/TestConfig.js @@ -12,5 +12,7 @@ export const classic_connection = { host: 'http://openam-frodo-dev.classic.com:8080/am', user: 'amAdmin', pass: 'Sup3rS3cr3t!', - realm: '/' + realm: '/', + pk: '/home/user/am/security/keys/amster/amster_rsa', + authService: 'MockAmsterService' }