CyberArk Conjur

Self-hosted secret store and RBAC engine for machine identities.

Provider: default
Kind: Key management
Category: Security
Official docs: https://cyberark.github.io/conjur/

Properties · 3 set by this component

property	type	values	required	kind default	this component
authenticator · component property	enum	api-key \| kubernetes \| aws-iam \| oidc \| azure	no	api-key	inherited
envelopeEncryption	boolean	—	no	false	inherited
hsm	boolean	—	no	false	▸ false
managed	boolean	—	no	true	▸ false
rotationAutomated	boolean	—	no	false	▸ false
rotationDays	integer	—	no	—	inherited
secretlessBroker · component property	boolean	—	no	false	inherited

Rules that apply · 0

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

No rule reads this kind yet. That is a gap, not a guarantee.

Use it in a design

nodes:
  - { id: "conjur", component: "conjur" }

Other Key management products · 53

and 13 more → Key management page

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# CyberArk Conjur Open Source: self-hosted secret store and RBAC engine for machine identities.
3# "CyberArk Conjur": server plus built-in authenticators for Kubernetes, OpenShift, AWS IAM
4# and OIDC; workloads authenticate with a Conjur API key unless another authenticator is enabled.
5schemaVersion: "1"
6type: "component"
7id: "conjur"
8kind: "key-management"
9provider: "default"
10docs: "https://cyberark.github.io/conjur/"
11defaults:
12  managed: false
13  hsm: false
14  rotationAutomated: false
15properties:
16  authenticator:
17    type: "enum"
18    values: ["api-key", "kubernetes", "aws-iam", "oidc", "azure"]
19    default: "api-key"
20  secretlessBroker:
21    type: "boolean"
22    default: false

The same page as markdown, for an agent: /catalogue/components/conjur.md