@pulumi/vault 6.2.0-alpha.1718953130 → 6.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/authBackend.d.ts +12 -0
- package/authBackend.js +2 -0
- package/authBackend.js.map +1 -1
- package/aws/authBackendClient.d.ts +76 -3
- package/aws/authBackendClient.js +21 -0
- package/aws/authBackendClient.js.map +1 -1
- package/aws/secretBackendRole.d.ts +21 -0
- package/aws/secretBackendRole.js +2 -0
- package/aws/secretBackendRole.js.map +1 -1
- package/azure/authBackendConfig.d.ts +45 -0
- package/azure/authBackendConfig.js +22 -0
- package/azure/authBackendConfig.js.map +1 -1
- package/azure/backend.d.ts +65 -0
- package/azure/backend.js +20 -0
- package/azure/backend.js.map +1 -1
- package/database/secretsMount.d.ts +72 -0
- package/database/secretsMount.js +12 -0
- package/database/secretsMount.js.map +1 -1
- package/gcp/authBackend.d.ts +75 -0
- package/gcp/authBackend.js +23 -0
- package/gcp/authBackend.js.map +1 -1
- package/gcp/secretBackend.d.ts +81 -0
- package/gcp/secretBackend.js +23 -0
- package/gcp/secretBackend.js.map +1 -1
- package/index.d.ts +6 -0
- package/index.js +12 -2
- package/index.js.map +1 -1
- package/jwt/authBackendRole.d.ts +12 -15
- package/jwt/authBackendRole.js.map +1 -1
- package/kubernetes/secretBackend.d.ts +72 -0
- package/kubernetes/secretBackend.js +12 -0
- package/kubernetes/secretBackend.js.map +1 -1
- package/ldap/secretBackend.d.ts +72 -0
- package/ldap/secretBackend.js +12 -0
- package/ldap/secretBackend.js.map +1 -1
- package/mount.d.ts +90 -0
- package/mount.js +12 -0
- package/mount.js.map +1 -1
- package/okta/authBackend.d.ts +120 -0
- package/okta/authBackend.js +18 -0
- package/okta/authBackend.js.map +1 -1
- package/package.json +2 -2
- package/pkisecret/backendConfigEst.d.ts +191 -0
- package/pkisecret/backendConfigEst.js +83 -0
- package/pkisecret/backendConfigEst.js.map +1 -0
- package/pkisecret/getBackendConfigEst.d.ts +117 -0
- package/pkisecret/getBackendConfigEst.js +54 -0
- package/pkisecret/getBackendConfigEst.js.map +1 -0
- package/pkisecret/index.d.ts +6 -0
- package/pkisecret/index.js +9 -1
- package/pkisecret/index.js.map +1 -1
- package/plugin.d.ts +179 -0
- package/plugin.js +105 -0
- package/plugin.js.map +1 -0
- package/pluginPinnedVersion.d.ts +103 -0
- package/pluginPinnedVersion.js +90 -0
- package/pluginPinnedVersion.js.map +1 -0
- package/quotaLeaseCount.d.ts +12 -0
- package/quotaLeaseCount.js +2 -0
- package/quotaLeaseCount.js.map +1 -1
- package/quotaRateLimit.d.ts +12 -0
- package/quotaRateLimit.js +2 -0
- package/quotaRateLimit.js.map +1 -1
- package/ssh/secretBackendCa.d.ts +24 -0
- package/ssh/secretBackendCa.js +4 -0
- package/ssh/secretBackendCa.js.map +1 -1
- package/types/input.d.ts +8 -0
- package/types/output.d.ts +22 -0
package/azure/backend.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../azure/backend.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"backend.js","sourceRoot":"","sources":["../../azure/backend.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAC9C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;IAwED,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3F;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,cAAc,CAAC,cAAc,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,gBAAgB,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,cAAc,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,UAAU,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;SACzF;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3G,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;;AA9IL,0BA+IC;AAjIG,gBAAgB;AACO,oBAAY,GAAG,6BAA6B,CAAC"}
|
|
@@ -81,6 +81,10 @@ export declare class SecretsMount extends pulumi.CustomResource {
|
|
|
81
81
|
* The following arguments are common to all database engines:
|
|
82
82
|
*/
|
|
83
83
|
readonly allowedManagedKeys: pulumi.Output<string[] | undefined>;
|
|
84
|
+
/**
|
|
85
|
+
* List of headers to allow and pass from the request to the plugin
|
|
86
|
+
*/
|
|
87
|
+
readonly allowedResponseHeaders: pulumi.Output<string[] | undefined>;
|
|
84
88
|
/**
|
|
85
89
|
* Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
86
90
|
*/
|
|
@@ -103,6 +107,10 @@ export declare class SecretsMount extends pulumi.CustomResource {
|
|
|
103
107
|
* Default lease duration for tokens and secrets in seconds
|
|
104
108
|
*/
|
|
105
109
|
readonly defaultLeaseTtlSeconds: pulumi.Output<number>;
|
|
110
|
+
/**
|
|
111
|
+
* List of headers to allow and pass from the request to the plugin
|
|
112
|
+
*/
|
|
113
|
+
readonly delegatedAuthAccessors: pulumi.Output<string[] | undefined>;
|
|
106
114
|
/**
|
|
107
115
|
* Human-friendly description of the mount
|
|
108
116
|
*/
|
|
@@ -125,11 +133,19 @@ export declare class SecretsMount extends pulumi.CustomResource {
|
|
|
125
133
|
* *See Configuration Options for more info*
|
|
126
134
|
*/
|
|
127
135
|
readonly hanas: pulumi.Output<outputs.database.SecretsMountHana[] | undefined>;
|
|
136
|
+
/**
|
|
137
|
+
* The key to use for signing plugin workload identity tokens
|
|
138
|
+
*/
|
|
139
|
+
readonly identityTokenKey: pulumi.Output<string | undefined>;
|
|
128
140
|
/**
|
|
129
141
|
* A nested block containing configuration options for InfluxDB connections.
|
|
130
142
|
* *See Configuration Options for more info*
|
|
131
143
|
*/
|
|
132
144
|
readonly influxdbs: pulumi.Output<outputs.database.SecretsMountInfluxdb[] | undefined>;
|
|
145
|
+
/**
|
|
146
|
+
* Specifies whether to show this mount in the UI-specific listing endpoint
|
|
147
|
+
*/
|
|
148
|
+
readonly listingVisibility: pulumi.Output<string | undefined>;
|
|
133
149
|
/**
|
|
134
150
|
* Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
135
151
|
*/
|
|
@@ -188,10 +204,18 @@ export declare class SecretsMount extends pulumi.CustomResource {
|
|
|
188
204
|
* *See Configuration Options for more info*
|
|
189
205
|
*/
|
|
190
206
|
readonly oracles: pulumi.Output<outputs.database.SecretsMountOracle[] | undefined>;
|
|
207
|
+
/**
|
|
208
|
+
* List of headers to allow and pass from the request to the plugin
|
|
209
|
+
*/
|
|
210
|
+
readonly passthroughRequestHeaders: pulumi.Output<string[] | undefined>;
|
|
191
211
|
/**
|
|
192
212
|
* Where the secret backend will be mounted
|
|
193
213
|
*/
|
|
194
214
|
readonly path: pulumi.Output<string>;
|
|
215
|
+
/**
|
|
216
|
+
* Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
217
|
+
*/
|
|
218
|
+
readonly pluginVersion: pulumi.Output<string | undefined>;
|
|
195
219
|
/**
|
|
196
220
|
* A nested block containing configuration options for PostgreSQL connections.
|
|
197
221
|
* *See Configuration Options for more info*
|
|
@@ -244,6 +268,10 @@ export interface SecretsMountState {
|
|
|
244
268
|
* The following arguments are common to all database engines:
|
|
245
269
|
*/
|
|
246
270
|
allowedManagedKeys?: pulumi.Input<pulumi.Input<string>[]>;
|
|
271
|
+
/**
|
|
272
|
+
* List of headers to allow and pass from the request to the plugin
|
|
273
|
+
*/
|
|
274
|
+
allowedResponseHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
247
275
|
/**
|
|
248
276
|
* Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
249
277
|
*/
|
|
@@ -266,6 +294,10 @@ export interface SecretsMountState {
|
|
|
266
294
|
* Default lease duration for tokens and secrets in seconds
|
|
267
295
|
*/
|
|
268
296
|
defaultLeaseTtlSeconds?: pulumi.Input<number>;
|
|
297
|
+
/**
|
|
298
|
+
* List of headers to allow and pass from the request to the plugin
|
|
299
|
+
*/
|
|
300
|
+
delegatedAuthAccessors?: pulumi.Input<pulumi.Input<string>[]>;
|
|
269
301
|
/**
|
|
270
302
|
* Human-friendly description of the mount
|
|
271
303
|
*/
|
|
@@ -288,11 +320,19 @@ export interface SecretsMountState {
|
|
|
288
320
|
* *See Configuration Options for more info*
|
|
289
321
|
*/
|
|
290
322
|
hanas?: pulumi.Input<pulumi.Input<inputs.database.SecretsMountHana>[]>;
|
|
323
|
+
/**
|
|
324
|
+
* The key to use for signing plugin workload identity tokens
|
|
325
|
+
*/
|
|
326
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
291
327
|
/**
|
|
292
328
|
* A nested block containing configuration options for InfluxDB connections.
|
|
293
329
|
* *See Configuration Options for more info*
|
|
294
330
|
*/
|
|
295
331
|
influxdbs?: pulumi.Input<pulumi.Input<inputs.database.SecretsMountInfluxdb>[]>;
|
|
332
|
+
/**
|
|
333
|
+
* Specifies whether to show this mount in the UI-specific listing endpoint
|
|
334
|
+
*/
|
|
335
|
+
listingVisibility?: pulumi.Input<string>;
|
|
296
336
|
/**
|
|
297
337
|
* Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
298
338
|
*/
|
|
@@ -351,10 +391,18 @@ export interface SecretsMountState {
|
|
|
351
391
|
* *See Configuration Options for more info*
|
|
352
392
|
*/
|
|
353
393
|
oracles?: pulumi.Input<pulumi.Input<inputs.database.SecretsMountOracle>[]>;
|
|
394
|
+
/**
|
|
395
|
+
* List of headers to allow and pass from the request to the plugin
|
|
396
|
+
*/
|
|
397
|
+
passthroughRequestHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
354
398
|
/**
|
|
355
399
|
* Where the secret backend will be mounted
|
|
356
400
|
*/
|
|
357
401
|
path?: pulumi.Input<string>;
|
|
402
|
+
/**
|
|
403
|
+
* Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
404
|
+
*/
|
|
405
|
+
pluginVersion?: pulumi.Input<string>;
|
|
358
406
|
/**
|
|
359
407
|
* A nested block containing configuration options for PostgreSQL connections.
|
|
360
408
|
* *See Configuration Options for more info*
|
|
@@ -395,6 +443,10 @@ export interface SecretsMountArgs {
|
|
|
395
443
|
* The following arguments are common to all database engines:
|
|
396
444
|
*/
|
|
397
445
|
allowedManagedKeys?: pulumi.Input<pulumi.Input<string>[]>;
|
|
446
|
+
/**
|
|
447
|
+
* List of headers to allow and pass from the request to the plugin
|
|
448
|
+
*/
|
|
449
|
+
allowedResponseHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
398
450
|
/**
|
|
399
451
|
* Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
400
452
|
*/
|
|
@@ -417,6 +469,10 @@ export interface SecretsMountArgs {
|
|
|
417
469
|
* Default lease duration for tokens and secrets in seconds
|
|
418
470
|
*/
|
|
419
471
|
defaultLeaseTtlSeconds?: pulumi.Input<number>;
|
|
472
|
+
/**
|
|
473
|
+
* List of headers to allow and pass from the request to the plugin
|
|
474
|
+
*/
|
|
475
|
+
delegatedAuthAccessors?: pulumi.Input<pulumi.Input<string>[]>;
|
|
420
476
|
/**
|
|
421
477
|
* Human-friendly description of the mount
|
|
422
478
|
*/
|
|
@@ -435,11 +491,19 @@ export interface SecretsMountArgs {
|
|
|
435
491
|
* *See Configuration Options for more info*
|
|
436
492
|
*/
|
|
437
493
|
hanas?: pulumi.Input<pulumi.Input<inputs.database.SecretsMountHana>[]>;
|
|
494
|
+
/**
|
|
495
|
+
* The key to use for signing plugin workload identity tokens
|
|
496
|
+
*/
|
|
497
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
438
498
|
/**
|
|
439
499
|
* A nested block containing configuration options for InfluxDB connections.
|
|
440
500
|
* *See Configuration Options for more info*
|
|
441
501
|
*/
|
|
442
502
|
influxdbs?: pulumi.Input<pulumi.Input<inputs.database.SecretsMountInfluxdb>[]>;
|
|
503
|
+
/**
|
|
504
|
+
* Specifies whether to show this mount in the UI-specific listing endpoint
|
|
505
|
+
*/
|
|
506
|
+
listingVisibility?: pulumi.Input<string>;
|
|
443
507
|
/**
|
|
444
508
|
* Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
445
509
|
*/
|
|
@@ -498,10 +562,18 @@ export interface SecretsMountArgs {
|
|
|
498
562
|
* *See Configuration Options for more info*
|
|
499
563
|
*/
|
|
500
564
|
oracles?: pulumi.Input<pulumi.Input<inputs.database.SecretsMountOracle>[]>;
|
|
565
|
+
/**
|
|
566
|
+
* List of headers to allow and pass from the request to the plugin
|
|
567
|
+
*/
|
|
568
|
+
passthroughRequestHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
501
569
|
/**
|
|
502
570
|
* Where the secret backend will be mounted
|
|
503
571
|
*/
|
|
504
572
|
path: pulumi.Input<string>;
|
|
573
|
+
/**
|
|
574
|
+
* Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
575
|
+
*/
|
|
576
|
+
pluginVersion?: pulumi.Input<string>;
|
|
505
577
|
/**
|
|
506
578
|
* A nested block containing configuration options for PostgreSQL connections.
|
|
507
579
|
* *See Configuration Options for more info*
|
package/database/secretsMount.js
CHANGED
|
@@ -89,17 +89,21 @@ class SecretsMount extends pulumi.CustomResource {
|
|
|
89
89
|
const state = argsOrState;
|
|
90
90
|
resourceInputs["accessor"] = state ? state.accessor : undefined;
|
|
91
91
|
resourceInputs["allowedManagedKeys"] = state ? state.allowedManagedKeys : undefined;
|
|
92
|
+
resourceInputs["allowedResponseHeaders"] = state ? state.allowedResponseHeaders : undefined;
|
|
92
93
|
resourceInputs["auditNonHmacRequestKeys"] = state ? state.auditNonHmacRequestKeys : undefined;
|
|
93
94
|
resourceInputs["auditNonHmacResponseKeys"] = state ? state.auditNonHmacResponseKeys : undefined;
|
|
94
95
|
resourceInputs["cassandras"] = state ? state.cassandras : undefined;
|
|
95
96
|
resourceInputs["couchbases"] = state ? state.couchbases : undefined;
|
|
96
97
|
resourceInputs["defaultLeaseTtlSeconds"] = state ? state.defaultLeaseTtlSeconds : undefined;
|
|
98
|
+
resourceInputs["delegatedAuthAccessors"] = state ? state.delegatedAuthAccessors : undefined;
|
|
97
99
|
resourceInputs["description"] = state ? state.description : undefined;
|
|
98
100
|
resourceInputs["elasticsearches"] = state ? state.elasticsearches : undefined;
|
|
99
101
|
resourceInputs["engineCount"] = state ? state.engineCount : undefined;
|
|
100
102
|
resourceInputs["externalEntropyAccess"] = state ? state.externalEntropyAccess : undefined;
|
|
101
103
|
resourceInputs["hanas"] = state ? state.hanas : undefined;
|
|
104
|
+
resourceInputs["identityTokenKey"] = state ? state.identityTokenKey : undefined;
|
|
102
105
|
resourceInputs["influxdbs"] = state ? state.influxdbs : undefined;
|
|
106
|
+
resourceInputs["listingVisibility"] = state ? state.listingVisibility : undefined;
|
|
103
107
|
resourceInputs["local"] = state ? state.local : undefined;
|
|
104
108
|
resourceInputs["maxLeaseTtlSeconds"] = state ? state.maxLeaseTtlSeconds : undefined;
|
|
105
109
|
resourceInputs["mongodbatlas"] = state ? state.mongodbatlas : undefined;
|
|
@@ -112,7 +116,9 @@ class SecretsMount extends pulumi.CustomResource {
|
|
|
112
116
|
resourceInputs["namespace"] = state ? state.namespace : undefined;
|
|
113
117
|
resourceInputs["options"] = state ? state.options : undefined;
|
|
114
118
|
resourceInputs["oracles"] = state ? state.oracles : undefined;
|
|
119
|
+
resourceInputs["passthroughRequestHeaders"] = state ? state.passthroughRequestHeaders : undefined;
|
|
115
120
|
resourceInputs["path"] = state ? state.path : undefined;
|
|
121
|
+
resourceInputs["pluginVersion"] = state ? state.pluginVersion : undefined;
|
|
116
122
|
resourceInputs["postgresqls"] = state ? state.postgresqls : undefined;
|
|
117
123
|
resourceInputs["redis"] = state ? state.redis : undefined;
|
|
118
124
|
resourceInputs["redisElasticaches"] = state ? state.redisElasticaches : undefined;
|
|
@@ -126,16 +132,20 @@ class SecretsMount extends pulumi.CustomResource {
|
|
|
126
132
|
throw new Error("Missing required property 'path'");
|
|
127
133
|
}
|
|
128
134
|
resourceInputs["allowedManagedKeys"] = args ? args.allowedManagedKeys : undefined;
|
|
135
|
+
resourceInputs["allowedResponseHeaders"] = args ? args.allowedResponseHeaders : undefined;
|
|
129
136
|
resourceInputs["auditNonHmacRequestKeys"] = args ? args.auditNonHmacRequestKeys : undefined;
|
|
130
137
|
resourceInputs["auditNonHmacResponseKeys"] = args ? args.auditNonHmacResponseKeys : undefined;
|
|
131
138
|
resourceInputs["cassandras"] = args ? args.cassandras : undefined;
|
|
132
139
|
resourceInputs["couchbases"] = args ? args.couchbases : undefined;
|
|
133
140
|
resourceInputs["defaultLeaseTtlSeconds"] = args ? args.defaultLeaseTtlSeconds : undefined;
|
|
141
|
+
resourceInputs["delegatedAuthAccessors"] = args ? args.delegatedAuthAccessors : undefined;
|
|
134
142
|
resourceInputs["description"] = args ? args.description : undefined;
|
|
135
143
|
resourceInputs["elasticsearches"] = args ? args.elasticsearches : undefined;
|
|
136
144
|
resourceInputs["externalEntropyAccess"] = args ? args.externalEntropyAccess : undefined;
|
|
137
145
|
resourceInputs["hanas"] = args ? args.hanas : undefined;
|
|
146
|
+
resourceInputs["identityTokenKey"] = args ? args.identityTokenKey : undefined;
|
|
138
147
|
resourceInputs["influxdbs"] = args ? args.influxdbs : undefined;
|
|
148
|
+
resourceInputs["listingVisibility"] = args ? args.listingVisibility : undefined;
|
|
139
149
|
resourceInputs["local"] = args ? args.local : undefined;
|
|
140
150
|
resourceInputs["maxLeaseTtlSeconds"] = args ? args.maxLeaseTtlSeconds : undefined;
|
|
141
151
|
resourceInputs["mongodbatlas"] = args ? args.mongodbatlas : undefined;
|
|
@@ -148,7 +158,9 @@ class SecretsMount extends pulumi.CustomResource {
|
|
|
148
158
|
resourceInputs["namespace"] = args ? args.namespace : undefined;
|
|
149
159
|
resourceInputs["options"] = args ? args.options : undefined;
|
|
150
160
|
resourceInputs["oracles"] = args ? args.oracles : undefined;
|
|
161
|
+
resourceInputs["passthroughRequestHeaders"] = args ? args.passthroughRequestHeaders : undefined;
|
|
151
162
|
resourceInputs["path"] = args ? args.path : undefined;
|
|
163
|
+
resourceInputs["pluginVersion"] = args ? args.pluginVersion : undefined;
|
|
152
164
|
resourceInputs["postgresqls"] = args ? args.postgresqls : undefined;
|
|
153
165
|
resourceInputs["redis"] = args ? args.redis : undefined;
|
|
154
166
|
resourceInputs["redisElasticaches"] = args ? args.redisElasticaches : undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"secretsMount.js","sourceRoot":"","sources":["../../database/secretsMount.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;
|
|
1
|
+
{"version":3,"file":"secretsMount.js","sourceRoot":"","sources":["../../database/secretsMount.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAuLD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;SACvE;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AA1SL,oCA2SC;AA7RG,gBAAgB;AACO,yBAAY,GAAG,0CAA0C,CAAC"}
|
package/gcp/authBackend.d.ts
CHANGED
|
@@ -4,6 +4,21 @@ import * as outputs from "../types/output";
|
|
|
4
4
|
/**
|
|
5
5
|
* Provides a resource to configure the [GCP auth backend within Vault](https://www.vaultproject.io/docs/auth/gcp.html).
|
|
6
6
|
*
|
|
7
|
+
* ## Example Usage
|
|
8
|
+
*
|
|
9
|
+
* You can setup the GCP auth backend with Workload Identity Federation (WIF) for a secret-less configuration:
|
|
10
|
+
* ```typescript
|
|
11
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
12
|
+
* import * as vault from "@pulumi/vault";
|
|
13
|
+
*
|
|
14
|
+
* const gcp = new vault.gcp.AuthBackend("gcp", {
|
|
15
|
+
* identityTokenKey: "example-key",
|
|
16
|
+
* identityTokenTtl: 1800,
|
|
17
|
+
* identityTokenAudience: "<TOKEN_AUDIENCE>",
|
|
18
|
+
* serviceAccountEmail: "<SERVICE_ACCOUNT_EMAIL>",
|
|
19
|
+
* });
|
|
20
|
+
* ```
|
|
21
|
+
*
|
|
7
22
|
* ## Import
|
|
8
23
|
*
|
|
9
24
|
* GCP authentication backends can be imported using the backend name, e.g.
|
|
@@ -63,6 +78,21 @@ export declare class AuthBackend extends pulumi.CustomResource {
|
|
|
63
78
|
* See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
|
64
79
|
*/
|
|
65
80
|
readonly disableRemount: pulumi.Output<boolean | undefined>;
|
|
81
|
+
/**
|
|
82
|
+
* The audience claim value for plugin identity
|
|
83
|
+
* tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
|
|
84
|
+
* Mutually exclusive with `credentials`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
85
|
+
*/
|
|
86
|
+
readonly identityTokenAudience: pulumi.Output<string | undefined>;
|
|
87
|
+
/**
|
|
88
|
+
* The key to use for signing plugin identity
|
|
89
|
+
* tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
90
|
+
*/
|
|
91
|
+
readonly identityTokenKey: pulumi.Output<string | undefined>;
|
|
92
|
+
/**
|
|
93
|
+
* The TTL of generated tokens.
|
|
94
|
+
*/
|
|
95
|
+
readonly identityTokenTtl: pulumi.Output<number | undefined>;
|
|
66
96
|
/**
|
|
67
97
|
* Specifies if the auth method is local only.
|
|
68
98
|
*/
|
|
@@ -86,6 +116,11 @@ export declare class AuthBackend extends pulumi.CustomResource {
|
|
|
86
116
|
* The GCP Project ID
|
|
87
117
|
*/
|
|
88
118
|
readonly projectId: pulumi.Output<string>;
|
|
119
|
+
/**
|
|
120
|
+
* Service Account to impersonate for plugin workload identity federation.
|
|
121
|
+
* Required with `identityTokenAudience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
122
|
+
*/
|
|
123
|
+
readonly serviceAccountEmail: pulumi.Output<string | undefined>;
|
|
89
124
|
/**
|
|
90
125
|
* Extra configuration block. Structure is documented below.
|
|
91
126
|
*
|
|
@@ -140,6 +175,21 @@ export interface AuthBackendState {
|
|
|
140
175
|
* See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
|
141
176
|
*/
|
|
142
177
|
disableRemount?: pulumi.Input<boolean>;
|
|
178
|
+
/**
|
|
179
|
+
* The audience claim value for plugin identity
|
|
180
|
+
* tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
|
|
181
|
+
* Mutually exclusive with `credentials`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
182
|
+
*/
|
|
183
|
+
identityTokenAudience?: pulumi.Input<string>;
|
|
184
|
+
/**
|
|
185
|
+
* The key to use for signing plugin identity
|
|
186
|
+
* tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
187
|
+
*/
|
|
188
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
189
|
+
/**
|
|
190
|
+
* The TTL of generated tokens.
|
|
191
|
+
*/
|
|
192
|
+
identityTokenTtl?: pulumi.Input<number>;
|
|
143
193
|
/**
|
|
144
194
|
* Specifies if the auth method is local only.
|
|
145
195
|
*/
|
|
@@ -163,6 +213,11 @@ export interface AuthBackendState {
|
|
|
163
213
|
* The GCP Project ID
|
|
164
214
|
*/
|
|
165
215
|
projectId?: pulumi.Input<string>;
|
|
216
|
+
/**
|
|
217
|
+
* Service Account to impersonate for plugin workload identity federation.
|
|
218
|
+
* Required with `identityTokenAudience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
219
|
+
*/
|
|
220
|
+
serviceAccountEmail?: pulumi.Input<string>;
|
|
166
221
|
/**
|
|
167
222
|
* Extra configuration block. Structure is documented below.
|
|
168
223
|
*
|
|
@@ -205,6 +260,21 @@ export interface AuthBackendArgs {
|
|
|
205
260
|
* See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
|
206
261
|
*/
|
|
207
262
|
disableRemount?: pulumi.Input<boolean>;
|
|
263
|
+
/**
|
|
264
|
+
* The audience claim value for plugin identity
|
|
265
|
+
* tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
|
|
266
|
+
* Mutually exclusive with `credentials`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
267
|
+
*/
|
|
268
|
+
identityTokenAudience?: pulumi.Input<string>;
|
|
269
|
+
/**
|
|
270
|
+
* The key to use for signing plugin identity
|
|
271
|
+
* tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
272
|
+
*/
|
|
273
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
274
|
+
/**
|
|
275
|
+
* The TTL of generated tokens.
|
|
276
|
+
*/
|
|
277
|
+
identityTokenTtl?: pulumi.Input<number>;
|
|
208
278
|
/**
|
|
209
279
|
* Specifies if the auth method is local only.
|
|
210
280
|
*/
|
|
@@ -228,6 +298,11 @@ export interface AuthBackendArgs {
|
|
|
228
298
|
* The GCP Project ID
|
|
229
299
|
*/
|
|
230
300
|
projectId?: pulumi.Input<string>;
|
|
301
|
+
/**
|
|
302
|
+
* Service Account to impersonate for plugin workload identity federation.
|
|
303
|
+
* Required with `identityTokenAudience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
304
|
+
*/
|
|
305
|
+
serviceAccountEmail?: pulumi.Input<string>;
|
|
231
306
|
/**
|
|
232
307
|
* Extra configuration block. Structure is documented below.
|
|
233
308
|
*
|
package/gcp/authBackend.js
CHANGED
|
@@ -8,6 +8,21 @@ const utilities = require("../utilities");
|
|
|
8
8
|
/**
|
|
9
9
|
* Provides a resource to configure the [GCP auth backend within Vault](https://www.vaultproject.io/docs/auth/gcp.html).
|
|
10
10
|
*
|
|
11
|
+
* ## Example Usage
|
|
12
|
+
*
|
|
13
|
+
* You can setup the GCP auth backend with Workload Identity Federation (WIF) for a secret-less configuration:
|
|
14
|
+
* ```typescript
|
|
15
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
16
|
+
* import * as vault from "@pulumi/vault";
|
|
17
|
+
*
|
|
18
|
+
* const gcp = new vault.gcp.AuthBackend("gcp", {
|
|
19
|
+
* identityTokenKey: "example-key",
|
|
20
|
+
* identityTokenTtl: 1800,
|
|
21
|
+
* identityTokenAudience: "<TOKEN_AUDIENCE>",
|
|
22
|
+
* serviceAccountEmail: "<SERVICE_ACCOUNT_EMAIL>",
|
|
23
|
+
* });
|
|
24
|
+
* ```
|
|
25
|
+
*
|
|
11
26
|
* ## Import
|
|
12
27
|
*
|
|
13
28
|
* GCP authentication backends can be imported using the backend name, e.g.
|
|
@@ -51,11 +66,15 @@ class AuthBackend extends pulumi.CustomResource {
|
|
|
51
66
|
resourceInputs["customEndpoint"] = state ? state.customEndpoint : undefined;
|
|
52
67
|
resourceInputs["description"] = state ? state.description : undefined;
|
|
53
68
|
resourceInputs["disableRemount"] = state ? state.disableRemount : undefined;
|
|
69
|
+
resourceInputs["identityTokenAudience"] = state ? state.identityTokenAudience : undefined;
|
|
70
|
+
resourceInputs["identityTokenKey"] = state ? state.identityTokenKey : undefined;
|
|
71
|
+
resourceInputs["identityTokenTtl"] = state ? state.identityTokenTtl : undefined;
|
|
54
72
|
resourceInputs["local"] = state ? state.local : undefined;
|
|
55
73
|
resourceInputs["namespace"] = state ? state.namespace : undefined;
|
|
56
74
|
resourceInputs["path"] = state ? state.path : undefined;
|
|
57
75
|
resourceInputs["privateKeyId"] = state ? state.privateKeyId : undefined;
|
|
58
76
|
resourceInputs["projectId"] = state ? state.projectId : undefined;
|
|
77
|
+
resourceInputs["serviceAccountEmail"] = state ? state.serviceAccountEmail : undefined;
|
|
59
78
|
resourceInputs["tune"] = state ? state.tune : undefined;
|
|
60
79
|
}
|
|
61
80
|
else {
|
|
@@ -66,11 +85,15 @@ class AuthBackend extends pulumi.CustomResource {
|
|
|
66
85
|
resourceInputs["customEndpoint"] = args ? args.customEndpoint : undefined;
|
|
67
86
|
resourceInputs["description"] = args ? args.description : undefined;
|
|
68
87
|
resourceInputs["disableRemount"] = args ? args.disableRemount : undefined;
|
|
88
|
+
resourceInputs["identityTokenAudience"] = args ? args.identityTokenAudience : undefined;
|
|
89
|
+
resourceInputs["identityTokenKey"] = args ? args.identityTokenKey : undefined;
|
|
90
|
+
resourceInputs["identityTokenTtl"] = args ? args.identityTokenTtl : undefined;
|
|
69
91
|
resourceInputs["local"] = args ? args.local : undefined;
|
|
70
92
|
resourceInputs["namespace"] = args ? args.namespace : undefined;
|
|
71
93
|
resourceInputs["path"] = args ? args.path : undefined;
|
|
72
94
|
resourceInputs["privateKeyId"] = args ? args.privateKeyId : undefined;
|
|
73
95
|
resourceInputs["projectId"] = args ? args.projectId : undefined;
|
|
96
|
+
resourceInputs["serviceAccountEmail"] = args ? args.serviceAccountEmail : undefined;
|
|
74
97
|
resourceInputs["tune"] = args ? args.tune : undefined;
|
|
75
98
|
resourceInputs["accessor"] = undefined /*out*/;
|
|
76
99
|
}
|
package/gcp/authBackend.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authBackend.js","sourceRoot":"","sources":["../../gcp/authBackend.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"authBackend.js","sourceRoot":"","sources":["../../gcp/authBackend.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IA+FD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,aAAa,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,WAAW,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AAvKL,kCAwKC;AA1JG,gBAAgB;AACO,wBAAY,GAAG,mCAAmC,CAAC"}
|
package/gcp/secretBackend.d.ts
CHANGED
|
@@ -2,6 +2,19 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
/**
|
|
3
3
|
* ## Example Usage
|
|
4
4
|
*
|
|
5
|
+
* You can setup the GCP secret backend with Workload Identity Federation (WIF) for a secret-less configuration:
|
|
6
|
+
* ```typescript
|
|
7
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
8
|
+
* import * as vault from "@pulumi/vault";
|
|
9
|
+
*
|
|
10
|
+
* const gcp = new vault.gcp.SecretBackend("gcp", {
|
|
11
|
+
* identityTokenKey: "example-key",
|
|
12
|
+
* identityTokenTtl: 1800,
|
|
13
|
+
* identityTokenAudience: "<TOKEN_AUDIENCE>",
|
|
14
|
+
* serviceAccountEmail: "<SERVICE_ACCOUNT_EMAIL>",
|
|
15
|
+
* });
|
|
16
|
+
* ```
|
|
17
|
+
*
|
|
5
18
|
* ```typescript
|
|
6
19
|
* import * as pulumi from "@pulumi/pulumi";
|
|
7
20
|
* import * as std from "@pulumi/std";
|
|
@@ -28,6 +41,10 @@ export declare class SecretBackend extends pulumi.CustomResource {
|
|
|
28
41
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
29
42
|
*/
|
|
30
43
|
static isInstance(obj: any): obj is SecretBackend;
|
|
44
|
+
/**
|
|
45
|
+
* The accessor of the created GCP mount.
|
|
46
|
+
*/
|
|
47
|
+
readonly accessor: pulumi.Output<string>;
|
|
31
48
|
/**
|
|
32
49
|
* JSON-encoded credentials to use to connect to GCP
|
|
33
50
|
*/
|
|
@@ -46,6 +63,21 @@ export declare class SecretBackend extends pulumi.CustomResource {
|
|
|
46
63
|
* See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
|
47
64
|
*/
|
|
48
65
|
readonly disableRemount: pulumi.Output<boolean | undefined>;
|
|
66
|
+
/**
|
|
67
|
+
* The audience claim value for plugin identity
|
|
68
|
+
* tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
|
|
69
|
+
* Mutually exclusive with `credentials`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
70
|
+
*/
|
|
71
|
+
readonly identityTokenAudience: pulumi.Output<string | undefined>;
|
|
72
|
+
/**
|
|
73
|
+
* The key to use for signing plugin identity
|
|
74
|
+
* tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
75
|
+
*/
|
|
76
|
+
readonly identityTokenKey: pulumi.Output<string | undefined>;
|
|
77
|
+
/**
|
|
78
|
+
* The TTL of generated tokens.
|
|
79
|
+
*/
|
|
80
|
+
readonly identityTokenTtl: pulumi.Output<number | undefined>;
|
|
49
81
|
/**
|
|
50
82
|
* Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
51
83
|
*/
|
|
@@ -67,6 +99,11 @@ export declare class SecretBackend extends pulumi.CustomResource {
|
|
|
67
99
|
* not begin or end with a `/`. Defaults to `gcp`.
|
|
68
100
|
*/
|
|
69
101
|
readonly path: pulumi.Output<string | undefined>;
|
|
102
|
+
/**
|
|
103
|
+
* Service Account to impersonate for plugin workload identity federation.
|
|
104
|
+
* Required with `identityTokenAudience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
105
|
+
*/
|
|
106
|
+
readonly serviceAccountEmail: pulumi.Output<string | undefined>;
|
|
70
107
|
/**
|
|
71
108
|
* Create a SecretBackend resource with the given unique name, arguments, and options.
|
|
72
109
|
*
|
|
@@ -80,6 +117,10 @@ export declare class SecretBackend extends pulumi.CustomResource {
|
|
|
80
117
|
* Input properties used for looking up and filtering SecretBackend resources.
|
|
81
118
|
*/
|
|
82
119
|
export interface SecretBackendState {
|
|
120
|
+
/**
|
|
121
|
+
* The accessor of the created GCP mount.
|
|
122
|
+
*/
|
|
123
|
+
accessor?: pulumi.Input<string>;
|
|
83
124
|
/**
|
|
84
125
|
* JSON-encoded credentials to use to connect to GCP
|
|
85
126
|
*/
|
|
@@ -98,6 +139,21 @@ export interface SecretBackendState {
|
|
|
98
139
|
* See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
|
99
140
|
*/
|
|
100
141
|
disableRemount?: pulumi.Input<boolean>;
|
|
142
|
+
/**
|
|
143
|
+
* The audience claim value for plugin identity
|
|
144
|
+
* tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
|
|
145
|
+
* Mutually exclusive with `credentials`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
146
|
+
*/
|
|
147
|
+
identityTokenAudience?: pulumi.Input<string>;
|
|
148
|
+
/**
|
|
149
|
+
* The key to use for signing plugin identity
|
|
150
|
+
* tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
151
|
+
*/
|
|
152
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
153
|
+
/**
|
|
154
|
+
* The TTL of generated tokens.
|
|
155
|
+
*/
|
|
156
|
+
identityTokenTtl?: pulumi.Input<number>;
|
|
101
157
|
/**
|
|
102
158
|
* Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
103
159
|
*/
|
|
@@ -119,6 +175,11 @@ export interface SecretBackendState {
|
|
|
119
175
|
* not begin or end with a `/`. Defaults to `gcp`.
|
|
120
176
|
*/
|
|
121
177
|
path?: pulumi.Input<string>;
|
|
178
|
+
/**
|
|
179
|
+
* Service Account to impersonate for plugin workload identity federation.
|
|
180
|
+
* Required with `identityTokenAudience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
181
|
+
*/
|
|
182
|
+
serviceAccountEmail?: pulumi.Input<string>;
|
|
122
183
|
}
|
|
123
184
|
/**
|
|
124
185
|
* The set of arguments for constructing a SecretBackend resource.
|
|
@@ -142,6 +203,21 @@ export interface SecretBackendArgs {
|
|
|
142
203
|
* See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
|
143
204
|
*/
|
|
144
205
|
disableRemount?: pulumi.Input<boolean>;
|
|
206
|
+
/**
|
|
207
|
+
* The audience claim value for plugin identity
|
|
208
|
+
* tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
|
|
209
|
+
* Mutually exclusive with `credentials`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
210
|
+
*/
|
|
211
|
+
identityTokenAudience?: pulumi.Input<string>;
|
|
212
|
+
/**
|
|
213
|
+
* The key to use for signing plugin identity
|
|
214
|
+
* tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
215
|
+
*/
|
|
216
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
217
|
+
/**
|
|
218
|
+
* The TTL of generated tokens.
|
|
219
|
+
*/
|
|
220
|
+
identityTokenTtl?: pulumi.Input<number>;
|
|
145
221
|
/**
|
|
146
222
|
* Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
147
223
|
*/
|
|
@@ -163,4 +239,9 @@ export interface SecretBackendArgs {
|
|
|
163
239
|
* not begin or end with a `/`. Defaults to `gcp`.
|
|
164
240
|
*/
|
|
165
241
|
path?: pulumi.Input<string>;
|
|
242
|
+
/**
|
|
243
|
+
* Service Account to impersonate for plugin workload identity federation.
|
|
244
|
+
* Required with `identityTokenAudience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
|
|
245
|
+
*/
|
|
246
|
+
serviceAccountEmail?: pulumi.Input<string>;
|
|
166
247
|
}
|