@pulumi/tls 4.4.0 → 4.5.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/certRequest.d.ts +15 -7
- package/certRequest.js +4 -7
- package/certRequest.js.map +1 -1
- package/getCertificate.d.ts +8 -5
- package/getCertificate.js +2 -0
- package/getCertificate.js.map +1 -1
- package/locallySignedCert.d.ts +10 -2
- package/locallySignedCert.js.map +1 -1
- package/package.json +2 -2
- package/package.json.dev +2 -2
- package/privateKey.d.ts +24 -8
- package/privateKey.js.map +1 -1
- package/selfSignedCert.d.ts +34 -5
- package/selfSignedCert.js +4 -5
- package/selfSignedCert.js.map +1 -1
- package/types/output.d.ts +1 -0
package/certRequest.d.ts
CHANGED
|
@@ -10,10 +10,10 @@ import { input as inputs, output as outputs } from "./types";
|
|
|
10
10
|
*
|
|
11
11
|
* const example = new tls.CertRequest("example", {
|
|
12
12
|
* privateKeyPem: fs.readFileSync("private_key.pem"),
|
|
13
|
-
*
|
|
13
|
+
* subject: {
|
|
14
14
|
* commonName: "example.com",
|
|
15
15
|
* organization: "ACME Examples, Inc",
|
|
16
|
-
* }
|
|
16
|
+
* },
|
|
17
17
|
* });
|
|
18
18
|
* ```
|
|
19
19
|
*/
|
|
@@ -34,7 +34,11 @@ export declare class CertRequest extends pulumi.CustomResource {
|
|
|
34
34
|
*/
|
|
35
35
|
static isInstance(obj: any): obj is CertRequest;
|
|
36
36
|
/**
|
|
37
|
-
* The certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
|
37
|
+
* The certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the
|
|
38
|
+
* [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
39
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
40
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
41
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
38
42
|
*/
|
|
39
43
|
readonly certRequestPem: pulumi.Output<string>;
|
|
40
44
|
/**
|
|
@@ -62,7 +66,7 @@ export declare class CertRequest extends pulumi.CustomResource {
|
|
|
62
66
|
* The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is
|
|
63
67
|
* based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
|
64
68
|
*/
|
|
65
|
-
readonly
|
|
69
|
+
readonly subject: pulumi.Output<outputs.CertRequestSubject | undefined>;
|
|
66
70
|
/**
|
|
67
71
|
* List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
|
68
72
|
*/
|
|
@@ -81,7 +85,11 @@ export declare class CertRequest extends pulumi.CustomResource {
|
|
|
81
85
|
*/
|
|
82
86
|
export interface CertRequestState {
|
|
83
87
|
/**
|
|
84
|
-
* The certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
|
88
|
+
* The certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the
|
|
89
|
+
* [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
90
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
91
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
92
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
85
93
|
*/
|
|
86
94
|
certRequestPem?: pulumi.Input<string>;
|
|
87
95
|
/**
|
|
@@ -109,7 +117,7 @@ export interface CertRequestState {
|
|
|
109
117
|
* The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is
|
|
110
118
|
* based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
|
111
119
|
*/
|
|
112
|
-
|
|
120
|
+
subject?: pulumi.Input<inputs.CertRequestSubject>;
|
|
113
121
|
/**
|
|
114
122
|
* List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
|
115
123
|
*/
|
|
@@ -144,7 +152,7 @@ export interface CertRequestArgs {
|
|
|
144
152
|
* The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is
|
|
145
153
|
* based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
|
146
154
|
*/
|
|
147
|
-
|
|
155
|
+
subject?: pulumi.Input<inputs.CertRequestSubject>;
|
|
148
156
|
/**
|
|
149
157
|
* List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
|
150
158
|
*/
|
package/certRequest.js
CHANGED
|
@@ -15,10 +15,10 @@ const utilities = require("./utilities");
|
|
|
15
15
|
*
|
|
16
16
|
* const example = new tls.CertRequest("example", {
|
|
17
17
|
* privateKeyPem: fs.readFileSync("private_key.pem"),
|
|
18
|
-
*
|
|
18
|
+
* subject: {
|
|
19
19
|
* commonName: "example.com",
|
|
20
20
|
* organization: "ACME Examples, Inc",
|
|
21
|
-
* }
|
|
21
|
+
* },
|
|
22
22
|
* });
|
|
23
23
|
* ```
|
|
24
24
|
*/
|
|
@@ -33,7 +33,7 @@ class CertRequest extends pulumi.CustomResource {
|
|
|
33
33
|
resourceInputs["ipAddresses"] = state ? state.ipAddresses : undefined;
|
|
34
34
|
resourceInputs["keyAlgorithm"] = state ? state.keyAlgorithm : undefined;
|
|
35
35
|
resourceInputs["privateKeyPem"] = state ? state.privateKeyPem : undefined;
|
|
36
|
-
resourceInputs["
|
|
36
|
+
resourceInputs["subject"] = state ? state.subject : undefined;
|
|
37
37
|
resourceInputs["uris"] = state ? state.uris : undefined;
|
|
38
38
|
}
|
|
39
39
|
else {
|
|
@@ -41,14 +41,11 @@ class CertRequest extends pulumi.CustomResource {
|
|
|
41
41
|
if ((!args || args.privateKeyPem === undefined) && !opts.urn) {
|
|
42
42
|
throw new Error("Missing required property 'privateKeyPem'");
|
|
43
43
|
}
|
|
44
|
-
if ((!args || args.subjects === undefined) && !opts.urn) {
|
|
45
|
-
throw new Error("Missing required property 'subjects'");
|
|
46
|
-
}
|
|
47
44
|
resourceInputs["dnsNames"] = args ? args.dnsNames : undefined;
|
|
48
45
|
resourceInputs["ipAddresses"] = args ? args.ipAddresses : undefined;
|
|
49
46
|
resourceInputs["keyAlgorithm"] = args ? args.keyAlgorithm : undefined;
|
|
50
47
|
resourceInputs["privateKeyPem"] = args ? args.privateKeyPem : undefined;
|
|
51
|
-
resourceInputs["
|
|
48
|
+
resourceInputs["subject"] = args ? args.subject : undefined;
|
|
52
49
|
resourceInputs["uris"] = args ? args.uris : undefined;
|
|
53
50
|
resourceInputs["certRequestPem"] = undefined /*out*/;
|
|
54
51
|
}
|
package/certRequest.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"certRequest.js","sourceRoot":"","sources":["../certRequest.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;
|
|
1
|
+
{"version":3,"file":"certRequest.js","sourceRoot":"","sources":["../certRequest.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IA2ElD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACxD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IArGD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;;AA1BL,kCAuGC;AAzFG,gBAAgB;AACO,wBAAY,GAAG,mCAAmC,CAAC"}
|
package/getCertificate.d.ts
CHANGED
|
@@ -1,11 +1,12 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
import { output as outputs } from "./types";
|
|
3
|
-
export declare function getCertificate(args
|
|
3
|
+
export declare function getCertificate(args?: GetCertificateArgs, opts?: pulumi.InvokeOptions): Promise<GetCertificateResult>;
|
|
4
4
|
/**
|
|
5
5
|
* A collection of arguments for invoking getCertificate.
|
|
6
6
|
*/
|
|
7
7
|
export interface GetCertificateArgs {
|
|
8
|
-
|
|
8
|
+
content?: string;
|
|
9
|
+
url?: string;
|
|
9
10
|
verifyChain?: boolean;
|
|
10
11
|
}
|
|
11
12
|
/**
|
|
@@ -13,15 +14,17 @@ export interface GetCertificateArgs {
|
|
|
13
14
|
*/
|
|
14
15
|
export interface GetCertificateResult {
|
|
15
16
|
readonly certificates: outputs.GetCertificateCertificate[];
|
|
17
|
+
readonly content?: string;
|
|
16
18
|
readonly id: string;
|
|
17
|
-
readonly url
|
|
19
|
+
readonly url?: string;
|
|
18
20
|
readonly verifyChain?: boolean;
|
|
19
21
|
}
|
|
20
|
-
export declare function getCertificateOutput(args
|
|
22
|
+
export declare function getCertificateOutput(args?: GetCertificateOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetCertificateResult>;
|
|
21
23
|
/**
|
|
22
24
|
* A collection of arguments for invoking getCertificate.
|
|
23
25
|
*/
|
|
24
26
|
export interface GetCertificateOutputArgs {
|
|
25
|
-
|
|
27
|
+
content?: pulumi.Input<string>;
|
|
28
|
+
url?: pulumi.Input<string>;
|
|
26
29
|
verifyChain?: pulumi.Input<boolean>;
|
|
27
30
|
}
|
package/getCertificate.js
CHANGED
|
@@ -6,11 +6,13 @@ exports.getCertificateOutput = exports.getCertificate = void 0;
|
|
|
6
6
|
const pulumi = require("@pulumi/pulumi");
|
|
7
7
|
const utilities = require("./utilities");
|
|
8
8
|
function getCertificate(args, opts) {
|
|
9
|
+
args = args || {};
|
|
9
10
|
if (!opts) {
|
|
10
11
|
opts = {};
|
|
11
12
|
}
|
|
12
13
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
13
14
|
return pulumi.runtime.invoke("tls:index/getCertificate:getCertificate", {
|
|
15
|
+
"content": args.content,
|
|
14
16
|
"url": args.url,
|
|
15
17
|
"verifyChain": args.verifyChain,
|
|
16
18
|
}, opts);
|
package/getCertificate.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"getCertificate.js","sourceRoot":"","sources":["../getCertificate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC,SAAgB,cAAc,CAAC,
|
|
1
|
+
{"version":3,"file":"getCertificate.js","sourceRoot":"","sources":["../getCertificate.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC,SAAgB,cAAc,CAAC,IAAyB,EAAE,IAA2B;IACjF,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAClB,IAAI,CAAC,IAAI,EAAE;QACP,IAAI,GAAG,EAAE,CAAA;KACZ;IAED,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yCAAyC,EAAE;QACpE,SAAS,EAAE,IAAI,CAAC,OAAO;QACvB,KAAK,EAAE,IAAI,CAAC,GAAG;QACf,aAAa,EAAE,IAAI,CAAC,WAAW;KAClC,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAZD,wCAYC;AAsBD,SAAgB,oBAAoB,CAAC,IAA+B,EAAE,IAA2B;IAC7F,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;AAClE,CAAC;AAFD,oDAEC"}
|
package/locallySignedCert.d.ts
CHANGED
|
@@ -44,7 +44,11 @@ export declare class LocallySignedCert extends pulumi.CustomResource {
|
|
|
44
44
|
*/
|
|
45
45
|
readonly caPrivateKeyPem: pulumi.Output<string>;
|
|
46
46
|
/**
|
|
47
|
-
* Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
|
47
|
+
* Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the
|
|
48
|
+
* [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
49
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
50
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
51
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
48
52
|
*/
|
|
49
53
|
readonly certPem: pulumi.Output<string>;
|
|
50
54
|
/**
|
|
@@ -128,7 +132,11 @@ export interface LocallySignedCertState {
|
|
|
128
132
|
*/
|
|
129
133
|
caPrivateKeyPem?: pulumi.Input<string>;
|
|
130
134
|
/**
|
|
131
|
-
* Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
|
135
|
+
* Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the
|
|
136
|
+
* [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
137
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
138
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
139
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
132
140
|
*/
|
|
133
141
|
certPem?: pulumi.Input<string>;
|
|
134
142
|
/**
|
package/locallySignedCert.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"locallySignedCert.js","sourceRoot":"","sources":["../locallySignedCert.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;
|
|
1
|
+
{"version":3,"file":"locallySignedCert.js","sourceRoot":"","sources":["../locallySignedCert.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IAgHxD,YAAY,IAAY,EAAE,WAA4D,EAAE,IAAmC;QACvH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAiD,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;SACrF;aAAM;YACH,MAAM,IAAI,GAAG,WAAgD,CAAC;YAC9D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;aAClE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;aACtE;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;IAlKD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;;AA1BL,8CAoKC;AAtJG,gBAAgB;AACO,8BAAY,GAAG,+CAA+C,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/tls",
|
|
3
|
-
"version": "v4.
|
|
3
|
+
"version": "v4.5.0",
|
|
4
4
|
"description": "A Pulumi package to create TLS resources in Pulumi programs.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"license": "Apache-2.0",
|
|
12
12
|
"scripts": {
|
|
13
13
|
"build": "tsc",
|
|
14
|
-
"install": "node scripts/install-pulumi-plugin.js resource tls v4.
|
|
14
|
+
"install": "node scripts/install-pulumi-plugin.js resource tls v4.5.0"
|
|
15
15
|
},
|
|
16
16
|
"dependencies": {
|
|
17
17
|
"@pulumi/pulumi": "^3.0.0"
|
package/package.json.dev
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pulumi/tls",
|
|
3
|
-
"version": "v4.
|
|
3
|
+
"version": "v4.5.0",
|
|
4
4
|
"description": "A Pulumi package to create TLS resources in Pulumi programs.",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pulumi",
|
|
@@ -11,7 +11,7 @@
|
|
|
11
11
|
"license": "Apache-2.0",
|
|
12
12
|
"scripts": {
|
|
13
13
|
"build": "tsc",
|
|
14
|
-
"install": "node scripts/install-pulumi-plugin.js resource tls v4.
|
|
14
|
+
"install": "node scripts/install-pulumi-plugin.js resource tls v4.5.0"
|
|
15
15
|
},
|
|
16
16
|
"dependencies": {
|
|
17
17
|
"@pulumi/pulumi": "^3.0.0"
|
package/privateKey.d.ts
CHANGED
|
@@ -36,24 +36,32 @@ export declare class PrivateKey extends pulumi.CustomResource {
|
|
|
36
36
|
/**
|
|
37
37
|
* The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:...`. Only available if the selected
|
|
38
38
|
* private key format is compatible, similarly to `public_key_openssh` and the [ECDSA P224
|
|
39
|
-
* limitations](
|
|
39
|
+
* limitations](../../docs#limitations).
|
|
40
40
|
*/
|
|
41
41
|
readonly publicKeyFingerprintMd5: pulumi.Output<string>;
|
|
42
42
|
/**
|
|
43
43
|
* The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:...`. Only available if the selected
|
|
44
44
|
* private key format is compatible, similarly to `public_key_openssh` and the [ECDSA P224
|
|
45
|
-
* limitations](
|
|
45
|
+
* limitations](../../docs#limitations).
|
|
46
46
|
*/
|
|
47
47
|
readonly publicKeyFingerprintSha256: pulumi.Output<string>;
|
|
48
48
|
/**
|
|
49
49
|
* The public key data in ["Authorized
|
|
50
50
|
* Keys"](https://www.ssh.com/academy/ssh/authorized_keys/openssh#format-of-the-authorized-keys-file) format. This is
|
|
51
51
|
* populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys, as well as
|
|
52
|
-
* `ECDSA` keys with curves `P256`, `P384` and `P521`. `ECDSA` with curve `P224` [is not
|
|
52
|
+
* `ECDSA` keys with curves `P256`, `P384` and `P521`. `ECDSA` with curve `P224` [is not
|
|
53
|
+
* supported](../../docs#limitations). **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
54
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
55
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
56
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
53
57
|
*/
|
|
54
58
|
readonly publicKeyOpenssh: pulumi.Output<string>;
|
|
55
59
|
/**
|
|
56
|
-
* Public key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
|
60
|
+
* Public key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the
|
|
61
|
+
* [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
62
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
63
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
64
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
57
65
|
*/
|
|
58
66
|
readonly publicKeyPem: pulumi.Output<string>;
|
|
59
67
|
/**
|
|
@@ -94,24 +102,32 @@ export interface PrivateKeyState {
|
|
|
94
102
|
/**
|
|
95
103
|
* The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:...`. Only available if the selected
|
|
96
104
|
* private key format is compatible, similarly to `public_key_openssh` and the [ECDSA P224
|
|
97
|
-
* limitations](
|
|
105
|
+
* limitations](../../docs#limitations).
|
|
98
106
|
*/
|
|
99
107
|
publicKeyFingerprintMd5?: pulumi.Input<string>;
|
|
100
108
|
/**
|
|
101
109
|
* The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:...`. Only available if the selected
|
|
102
110
|
* private key format is compatible, similarly to `public_key_openssh` and the [ECDSA P224
|
|
103
|
-
* limitations](
|
|
111
|
+
* limitations](../../docs#limitations).
|
|
104
112
|
*/
|
|
105
113
|
publicKeyFingerprintSha256?: pulumi.Input<string>;
|
|
106
114
|
/**
|
|
107
115
|
* The public key data in ["Authorized
|
|
108
116
|
* Keys"](https://www.ssh.com/academy/ssh/authorized_keys/openssh#format-of-the-authorized-keys-file) format. This is
|
|
109
117
|
* populated only if the configured private key is supported: this includes all `RSA` and `ED25519` keys, as well as
|
|
110
|
-
* `ECDSA` keys with curves `P256`, `P384` and `P521`. `ECDSA` with curve `P224` [is not
|
|
118
|
+
* `ECDSA` keys with curves `P256`, `P384` and `P521`. `ECDSA` with curve `P224` [is not
|
|
119
|
+
* supported](../../docs#limitations). **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
120
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
121
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
122
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
111
123
|
*/
|
|
112
124
|
publicKeyOpenssh?: pulumi.Input<string>;
|
|
113
125
|
/**
|
|
114
|
-
* Public key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
|
126
|
+
* Public key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the
|
|
127
|
+
* [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
128
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
129
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
130
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
115
131
|
*/
|
|
116
132
|
publicKeyPem?: pulumi.Input<string>;
|
|
117
133
|
/**
|
package/privateKey.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"privateKey.js","sourceRoot":"","sources":["../privateKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;
|
|
1
|
+
{"version":3,"file":"privateKey.js","sourceRoot":"","sources":["../privateKey.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IA0FjD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,yBAAyB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9D,cAAc,CAAC,4BAA4B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjE,cAAc,CAAC,kBAAkB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACvD,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACtD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IAxHD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;;AA1BL,gCA0HC;AA5GG,gBAAgB;AACO,uBAAY,GAAG,iCAAiC,CAAC"}
|
package/selfSignedCert.d.ts
CHANGED
|
@@ -28,7 +28,11 @@ export declare class SelfSignedCert extends pulumi.CustomResource {
|
|
|
28
28
|
*/
|
|
29
29
|
readonly allowedUses: pulumi.Output<string[]>;
|
|
30
30
|
/**
|
|
31
|
-
* Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
|
31
|
+
* Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the
|
|
32
|
+
* [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
33
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
34
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
35
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
32
36
|
*/
|
|
33
37
|
readonly certPem: pulumi.Output<string>;
|
|
34
38
|
/**
|
|
@@ -69,6 +73,13 @@ export declare class SelfSignedCert extends pulumi.CustomResource {
|
|
|
69
73
|
* the `early_renewal_hours`)?
|
|
70
74
|
*/
|
|
71
75
|
readonly readyForRenewal: pulumi.Output<boolean>;
|
|
76
|
+
/**
|
|
77
|
+
* Should the generated certificate include an [authority key
|
|
78
|
+
* identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the
|
|
79
|
+
* same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default:
|
|
80
|
+
* `false`).
|
|
81
|
+
*/
|
|
82
|
+
readonly setAuthorityKeyId: pulumi.Output<boolean | undefined>;
|
|
72
83
|
/**
|
|
73
84
|
* Should the generated certificate include a [subject key
|
|
74
85
|
* identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
|
|
@@ -78,7 +89,7 @@ export declare class SelfSignedCert extends pulumi.CustomResource {
|
|
|
78
89
|
* The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is
|
|
79
90
|
* based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
|
80
91
|
*/
|
|
81
|
-
readonly
|
|
92
|
+
readonly subject: pulumi.Output<outputs.SelfSignedCertSubject | undefined>;
|
|
82
93
|
/**
|
|
83
94
|
* List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
|
84
95
|
*/
|
|
@@ -121,7 +132,11 @@ export interface SelfSignedCertState {
|
|
|
121
132
|
*/
|
|
122
133
|
allowedUses?: pulumi.Input<pulumi.Input<string>[]>;
|
|
123
134
|
/**
|
|
124
|
-
* Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
|
135
|
+
* Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the
|
|
136
|
+
* [underlying](https://pkg.go.dev/encoding/pem#Encode)
|
|
137
|
+
* [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\n` at
|
|
138
|
+
* the end of the PEM. In case this disrupts your use case, we recommend using
|
|
139
|
+
* [`trimspace()`](https://www.terraform.io/language/functions/trimspace).
|
|
125
140
|
*/
|
|
126
141
|
certPem?: pulumi.Input<string>;
|
|
127
142
|
/**
|
|
@@ -162,6 +177,13 @@ export interface SelfSignedCertState {
|
|
|
162
177
|
* the `early_renewal_hours`)?
|
|
163
178
|
*/
|
|
164
179
|
readyForRenewal?: pulumi.Input<boolean>;
|
|
180
|
+
/**
|
|
181
|
+
* Should the generated certificate include an [authority key
|
|
182
|
+
* identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the
|
|
183
|
+
* same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default:
|
|
184
|
+
* `false`).
|
|
185
|
+
*/
|
|
186
|
+
setAuthorityKeyId?: pulumi.Input<boolean>;
|
|
165
187
|
/**
|
|
166
188
|
* Should the generated certificate include a [subject key
|
|
167
189
|
* identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
|
|
@@ -171,7 +193,7 @@ export interface SelfSignedCertState {
|
|
|
171
193
|
* The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is
|
|
172
194
|
* based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
|
173
195
|
*/
|
|
174
|
-
|
|
196
|
+
subject?: pulumi.Input<inputs.SelfSignedCertSubject>;
|
|
175
197
|
/**
|
|
176
198
|
* List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
|
177
199
|
*/
|
|
@@ -238,6 +260,13 @@ export interface SelfSignedCertArgs {
|
|
|
238
260
|
* interpolation function. Only an irreversible secure hash of the private key will be stored in the Terraform state.
|
|
239
261
|
*/
|
|
240
262
|
privateKeyPem: pulumi.Input<string>;
|
|
263
|
+
/**
|
|
264
|
+
* Should the generated certificate include an [authority key
|
|
265
|
+
* identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the
|
|
266
|
+
* same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default:
|
|
267
|
+
* `false`).
|
|
268
|
+
*/
|
|
269
|
+
setAuthorityKeyId?: pulumi.Input<boolean>;
|
|
241
270
|
/**
|
|
242
271
|
* Should the generated certificate include a [subject key
|
|
243
272
|
* identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
|
|
@@ -247,7 +276,7 @@ export interface SelfSignedCertArgs {
|
|
|
247
276
|
* The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is
|
|
248
277
|
* based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
|
249
278
|
*/
|
|
250
|
-
|
|
279
|
+
subject?: pulumi.Input<inputs.SelfSignedCertSubject>;
|
|
251
280
|
/**
|
|
252
281
|
* List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
|
253
282
|
*/
|
package/selfSignedCert.js
CHANGED
|
@@ -20,8 +20,9 @@ class SelfSignedCert extends pulumi.CustomResource {
|
|
|
20
20
|
resourceInputs["keyAlgorithm"] = state ? state.keyAlgorithm : undefined;
|
|
21
21
|
resourceInputs["privateKeyPem"] = state ? state.privateKeyPem : undefined;
|
|
22
22
|
resourceInputs["readyForRenewal"] = state ? state.readyForRenewal : undefined;
|
|
23
|
+
resourceInputs["setAuthorityKeyId"] = state ? state.setAuthorityKeyId : undefined;
|
|
23
24
|
resourceInputs["setSubjectKeyId"] = state ? state.setSubjectKeyId : undefined;
|
|
24
|
-
resourceInputs["
|
|
25
|
+
resourceInputs["subject"] = state ? state.subject : undefined;
|
|
25
26
|
resourceInputs["uris"] = state ? state.uris : undefined;
|
|
26
27
|
resourceInputs["validityEndTime"] = state ? state.validityEndTime : undefined;
|
|
27
28
|
resourceInputs["validityPeriodHours"] = state ? state.validityPeriodHours : undefined;
|
|
@@ -35,9 +36,6 @@ class SelfSignedCert extends pulumi.CustomResource {
|
|
|
35
36
|
if ((!args || args.privateKeyPem === undefined) && !opts.urn) {
|
|
36
37
|
throw new Error("Missing required property 'privateKeyPem'");
|
|
37
38
|
}
|
|
38
|
-
if ((!args || args.subjects === undefined) && !opts.urn) {
|
|
39
|
-
throw new Error("Missing required property 'subjects'");
|
|
40
|
-
}
|
|
41
39
|
if ((!args || args.validityPeriodHours === undefined) && !opts.urn) {
|
|
42
40
|
throw new Error("Missing required property 'validityPeriodHours'");
|
|
43
41
|
}
|
|
@@ -48,8 +46,9 @@ class SelfSignedCert extends pulumi.CustomResource {
|
|
|
48
46
|
resourceInputs["isCaCertificate"] = args ? args.isCaCertificate : undefined;
|
|
49
47
|
resourceInputs["keyAlgorithm"] = args ? args.keyAlgorithm : undefined;
|
|
50
48
|
resourceInputs["privateKeyPem"] = args ? args.privateKeyPem : undefined;
|
|
49
|
+
resourceInputs["setAuthorityKeyId"] = args ? args.setAuthorityKeyId : undefined;
|
|
51
50
|
resourceInputs["setSubjectKeyId"] = args ? args.setSubjectKeyId : undefined;
|
|
52
|
-
resourceInputs["
|
|
51
|
+
resourceInputs["subject"] = args ? args.subject : undefined;
|
|
53
52
|
resourceInputs["uris"] = args ? args.uris : undefined;
|
|
54
53
|
resourceInputs["validityPeriodHours"] = args ? args.validityPeriodHours : undefined;
|
|
55
54
|
resourceInputs["certPem"] = undefined /*out*/;
|
package/selfSignedCert.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"selfSignedCert.js","sourceRoot":"","sources":["../selfSignedCert.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC,MAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;
|
|
1
|
+
{"version":3,"file":"selfSignedCert.js","sourceRoot":"","sources":["../selfSignedCert.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC,MAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IAgIrD,YAAY,IAAY,EAAE,WAAsD,EAAE,IAAmC;QACjH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8C,CAAC;YAC7D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;SACrF;aAAM;YACH,MAAM,IAAI,GAAG,WAA6C,CAAC;YAC3D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1D,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;aAChE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;aACtE;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAlLD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2B,EAAE,IAAmC;QACzH,OAAO,IAAI,cAAc,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACrE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,cAAc,CAAC,YAAY,CAAC;IAC/D,CAAC;;AA1BL,wCAoLC;AAtKG,gBAAgB;AACO,2BAAY,GAAG,yCAAyC,CAAC"}
|