@pulumi/vault 5.2.0 → 5.3.0-alpha.1646434758

package/kmip/secretRole.d.ts

@@ -0,0 +1,321 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages KMIP Secret roles in a Vault server. This feature requires
+ * Vault Enterprise. See the [Vault documentation](https://www.vaultproject.io/docs/secrets/kmip)
+ * for more information.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const _default = new vault.kmip.SecretBackend("default", {
+ *     path: "kmip",
+ *     description: "Vault KMIP backend",
+ * });
+ * const dev = new vault.kmip.SecretScope("dev", {
+ *     path: _default.path,
+ *     scope: "dev",
+ *     force: true,
+ * });
+ * const admin = new vault.kmip.SecretRole("admin", {
+ *     path: dev.path,
+ *     scope: dev.scope,
+ *     role: "admin",
+ *     tlsClientKeyType: "ec",
+ *     tlsClientKeyBits: 256,
+ *     operationActivate: true,
+ *     operationGet: true,
+ *     operationGetAttributes: true,
+ *     operationCreate: true,
+ *     operationDestroy: true,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * KMIP Secret role can be imported using the `path`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import vault:kmip/secretRole:SecretRole admin kmip
+ * ```
+ */
+export declare class SecretRole extends pulumi.CustomResource {
+    /**
+     * Get an existing SecretRole resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SecretRoleState, opts?: pulumi.CustomResourceOptions): SecretRole;
+    /**
+     * Returns true if the given object is an instance of SecretRole.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is SecretRole;
+    /**
+     * Grant permission to use the KMIP Activate operation.
+     */
+    readonly operationActivate: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Add Attribute operation.
+     */
+    readonly operationAddAttribute: pulumi.Output<boolean>;
+    /**
+     * Grant all permissions to this role. May not be specified with any other `operation_*` params.
+     */
+    readonly operationAll: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Create operation.
+     */
+    readonly operationCreate: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Destroy operation.
+     */
+    readonly operationDestroy: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Discover Version operation.
+     */
+    readonly operationDiscoverVersions: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Get operation.
+     */
+    readonly operationGet: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Get Atrribute List operation.
+     */
+    readonly operationGetAttributeList: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Get Atrributes operation.
+     */
+    readonly operationGetAttributes: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Get Locate operation.
+     */
+    readonly operationLocate: pulumi.Output<boolean>;
+    /**
+     * Remove all permissions from this role. May not be specified with any other `operation_*` params.
+     */
+    readonly operationNone: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Register operation.
+     */
+    readonly operationRegister: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Rekey operation.
+     */
+    readonly operationRekey: pulumi.Output<boolean>;
+    /**
+     * Grant permission to use the KMIP Revoke operation.
+     */
+    readonly operationRevoke: pulumi.Output<boolean>;
+    /**
+     * The unique path this backend should be mounted at. Must
+     * not begin or end with a `/`. Defaults to `kmip`.
+     */
+    readonly path: pulumi.Output<string>;
+    /**
+     * Name of the role.
+     */
+    readonly role: pulumi.Output<string>;
+    /**
+     * Name of the scope.
+     */
+    readonly scope: pulumi.Output<string>;
+    /**
+     * Client certificate key bits, valid values depend on key type.
+     */
+    readonly tlsClientKeyBits: pulumi.Output<number | undefined>;
+    /**
+     * Client certificate key type, `rsa` or `ec`.
+     */
+    readonly tlsClientKeyType: pulumi.Output<string | undefined>;
+    /**
+     * Client certificate TTL in seconds.
+     */
+    readonly tlsClientTtl: pulumi.Output<number | undefined>;
+    /**
+     * Create a SecretRole resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: SecretRoleArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering SecretRole resources.
+ */
+export interface SecretRoleState {
+    /**
+     * Grant permission to use the KMIP Activate operation.
+     */
+    operationActivate?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Add Attribute operation.
+     */
+    operationAddAttribute?: pulumi.Input<boolean>;
+    /**
+     * Grant all permissions to this role. May not be specified with any other `operation_*` params.
+     */
+    operationAll?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Create operation.
+     */
+    operationCreate?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Destroy operation.
+     */
+    operationDestroy?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Discover Version operation.
+     */
+    operationDiscoverVersions?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Get operation.
+     */
+    operationGet?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Get Atrribute List operation.
+     */
+    operationGetAttributeList?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Get Atrributes operation.
+     */
+    operationGetAttributes?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Get Locate operation.
+     */
+    operationLocate?: pulumi.Input<boolean>;
+    /**
+     * Remove all permissions from this role. May not be specified with any other `operation_*` params.
+     */
+    operationNone?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Register operation.
+     */
+    operationRegister?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Rekey operation.
+     */
+    operationRekey?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Revoke operation.
+     */
+    operationRevoke?: pulumi.Input<boolean>;
+    /**
+     * The unique path this backend should be mounted at. Must
+     * not begin or end with a `/`. Defaults to `kmip`.
+     */
+    path?: pulumi.Input<string>;
+    /**
+     * Name of the role.
+     */
+    role?: pulumi.Input<string>;
+    /**
+     * Name of the scope.
+     */
+    scope?: pulumi.Input<string>;
+    /**
+     * Client certificate key bits, valid values depend on key type.
+     */
+    tlsClientKeyBits?: pulumi.Input<number>;
+    /**
+     * Client certificate key type, `rsa` or `ec`.
+     */
+    tlsClientKeyType?: pulumi.Input<string>;
+    /**
+     * Client certificate TTL in seconds.
+     */
+    tlsClientTtl?: pulumi.Input<number>;
+}
+/**
+ * The set of arguments for constructing a SecretRole resource.
+ */
+export interface SecretRoleArgs {
+    /**
+     * Grant permission to use the KMIP Activate operation.
+     */
+    operationActivate?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Add Attribute operation.
+     */
+    operationAddAttribute?: pulumi.Input<boolean>;
+    /**
+     * Grant all permissions to this role. May not be specified with any other `operation_*` params.
+     */
+    operationAll?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Create operation.
+     */
+    operationCreate?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Destroy operation.
+     */
+    operationDestroy?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Discover Version operation.
+     */
+    operationDiscoverVersions?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Get operation.
+     */
+    operationGet?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Get Atrribute List operation.
+     */
+    operationGetAttributeList?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Get Atrributes operation.
+     */
+    operationGetAttributes?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Get Locate operation.
+     */
+    operationLocate?: pulumi.Input<boolean>;
+    /**
+     * Remove all permissions from this role. May not be specified with any other `operation_*` params.
+     */
+    operationNone?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Register operation.
+     */
+    operationRegister?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Rekey operation.
+     */
+    operationRekey?: pulumi.Input<boolean>;
+    /**
+     * Grant permission to use the KMIP Revoke operation.
+     */
+    operationRevoke?: pulumi.Input<boolean>;
+    /**
+     * The unique path this backend should be mounted at. Must
+     * not begin or end with a `/`. Defaults to `kmip`.
+     */
+    path: pulumi.Input<string>;
+    /**
+     * Name of the role.
+     */
+    role: pulumi.Input<string>;
+    /**
+     * Name of the scope.
+     */
+    scope: pulumi.Input<string>;
+    /**
+     * Client certificate key bits, valid values depend on key type.
+     */
+    tlsClientKeyBits?: pulumi.Input<number>;
+    /**
+     * Client certificate key type, `rsa` or `ec`.
+     */
+    tlsClientKeyType?: pulumi.Input<string>;
+    /**
+     * Client certificate TTL in seconds.
+     */
+    tlsClientTtl?: pulumi.Input<number>;
+}

package/kmip/secretRole.js

@@ -0,0 +1,138 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretRole = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages KMIP Secret roles in a Vault server. This feature requires
+ * Vault Enterprise. See the [Vault documentation](https://www.vaultproject.io/docs/secrets/kmip)
+ * for more information.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const _default = new vault.kmip.SecretBackend("default", {
+ *     path: "kmip",
+ *     description: "Vault KMIP backend",
+ * });
+ * const dev = new vault.kmip.SecretScope("dev", {
+ *     path: _default.path,
+ *     scope: "dev",
+ *     force: true,
+ * });
+ * const admin = new vault.kmip.SecretRole("admin", {
+ *     path: dev.path,
+ *     scope: dev.scope,
+ *     role: "admin",
+ *     tlsClientKeyType: "ec",
+ *     tlsClientKeyBits: 256,
+ *     operationActivate: true,
+ *     operationGet: true,
+ *     operationGetAttributes: true,
+ *     operationCreate: true,
+ *     operationDestroy: true,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * KMIP Secret role can be imported using the `path`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import vault:kmip/secretRole:SecretRole admin kmip
+ * ```
+ */
+class SecretRole extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["operationActivate"] = state ? state.operationActivate : undefined;
+            resourceInputs["operationAddAttribute"] = state ? state.operationAddAttribute : undefined;
+            resourceInputs["operationAll"] = state ? state.operationAll : undefined;
+            resourceInputs["operationCreate"] = state ? state.operationCreate : undefined;
+            resourceInputs["operationDestroy"] = state ? state.operationDestroy : undefined;
+            resourceInputs["operationDiscoverVersions"] = state ? state.operationDiscoverVersions : undefined;
+            resourceInputs["operationGet"] = state ? state.operationGet : undefined;
+            resourceInputs["operationGetAttributeList"] = state ? state.operationGetAttributeList : undefined;
+            resourceInputs["operationGetAttributes"] = state ? state.operationGetAttributes : undefined;
+            resourceInputs["operationLocate"] = state ? state.operationLocate : undefined;
+            resourceInputs["operationNone"] = state ? state.operationNone : undefined;
+            resourceInputs["operationRegister"] = state ? state.operationRegister : undefined;
+            resourceInputs["operationRekey"] = state ? state.operationRekey : undefined;
+            resourceInputs["operationRevoke"] = state ? state.operationRevoke : undefined;
+            resourceInputs["path"] = state ? state.path : undefined;
+            resourceInputs["role"] = state ? state.role : undefined;
+            resourceInputs["scope"] = state ? state.scope : undefined;
+            resourceInputs["tlsClientKeyBits"] = state ? state.tlsClientKeyBits : undefined;
+            resourceInputs["tlsClientKeyType"] = state ? state.tlsClientKeyType : undefined;
+            resourceInputs["tlsClientTtl"] = state ? state.tlsClientTtl : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.path === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'path'");
+            }
+            if ((!args || args.role === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'role'");
+            }
+            if ((!args || args.scope === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'scope'");
+            }
+            resourceInputs["operationActivate"] = args ? args.operationActivate : undefined;
+            resourceInputs["operationAddAttribute"] = args ? args.operationAddAttribute : undefined;
+            resourceInputs["operationAll"] = args ? args.operationAll : undefined;
+            resourceInputs["operationCreate"] = args ? args.operationCreate : undefined;
+            resourceInputs["operationDestroy"] = args ? args.operationDestroy : undefined;
+            resourceInputs["operationDiscoverVersions"] = args ? args.operationDiscoverVersions : undefined;
+            resourceInputs["operationGet"] = args ? args.operationGet : undefined;
+            resourceInputs["operationGetAttributeList"] = args ? args.operationGetAttributeList : undefined;
+            resourceInputs["operationGetAttributes"] = args ? args.operationGetAttributes : undefined;
+            resourceInputs["operationLocate"] = args ? args.operationLocate : undefined;
+            resourceInputs["operationNone"] = args ? args.operationNone : undefined;
+            resourceInputs["operationRegister"] = args ? args.operationRegister : undefined;
+            resourceInputs["operationRekey"] = args ? args.operationRekey : undefined;
+            resourceInputs["operationRevoke"] = args ? args.operationRevoke : undefined;
+            resourceInputs["path"] = args ? args.path : undefined;
+            resourceInputs["role"] = args ? args.role : undefined;
+            resourceInputs["scope"] = args ? args.scope : undefined;
+            resourceInputs["tlsClientKeyBits"] = args ? args.tlsClientKeyBits : undefined;
+            resourceInputs["tlsClientKeyType"] = args ? args.tlsClientKeyType : undefined;
+            resourceInputs["tlsClientTtl"] = args ? args.tlsClientTtl : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(SecretRole.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing SecretRole resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new SecretRole(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of SecretRole.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === SecretRole.__pulumiType;
+    }
+}
+exports.SecretRole = SecretRole;
+/** @internal */
+SecretRole.__pulumiType = 'vault:kmip/secretRole:SecretRole';
+//# sourceMappingURL=secretRole.js.map

package/kmip/secretRole.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretRole.js","sourceRoot":"","sources":["../../kmip/secretRole.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IAsHjD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3E;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;SACzE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;IAhLD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;;AA1BL,gCAkLC;AApKG,gBAAgB;AACO,uBAAY,GAAG,kCAAkC,CAAC"}

package/kmip/secretScope.d.ts

@@ -0,0 +1,105 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Manages KMIP Secret Scopes in a Vault server. This feature requires
+ * Vault Enterprise. See the [Vault documentation](https://www.vaultproject.io/docs/secrets/kmip)
+ * for more information.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const _default = new vault.kmip.SecretBackend("default", {
+ *     path: "kmip",
+ *     description: "Vault KMIP backend",
+ * });
+ * const dev = new vault.kmip.SecretScope("dev", {
+ *     path: _default.path,
+ *     scope: "dev",
+ *     force: true,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * KMIP Secret scope can be imported using the `path`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import vault:kmip/secretScope:SecretScope dev kmip
+ * ```
+ */
+export declare class SecretScope extends pulumi.CustomResource {
+    /**
+     * Get an existing SecretScope resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: SecretScopeState, opts?: pulumi.CustomResourceOptions): SecretScope;
+    /**
+     * Returns true if the given object is an instance of SecretScope.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is SecretScope;
+    /**
+     * Boolean field to force deletion even if there are managed objects in the scope.
+     */
+    readonly force: pulumi.Output<boolean | undefined>;
+    /**
+     * The unique path this backend should be mounted at. Must
+     * not begin or end with a `/`. Defaults to `kmip`.
+     */
+    readonly path: pulumi.Output<string>;
+    /**
+     * Name of the scope.
+     */
+    readonly scope: pulumi.Output<string>;
+    /**
+     * Create a SecretScope resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: SecretScopeArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering SecretScope resources.
+ */
+export interface SecretScopeState {
+    /**
+     * Boolean field to force deletion even if there are managed objects in the scope.
+     */
+    force?: pulumi.Input<boolean>;
+    /**
+     * The unique path this backend should be mounted at. Must
+     * not begin or end with a `/`. Defaults to `kmip`.
+     */
+    path?: pulumi.Input<string>;
+    /**
+     * Name of the scope.
+     */
+    scope?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a SecretScope resource.
+ */
+export interface SecretScopeArgs {
+    /**
+     * Boolean field to force deletion even if there are managed objects in the scope.
+     */
+    force?: pulumi.Input<boolean>;
+    /**
+     * The unique path this backend should be mounted at. Must
+     * not begin or end with a `/`. Defaults to `kmip`.
+     */
+    path: pulumi.Input<string>;
+    /**
+     * Name of the scope.
+     */
+    scope: pulumi.Input<string>;
+}

package/kmip/secretScope.js

@@ -0,0 +1,89 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SecretScope = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages KMIP Secret Scopes in a Vault server. This feature requires
+ * Vault Enterprise. See the [Vault documentation](https://www.vaultproject.io/docs/secrets/kmip)
+ * for more information.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const _default = new vault.kmip.SecretBackend("default", {
+ *     path: "kmip",
+ *     description: "Vault KMIP backend",
+ * });
+ * const dev = new vault.kmip.SecretScope("dev", {
+ *     path: _default.path,
+ *     scope: "dev",
+ *     force: true,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * KMIP Secret scope can be imported using the `path`, e.g.
+ *
+ * ```sh
+ *  $ pulumi import vault:kmip/secretScope:SecretScope dev kmip
+ * ```
+ */
+class SecretScope extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["force"] = state ? state.force : undefined;
+            resourceInputs["path"] = state ? state.path : undefined;
+            resourceInputs["scope"] = state ? state.scope : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.path === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'path'");
+            }
+            if ((!args || args.scope === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'scope'");
+            }
+            resourceInputs["force"] = args ? args.force : undefined;
+            resourceInputs["path"] = args ? args.path : undefined;
+            resourceInputs["scope"] = args ? args.scope : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(SecretScope.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing SecretScope resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new SecretScope(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of SecretScope.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === SecretScope.__pulumiType;
+    }
+}
+exports.SecretScope = SecretScope;
+/** @internal */
+SecretScope.__pulumiType = 'vault:kmip/secretScope:SecretScope';
+//# sourceMappingURL=secretScope.js.map

package/kmip/secretScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretScope.js","sourceRoot":"","sources":["../../kmip/secretScope.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAkDlD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IAvED;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;;AA1BL,kCAyEC;AA3DG,gBAAgB;AACO,wBAAY,GAAG,oCAAoC,CAAC"}

package/kubernetes/authBackendConfig.d.ts

@@ -66,7 +66,7 @@ export declare class AuthBackendConfig extends pulumi.CustomResource {
     /**
      * PEM encoded CA cert for use by the TLS client used to talk with the Kubernetes API.
      */
-    readonly kubernetesCaCert: pulumi.Output<string | undefined>;
+    readonly kubernetesCaCert: pulumi.Output<string>;
     /**
      * Host must be a host string, a host:port pair, or a URL to the base of the Kubernetes API server.
      */