/host-store/api/v1/hosts/search
Search for hosts
ignore_disabled_sources
boolean
Ignores the disabled hosts - when enabled, host search searches for disabled hosts as well
keywords
string
Comma or space-separated strings to search across all host attributes. The leading and trailing wildcards for the keywords are implicit.
distinguished_name
array
A comma separated list of strings to search for
external_id
string
The external id of the host
instance_id
string
The instance id from the cloud service
source_id
string
The source of the host
common_name
array
An array of strings to search for
organization
array
An array of strings to search for
organizational_unit
array
An array of strings to search for
address
array
An array of strings to search for
access_group_ids
array
An array of access group IDs to search for
service
array
An array of service types to search for (SSH, RDP, WEB, VNC, DB)
port
array
An array of integers to search for
zone
array
An array of strings to search for
host_type
array
An array of strings to search for
host_classification
array
An array of strings to search for
role
array
An array of strings to search for (role id's)
scope
array
An array of strings to search for
tags
array
An array of host tags to search for
cloud_providers
array
An array of cloud provider names to search (AWS,GOOGLECLOUD,AZURE,OPENSTACK)
cloud_provider_regions
array
An array of cloud provider regions to search for. Valid values depend on cloud provider.
deployable
boolean
A host deployable flag status to search for.
statuses
array
An array of host status strings to search for.
{
"ignore_disabled_sources": true,
"keywords": "string",
"distinguished_name": [
"string"
],
"external_id": "string",
"instance_id": "string",
"source_id": "string",
"common_name": [
"string"
],
"organization": [
"string"
],
"organizational_unit": [
"string"
],
"address": [
"string"
],
"access_group_ids": [
"5bf77342-221c-11ee-be56-0242ac120002"
],
"service": [
"string"
],
"port": [
123
],
"zone": [
"string"
],
"host_type": [
"string"
],
"host_classification": [
"string"
],
"role": [
"string"
],
"scope": [
"string"
],
"tags": [
"string"
],
"cloud_providers": [
"string"
],
"cloud_provider_regions": [
"string"
],
"deployable": true,
"statuses": [
"string"
]
}
Search successful, return matching hosts
{
"count": 123,
"items": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"deployable": true,
"tofu": true,
"stand_alone_host": true,
"external_id": "string",
"instance_id": "string",
"audit_enabled": true,
"session_recording_options": {
"disable_clipboard_recording": true,
"disable_file_transfer_recording": true
},
"ssh_host_public_keys": [
{
"key": "string",
"fingerprint": "string"
}
],
"host_certificate_raw": "string",
"host_certificate": {
"subject": "string",
"issuer": "string",
"serial": "string",
"not_before": "string",
"not_after": "string",
"dns_names": [
"string"
],
"email_addresses": [
"string"
],
"ip_addresses": [
"string"
],
"fingerprint_sha1": "string",
"fingerprint_sha256": "string"
},
"contact_address": "string",
"services": [
{
"service": "SSH",
"address": "string",
"port": 123,
"use_for_password_rotation": true,
"ssh_tunnel_port": 123,
"source": "string",
"login_page_url": "string",
"username_field_name": "string",
"password_field_name": "string",
"login_request_url": "string",
"login_request_password_property": "string",
"auth_type": "string",
"status": "OK",
"status_updated": "string",
"allowed_domains": [
"string"
],
"service_version": "string",
"use_legacy_cipher_suites": true,
"tls_min_version": "string",
"tls_max_version": "string",
"browser": "string",
"db": {
"protocol": "postgres",
"tls_certificate_validation": "ENABLED",
"tls_certificate_trust_anchors": "string",
"audit_skip_bytes": 123
},
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"certificate_template": "string"
}
],
"principals": [
{
"principal": "string",
"target_domain": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rotate": true,
"use_for_password_rotation": true,
"use_user_account": true,
"passphrase": "string",
"username_attribute": "string",
"source": "string",
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
}
],
"applications": [
{
"name": "string",
"application": "string",
"arguments": "string",
"working_directory": "string"
}
],
"service_options": {
"ssh": {
"shell": true,
"file_transfer": true,
"exec": true,
"tunnels": true,
"x11": true,
"other": true
},
"rdp": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"web": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"vnc": {
"file_transfer": true,
"clipboard": true
},
"db": {
"max_bytes_download": 123,
"max_bytes_upload": 123
}
},
"command_restrictions": {
"enabled": true,
"default_whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rshell_variant": "bash",
"banner": "string",
"allow_no_match": true,
"audit_match": true,
"audit_no_match": true,
"whitelists": [
{
"whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string"
}
]
}
]
}
}
],
"password_rotation_enabled": true,
"password_rotation": {
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"use_main_account": true,
"operating_system": "LINUX",
"winrm_address": "string",
"winrm_port": 123,
"protocol": "SSH",
"certificate_validation_options": "DISABLED",
"winrm_host_certificate_trust_anchors": "string",
"password_policy_id": "5bf77342-221c-11ee-be56-0242ac120002",
"script_template_id": "5bf77342-221c-11ee-be56-0242ac120002",
"rotation_status": [
{
"principal": "string",
"last_rotated": "2017-01-01T15:05:05Z",
"last_error": "2017-01-01T15:05:05Z",
"last_error_details": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"created_by": "string",
"updated_by": "string"
},
"source_id": "string",
"cloud_provider": "string",
"cloud_provider_region": "string",
"status": [
{
"k": "string",
"v": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"updated_by": "eef4aefc-d64e-4c2c-aba4-4914c86ce059",
"distinguished_name": "string",
"common_name": "string",
"organization": "string",
"organizational_unit": "string",
"zone": "string",
"scope": [
"string"
],
"host_type": "string",
"host_classification": "string",
"comment": "string",
"addresses": [
"string"
],
"tags": [
"string"
],
"disabled": "BY_ADMIN"
}
]
}
/host-store/api/v1/hosts
Get hosts
offset
int
Offset from which to start fetching objects
limit
int
Maximum number of objects to return
sortkey
string
Sort by specific object property
sortdir
string
Sort direction, asc or desc
filter
string
Filter hosts - possible values: accessible (filter hosts based on whether the current user has access to them) and configured (list only hosts with services)
Successful request, respond with a list of hosts
{
"count": 123,
"items": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"deployable": true,
"tofu": true,
"stand_alone_host": true,
"external_id": "string",
"instance_id": "string",
"audit_enabled": true,
"session_recording_options": {
"disable_clipboard_recording": true,
"disable_file_transfer_recording": true
},
"ssh_host_public_keys": [
{
"key": "string",
"fingerprint": "string"
}
],
"host_certificate_raw": "string",
"host_certificate": {
"subject": "string",
"issuer": "string",
"serial": "string",
"not_before": "string",
"not_after": "string",
"dns_names": [
"string"
],
"email_addresses": [
"string"
],
"ip_addresses": [
"string"
],
"fingerprint_sha1": "string",
"fingerprint_sha256": "string"
},
"contact_address": "string",
"services": [
{
"service": "SSH",
"address": "string",
"port": 123,
"use_for_password_rotation": true,
"ssh_tunnel_port": 123,
"source": "string",
"login_page_url": "string",
"username_field_name": "string",
"password_field_name": "string",
"login_request_url": "string",
"login_request_password_property": "string",
"auth_type": "string",
"status": "OK",
"status_updated": "string",
"allowed_domains": [
"string"
],
"service_version": "string",
"use_legacy_cipher_suites": true,
"tls_min_version": "string",
"tls_max_version": "string",
"browser": "string",
"db": {
"protocol": "postgres",
"tls_certificate_validation": "ENABLED",
"tls_certificate_trust_anchors": "string",
"audit_skip_bytes": 123
},
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"certificate_template": "string"
}
],
"principals": [
{
"principal": "string",
"target_domain": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rotate": true,
"use_for_password_rotation": true,
"use_user_account": true,
"passphrase": "string",
"username_attribute": "string",
"source": "string",
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
}
],
"applications": [
{
"name": "string",
"application": "string",
"arguments": "string",
"working_directory": "string"
}
],
"service_options": {
"ssh": {
"shell": true,
"file_transfer": true,
"exec": true,
"tunnels": true,
"x11": true,
"other": true
},
"rdp": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"web": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"vnc": {
"file_transfer": true,
"clipboard": true
},
"db": {
"max_bytes_download": 123,
"max_bytes_upload": 123
}
},
"command_restrictions": {
"enabled": true,
"default_whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rshell_variant": "bash",
"banner": "string",
"allow_no_match": true,
"audit_match": true,
"audit_no_match": true,
"whitelists": [
{
"whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string"
}
]
}
]
}
}
],
"password_rotation_enabled": true,
"password_rotation": {
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"use_main_account": true,
"operating_system": "LINUX",
"winrm_address": "string",
"winrm_port": 123,
"protocol": "SSH",
"certificate_validation_options": "DISABLED",
"winrm_host_certificate_trust_anchors": "string",
"password_policy_id": "5bf77342-221c-11ee-be56-0242ac120002",
"script_template_id": "5bf77342-221c-11ee-be56-0242ac120002",
"rotation_status": [
{
"principal": "string",
"last_rotated": "2017-01-01T15:05:05Z",
"last_error": "2017-01-01T15:05:05Z",
"last_error_details": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"created_by": "string",
"updated_by": "string"
},
"source_id": "string",
"cloud_provider": "string",
"cloud_provider_region": "string",
"status": [
{
"k": "string",
"v": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"updated_by": "eef4aefc-d64e-4c2c-aba4-4914c86ce059",
"distinguished_name": "string",
"common_name": "string",
"organization": "string",
"organizational_unit": "string",
"zone": "string",
"scope": [
"string"
],
"host_type": "string",
"host_classification": "string",
"comment": "string",
"addresses": [
"string"
],
"tags": [
"string"
],
"disabled": "BY_ADMIN"
}
]
}
/host-store/api/v1/hosts
Create a host to host store
access_group_id
string
Defines host's access group
deployable
boolean
Whether the host is writable through /deploy end point with deployment credentials
tofu
boolean
Whether the host key should be accepted and stored on first connection
stand_alone_host
boolean
Indicates it is a standalone host - bound to local host directory
external_id
string
The equipment ID from the originating equipment store
instance_id
string
The instance ID from the originating cloud service (searchable by keyword)
audit_enabled
boolean
Wheter the host is set to be audited.
session_recording_options
object
Flags to disable trail auditing for certain features when auditing is enabled
disable_clipboard_recording
boolean
Disable clipboard trail auditing when auditing is enabled
disable_file_transfer_recording
boolean
Disable file transfer trail auditing when auditing is enabled
ssh_host_public_keys
array
key
string
Host public key, used to verify the identity of the accessed host
host_certificate_raw
string
Host certificate, used to verify that the target host is the correct one.
contact_address
string
The host public address scanning script instructs the host store to use in service address-field.
services
array
service
string
Allowed protocol - SSH, RDP, VNC, WEB, DB (searchable)
address
string
Service address, IPv4, IPv6 or FQDN
port
int
Service port
use_for_password_rotation
boolean
if service SSH, informs whether this service is used to rotate password
db
object (dbservice)
source
string
Identifies the source of the services object "UI", "SCIM" or "SCAN". Deploy is also treated as "UI".
principals
array
What principals (target server user names/ accounts) the host has
principal
string
The account name
target_domain
object (target_domain_handle)
Optional target domain in which principal exists
rotate
boolean
Rotate password of this account
use_for_password_rotation
boolean
marks account to be used as the account through which password rotation takes place, when flag use_main_account set in rotation_metadata
use_user_account
boolean
Use user account as host principal name
passphrase
string
The account static passphrase or the initial rotating password value. If rotate selected, active in create, disabled/hidden in edit
source
string
Identifies the source of the principals object "UI" or "SCAN". Deploy is also treated as "UI".
roles
array
An array of roles entitled to access this principal on the host
applications
array
An array of application the principal may launch on the target host
service_options
object (service_options)
Object for service options
command_restrictions
object (command_restrictions)
SSH shell/exec command restrictions for the principal
password_rotation_enabled
boolean
set, if there are accounts, in which passwords need to be rotated
password_rotation
object (rotation_metadata)
password rotation settings for host
access_group_id
string
Specify ID of access group, default access group will be used if ID is not specified. Access group will be checked for WinRM trust anchors if certificate validation option is set to enabled.
use_main_account
boolean
required
rotate passwords of all accounts in host through one account
operating_system
string
required
Bash for Linux, Powershell for windows for shell access
winrm_address
string
IPv4 address or FQDN to use for winrm connections
winrm_port
int
port to use for password rotation with winrm, zero for winrm default
protocol
string
required
certificate_validation_options
string
required
Disable or enable password rotation certificate validation
winrm_host_certificate_trust_anchors
string
WinRM host certificate trust anchors in PEM format
password_policy_id
string
required
password policy to be applied
script_template_id
string
required
script template to be run in host
rotation_status
array
Filled by backend. Rotation status per account to be shown in UI
created
string
When the object was created. Added by backend
updated
string
When the object was updated. Added by backend
created_by
string
added by backend
updated_by
string
added by backend
source_id
string
A unique import-source identifier for the host entry, for example a hash for AWS account ID. (searchable by keyword)
cloud_provider
string
The cloud provider this host resides in
cloud_provider_region
string
The cloud provider region the host resides in
distinguished_name
string
LDAPv3 Disinguished name (searchable by keyword)
common_name
string
X.500 Common name (searchable by keyword)
organization
string
X.500 Organization (searchable by keyword)
organizational_unit
string
X.500 Organizational unit (searchable by keyword)
zone
string
Equipment zone (development, production, user acceptance testing, ..) (searchable by keyword)
scope
array
Under what compliance scopes the listed equipment falls under (searchable by keyword)
host_type
string
Equipment type (virtual, physical) (searchable by keyword)
host_classification
string
Classification (Windows desktop, Windows server, AIX, Linux RH, ..) (searchable by keyword)
comment
string
A comment describing the host
addresses
array
tags
array
disabled
string
certificate_template
string
Name of the certificate template used for certificate authentication for this host
{
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"deployable": true,
"tofu": true,
"stand_alone_host": true,
"external_id": "string",
"instance_id": "string",
"audit_enabled": true,
"session_recording_options": {
"disable_clipboard_recording": true,
"disable_file_transfer_recording": true
},
"ssh_host_public_keys": [
{
"key": "string"
}
],
"host_certificate_raw": "string",
"contact_address": "string",
"services": [
{
"service": "SSH",
"address": "string",
"port": 123,
"use_for_password_rotation": true,
"db": {
"protocol": "postgres",
"tls_certificate_validation": "ENABLED",
"tls_certificate_trust_anchors": "string",
"audit_skip_bytes": 123
},
"source": "string"
}
],
"principals": [
{
"principal": "string",
"target_domain": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rotate": true,
"use_for_password_rotation": true,
"use_user_account": true,
"passphrase": "string",
"source": "string",
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002"
}
],
"applications": [
{
"name": "string",
"application": "string",
"arguments": "string",
"working_directory": "string"
}
],
"service_options": {
"ssh": {
"shell": true,
"file_transfer": true,
"exec": true,
"tunnels": true,
"x11": true,
"other": true
},
"rdp": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"web": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"vnc": {
"file_transfer": true,
"clipboard": true
},
"db": {
"max_bytes_download": 123,
"max_bytes_upload": 123
}
},
"command_restrictions": {
"enabled": true,
"default_whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rshell_variant": "bash",
"banner": "string",
"allow_no_match": true,
"audit_match": true,
"audit_no_match": true,
"whitelists": [
{
"whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string"
}
]
}
]
}
}
],
"password_rotation_enabled": true,
"password_rotation": {
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"use_main_account": true,
"operating_system": "LINUX",
"winrm_address": "string",
"winrm_port": 123,
"protocol": "SSH",
"certificate_validation_options": "DISABLED",
"winrm_host_certificate_trust_anchors": "string",
"password_policy_id": "5bf77342-221c-11ee-be56-0242ac120002",
"script_template_id": "5bf77342-221c-11ee-be56-0242ac120002",
"rotation_status": [
{
"principal": "string",
"last_rotated": "2017-01-01T15:05:05Z",
"last_error": "2017-01-01T15:05:05Z",
"last_error_details": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"created_by": "string",
"updated_by": "string"
},
"source_id": "string",
"cloud_provider": "string",
"cloud_provider_region": "string",
"distinguished_name": "string",
"common_name": "string",
"organization": "string",
"organizational_unit": "string",
"zone": "string",
"scope": [
"string"
],
"host_type": "string",
"host_classification": "string",
"comment": "string",
"addresses": [
"string"
],
"tags": [
"string"
],
"disabled": "BY_ADMIN",
"certificate_template": "string"
}
Host successfully created
{
"id": "5bf77342-221c-11ee-be56-0242ac120002"
}
/host-store/api/v1/hosts/resolve
Resolve service+address to a single host in host store
service
string
required
service type (SSH, RDP, ...)
address
string
required
service address
port
int
required
service port
{
"service": "string",
"address": "string",
"port": 123
}
Host successfully found, if multiple hosts match the query, return 500 internal server error with relevant error codes
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"deployable": true,
"tofu": true,
"stand_alone_host": true,
"external_id": "string",
"instance_id": "string",
"audit_enabled": true,
"session_recording_options": {
"disable_clipboard_recording": true,
"disable_file_transfer_recording": true
},
"ssh_host_public_keys": [
{
"key": "string",
"fingerprint": "string"
}
],
"host_certificate_raw": "string",
"host_certificate": {
"subject": "string",
"issuer": "string",
"serial": "string",
"not_before": "string",
"not_after": "string",
"dns_names": [
"string"
],
"email_addresses": [
"string"
],
"ip_addresses": [
"string"
],
"fingerprint_sha1": "string",
"fingerprint_sha256": "string"
},
"contact_address": "string",
"services": [
{
"service": "SSH",
"address": "string",
"port": 123,
"use_for_password_rotation": true,
"ssh_tunnel_port": 123,
"source": "string",
"login_page_url": "string",
"username_field_name": "string",
"password_field_name": "string",
"login_request_url": "string",
"login_request_password_property": "string",
"auth_type": "string",
"status": "OK",
"status_updated": "string",
"allowed_domains": [
"string"
],
"service_version": "string",
"use_legacy_cipher_suites": true,
"tls_min_version": "string",
"tls_max_version": "string",
"browser": "string",
"db": {
"protocol": "postgres",
"tls_certificate_validation": "ENABLED",
"tls_certificate_trust_anchors": "string",
"audit_skip_bytes": 123
},
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"certificate_template": "string"
}
],
"principals": [
{
"principal": "string",
"target_domain": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rotate": true,
"use_for_password_rotation": true,
"use_user_account": true,
"passphrase": "string",
"username_attribute": "string",
"source": "string",
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
}
],
"applications": [
{
"name": "string",
"application": "string",
"arguments": "string",
"working_directory": "string"
}
],
"service_options": {
"ssh": {
"shell": true,
"file_transfer": true,
"exec": true,
"tunnels": true,
"x11": true,
"other": true
},
"rdp": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"web": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"vnc": {
"file_transfer": true,
"clipboard": true
},
"db": {
"max_bytes_download": 123,
"max_bytes_upload": 123
}
},
"command_restrictions": {
"enabled": true,
"default_whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rshell_variant": "bash",
"banner": "string",
"allow_no_match": true,
"audit_match": true,
"audit_no_match": true,
"whitelists": [
{
"whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string"
}
]
}
]
}
}
],
"password_rotation_enabled": true,
"password_rotation": {
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"use_main_account": true,
"operating_system": "LINUX",
"winrm_address": "string",
"winrm_port": 123,
"protocol": "SSH",
"certificate_validation_options": "DISABLED",
"winrm_host_certificate_trust_anchors": "string",
"password_policy_id": "5bf77342-221c-11ee-be56-0242ac120002",
"script_template_id": "5bf77342-221c-11ee-be56-0242ac120002",
"rotation_status": [
{
"principal": "string",
"last_rotated": "2017-01-01T15:05:05Z",
"last_error": "2017-01-01T15:05:05Z",
"last_error_details": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"created_by": "string",
"updated_by": "string"
},
"source_id": "string",
"cloud_provider": "string",
"cloud_provider_region": "string",
"status": [
{
"k": "string",
"v": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"updated_by": "eef4aefc-d64e-4c2c-aba4-4914c86ce059",
"distinguished_name": "string",
"common_name": "string",
"organization": "string",
"organizational_unit": "string",
"zone": "string",
"scope": [
"string"
],
"host_type": "string",
"host_classification": "string",
"comment": "string",
"addresses": [
"string"
],
"tags": [
"string"
],
"disabled": "BY_ADMIN"
}
/host-store/api/v1/hosts/{host_id}
Get a single host in host store
host_id
string
required
Host successfully found
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"deployable": true,
"tofu": true,
"stand_alone_host": true,
"external_id": "string",
"instance_id": "string",
"audit_enabled": true,
"session_recording_options": {
"disable_clipboard_recording": true,
"disable_file_transfer_recording": true
},
"ssh_host_public_keys": [
{
"key": "string",
"fingerprint": "string"
}
],
"host_certificate_raw": "string",
"host_certificate": {
"subject": "string",
"issuer": "string",
"serial": "string",
"not_before": "string",
"not_after": "string",
"dns_names": [
"string"
],
"email_addresses": [
"string"
],
"ip_addresses": [
"string"
],
"fingerprint_sha1": "string",
"fingerprint_sha256": "string"
},
"contact_address": "string",
"services": [
{
"service": "SSH",
"address": "string",
"port": 123,
"use_for_password_rotation": true,
"ssh_tunnel_port": 123,
"source": "string",
"login_page_url": "string",
"username_field_name": "string",
"password_field_name": "string",
"login_request_url": "string",
"login_request_password_property": "string",
"auth_type": "string",
"status": "OK",
"status_updated": "string",
"allowed_domains": [
"string"
],
"service_version": "string",
"use_legacy_cipher_suites": true,
"tls_min_version": "string",
"tls_max_version": "string",
"browser": "string",
"db": {
"protocol": "postgres",
"tls_certificate_validation": "ENABLED",
"tls_certificate_trust_anchors": "string",
"audit_skip_bytes": 123
},
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"certificate_template": "string"
}
],
"principals": [
{
"principal": "string",
"target_domain": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rotate": true,
"use_for_password_rotation": true,
"use_user_account": true,
"passphrase": "string",
"username_attribute": "string",
"source": "string",
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
}
],
"applications": [
{
"name": "string",
"application": "string",
"arguments": "string",
"working_directory": "string"
}
],
"service_options": {
"ssh": {
"shell": true,
"file_transfer": true,
"exec": true,
"tunnels": true,
"x11": true,
"other": true
},
"rdp": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"web": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"vnc": {
"file_transfer": true,
"clipboard": true
},
"db": {
"max_bytes_download": 123,
"max_bytes_upload": 123
}
},
"command_restrictions": {
"enabled": true,
"default_whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rshell_variant": "bash",
"banner": "string",
"allow_no_match": true,
"audit_match": true,
"audit_no_match": true,
"whitelists": [
{
"whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string"
}
]
}
]
}
}
],
"password_rotation_enabled": true,
"password_rotation": {
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"use_main_account": true,
"operating_system": "LINUX",
"winrm_address": "string",
"winrm_port": 123,
"protocol": "SSH",
"certificate_validation_options": "DISABLED",
"winrm_host_certificate_trust_anchors": "string",
"password_policy_id": "5bf77342-221c-11ee-be56-0242ac120002",
"script_template_id": "5bf77342-221c-11ee-be56-0242ac120002",
"rotation_status": [
{
"principal": "string",
"last_rotated": "2017-01-01T15:05:05Z",
"last_error": "2017-01-01T15:05:05Z",
"last_error_details": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"created_by": "string",
"updated_by": "string"
},
"source_id": "string",
"cloud_provider": "string",
"cloud_provider_region": "string",
"status": [
{
"k": "string",
"v": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"updated_by": "eef4aefc-d64e-4c2c-aba4-4914c86ce059",
"distinguished_name": "string",
"common_name": "string",
"organization": "string",
"organizational_unit": "string",
"zone": "string",
"scope": [
"string"
],
"host_type": "string",
"host_classification": "string",
"comment": "string",
"addresses": [
"string"
],
"tags": [
"string"
],
"disabled": "BY_ADMIN"
}
/host-store/api/v1/hosts/{host_id}
Update a single host in host store
access_group_id
string
Defines host's access group
deployable
boolean
Whether the host is writable through /deploy end point with deployment credentials
tofu
boolean
Whether the host key should be accepted and stored on first connection
stand_alone_host
boolean
Indicates it is a standalone host - bound to local host directory
external_id
string
The equipment ID from the originating equipment store
instance_id
string
The instance ID from the originating cloud service (searchable by keyword)
audit_enabled
boolean
Wheter the host is set to be audited.
session_recording_options
object
Flags to disable trail auditing for certain features when auditing is enabled
disable_clipboard_recording
boolean
Disable clipboard trail auditing when auditing is enabled
disable_file_transfer_recording
boolean
Disable file transfer trail auditing when auditing is enabled
ssh_host_public_keys
array
key
string
Host public key, used to verify the identity of the accessed host
host_certificate_raw
string
Host certificate, used to verify that the target host is the correct one.
contact_address
string
The host public address scanning script instructs the host store to use in service address-field.
services
array
service
string
Allowed protocol - SSH, RDP, VNC, WEB, DB (searchable)
address
string
Service address, IPv4, IPv6 or FQDN
port
int
Service port
use_for_password_rotation
boolean
if service SSH, informs whether this service is used to rotate password
db
object (dbservice)
source
string
Identifies the source of the services object "UI", "SCIM" or "SCAN". Deploy is also treated as "UI".
principals
array
What principals (target server user names/ accounts) the host has
principal
string
The account name
target_domain
object (target_domain_handle)
Optional target domain in which principal exists
rotate
boolean
Rotate password of this account
use_for_password_rotation
boolean
marks account to be used as the account through which password rotation takes place, when flag use_main_account set in rotation_metadata
use_user_account
boolean
Use user account as host principal name
passphrase
string
The account static passphrase or the initial rotating password value. If rotate selected, active in create, disabled/hidden in edit
source
string
Identifies the source of the principals object "UI" or "SCAN". Deploy is also treated as "UI".
roles
array
An array of roles entitled to access this principal on the host
applications
array
An array of application the principal may launch on the target host
service_options
object (service_options)
Object for service options
command_restrictions
object (command_restrictions)
SSH shell/exec command restrictions for the principal
password_rotation_enabled
boolean
set, if there are accounts, in which passwords need to be rotated
password_rotation
object (rotation_metadata)
password rotation settings for host
access_group_id
string
Specify ID of access group, default access group will be used if ID is not specified. Access group will be checked for WinRM trust anchors if certificate validation option is set to enabled.
use_main_account
boolean
required
rotate passwords of all accounts in host through one account
operating_system
string
required
Bash for Linux, Powershell for windows for shell access
winrm_address
string
IPv4 address or FQDN to use for winrm connections
winrm_port
int
port to use for password rotation with winrm, zero for winrm default
protocol
string
required
certificate_validation_options
string
required
Disable or enable password rotation certificate validation
winrm_host_certificate_trust_anchors
string
WinRM host certificate trust anchors in PEM format
password_policy_id
string
required
password policy to be applied
script_template_id
string
required
script template to be run in host
rotation_status
array
Filled by backend. Rotation status per account to be shown in UI
created
string
When the object was created. Added by backend
updated
string
When the object was updated. Added by backend
created_by
string
added by backend
updated_by
string
added by backend
source_id
string
A unique import-source identifier for the host entry, for example a hash for AWS account ID. (searchable by keyword)
cloud_provider
string
The cloud provider this host resides in
cloud_provider_region
string
The cloud provider region the host resides in
distinguished_name
string
LDAPv3 Disinguished name (searchable by keyword)
common_name
string
X.500 Common name (searchable by keyword)
organization
string
X.500 Organization (searchable by keyword)
organizational_unit
string
X.500 Organizational unit (searchable by keyword)
zone
string
Equipment zone (development, production, user acceptance testing, ..) (searchable by keyword)
scope
array
Under what compliance scopes the listed equipment falls under (searchable by keyword)
host_type
string
Equipment type (virtual, physical) (searchable by keyword)
host_classification
string
Classification (Windows desktop, Windows server, AIX, Linux RH, ..) (searchable by keyword)
comment
string
A comment describing the host
addresses
array
tags
array
disabled
string
certificate_template
string
Name of the certificate template used for certificate authentication for this host
{
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"deployable": true,
"tofu": true,
"stand_alone_host": true,
"external_id": "string",
"instance_id": "string",
"audit_enabled": true,
"session_recording_options": {
"disable_clipboard_recording": true,
"disable_file_transfer_recording": true
},
"ssh_host_public_keys": [
{
"key": "string"
}
],
"host_certificate_raw": "string",
"contact_address": "string",
"services": [
{
"service": "SSH",
"address": "string",
"port": 123,
"use_for_password_rotation": true,
"db": {
"protocol": "postgres",
"tls_certificate_validation": "ENABLED",
"tls_certificate_trust_anchors": "string",
"audit_skip_bytes": 123
},
"source": "string"
}
],
"principals": [
{
"principal": "string",
"target_domain": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rotate": true,
"use_for_password_rotation": true,
"use_user_account": true,
"passphrase": "string",
"source": "string",
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002"
}
],
"applications": [
{
"name": "string",
"application": "string",
"arguments": "string",
"working_directory": "string"
}
],
"service_options": {
"ssh": {
"shell": true,
"file_transfer": true,
"exec": true,
"tunnels": true,
"x11": true,
"other": true
},
"rdp": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"web": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"vnc": {
"file_transfer": true,
"clipboard": true
},
"db": {
"max_bytes_download": 123,
"max_bytes_upload": 123
}
},
"command_restrictions": {
"enabled": true,
"default_whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rshell_variant": "bash",
"banner": "string",
"allow_no_match": true,
"audit_match": true,
"audit_no_match": true,
"whitelists": [
{
"whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string"
}
]
}
]
}
}
],
"password_rotation_enabled": true,
"password_rotation": {
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"use_main_account": true,
"operating_system": "LINUX",
"winrm_address": "string",
"winrm_port": 123,
"protocol": "SSH",
"certificate_validation_options": "DISABLED",
"winrm_host_certificate_trust_anchors": "string",
"password_policy_id": "5bf77342-221c-11ee-be56-0242ac120002",
"script_template_id": "5bf77342-221c-11ee-be56-0242ac120002",
"rotation_status": [
{
"principal": "string",
"last_rotated": "2017-01-01T15:05:05Z",
"last_error": "2017-01-01T15:05:05Z",
"last_error_details": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"created_by": "string",
"updated_by": "string"
},
"source_id": "string",
"cloud_provider": "string",
"cloud_provider_region": "string",
"distinguished_name": "string",
"common_name": "string",
"organization": "string",
"organizational_unit": "string",
"zone": "string",
"scope": [
"string"
],
"host_type": "string",
"host_classification": "string",
"comment": "string",
"addresses": [
"string"
],
"tags": [
"string"
],
"disabled": "BY_ADMIN",
"certificate_template": "string"
}
Host successfully updated
Empty response
/host-store/api/v1/hosts/{host_id}
Delete a single host from the host store
host_id
string
required
Host successfully deleted
Empty response
/host-store/api/v1/hosts/deploy
Create, update a host in host store
access_group_id
string
Defines host's access group
deployable
boolean
Whether the host is writable through /deploy end point with deployment credentials
tofu
boolean
Whether the host key should be accepted and stored on first connection
stand_alone_host
boolean
Indicates it is a standalone host - bound to local host directory
external_id
string
The equipment ID from the originating equipment store
instance_id
string
The instance ID from the originating cloud service (searchable by keyword)
audit_enabled
boolean
Wheter the host is set to be audited.
session_recording_options
object
Flags to disable trail auditing for certain features when auditing is enabled
disable_clipboard_recording
boolean
Disable clipboard trail auditing when auditing is enabled
disable_file_transfer_recording
boolean
Disable file transfer trail auditing when auditing is enabled
ssh_host_public_keys
array
key
string
Host public key, used to verify the identity of the accessed host
host_certificate_raw
string
Host certificate, used to verify that the target host is the correct one.
contact_address
string
The host public address scanning script instructs the host store to use in service address-field.
services
array
service
string
Allowed protocol - SSH, RDP, VNC, WEB, DB (searchable)
address
string
Service address, IPv4, IPv6 or FQDN
port
int
Service port
use_for_password_rotation
boolean
if service SSH, informs whether this service is used to rotate password
db
object (dbservice)
source
string
Identifies the source of the services object "UI", "SCIM" or "SCAN". Deploy is also treated as "UI".
principals
array
What principals (target server user names/ accounts) the host has
principal
string
The account name
target_domain
object (target_domain_handle)
Optional target domain in which principal exists
rotate
boolean
Rotate password of this account
use_for_password_rotation
boolean
marks account to be used as the account through which password rotation takes place, when flag use_main_account set in rotation_metadata
use_user_account
boolean
Use user account as host principal name
passphrase
string
The account static passphrase or the initial rotating password value. If rotate selected, active in create, disabled/hidden in edit
source
string
Identifies the source of the principals object "UI" or "SCAN". Deploy is also treated as "UI".
roles
array
An array of roles entitled to access this principal on the host
applications
array
An array of application the principal may launch on the target host
service_options
object (service_options)
Object for service options
command_restrictions
object (command_restrictions)
SSH shell/exec command restrictions for the principal
password_rotation_enabled
boolean
set, if there are accounts, in which passwords need to be rotated
password_rotation
object (rotation_metadata)
password rotation settings for host
access_group_id
string
Specify ID of access group, default access group will be used if ID is not specified. Access group will be checked for WinRM trust anchors if certificate validation option is set to enabled.
use_main_account
boolean
required
rotate passwords of all accounts in host through one account
operating_system
string
required
Bash for Linux, Powershell for windows for shell access
winrm_address
string
IPv4 address or FQDN to use for winrm connections
winrm_port
int
port to use for password rotation with winrm, zero for winrm default
protocol
string
required
certificate_validation_options
string
required
Disable or enable password rotation certificate validation
winrm_host_certificate_trust_anchors
string
WinRM host certificate trust anchors in PEM format
password_policy_id
string
required
password policy to be applied
script_template_id
string
required
script template to be run in host
rotation_status
array
Filled by backend. Rotation status per account to be shown in UI
created
string
When the object was created. Added by backend
updated
string
When the object was updated. Added by backend
created_by
string
added by backend
updated_by
string
added by backend
source_id
string
A unique import-source identifier for the host entry, for example a hash for AWS account ID. (searchable by keyword)
cloud_provider
string
The cloud provider this host resides in
cloud_provider_region
string
The cloud provider region the host resides in
distinguished_name
string
LDAPv3 Disinguished name (searchable by keyword)
common_name
string
X.500 Common name (searchable by keyword)
organization
string
X.500 Organization (searchable by keyword)
organizational_unit
string
X.500 Organizational unit (searchable by keyword)
zone
string
Equipment zone (development, production, user acceptance testing, ..) (searchable by keyword)
scope
array
Under what compliance scopes the listed equipment falls under (searchable by keyword)
host_type
string
Equipment type (virtual, physical) (searchable by keyword)
host_classification
string
Classification (Windows desktop, Windows server, AIX, Linux RH, ..) (searchable by keyword)
comment
string
A comment describing the host
addresses
array
tags
array
disabled
string
certificate_template
string
Name of the certificate template used for certificate authentication for this host
{
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"deployable": true,
"tofu": true,
"stand_alone_host": true,
"external_id": "string",
"instance_id": "string",
"audit_enabled": true,
"session_recording_options": {
"disable_clipboard_recording": true,
"disable_file_transfer_recording": true
},
"ssh_host_public_keys": [
{
"key": "string"
}
],
"host_certificate_raw": "string",
"contact_address": "string",
"services": [
{
"service": "SSH",
"address": "string",
"port": 123,
"use_for_password_rotation": true,
"db": {
"protocol": "postgres",
"tls_certificate_validation": "ENABLED",
"tls_certificate_trust_anchors": "string",
"audit_skip_bytes": 123
},
"source": "string"
}
],
"principals": [
{
"principal": "string",
"target_domain": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rotate": true,
"use_for_password_rotation": true,
"use_user_account": true,
"passphrase": "string",
"source": "string",
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002"
}
],
"applications": [
{
"name": "string",
"application": "string",
"arguments": "string",
"working_directory": "string"
}
],
"service_options": {
"ssh": {
"shell": true,
"file_transfer": true,
"exec": true,
"tunnels": true,
"x11": true,
"other": true
},
"rdp": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"web": {
"file_transfer": true,
"audio": true,
"clipboard": true
},
"vnc": {
"file_transfer": true,
"clipboard": true
},
"db": {
"max_bytes_download": 123,
"max_bytes_upload": 123
}
},
"command_restrictions": {
"enabled": true,
"default_whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"rshell_variant": "bash",
"banner": "string",
"allow_no_match": true,
"audit_match": true,
"audit_no_match": true,
"whitelists": [
{
"whitelist": {
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string",
"deleted": true
},
"roles": [
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"name": "string"
}
]
}
]
}
}
],
"password_rotation_enabled": true,
"password_rotation": {
"access_group_id": "5bf77342-221c-11ee-be56-0242ac120002",
"use_main_account": true,
"operating_system": "LINUX",
"winrm_address": "string",
"winrm_port": 123,
"protocol": "SSH",
"certificate_validation_options": "DISABLED",
"winrm_host_certificate_trust_anchors": "string",
"password_policy_id": "5bf77342-221c-11ee-be56-0242ac120002",
"script_template_id": "5bf77342-221c-11ee-be56-0242ac120002",
"rotation_status": [
{
"principal": "string",
"last_rotated": "2017-01-01T15:05:05Z",
"last_error": "2017-01-01T15:05:05Z",
"last_error_details": "string"
}
],
"created": "2017-01-01T15:05:05Z",
"updated": "2017-01-01T15:05:05Z",
"created_by": "string",
"updated_by": "string"
},
"source_id": "string",
"cloud_provider": "string",
"cloud_provider_region": "string",
"distinguished_name": "string",
"common_name": "string",
"organization": "string",
"organizational_unit": "string",
"zone": "string",
"scope": [
"string"
],
"host_type": "string",
"host_classification": "string",
"comment": "string",
"addresses": [
"string"
],
"tags": [
"string"
],
"disabled": "BY_ADMIN",
"certificate_template": "string"
}
Operation okay
{
"id": "5bf77342-221c-11ee-be56-0242ac120002",
"action": "CREATED"
}
/host-store/api/v1/hosts/{host_id}/deployable
Set a host to be depoyable or undeployable.
deployable
boolean
{
"deployable": true
}
Host successfully updated
Empty response
/host-store/api/v1/hosts/tags
Get list of host's tags.
offset
int
Offset from which to start fetching objects
limit
int
Maximum number of objects to return
sortdir
string
Sort direction, asc or desc
query
string
Query string matches the tags
Received list of host's tags
[
"string"
]
/host-store/api/v1/hosts/{host_id}/disabled
Enable/disable host.
disabled
boolean
{
"disabled": true
}
Host enabled/disabled successfully
Empty response
Was this page helpful?