Rotate AppRole secret ID

POST

/secret-store/identities/:identity_id/rotate-secret-id

Generates fresh AppRole credentials. Available only for AppRole identities. Requires scope: secret-store.write.

Authentication

AuthorizationBearer

IBEE platform API token. Production tokens start with ibee_prod_key_; development tokens start with ibee_dev_key_. Use a token only with its matching gateway environment.

Path parameters

identity_idstringRequired

Secret Store application identity ID.

Query parameters

workspace_idstringRequiredformat: "^[1-9][0-9]*$">=1 character

The positive numeric workspace ID to scope this request to. Zero, negative, and non-numeric values are rejected.

Response

Fresh AppRole access details returned successfully.

identity_idstring

auth_methodenum

role_idstring or nullOptional

AppRole role ID.

secret_idstring or nullOptional

Fresh AppRole secret ID. Treat this value as sensitive.

secret_id_accessorstring or nullOptional

openbao_role_namestring or nullOptional

Kubernetes authentication role.

k8s_namespacestring or nullOptional

k8s_service_accountstring or nullOptional

Errors

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

1	{
2	"identity_id": "string",
3	"auth_method": "approle",
4	"role_id": "string",
5	"secret_id": "string",
6	"secret_id_accessor": "string",
7	"openbao_role_name": "string",
8	"k8s_namespace": "string",
9	"k8s_service_account": "string"
10	}