Skip to main content
GET
Get credential details

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Headers

authorization
string | null
x-ankra-organisation-id
string | null

Path Parameters

credential_id
string<uuid4>
required

Response

Credential retrieved successfully

created_at
string
required
id
string<uuid>
required
name
string
required
organisation_id
string<uuid>
required
provider
string
required
updated_at
string
required
access_key
string | null
access_key_id
string | null
access_token
string | null
api_url
string | null
application_key
string | null
application_secret
string | null
available
boolean
default:true
clusters
any[]

The clusters using the credential, each as {id, name, kind, created_at}. For an ssh-key credential these are the clusters whose SSH-key resource holds its public key - the keys a cluster was created with and every key attached since through PUT /api/v1/clusters/{provider}/{cluster_id}/ssh-keys, the same set that route's GET reads back.

consumer_key
string | null
gitlab_url
string | null
display_name
string | null
operations
any[]
project_id
string | null
role_arn
string | null
secret_access_key
string | null
ssh_public_key
string | null

The stored OpenSSH public key of an ssh-key credential; null on every other provider.

fingerprint
string | null

Set on ssh-key credentials only: the OpenSSH SHA256 fingerprint of the stored public key, in the form ssh-keygen -l prints (SHA256: followed by the unpadded base64 digest). Null when the stored value is not a readable key; fingerprint_error then says why.

key_type
string | null

Set on ssh-key credentials only: the key algorithm the public key declares, such as ssh-ed25519 or ssh-rsa. Null when the stored value is not a readable key.

comment
string | null

Set on ssh-key credentials only: the comment after the key material, an empty string when the key has none. Null when the stored value is not a readable key.

fingerprint_error
string | null

Set on ssh-key credentials only: why the stored value could not be read as an OpenSSH public key, and null when it could. A non-null value means the fingerprint is unknown, not that the credential holds no key.

system
boolean
default:false
tls_insecure
boolean | null
token
string | null
token_id
string | null
username
string | null