Skip to content

DOCS-829: clarify migration sync and AD certificate discovery coverage #263

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
harrison-akeyless merged 3 commits into from
May 26, 2026
Merged

DOCS-829: clarify migration sync and AD certificate discovery coverage #263

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
159696c
docs: cover migration sync and AD cert discovery updates
harrison-akeyless May 22, 2026
3e6d07a
docs: align AI certificate discovery wording with source
harrison-akeyless May 22, 2026
55160c6
Merge branch 'v1.0' into v1.0_DOCS-829-feature-update-docs
harrison-akeyless May 26, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
20 changes: 20 additions & 0 deletions docs/Akeyless Gateway/configure-gateway/gateway-automatic-migration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -65,6 +65,26 @@ If the flag is omitted on `gateway-create-migration`, the mode defaults to `full

Set the mode with the `--hashi-metadata-mode` flag on `gateway-create-migration` or `gateway-update-migration`. For full flag reference, see the [Automatic Migration CLI Reference](https://docs.akeyless.io/docs/cli-reference-automatic-migration).

## Automatic Migration Synchronization

Use migration synchronization when you want a migration (including HashiCorp Vault migrations) to continue reflecting source-side changes after the initial import.

Enable or disable synchronization with:

```shell
akeyless gateway-sync-migration \
--name <Migration Name> \
--gateway-url <API Gateway URL>:8000 \
--sync <true/false>
```

Where:

* `--sync true`: Starts synchronization.
* `--sync false`: Stops synchronization.

For full command details, see the [Automatic Migration CLI Reference](https://docs.akeyless.io/docs/cli-reference-automatic-migration#sync).

## Operational Guidance

Use a phased rollout:
Expand Down
8 changes: 6 additions & 2 deletions ...lugins/cli-reference/cli-reference-gateway/cli-reference-automatic-migration.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -128,7 +128,9 @@ akeyless gateway-create-migration \

`--ad-discover-services[=false]`: Enable/Disable discovery of Windows services from each domain server as part of the SSH/Windows Rotated Secrets. Default is false. (Relevant only for Active Directory migration)

`--ad-discovery-types`: Set migration discovery types (domain-users, computers, local-users). To specify multiple types use argument multiple times: --ad-discovery-types domain-users --ad-discovery-types local-users. (Relevant only for Active Directory migration)
`--ad-discovery-types`: Set migration discovery types (domain-users, computers, local-users, certificates). To specify multiple types use argument multiple times: --ad-discovery-types domain-users --ad-discovery-types local-users. (Relevant only for Active Directory migration)

`--ai-certificate-discovery[=false]`: Enable/Disable AI-assisted certificate discovery (only when AI Insight is enabled on the Gateway). (Relevant only for Active Directory migration)

`--ad-sra-enable-rdp`: Enable/Disable RDP Secure Remote Access for the migrated local users Rotated Secrets. Default is false: Rotated Secrets will not be created with SRA (Relevant only for Active Directory migration)

Expand Down Expand Up @@ -351,7 +353,9 @@ akeyless gateway-update-migration \

`--ad-discover-services[=false]`: Enable/Disable discovery of Windows services from each domain server as part of the SSH/Windows Rotated Secrets. Default is false. (Relevant only for Active Directory migration)

`--ad-discovery-types`: Set migration discovery types (domain-users, computers, local-users). To specify multiple types use argument multiple times: --ad-discovery-types domain-users --ad-discovery-types local-users. (Relevant only for Active Directory migration)
`--ad-discovery-types`: Set migration discovery types (domain-users, computers, local-users, certificates). To specify multiple types use argument multiple times: --ad-discovery-types domain-users --ad-discovery-types local-users. (Relevant only for Active Directory migration)

`--ai-certificate-discovery[=false]`: Enable/Disable AI-assisted certificate discovery (only when AI Insight is enabled on the Gateway). (Relevant only for Active Directory migration)

`--ad-sra-enable-rdp`: Enable/Disable RDP Secure Remote Access for the migrated local users Rotated Secrets. Default is false: Rotated Secrets will not be created with SRA (Relevant only for Active Directory migration)

Expand Down
2 changes: 2 additions & 0 deletions ...cret Connector/universal-secrets-connector/github-universal-secret-connector.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ metadata:
---
This page discusses the creation of GitHub [Universal Secrets Connectors](https://docs.akeyless.io/docs/universal-secrets-connector). If you wish to create a Universal Secrets Connector for a different cloud service, please go to the matching doc, as they have varying parameters.

In environments using Multi-Vault Governance (MVG), GitHub USC is surfaced as the MVG item for GitHub repository secret management.

Unlike other **USCs**, GitHub does not let you view secret values outside GitHub. With this USC, you can **create new secrets**, **update existing secrets**, and **delete secrets** in the repository.

GitHub USC setup and management has 3 scopes:
Expand Down
Loading