1. Packages
  2. Packages
  3. Akeyless Provider
  4. API Docs
  5. getKubeExecCreds
Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community
Schema (JSON)
akeyless-community/terraform-provider-akeyless

akeyless.getKubeExecCreds

Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community
Schema (JSON)
akeyless-community/terraform-provider-akeyless

    Get credentials for authentication with Kubernetes cluster based on a PKI Cert Issuer data source

    Using getKubeExecCreds

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getKubeExecCreds(args: GetKubeExecCredsArgs, opts?: InvokeOptions): Promise<GetKubeExecCredsResult>
function getKubeExecCredsOutput(args: GetKubeExecCredsOutputArgs, opts?: InvokeOptions): Output<GetKubeExecCredsResult>
    def get_kube_exec_creds(alt_names: Optional[str] = None,
                        cert_issuer_name: Optional[str] = None,
                        common_name: Optional[str] = None,
                        csr_data_base64: Optional[str] = None,
                        extended_key_usage: Optional[str] = None,
                        extra_extensions: Optional[str] = None,
                        id: Optional[str] = None,
                        key_data_base64: Optional[str] = None,
                        max_path_len: Optional[float] = None,
                        ttl: Optional[str] = None,
                        uri_sans: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetKubeExecCredsResult
def get_kube_exec_creds_output(alt_names: pulumi.Input[Optional[str]] = None,
                        cert_issuer_name: pulumi.Input[Optional[str]] = None,
                        common_name: pulumi.Input[Optional[str]] = None,
                        csr_data_base64: pulumi.Input[Optional[str]] = None,
                        extended_key_usage: pulumi.Input[Optional[str]] = None,
                        extra_extensions: pulumi.Input[Optional[str]] = None,
                        id: pulumi.Input[Optional[str]] = None,
                        key_data_base64: pulumi.Input[Optional[str]] = None,
                        max_path_len: pulumi.Input[Optional[float]] = None,
                        ttl: pulumi.Input[Optional[str]] = None,
                        uri_sans: pulumi.Input[Optional[str]] = None,
                        opts: Optional[InvokeOptions] = None) -> Output[GetKubeExecCredsResult]
    func GetKubeExecCreds(ctx *Context, args *GetKubeExecCredsArgs, opts ...InvokeOption) (*GetKubeExecCredsResult, error)
func GetKubeExecCredsOutput(ctx *Context, args *GetKubeExecCredsOutputArgs, opts ...InvokeOption) GetKubeExecCredsResultOutput

    > Note: This function is named GetKubeExecCreds in the Go SDK.

    public static class GetKubeExecCreds 
{
    public static Task<GetKubeExecCredsResult> InvokeAsync(GetKubeExecCredsArgs args, InvokeOptions? opts = null)
    public static Output<GetKubeExecCredsResult> Invoke(GetKubeExecCredsInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetKubeExecCredsResult> getKubeExecCreds(GetKubeExecCredsArgs args, InvokeOptions options)
public static Output<GetKubeExecCredsResult> getKubeExecCreds(GetKubeExecCredsArgs args, InvokeOptions options)

    fn::invoke:
  function: akeyless:index/getKubeExecCreds:getKubeExecCreds
  arguments:
    # arguments dictionary
    data "akeyless_getkubeexeccreds" "name" {
    # arguments
}

    The following arguments are supported:

    CertIssuerName string
    The name of the PKI certificate issuer
    AltNames string
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    CommonName string
    The common name to be included in the PKI certificate
    CsrDataBase64 string
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    ExtendedKeyUsage string
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    ExtraExtensions string
    A json string that defines the requested extra extensions for the certificate
    Id string
    The ID of this resource.
    KeyDataBase64 string
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    MaxPathLen double
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    Ttl string
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    UriSans string
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    CertIssuerName string
    The name of the PKI certificate issuer
    AltNames string
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    CommonName string
    The common name to be included in the PKI certificate
    CsrDataBase64 string
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    ExtendedKeyUsage string
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    ExtraExtensions string
    A json string that defines the requested extra extensions for the certificate
    Id string
    The ID of this resource.
    KeyDataBase64 string
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    MaxPathLen float64
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    Ttl string
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    UriSans string
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    cert_issuer_name string
    The name of the PKI certificate issuer
    alt_names string
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    common_name string
    The common name to be included in the PKI certificate
    csr_data_base64 string
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extended_key_usage string
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extra_extensions string
    A json string that defines the requested extra extensions for the certificate
    id string
    The ID of this resource.
    key_data_base64 string
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    max_path_len number
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl string
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uri_sans string
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    certIssuerName String
    The name of the PKI certificate issuer
    altNames String
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    commonName String
    The common name to be included in the PKI certificate
    csrDataBase64 String
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extendedKeyUsage String
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extraExtensions String
    A json string that defines the requested extra extensions for the certificate
    id String
    The ID of this resource.
    keyDataBase64 String
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    maxPathLen Double
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl String
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uriSans String
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    certIssuerName string
    The name of the PKI certificate issuer
    altNames string
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    commonName string
    The common name to be included in the PKI certificate
    csrDataBase64 string
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extendedKeyUsage string
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extraExtensions string
    A json string that defines the requested extra extensions for the certificate
    id string
    The ID of this resource.
    keyDataBase64 string
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    maxPathLen number
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl string
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uriSans string
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    cert_issuer_name str
    The name of the PKI certificate issuer
    alt_names str
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    common_name str
    The common name to be included in the PKI certificate
    csr_data_base64 str
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extended_key_usage str
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extra_extensions str
    A json string that defines the requested extra extensions for the certificate
    id str
    The ID of this resource.
    key_data_base64 str
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    max_path_len float
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl str
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uri_sans str
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    certIssuerName String
    The name of the PKI certificate issuer
    altNames String
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    commonName String
    The common name to be included in the PKI certificate
    csrDataBase64 String
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extendedKeyUsage String
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extraExtensions String
    A json string that defines the requested extra extensions for the certificate
    id String
    The ID of this resource.
    keyDataBase64 String
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    maxPathLen Number
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl String
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uriSans String
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)

    getKubeExecCreds Result

    The following output properties are available:

    ApiVersion string
    The API version of the Kubernetes exec credential
    CertIssuerName string
    The name of the PKI certificate issuer
    ClientCertificateData string
    The client certificate data for Kubernetes authentication
    ClientKeyData string
    The client key data for Kubernetes authentication
    Id string
    The ID of this resource.
    Kind string
    The kind of the Kubernetes exec credential
    ParentCertificateData string
    The parent certificate data for Kubernetes authentication
    AltNames string
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    CommonName string
    The common name to be included in the PKI certificate
    CsrDataBase64 string
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    ExtendedKeyUsage string
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    ExtraExtensions string
    A json string that defines the requested extra extensions for the certificate
    KeyDataBase64 string
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    MaxPathLen double
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    Ttl string
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    UriSans string
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    ApiVersion string
    The API version of the Kubernetes exec credential
    CertIssuerName string
    The name of the PKI certificate issuer
    ClientCertificateData string
    The client certificate data for Kubernetes authentication
    ClientKeyData string
    The client key data for Kubernetes authentication
    Id string
    The ID of this resource.
    Kind string
    The kind of the Kubernetes exec credential
    ParentCertificateData string
    The parent certificate data for Kubernetes authentication
    AltNames string
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    CommonName string
    The common name to be included in the PKI certificate
    CsrDataBase64 string
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    ExtendedKeyUsage string
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    ExtraExtensions string
    A json string that defines the requested extra extensions for the certificate
    KeyDataBase64 string
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    MaxPathLen float64
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    Ttl string
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    UriSans string
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    api_version string
    The API version of the Kubernetes exec credential
    cert_issuer_name string
    The name of the PKI certificate issuer
    client_certificate_data string
    The client certificate data for Kubernetes authentication
    client_key_data string
    The client key data for Kubernetes authentication
    id string
    The ID of this resource.
    kind string
    The kind of the Kubernetes exec credential
    parent_certificate_data string
    The parent certificate data for Kubernetes authentication
    alt_names string
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    common_name string
    The common name to be included in the PKI certificate
    csr_data_base64 string
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extended_key_usage string
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extra_extensions string
    A json string that defines the requested extra extensions for the certificate
    key_data_base64 string
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    max_path_len number
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl string
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uri_sans string
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    apiVersion String
    The API version of the Kubernetes exec credential
    certIssuerName String
    The name of the PKI certificate issuer
    clientCertificateData String
    The client certificate data for Kubernetes authentication
    clientKeyData String
    The client key data for Kubernetes authentication
    id String
    The ID of this resource.
    kind String
    The kind of the Kubernetes exec credential
    parentCertificateData String
    The parent certificate data for Kubernetes authentication
    altNames String
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    commonName String
    The common name to be included in the PKI certificate
    csrDataBase64 String
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extendedKeyUsage String
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extraExtensions String
    A json string that defines the requested extra extensions for the certificate
    keyDataBase64 String
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    maxPathLen Double
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl String
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uriSans String
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    apiVersion string
    The API version of the Kubernetes exec credential
    certIssuerName string
    The name of the PKI certificate issuer
    clientCertificateData string
    The client certificate data for Kubernetes authentication
    clientKeyData string
    The client key data for Kubernetes authentication
    id string
    The ID of this resource.
    kind string
    The kind of the Kubernetes exec credential
    parentCertificateData string
    The parent certificate data for Kubernetes authentication
    altNames string
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    commonName string
    The common name to be included in the PKI certificate
    csrDataBase64 string
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extendedKeyUsage string
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extraExtensions string
    A json string that defines the requested extra extensions for the certificate
    keyDataBase64 string
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    maxPathLen number
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl string
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uriSans string
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    api_version str
    The API version of the Kubernetes exec credential
    cert_issuer_name str
    The name of the PKI certificate issuer
    client_certificate_data str
    The client certificate data for Kubernetes authentication
    client_key_data str
    The client key data for Kubernetes authentication
    id str
    The ID of this resource.
    kind str
    The kind of the Kubernetes exec credential
    parent_certificate_data str
    The parent certificate data for Kubernetes authentication
    alt_names str
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    common_name str
    The common name to be included in the PKI certificate
    csr_data_base64 str
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extended_key_usage str
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extra_extensions str
    A json string that defines the requested extra extensions for the certificate
    key_data_base64 str
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    max_path_len float
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl str
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uri_sans str
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    apiVersion String
    The API version of the Kubernetes exec credential
    certIssuerName String
    The name of the PKI certificate issuer
    clientCertificateData String
    The client certificate data for Kubernetes authentication
    clientKeyData String
    The client key data for Kubernetes authentication
    id String
    The ID of this resource.
    kind String
    The kind of the Kubernetes exec credential
    parentCertificateData String
    The parent certificate data for Kubernetes authentication
    altNames String
    The Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)
    commonName String
    The common name to be included in the PKI certificate
    csrDataBase64 String
    Certificate Signing Request contents encoded in base64 to generate the certificate with
    extendedKeyUsage String
    A comma-separated list of extended key usage requests which will be used for certificate issuance. Supported values: 'clientauth', 'serverauth', 'codesigning'
    extraExtensions String
    A json string that defines the requested extra extensions for the certificate
    keyDataBase64 String
    pki key file contents encoded using Base64. If this option is used, the certificate will be printed to stdout
    maxPathLen Number
    The maximum path length for the generated certificate. -1 means unlimited unless the signing certificate has a maximum path length set
    ttl String
    Updated certificate lifetime in seconds (must be less than the Certificate Issuer default TTL)
    uriSans String
    The URI Subject Alternative Names to be included in the PKI certificate (in a comma-delimited list)

    Package Details

    Repository
    akeyless akeyless-community/terraform-provider-akeyless
    License
    Notes
    This Pulumi package is based on the akeyless Terraform Provider.
    Viewing docs for akeyless 2.0.1
    published on Monday, Apr 27, 2026 by akeyless-community
    Schema (JSON)
    akeyless-community/terraform-provider-akeyless
      Try Pulumi Cloud free. Your team will thank you.