@pulumi/vault 6.2.0-alpha.1718953130 → 6.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/authBackend.d.ts +12 -0
- package/authBackend.js +2 -0
- package/authBackend.js.map +1 -1
- package/aws/authBackendClient.d.ts +76 -3
- package/aws/authBackendClient.js +21 -0
- package/aws/authBackendClient.js.map +1 -1
- package/aws/secretBackendRole.d.ts +21 -0
- package/aws/secretBackendRole.js +2 -0
- package/aws/secretBackendRole.js.map +1 -1
- package/azure/authBackendConfig.d.ts +45 -0
- package/azure/authBackendConfig.js +22 -0
- package/azure/authBackendConfig.js.map +1 -1
- package/azure/backend.d.ts +65 -0
- package/azure/backend.js +20 -0
- package/azure/backend.js.map +1 -1
- package/database/secretsMount.d.ts +72 -0
- package/database/secretsMount.js +12 -0
- package/database/secretsMount.js.map +1 -1
- package/gcp/authBackend.d.ts +75 -0
- package/gcp/authBackend.js +23 -0
- package/gcp/authBackend.js.map +1 -1
- package/gcp/secretBackend.d.ts +81 -0
- package/gcp/secretBackend.js +23 -0
- package/gcp/secretBackend.js.map +1 -1
- package/index.d.ts +6 -0
- package/index.js +12 -2
- package/index.js.map +1 -1
- package/jwt/authBackendRole.d.ts +12 -15
- package/jwt/authBackendRole.js.map +1 -1
- package/kubernetes/secretBackend.d.ts +72 -0
- package/kubernetes/secretBackend.js +12 -0
- package/kubernetes/secretBackend.js.map +1 -1
- package/ldap/secretBackend.d.ts +72 -0
- package/ldap/secretBackend.js +12 -0
- package/ldap/secretBackend.js.map +1 -1
- package/mount.d.ts +90 -0
- package/mount.js +12 -0
- package/mount.js.map +1 -1
- package/okta/authBackend.d.ts +120 -0
- package/okta/authBackend.js +18 -0
- package/okta/authBackend.js.map +1 -1
- package/package.json +2 -2
- package/pkisecret/backendConfigEst.d.ts +191 -0
- package/pkisecret/backendConfigEst.js +83 -0
- package/pkisecret/backendConfigEst.js.map +1 -0
- package/pkisecret/getBackendConfigEst.d.ts +117 -0
- package/pkisecret/getBackendConfigEst.js +54 -0
- package/pkisecret/getBackendConfigEst.js.map +1 -0
- package/pkisecret/index.d.ts +6 -0
- package/pkisecret/index.js +9 -1
- package/pkisecret/index.js.map +1 -1
- package/plugin.d.ts +179 -0
- package/plugin.js +105 -0
- package/plugin.js.map +1 -0
- package/pluginPinnedVersion.d.ts +103 -0
- package/pluginPinnedVersion.js +90 -0
- package/pluginPinnedVersion.js.map +1 -0
- package/quotaLeaseCount.d.ts +12 -0
- package/quotaLeaseCount.js +2 -0
- package/quotaLeaseCount.js.map +1 -1
- package/quotaRateLimit.d.ts +12 -0
- package/quotaRateLimit.js +2 -0
- package/quotaRateLimit.js.map +1 -1
- package/ssh/secretBackendCa.d.ts +24 -0
- package/ssh/secretBackendCa.js +4 -0
- package/ssh/secretBackendCa.js.map +1 -1
- package/types/input.d.ts +8 -0
- package/types/output.d.ts +22 -0
package/ldap/secretBackend.d.ts
CHANGED
|
@@ -48,6 +48,10 @@ export declare class SecretBackend extends pulumi.CustomResource {
|
|
|
48
48
|
* List of managed key registry entry names that the mount in question is allowed to access
|
|
49
49
|
*/
|
|
50
50
|
readonly allowedManagedKeys: pulumi.Output<string[] | undefined>;
|
|
51
|
+
/**
|
|
52
|
+
* List of headers to allow and pass from the request to the plugin
|
|
53
|
+
*/
|
|
54
|
+
readonly allowedResponseHeaders: pulumi.Output<string[] | undefined>;
|
|
51
55
|
/**
|
|
52
56
|
* Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
53
57
|
*/
|
|
@@ -86,6 +90,10 @@ export declare class SecretBackend extends pulumi.CustomResource {
|
|
|
86
90
|
* Default lease duration for secrets in seconds.
|
|
87
91
|
*/
|
|
88
92
|
readonly defaultLeaseTtlSeconds: pulumi.Output<number>;
|
|
93
|
+
/**
|
|
94
|
+
* List of headers to allow and pass from the request to the plugin
|
|
95
|
+
*/
|
|
96
|
+
readonly delegatedAuthAccessors: pulumi.Output<string[] | undefined>;
|
|
89
97
|
/**
|
|
90
98
|
* Human-friendly description of the mount for the Active Directory backend.
|
|
91
99
|
*/
|
|
@@ -98,11 +106,19 @@ export declare class SecretBackend extends pulumi.CustomResource {
|
|
|
98
106
|
* Enable the secrets engine to access Vault's external entropy source
|
|
99
107
|
*/
|
|
100
108
|
readonly externalEntropyAccess: pulumi.Output<boolean | undefined>;
|
|
109
|
+
/**
|
|
110
|
+
* The key to use for signing plugin workload identity tokens
|
|
111
|
+
*/
|
|
112
|
+
readonly identityTokenKey: pulumi.Output<string | undefined>;
|
|
101
113
|
/**
|
|
102
114
|
* Skip LDAP server SSL Certificate verification. This is not recommended for production.
|
|
103
115
|
* Defaults to `false`.
|
|
104
116
|
*/
|
|
105
117
|
readonly insecureTls: pulumi.Output<boolean | undefined>;
|
|
118
|
+
/**
|
|
119
|
+
* Specifies whether to show this mount in the UI-specific listing endpoint
|
|
120
|
+
*/
|
|
121
|
+
readonly listingVisibility: pulumi.Output<string | undefined>;
|
|
106
122
|
/**
|
|
107
123
|
* Mark the secrets engine as local-only. Local engines are not replicated or removed by
|
|
108
124
|
* replication.Tolerance duration to use when checking the last rotation time.
|
|
@@ -125,6 +141,10 @@ export declare class SecretBackend extends pulumi.CustomResource {
|
|
|
125
141
|
readonly options: pulumi.Output<{
|
|
126
142
|
[key: string]: any;
|
|
127
143
|
} | undefined>;
|
|
144
|
+
/**
|
|
145
|
+
* List of headers to allow and pass from the request to the plugin
|
|
146
|
+
*/
|
|
147
|
+
readonly passthroughRequestHeaders: pulumi.Output<string[] | undefined>;
|
|
128
148
|
/**
|
|
129
149
|
* Name of the password policy to use to generate passwords.
|
|
130
150
|
*/
|
|
@@ -134,6 +154,10 @@ export declare class SecretBackend extends pulumi.CustomResource {
|
|
|
134
154
|
* not begin or end with a `/`. Defaults to `ldap`.
|
|
135
155
|
*/
|
|
136
156
|
readonly path: pulumi.Output<string | undefined>;
|
|
157
|
+
/**
|
|
158
|
+
* Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
159
|
+
*/
|
|
160
|
+
readonly pluginVersion: pulumi.Output<string | undefined>;
|
|
137
161
|
/**
|
|
138
162
|
* Timeout, in seconds, for the connection when making requests against the server
|
|
139
163
|
* before returning back an error.
|
|
@@ -194,6 +218,10 @@ export interface SecretBackendState {
|
|
|
194
218
|
* List of managed key registry entry names that the mount in question is allowed to access
|
|
195
219
|
*/
|
|
196
220
|
allowedManagedKeys?: pulumi.Input<pulumi.Input<string>[]>;
|
|
221
|
+
/**
|
|
222
|
+
* List of headers to allow and pass from the request to the plugin
|
|
223
|
+
*/
|
|
224
|
+
allowedResponseHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
197
225
|
/**
|
|
198
226
|
* Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
199
227
|
*/
|
|
@@ -232,6 +260,10 @@ export interface SecretBackendState {
|
|
|
232
260
|
* Default lease duration for secrets in seconds.
|
|
233
261
|
*/
|
|
234
262
|
defaultLeaseTtlSeconds?: pulumi.Input<number>;
|
|
263
|
+
/**
|
|
264
|
+
* List of headers to allow and pass from the request to the plugin
|
|
265
|
+
*/
|
|
266
|
+
delegatedAuthAccessors?: pulumi.Input<pulumi.Input<string>[]>;
|
|
235
267
|
/**
|
|
236
268
|
* Human-friendly description of the mount for the Active Directory backend.
|
|
237
269
|
*/
|
|
@@ -244,11 +276,19 @@ export interface SecretBackendState {
|
|
|
244
276
|
* Enable the secrets engine to access Vault's external entropy source
|
|
245
277
|
*/
|
|
246
278
|
externalEntropyAccess?: pulumi.Input<boolean>;
|
|
279
|
+
/**
|
|
280
|
+
* The key to use for signing plugin workload identity tokens
|
|
281
|
+
*/
|
|
282
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
247
283
|
/**
|
|
248
284
|
* Skip LDAP server SSL Certificate verification. This is not recommended for production.
|
|
249
285
|
* Defaults to `false`.
|
|
250
286
|
*/
|
|
251
287
|
insecureTls?: pulumi.Input<boolean>;
|
|
288
|
+
/**
|
|
289
|
+
* Specifies whether to show this mount in the UI-specific listing endpoint
|
|
290
|
+
*/
|
|
291
|
+
listingVisibility?: pulumi.Input<string>;
|
|
252
292
|
/**
|
|
253
293
|
* Mark the secrets engine as local-only. Local engines are not replicated or removed by
|
|
254
294
|
* replication.Tolerance duration to use when checking the last rotation time.
|
|
@@ -271,6 +311,10 @@ export interface SecretBackendState {
|
|
|
271
311
|
options?: pulumi.Input<{
|
|
272
312
|
[key: string]: any;
|
|
273
313
|
}>;
|
|
314
|
+
/**
|
|
315
|
+
* List of headers to allow and pass from the request to the plugin
|
|
316
|
+
*/
|
|
317
|
+
passthroughRequestHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
274
318
|
/**
|
|
275
319
|
* Name of the password policy to use to generate passwords.
|
|
276
320
|
*/
|
|
@@ -280,6 +324,10 @@ export interface SecretBackendState {
|
|
|
280
324
|
* not begin or end with a `/`. Defaults to `ldap`.
|
|
281
325
|
*/
|
|
282
326
|
path?: pulumi.Input<string>;
|
|
327
|
+
/**
|
|
328
|
+
* Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
329
|
+
*/
|
|
330
|
+
pluginVersion?: pulumi.Input<string>;
|
|
283
331
|
/**
|
|
284
332
|
* Timeout, in seconds, for the connection when making requests against the server
|
|
285
333
|
* before returning back an error.
|
|
@@ -328,6 +376,10 @@ export interface SecretBackendArgs {
|
|
|
328
376
|
* List of managed key registry entry names that the mount in question is allowed to access
|
|
329
377
|
*/
|
|
330
378
|
allowedManagedKeys?: pulumi.Input<pulumi.Input<string>[]>;
|
|
379
|
+
/**
|
|
380
|
+
* List of headers to allow and pass from the request to the plugin
|
|
381
|
+
*/
|
|
382
|
+
allowedResponseHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
331
383
|
/**
|
|
332
384
|
* Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
333
385
|
*/
|
|
@@ -366,6 +418,10 @@ export interface SecretBackendArgs {
|
|
|
366
418
|
* Default lease duration for secrets in seconds.
|
|
367
419
|
*/
|
|
368
420
|
defaultLeaseTtlSeconds?: pulumi.Input<number>;
|
|
421
|
+
/**
|
|
422
|
+
* List of headers to allow and pass from the request to the plugin
|
|
423
|
+
*/
|
|
424
|
+
delegatedAuthAccessors?: pulumi.Input<pulumi.Input<string>[]>;
|
|
369
425
|
/**
|
|
370
426
|
* Human-friendly description of the mount for the Active Directory backend.
|
|
371
427
|
*/
|
|
@@ -378,11 +434,19 @@ export interface SecretBackendArgs {
|
|
|
378
434
|
* Enable the secrets engine to access Vault's external entropy source
|
|
379
435
|
*/
|
|
380
436
|
externalEntropyAccess?: pulumi.Input<boolean>;
|
|
437
|
+
/**
|
|
438
|
+
* The key to use for signing plugin workload identity tokens
|
|
439
|
+
*/
|
|
440
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
381
441
|
/**
|
|
382
442
|
* Skip LDAP server SSL Certificate verification. This is not recommended for production.
|
|
383
443
|
* Defaults to `false`.
|
|
384
444
|
*/
|
|
385
445
|
insecureTls?: pulumi.Input<boolean>;
|
|
446
|
+
/**
|
|
447
|
+
* Specifies whether to show this mount in the UI-specific listing endpoint
|
|
448
|
+
*/
|
|
449
|
+
listingVisibility?: pulumi.Input<string>;
|
|
386
450
|
/**
|
|
387
451
|
* Mark the secrets engine as local-only. Local engines are not replicated or removed by
|
|
388
452
|
* replication.Tolerance duration to use when checking the last rotation time.
|
|
@@ -405,6 +469,10 @@ export interface SecretBackendArgs {
|
|
|
405
469
|
options?: pulumi.Input<{
|
|
406
470
|
[key: string]: any;
|
|
407
471
|
}>;
|
|
472
|
+
/**
|
|
473
|
+
* List of headers to allow and pass from the request to the plugin
|
|
474
|
+
*/
|
|
475
|
+
passthroughRequestHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
408
476
|
/**
|
|
409
477
|
* Name of the password policy to use to generate passwords.
|
|
410
478
|
*/
|
|
@@ -414,6 +482,10 @@ export interface SecretBackendArgs {
|
|
|
414
482
|
* not begin or end with a `/`. Defaults to `ldap`.
|
|
415
483
|
*/
|
|
416
484
|
path?: pulumi.Input<string>;
|
|
485
|
+
/**
|
|
486
|
+
* Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
487
|
+
*/
|
|
488
|
+
pluginVersion?: pulumi.Input<string>;
|
|
417
489
|
/**
|
|
418
490
|
* Timeout, in seconds, for the connection when making requests against the server
|
|
419
491
|
* before returning back an error.
|
package/ldap/secretBackend.js
CHANGED
|
@@ -60,6 +60,7 @@ class SecretBackend extends pulumi.CustomResource {
|
|
|
60
60
|
const state = argsOrState;
|
|
61
61
|
resourceInputs["accessor"] = state ? state.accessor : undefined;
|
|
62
62
|
resourceInputs["allowedManagedKeys"] = state ? state.allowedManagedKeys : undefined;
|
|
63
|
+
resourceInputs["allowedResponseHeaders"] = state ? state.allowedResponseHeaders : undefined;
|
|
63
64
|
resourceInputs["auditNonHmacRequestKeys"] = state ? state.auditNonHmacRequestKeys : undefined;
|
|
64
65
|
resourceInputs["auditNonHmacResponseKeys"] = state ? state.auditNonHmacResponseKeys : undefined;
|
|
65
66
|
resourceInputs["binddn"] = state ? state.binddn : undefined;
|
|
@@ -69,16 +70,21 @@ class SecretBackend extends pulumi.CustomResource {
|
|
|
69
70
|
resourceInputs["clientTlsKey"] = state ? state.clientTlsKey : undefined;
|
|
70
71
|
resourceInputs["connectionTimeout"] = state ? state.connectionTimeout : undefined;
|
|
71
72
|
resourceInputs["defaultLeaseTtlSeconds"] = state ? state.defaultLeaseTtlSeconds : undefined;
|
|
73
|
+
resourceInputs["delegatedAuthAccessors"] = state ? state.delegatedAuthAccessors : undefined;
|
|
72
74
|
resourceInputs["description"] = state ? state.description : undefined;
|
|
73
75
|
resourceInputs["disableRemount"] = state ? state.disableRemount : undefined;
|
|
74
76
|
resourceInputs["externalEntropyAccess"] = state ? state.externalEntropyAccess : undefined;
|
|
77
|
+
resourceInputs["identityTokenKey"] = state ? state.identityTokenKey : undefined;
|
|
75
78
|
resourceInputs["insecureTls"] = state ? state.insecureTls : undefined;
|
|
79
|
+
resourceInputs["listingVisibility"] = state ? state.listingVisibility : undefined;
|
|
76
80
|
resourceInputs["local"] = state ? state.local : undefined;
|
|
77
81
|
resourceInputs["maxLeaseTtlSeconds"] = state ? state.maxLeaseTtlSeconds : undefined;
|
|
78
82
|
resourceInputs["namespace"] = state ? state.namespace : undefined;
|
|
79
83
|
resourceInputs["options"] = state ? state.options : undefined;
|
|
84
|
+
resourceInputs["passthroughRequestHeaders"] = state ? state.passthroughRequestHeaders : undefined;
|
|
80
85
|
resourceInputs["passwordPolicy"] = state ? state.passwordPolicy : undefined;
|
|
81
86
|
resourceInputs["path"] = state ? state.path : undefined;
|
|
87
|
+
resourceInputs["pluginVersion"] = state ? state.pluginVersion : undefined;
|
|
82
88
|
resourceInputs["requestTimeout"] = state ? state.requestTimeout : undefined;
|
|
83
89
|
resourceInputs["schema"] = state ? state.schema : undefined;
|
|
84
90
|
resourceInputs["sealWrap"] = state ? state.sealWrap : undefined;
|
|
@@ -98,6 +104,7 @@ class SecretBackend extends pulumi.CustomResource {
|
|
|
98
104
|
throw new Error("Missing required property 'bindpass'");
|
|
99
105
|
}
|
|
100
106
|
resourceInputs["allowedManagedKeys"] = args ? args.allowedManagedKeys : undefined;
|
|
107
|
+
resourceInputs["allowedResponseHeaders"] = args ? args.allowedResponseHeaders : undefined;
|
|
101
108
|
resourceInputs["auditNonHmacRequestKeys"] = args ? args.auditNonHmacRequestKeys : undefined;
|
|
102
109
|
resourceInputs["auditNonHmacResponseKeys"] = args ? args.auditNonHmacResponseKeys : undefined;
|
|
103
110
|
resourceInputs["binddn"] = args ? args.binddn : undefined;
|
|
@@ -107,16 +114,21 @@ class SecretBackend extends pulumi.CustomResource {
|
|
|
107
114
|
resourceInputs["clientTlsKey"] = (args === null || args === void 0 ? void 0 : args.clientTlsKey) ? pulumi.secret(args.clientTlsKey) : undefined;
|
|
108
115
|
resourceInputs["connectionTimeout"] = args ? args.connectionTimeout : undefined;
|
|
109
116
|
resourceInputs["defaultLeaseTtlSeconds"] = args ? args.defaultLeaseTtlSeconds : undefined;
|
|
117
|
+
resourceInputs["delegatedAuthAccessors"] = args ? args.delegatedAuthAccessors : undefined;
|
|
110
118
|
resourceInputs["description"] = args ? args.description : undefined;
|
|
111
119
|
resourceInputs["disableRemount"] = args ? args.disableRemount : undefined;
|
|
112
120
|
resourceInputs["externalEntropyAccess"] = args ? args.externalEntropyAccess : undefined;
|
|
121
|
+
resourceInputs["identityTokenKey"] = args ? args.identityTokenKey : undefined;
|
|
113
122
|
resourceInputs["insecureTls"] = args ? args.insecureTls : undefined;
|
|
123
|
+
resourceInputs["listingVisibility"] = args ? args.listingVisibility : undefined;
|
|
114
124
|
resourceInputs["local"] = args ? args.local : undefined;
|
|
115
125
|
resourceInputs["maxLeaseTtlSeconds"] = args ? args.maxLeaseTtlSeconds : undefined;
|
|
116
126
|
resourceInputs["namespace"] = args ? args.namespace : undefined;
|
|
117
127
|
resourceInputs["options"] = args ? args.options : undefined;
|
|
128
|
+
resourceInputs["passthroughRequestHeaders"] = args ? args.passthroughRequestHeaders : undefined;
|
|
118
129
|
resourceInputs["passwordPolicy"] = args ? args.passwordPolicy : undefined;
|
|
119
130
|
resourceInputs["path"] = args ? args.path : undefined;
|
|
131
|
+
resourceInputs["pluginVersion"] = args ? args.pluginVersion : undefined;
|
|
120
132
|
resourceInputs["requestTimeout"] = args ? args.requestTimeout : undefined;
|
|
121
133
|
resourceInputs["schema"] = args ? args.schema : undefined;
|
|
122
134
|
resourceInputs["sealWrap"] = args ? args.sealWrap : undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"secretBackend.js","sourceRoot":"","sources":["../../ldap/secretBackend.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAa,aAAc,SAAQ,MAAM,CAAC,cAAc;IACpD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0B,EAAE,IAAmC;QACxH,OAAO,IAAI,aAAa,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACpE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,YAAY,CAAC;IAC9D,CAAC;
|
|
1
|
+
{"version":3,"file":"secretBackend.js","sourceRoot":"","sources":["../../ldap/secretBackend.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAa,aAAc,SAAQ,MAAM,CAAC,cAAc;IACpD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA0B,EAAE,IAAmC;QACxH,OAAO,IAAI,aAAa,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACpE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,aAAa,CAAC,YAAY,CAAC;IAC9D,CAAC;IAsKD,YAAY,IAAY,EAAE,WAAoD,EAAE,IAAmC;QAC/G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA6C,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACxG,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/D;aAAM;YACH,MAAM,IAAI,GAAG,WAA4C,CAAC;YAC1D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,aAAa,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,cAAc,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,YAAY,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,cAAc,CAAC,EAAE,CAAC;QAC9F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;;AA1RL,sCA2RC;AA7QG,gBAAgB;AACO,0BAAY,GAAG,wCAAwC,CAAC"}
|
package/mount.d.ts
CHANGED
|
@@ -89,6 +89,11 @@ export declare class Mount extends pulumi.CustomResource {
|
|
|
89
89
|
* Set of managed key registry entry names that the mount in question is allowed to access
|
|
90
90
|
*/
|
|
91
91
|
readonly allowedManagedKeys: pulumi.Output<string[] | undefined>;
|
|
92
|
+
/**
|
|
93
|
+
* List of headers to allow, allowing a plugin to include
|
|
94
|
+
* them in the response.
|
|
95
|
+
*/
|
|
96
|
+
readonly allowedResponseHeaders: pulumi.Output<string[] | undefined>;
|
|
92
97
|
/**
|
|
93
98
|
* Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
94
99
|
*/
|
|
@@ -101,6 +106,11 @@ export declare class Mount extends pulumi.CustomResource {
|
|
|
101
106
|
* Default lease duration for tokens and secrets in seconds
|
|
102
107
|
*/
|
|
103
108
|
readonly defaultLeaseTtlSeconds: pulumi.Output<number>;
|
|
109
|
+
/**
|
|
110
|
+
* List of allowed authentication mount accessors the
|
|
111
|
+
* backend can request delegated authentication for.
|
|
112
|
+
*/
|
|
113
|
+
readonly delegatedAuthAccessors: pulumi.Output<string[] | undefined>;
|
|
104
114
|
/**
|
|
105
115
|
* Human-friendly description of the mount
|
|
106
116
|
*/
|
|
@@ -109,6 +119,15 @@ export declare class Mount extends pulumi.CustomResource {
|
|
|
109
119
|
* Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
|
|
110
120
|
*/
|
|
111
121
|
readonly externalEntropyAccess: pulumi.Output<boolean | undefined>;
|
|
122
|
+
/**
|
|
123
|
+
* The key to use for signing plugin workload identity tokens. If
|
|
124
|
+
* not provided, this will default to Vault's OIDC default key.
|
|
125
|
+
*/
|
|
126
|
+
readonly identityTokenKey: pulumi.Output<string | undefined>;
|
|
127
|
+
/**
|
|
128
|
+
* Specifies whether to show this mount in the UI-specific listing endpoint
|
|
129
|
+
*/
|
|
130
|
+
readonly listingVisibility: pulumi.Output<string | undefined>;
|
|
112
131
|
/**
|
|
113
132
|
* Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
114
133
|
*/
|
|
@@ -130,10 +149,21 @@ export declare class Mount extends pulumi.CustomResource {
|
|
|
130
149
|
readonly options: pulumi.Output<{
|
|
131
150
|
[key: string]: any;
|
|
132
151
|
} | undefined>;
|
|
152
|
+
/**
|
|
153
|
+
* List of headers to allow and pass from the request to
|
|
154
|
+
* the plugin.
|
|
155
|
+
*/
|
|
156
|
+
readonly passthroughRequestHeaders: pulumi.Output<string[] | undefined>;
|
|
133
157
|
/**
|
|
134
158
|
* Where the secret backend will be mounted
|
|
135
159
|
*/
|
|
136
160
|
readonly path: pulumi.Output<string>;
|
|
161
|
+
/**
|
|
162
|
+
* Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
|
|
163
|
+
* If unspecified, the server will select any matching unversioned plugin that may have been
|
|
164
|
+
* registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
|
|
165
|
+
*/
|
|
166
|
+
readonly pluginVersion: pulumi.Output<string | undefined>;
|
|
137
167
|
/**
|
|
138
168
|
* Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
|
|
139
169
|
*/
|
|
@@ -163,6 +193,11 @@ export interface MountState {
|
|
|
163
193
|
* Set of managed key registry entry names that the mount in question is allowed to access
|
|
164
194
|
*/
|
|
165
195
|
allowedManagedKeys?: pulumi.Input<pulumi.Input<string>[]>;
|
|
196
|
+
/**
|
|
197
|
+
* List of headers to allow, allowing a plugin to include
|
|
198
|
+
* them in the response.
|
|
199
|
+
*/
|
|
200
|
+
allowedResponseHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
166
201
|
/**
|
|
167
202
|
* Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
168
203
|
*/
|
|
@@ -175,6 +210,11 @@ export interface MountState {
|
|
|
175
210
|
* Default lease duration for tokens and secrets in seconds
|
|
176
211
|
*/
|
|
177
212
|
defaultLeaseTtlSeconds?: pulumi.Input<number>;
|
|
213
|
+
/**
|
|
214
|
+
* List of allowed authentication mount accessors the
|
|
215
|
+
* backend can request delegated authentication for.
|
|
216
|
+
*/
|
|
217
|
+
delegatedAuthAccessors?: pulumi.Input<pulumi.Input<string>[]>;
|
|
178
218
|
/**
|
|
179
219
|
* Human-friendly description of the mount
|
|
180
220
|
*/
|
|
@@ -183,6 +223,15 @@ export interface MountState {
|
|
|
183
223
|
* Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
|
|
184
224
|
*/
|
|
185
225
|
externalEntropyAccess?: pulumi.Input<boolean>;
|
|
226
|
+
/**
|
|
227
|
+
* The key to use for signing plugin workload identity tokens. If
|
|
228
|
+
* not provided, this will default to Vault's OIDC default key.
|
|
229
|
+
*/
|
|
230
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
231
|
+
/**
|
|
232
|
+
* Specifies whether to show this mount in the UI-specific listing endpoint
|
|
233
|
+
*/
|
|
234
|
+
listingVisibility?: pulumi.Input<string>;
|
|
186
235
|
/**
|
|
187
236
|
* Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
188
237
|
*/
|
|
@@ -204,10 +253,21 @@ export interface MountState {
|
|
|
204
253
|
options?: pulumi.Input<{
|
|
205
254
|
[key: string]: any;
|
|
206
255
|
}>;
|
|
256
|
+
/**
|
|
257
|
+
* List of headers to allow and pass from the request to
|
|
258
|
+
* the plugin.
|
|
259
|
+
*/
|
|
260
|
+
passthroughRequestHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
207
261
|
/**
|
|
208
262
|
* Where the secret backend will be mounted
|
|
209
263
|
*/
|
|
210
264
|
path?: pulumi.Input<string>;
|
|
265
|
+
/**
|
|
266
|
+
* Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
|
|
267
|
+
* If unspecified, the server will select any matching unversioned plugin that may have been
|
|
268
|
+
* registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
|
|
269
|
+
*/
|
|
270
|
+
pluginVersion?: pulumi.Input<string>;
|
|
211
271
|
/**
|
|
212
272
|
* Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
|
|
213
273
|
*/
|
|
@@ -225,6 +285,11 @@ export interface MountArgs {
|
|
|
225
285
|
* Set of managed key registry entry names that the mount in question is allowed to access
|
|
226
286
|
*/
|
|
227
287
|
allowedManagedKeys?: pulumi.Input<pulumi.Input<string>[]>;
|
|
288
|
+
/**
|
|
289
|
+
* List of headers to allow, allowing a plugin to include
|
|
290
|
+
* them in the response.
|
|
291
|
+
*/
|
|
292
|
+
allowedResponseHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
228
293
|
/**
|
|
229
294
|
* Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
230
295
|
*/
|
|
@@ -237,6 +302,11 @@ export interface MountArgs {
|
|
|
237
302
|
* Default lease duration for tokens and secrets in seconds
|
|
238
303
|
*/
|
|
239
304
|
defaultLeaseTtlSeconds?: pulumi.Input<number>;
|
|
305
|
+
/**
|
|
306
|
+
* List of allowed authentication mount accessors the
|
|
307
|
+
* backend can request delegated authentication for.
|
|
308
|
+
*/
|
|
309
|
+
delegatedAuthAccessors?: pulumi.Input<pulumi.Input<string>[]>;
|
|
240
310
|
/**
|
|
241
311
|
* Human-friendly description of the mount
|
|
242
312
|
*/
|
|
@@ -245,6 +315,15 @@ export interface MountArgs {
|
|
|
245
315
|
* Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
|
|
246
316
|
*/
|
|
247
317
|
externalEntropyAccess?: pulumi.Input<boolean>;
|
|
318
|
+
/**
|
|
319
|
+
* The key to use for signing plugin workload identity tokens. If
|
|
320
|
+
* not provided, this will default to Vault's OIDC default key.
|
|
321
|
+
*/
|
|
322
|
+
identityTokenKey?: pulumi.Input<string>;
|
|
323
|
+
/**
|
|
324
|
+
* Specifies whether to show this mount in the UI-specific listing endpoint
|
|
325
|
+
*/
|
|
326
|
+
listingVisibility?: pulumi.Input<string>;
|
|
248
327
|
/**
|
|
249
328
|
* Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
250
329
|
*/
|
|
@@ -266,10 +345,21 @@ export interface MountArgs {
|
|
|
266
345
|
options?: pulumi.Input<{
|
|
267
346
|
[key: string]: any;
|
|
268
347
|
}>;
|
|
348
|
+
/**
|
|
349
|
+
* List of headers to allow and pass from the request to
|
|
350
|
+
* the plugin.
|
|
351
|
+
*/
|
|
352
|
+
passthroughRequestHeaders?: pulumi.Input<pulumi.Input<string>[]>;
|
|
269
353
|
/**
|
|
270
354
|
* Where the secret backend will be mounted
|
|
271
355
|
*/
|
|
272
356
|
path: pulumi.Input<string>;
|
|
357
|
+
/**
|
|
358
|
+
* Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
|
|
359
|
+
* If unspecified, the server will select any matching unversioned plugin that may have been
|
|
360
|
+
* registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
|
|
361
|
+
*/
|
|
362
|
+
pluginVersion?: pulumi.Input<string>;
|
|
273
363
|
/**
|
|
274
364
|
* Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
|
|
275
365
|
*/
|
package/mount.js
CHANGED
|
@@ -101,16 +101,22 @@ class Mount extends pulumi.CustomResource {
|
|
|
101
101
|
const state = argsOrState;
|
|
102
102
|
resourceInputs["accessor"] = state ? state.accessor : undefined;
|
|
103
103
|
resourceInputs["allowedManagedKeys"] = state ? state.allowedManagedKeys : undefined;
|
|
104
|
+
resourceInputs["allowedResponseHeaders"] = state ? state.allowedResponseHeaders : undefined;
|
|
104
105
|
resourceInputs["auditNonHmacRequestKeys"] = state ? state.auditNonHmacRequestKeys : undefined;
|
|
105
106
|
resourceInputs["auditNonHmacResponseKeys"] = state ? state.auditNonHmacResponseKeys : undefined;
|
|
106
107
|
resourceInputs["defaultLeaseTtlSeconds"] = state ? state.defaultLeaseTtlSeconds : undefined;
|
|
108
|
+
resourceInputs["delegatedAuthAccessors"] = state ? state.delegatedAuthAccessors : undefined;
|
|
107
109
|
resourceInputs["description"] = state ? state.description : undefined;
|
|
108
110
|
resourceInputs["externalEntropyAccess"] = state ? state.externalEntropyAccess : undefined;
|
|
111
|
+
resourceInputs["identityTokenKey"] = state ? state.identityTokenKey : undefined;
|
|
112
|
+
resourceInputs["listingVisibility"] = state ? state.listingVisibility : undefined;
|
|
109
113
|
resourceInputs["local"] = state ? state.local : undefined;
|
|
110
114
|
resourceInputs["maxLeaseTtlSeconds"] = state ? state.maxLeaseTtlSeconds : undefined;
|
|
111
115
|
resourceInputs["namespace"] = state ? state.namespace : undefined;
|
|
112
116
|
resourceInputs["options"] = state ? state.options : undefined;
|
|
117
|
+
resourceInputs["passthroughRequestHeaders"] = state ? state.passthroughRequestHeaders : undefined;
|
|
113
118
|
resourceInputs["path"] = state ? state.path : undefined;
|
|
119
|
+
resourceInputs["pluginVersion"] = state ? state.pluginVersion : undefined;
|
|
114
120
|
resourceInputs["sealWrap"] = state ? state.sealWrap : undefined;
|
|
115
121
|
resourceInputs["type"] = state ? state.type : undefined;
|
|
116
122
|
}
|
|
@@ -123,16 +129,22 @@ class Mount extends pulumi.CustomResource {
|
|
|
123
129
|
throw new Error("Missing required property 'type'");
|
|
124
130
|
}
|
|
125
131
|
resourceInputs["allowedManagedKeys"] = args ? args.allowedManagedKeys : undefined;
|
|
132
|
+
resourceInputs["allowedResponseHeaders"] = args ? args.allowedResponseHeaders : undefined;
|
|
126
133
|
resourceInputs["auditNonHmacRequestKeys"] = args ? args.auditNonHmacRequestKeys : undefined;
|
|
127
134
|
resourceInputs["auditNonHmacResponseKeys"] = args ? args.auditNonHmacResponseKeys : undefined;
|
|
128
135
|
resourceInputs["defaultLeaseTtlSeconds"] = args ? args.defaultLeaseTtlSeconds : undefined;
|
|
136
|
+
resourceInputs["delegatedAuthAccessors"] = args ? args.delegatedAuthAccessors : undefined;
|
|
129
137
|
resourceInputs["description"] = args ? args.description : undefined;
|
|
130
138
|
resourceInputs["externalEntropyAccess"] = args ? args.externalEntropyAccess : undefined;
|
|
139
|
+
resourceInputs["identityTokenKey"] = args ? args.identityTokenKey : undefined;
|
|
140
|
+
resourceInputs["listingVisibility"] = args ? args.listingVisibility : undefined;
|
|
131
141
|
resourceInputs["local"] = args ? args.local : undefined;
|
|
132
142
|
resourceInputs["maxLeaseTtlSeconds"] = args ? args.maxLeaseTtlSeconds : undefined;
|
|
133
143
|
resourceInputs["namespace"] = args ? args.namespace : undefined;
|
|
134
144
|
resourceInputs["options"] = args ? args.options : undefined;
|
|
145
|
+
resourceInputs["passthroughRequestHeaders"] = args ? args.passthroughRequestHeaders : undefined;
|
|
135
146
|
resourceInputs["path"] = args ? args.path : undefined;
|
|
147
|
+
resourceInputs["pluginVersion"] = args ? args.pluginVersion : undefined;
|
|
136
148
|
resourceInputs["sealWrap"] = args ? args.sealWrap : undefined;
|
|
137
149
|
resourceInputs["type"] = args ? args.type : undefined;
|
|
138
150
|
resourceInputs["accessor"] = undefined /*out*/;
|
package/mount.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"mount.js","sourceRoot":"","sources":["../mount.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH,MAAa,KAAM,SAAQ,MAAM,CAAC,cAAc;IAC5C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkB,EAAE,IAAmC;QAChH,OAAO,IAAI,KAAK,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IACtD,CAAC;
|
|
1
|
+
{"version":3,"file":"mount.js","sourceRoot":"","sources":["../mount.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiEG;AACH,MAAa,KAAM,SAAQ,MAAM,CAAC,cAAc;IAC5C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkB,EAAE,IAAmC;QAChH,OAAO,IAAI,KAAK,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,KAAK,CAAC,YAAY,CAAC;IACtD,CAAC;IAoGD,YAAY,IAAY,EAAE,WAAoC,EAAE,IAAmC;QAC/F,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqC,CAAC;YACpD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClG,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAAoC,CAAC;YAClD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5F,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,2BAA2B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1D,CAAC;;AAtLL,sBAuLC;AAzKG,gBAAgB;AACO,kBAAY,GAAG,yBAAyB,CAAC"}
|