Acquisition complete HashiCorp officially joins the IBM family. Learn more
Vault
Vault Home

You are viewing documentation for version v1.5.x. View latest version.

auth tune

The auth tune command tunes the configuration options for the auth method at the given PATH. The argument corresponds to the PATH where the auth method is enabled, not the TYPE!

Examples

Tune the default lease for the auth method enabled at "github/":

$ vault auth tune -default-lease-ttl=72h github/
Success! Tuned the auth method at: github/

Usage

The following flags are available in addition to the standard set of flags included on all commands.

  • -audit-non-hmac-request-keys (string: "") - Comma-separated string or list of keys that will not be HMAC'd by audit devices in the request data object.

  • -audit-non-hmac-response-keys (string: "") - Comma-separated string or list of keys that will not be HMAC'd by audit devices in the response data object.

  • -default-lease-ttl (duration: "") - The default lease TTL for this auth method. If unspecified, this defaults to the Vault server's globally configured default lease TTL, or a previously configured value for the auth method.

  • -max-lease-ttl (duration: "") - The maximum lease TTL for this auth method. If unspecified, this defaults to the Vault server's globally configured maximum lease TTL, or a previously configured value for the auth method.