@pulumi/vault 6.2.0-alpha.1718953130 → 6.2.0

package/okta/authBackend.d.ts

@@ -82,6 +82,8 @@ export declare class AuthBackend extends pulumi.CustomResource {
     /**
      * Maximum duration after which authentication will be expired
      * [See the documentation for info on valid duration formats](https://golang.org/pkg/time/#ParseDuration).
+     *
+     * @deprecated Deprecated. Please use `tokenMaxTtl` instead.
      */
     readonly maxTtl: pulumi.Output<string | undefined>;
     /**
@@ -104,9 +106,47 @@ export declare class AuthBackend extends pulumi.CustomResource {
      * If this is not supplied only locally configured groups will be enabled.
      */
     readonly token: pulumi.Output<string | undefined>;
+    /**
+     * Specifies the blocks of IP addresses which are allowed to use the generated token
+     */
+    readonly tokenBoundCidrs: pulumi.Output<string[] | undefined>;
+    /**
+     * Generated Token's Explicit Maximum TTL in seconds
+     */
+    readonly tokenExplicitMaxTtl: pulumi.Output<number | undefined>;
+    /**
+     * The maximum lifetime of the generated token
+     */
+    readonly tokenMaxTtl: pulumi.Output<number | undefined>;
+    /**
+     * If true, the 'default' policy will not automatically be added to generated tokens
+     */
+    readonly tokenNoDefaultPolicy: pulumi.Output<boolean | undefined>;
+    /**
+     * The maximum number of times a token may be used, a value of zero means unlimited
+     */
+    readonly tokenNumUses: pulumi.Output<number | undefined>;
+    /**
+     * Generated Token's Period
+     */
+    readonly tokenPeriod: pulumi.Output<number | undefined>;
+    /**
+     * Generated Token's Policies
+     */
+    readonly tokenPolicies: pulumi.Output<string[] | undefined>;
+    /**
+     * The initial ttl of the token to generate in seconds
+     */
+    readonly tokenTtl: pulumi.Output<number | undefined>;
+    /**
+     * The type of token to generate, service or batch
+     */
+    readonly tokenType: pulumi.Output<string | undefined>;
     /**
      * Duration after which authentication will be expired.
      * [See the documentation for info on valid duration formats](https://golang.org/pkg/time/#ParseDuration).
+     *
+     * @deprecated Deprecated. Please use `tokenTtl` instead.
      */
     readonly ttl: pulumi.Output<string | undefined>;
     /**
@@ -156,6 +196,8 @@ export interface AuthBackendState {
     /**
      * Maximum duration after which authentication will be expired
      * [See the documentation for info on valid duration formats](https://golang.org/pkg/time/#ParseDuration).
+     *
+     * @deprecated Deprecated. Please use `tokenMaxTtl` instead.
      */
     maxTtl?: pulumi.Input<string>;
     /**
@@ -178,9 +220,47 @@ export interface AuthBackendState {
      * If this is not supplied only locally configured groups will be enabled.
      */
     token?: pulumi.Input<string>;
+    /**
+     * Specifies the blocks of IP addresses which are allowed to use the generated token
+     */
+    tokenBoundCidrs?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Generated Token's Explicit Maximum TTL in seconds
+     */
+    tokenExplicitMaxTtl?: pulumi.Input<number>;
+    /**
+     * The maximum lifetime of the generated token
+     */
+    tokenMaxTtl?: pulumi.Input<number>;
+    /**
+     * If true, the 'default' policy will not automatically be added to generated tokens
+     */
+    tokenNoDefaultPolicy?: pulumi.Input<boolean>;
+    /**
+     * The maximum number of times a token may be used, a value of zero means unlimited
+     */
+    tokenNumUses?: pulumi.Input<number>;
+    /**
+     * Generated Token's Period
+     */
+    tokenPeriod?: pulumi.Input<number>;
+    /**
+     * Generated Token's Policies
+     */
+    tokenPolicies?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The initial ttl of the token to generate in seconds
+     */
+    tokenTtl?: pulumi.Input<number>;
+    /**
+     * The type of token to generate, service or batch
+     */
+    tokenType?: pulumi.Input<string>;
     /**
      * Duration after which authentication will be expired.
      * [See the documentation for info on valid duration formats](https://golang.org/pkg/time/#ParseDuration).
+     *
+     * @deprecated Deprecated. Please use `tokenTtl` instead.
      */
     ttl?: pulumi.Input<string>;
     /**
@@ -218,6 +298,8 @@ export interface AuthBackendArgs {
     /**
      * Maximum duration after which authentication will be expired
      * [See the documentation for info on valid duration formats](https://golang.org/pkg/time/#ParseDuration).
+     *
+     * @deprecated Deprecated. Please use `tokenMaxTtl` instead.
      */
     maxTtl?: pulumi.Input<string>;
     /**
@@ -240,9 +322,47 @@ export interface AuthBackendArgs {
      * If this is not supplied only locally configured groups will be enabled.
      */
     token?: pulumi.Input<string>;
+    /**
+     * Specifies the blocks of IP addresses which are allowed to use the generated token
+     */
+    tokenBoundCidrs?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Generated Token's Explicit Maximum TTL in seconds
+     */
+    tokenExplicitMaxTtl?: pulumi.Input<number>;
+    /**
+     * The maximum lifetime of the generated token
+     */
+    tokenMaxTtl?: pulumi.Input<number>;
+    /**
+     * If true, the 'default' policy will not automatically be added to generated tokens
+     */
+    tokenNoDefaultPolicy?: pulumi.Input<boolean>;
+    /**
+     * The maximum number of times a token may be used, a value of zero means unlimited
+     */
+    tokenNumUses?: pulumi.Input<number>;
+    /**
+     * Generated Token's Period
+     */
+    tokenPeriod?: pulumi.Input<number>;
+    /**
+     * Generated Token's Policies
+     */
+    tokenPolicies?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * The initial ttl of the token to generate in seconds
+     */
+    tokenTtl?: pulumi.Input<number>;
+    /**
+     * The type of token to generate, service or batch
+     */
+    tokenType?: pulumi.Input<string>;
     /**
      * Duration after which authentication will be expired.
      * [See the documentation for info on valid duration formats](https://golang.org/pkg/time/#ParseDuration).
+     *
+     * @deprecated Deprecated. Please use `tokenTtl` instead.
      */
     ttl?: pulumi.Input<string>;
     /**

package/okta/authBackend.js

@@ -80,6 +80,15 @@ class AuthBackend extends pulumi.CustomResource {
             resourceInputs["organization"] = state ? state.organization : undefined;
             resourceInputs["path"] = state ? state.path : undefined;
             resourceInputs["token"] = state ? state.token : undefined;
+            resourceInputs["tokenBoundCidrs"] = state ? state.tokenBoundCidrs : undefined;
+            resourceInputs["tokenExplicitMaxTtl"] = state ? state.tokenExplicitMaxTtl : undefined;
+            resourceInputs["tokenMaxTtl"] = state ? state.tokenMaxTtl : undefined;
+            resourceInputs["tokenNoDefaultPolicy"] = state ? state.tokenNoDefaultPolicy : undefined;
+            resourceInputs["tokenNumUses"] = state ? state.tokenNumUses : undefined;
+            resourceInputs["tokenPeriod"] = state ? state.tokenPeriod : undefined;
+            resourceInputs["tokenPolicies"] = state ? state.tokenPolicies : undefined;
+            resourceInputs["tokenTtl"] = state ? state.tokenTtl : undefined;
+            resourceInputs["tokenType"] = state ? state.tokenType : undefined;
             resourceInputs["ttl"] = state ? state.ttl : undefined;
             resourceInputs["users"] = state ? state.users : undefined;
         }
@@ -98,6 +107,15 @@ class AuthBackend extends pulumi.CustomResource {
             resourceInputs["organization"] = args ? args.organization : undefined;
             resourceInputs["path"] = args ? args.path : undefined;
             resourceInputs["token"] = (args === null || args === void 0 ? void 0 : args.token) ? pulumi.secret(args.token) : undefined;
+            resourceInputs["tokenBoundCidrs"] = args ? args.tokenBoundCidrs : undefined;
+            resourceInputs["tokenExplicitMaxTtl"] = args ? args.tokenExplicitMaxTtl : undefined;
+            resourceInputs["tokenMaxTtl"] = args ? args.tokenMaxTtl : undefined;
+            resourceInputs["tokenNoDefaultPolicy"] = args ? args.tokenNoDefaultPolicy : undefined;
+            resourceInputs["tokenNumUses"] = args ? args.tokenNumUses : undefined;
+            resourceInputs["tokenPeriod"] = args ? args.tokenPeriod : undefined;
+            resourceInputs["tokenPolicies"] = args ? args.tokenPolicies : undefined;
+            resourceInputs["tokenTtl"] = args ? args.tokenTtl : undefined;
+            resourceInputs["tokenType"] = args ? args.tokenType : undefined;
             resourceInputs["ttl"] = args ? args.ttl : undefined;
             resourceInputs["users"] = args ? args.users : undefined;
             resourceInputs["accessor"] = undefined /*out*/;

package/okta/authBackend.js.map

@@ -1 +1 @@
-{"version":3,"file":"authBackend.js","sourceRoot":"","sources":["../../okta/authBackend.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IAwED,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AA3IL,kCA4IC;AA9HG,gBAAgB;AACO,wBAAY,GAAG,oCAAoC,CAAC"}
+{"version":3,"file":"authBackend.js","sourceRoot":"","sources":["../../okta/authBackend.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAwB,EAAE,IAAmC;QACtH,OAAO,IAAI,WAAW,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAClE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IAgHD,YAAY,IAAY,EAAE,WAAgD,EAAE,IAAmC;QAC3G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA2C,CAAC;YAC1D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7D;aAAM;YACH,MAAM,IAAI,GAAG,WAA0C,CAAC;YACxD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,KAAK,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;YACpF,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;YACpD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AArML,kCAsMC;AAxLG,gBAAgB;AACO,wBAAY,GAAG,oCAAoC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@pulumi/vault",
-    "version": "6.2.0-alpha.1718953130",
+    "version": "6.2.0",
     "description": "A Pulumi package for creating and managing HashiCorp Vault cloud resources.",
     "keywords": [
         "pulumi",
@@ -23,6 +23,6 @@
     "pulumi": {
         "resource": true,
         "name": "vault",
-        "version": "6.2.0-alpha.1718953130"
+        "version": "6.2.0"
     }
 }

package/pkisecret/backendConfigEst.d.ts

@@ -0,0 +1,191 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * Allows setting the EST configuration on a PKI Secret Backend
+ *
+ * ## Import
+ *
+ * The PKI config cluster can be imported using the resource's `id`.
+ * In the case of the example above the `id` would be `pki-root/config/est`,
+ * where the `pki-root` component is the resource's `backend`, e.g.
+ *
+ * ```sh
+ * $ pulumi import vault:pkiSecret/backendConfigEst:BackendConfigEst example pki-root/config/est
+ * ```
+ */
+export declare class BackendConfigEst extends pulumi.CustomResource {
+    /**
+     * Get an existing BackendConfigEst resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: BackendConfigEstState, opts?: pulumi.CustomResourceOptions): BackendConfigEst;
+    /**
+     * Returns true if the given object is an instance of BackendConfigEst.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is BackendConfigEst;
+    /**
+     * Fields parsed from the CSR that appear in the audit and can be used by sentinel policies.
+     *
+     * <a id="nestedatt--authenticators"></a>
+     */
+    readonly auditFields: pulumi.Output<string[]>;
+    /**
+     * Lists the mount accessors EST should delegate authentication requests towards (see below for nested schema).
+     */
+    readonly authenticators: pulumi.Output<outputs.pkiSecret.BackendConfigEstAuthenticators>;
+    /**
+     * The path to the PKI secret backend to
+     * read the EST configuration from, with no leading or trailing `/`s.
+     */
+    readonly backend: pulumi.Output<string>;
+    /**
+     * If set, this mount will register the default `.well-known/est` URL path. Only a single mount can enable this across a Vault cluster.
+     */
+    readonly defaultMount: pulumi.Output<boolean | undefined>;
+    /**
+     * Required to be set if defaultMount is enabled. Specifies the behavior for requests using the default EST label. Can be sign-verbatim or a role given by role:<role_name>.
+     */
+    readonly defaultPathPolicy: pulumi.Output<string | undefined>;
+    /**
+     * If set, parse out fields from the provided CSR making them available for Sentinel policies.
+     */
+    readonly enableSentinelParsing: pulumi.Output<boolean | undefined>;
+    /**
+     * Specifies whether EST is enabled.
+     */
+    readonly enabled: pulumi.Output<boolean | undefined>;
+    /**
+     * Configures a pairing of an EST label with the redirected behavior for requests hitting that role. The path policy can be sign-verbatim or a role given by role:<role_name>. Labels must be unique across Vault cluster, and will register .well-known/est/<label> URL paths.
+     */
+    readonly labelToPathPolicy: pulumi.Output<{
+        [key: string]: any;
+    } | undefined>;
+    /**
+     * A read-only timestamp representing the last time the configuration was updated.
+     */
+    readonly lastUpdated: pulumi.Output<string>;
+    /**
+     * The namespace of the target resource.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     * *Available only for Vault Enterprise*.
+     */
+    readonly namespace: pulumi.Output<string | undefined>;
+    /**
+     * Create a BackendConfigEst resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: BackendConfigEstArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering BackendConfigEst resources.
+ */
+export interface BackendConfigEstState {
+    /**
+     * Fields parsed from the CSR that appear in the audit and can be used by sentinel policies.
+     *
+     * <a id="nestedatt--authenticators"></a>
+     */
+    auditFields?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Lists the mount accessors EST should delegate authentication requests towards (see below for nested schema).
+     */
+    authenticators?: pulumi.Input<inputs.pkiSecret.BackendConfigEstAuthenticators>;
+    /**
+     * The path to the PKI secret backend to
+     * read the EST configuration from, with no leading or trailing `/`s.
+     */
+    backend?: pulumi.Input<string>;
+    /**
+     * If set, this mount will register the default `.well-known/est` URL path. Only a single mount can enable this across a Vault cluster.
+     */
+    defaultMount?: pulumi.Input<boolean>;
+    /**
+     * Required to be set if defaultMount is enabled. Specifies the behavior for requests using the default EST label. Can be sign-verbatim or a role given by role:<role_name>.
+     */
+    defaultPathPolicy?: pulumi.Input<string>;
+    /**
+     * If set, parse out fields from the provided CSR making them available for Sentinel policies.
+     */
+    enableSentinelParsing?: pulumi.Input<boolean>;
+    /**
+     * Specifies whether EST is enabled.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * Configures a pairing of an EST label with the redirected behavior for requests hitting that role. The path policy can be sign-verbatim or a role given by role:<role_name>. Labels must be unique across Vault cluster, and will register .well-known/est/<label> URL paths.
+     */
+    labelToPathPolicy?: pulumi.Input<{
+        [key: string]: any;
+    }>;
+    /**
+     * A read-only timestamp representing the last time the configuration was updated.
+     */
+    lastUpdated?: pulumi.Input<string>;
+    /**
+     * The namespace of the target resource.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     * *Available only for Vault Enterprise*.
+     */
+    namespace?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a BackendConfigEst resource.
+ */
+export interface BackendConfigEstArgs {
+    /**
+     * Fields parsed from the CSR that appear in the audit and can be used by sentinel policies.
+     *
+     * <a id="nestedatt--authenticators"></a>
+     */
+    auditFields?: pulumi.Input<pulumi.Input<string>[]>;
+    /**
+     * Lists the mount accessors EST should delegate authentication requests towards (see below for nested schema).
+     */
+    authenticators?: pulumi.Input<inputs.pkiSecret.BackendConfigEstAuthenticators>;
+    /**
+     * The path to the PKI secret backend to
+     * read the EST configuration from, with no leading or trailing `/`s.
+     */
+    backend: pulumi.Input<string>;
+    /**
+     * If set, this mount will register the default `.well-known/est` URL path. Only a single mount can enable this across a Vault cluster.
+     */
+    defaultMount?: pulumi.Input<boolean>;
+    /**
+     * Required to be set if defaultMount is enabled. Specifies the behavior for requests using the default EST label. Can be sign-verbatim or a role given by role:<role_name>.
+     */
+    defaultPathPolicy?: pulumi.Input<string>;
+    /**
+     * If set, parse out fields from the provided CSR making them available for Sentinel policies.
+     */
+    enableSentinelParsing?: pulumi.Input<boolean>;
+    /**
+     * Specifies whether EST is enabled.
+     */
+    enabled?: pulumi.Input<boolean>;
+    /**
+     * Configures a pairing of an EST label with the redirected behavior for requests hitting that role. The path policy can be sign-verbatim or a role given by role:<role_name>. Labels must be unique across Vault cluster, and will register .well-known/est/<label> URL paths.
+     */
+    labelToPathPolicy?: pulumi.Input<{
+        [key: string]: any;
+    }>;
+    /**
+     * The namespace of the target resource.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     * *Available only for Vault Enterprise*.
+     */
+    namespace?: pulumi.Input<string>;
+}

package/pkisecret/backendConfigEst.js

@@ -0,0 +1,83 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BackendConfigEst = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Allows setting the EST configuration on a PKI Secret Backend
+ *
+ * ## Import
+ *
+ * The PKI config cluster can be imported using the resource's `id`.
+ * In the case of the example above the `id` would be `pki-root/config/est`,
+ * where the `pki-root` component is the resource's `backend`, e.g.
+ *
+ * ```sh
+ * $ pulumi import vault:pkiSecret/backendConfigEst:BackendConfigEst example pki-root/config/est
+ * ```
+ */
+class BackendConfigEst extends pulumi.CustomResource {
+    /**
+     * Get an existing BackendConfigEst resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new BackendConfigEst(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of BackendConfigEst.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === BackendConfigEst.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["auditFields"] = state ? state.auditFields : undefined;
+            resourceInputs["authenticators"] = state ? state.authenticators : undefined;
+            resourceInputs["backend"] = state ? state.backend : undefined;
+            resourceInputs["defaultMount"] = state ? state.defaultMount : undefined;
+            resourceInputs["defaultPathPolicy"] = state ? state.defaultPathPolicy : undefined;
+            resourceInputs["enableSentinelParsing"] = state ? state.enableSentinelParsing : undefined;
+            resourceInputs["enabled"] = state ? state.enabled : undefined;
+            resourceInputs["labelToPathPolicy"] = state ? state.labelToPathPolicy : undefined;
+            resourceInputs["lastUpdated"] = state ? state.lastUpdated : undefined;
+            resourceInputs["namespace"] = state ? state.namespace : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.backend === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'backend'");
+            }
+            resourceInputs["auditFields"] = args ? args.auditFields : undefined;
+            resourceInputs["authenticators"] = args ? args.authenticators : undefined;
+            resourceInputs["backend"] = args ? args.backend : undefined;
+            resourceInputs["defaultMount"] = args ? args.defaultMount : undefined;
+            resourceInputs["defaultPathPolicy"] = args ? args.defaultPathPolicy : undefined;
+            resourceInputs["enableSentinelParsing"] = args ? args.enableSentinelParsing : undefined;
+            resourceInputs["enabled"] = args ? args.enabled : undefined;
+            resourceInputs["labelToPathPolicy"] = args ? args.labelToPathPolicy : undefined;
+            resourceInputs["namespace"] = args ? args.namespace : undefined;
+            resourceInputs["lastUpdated"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(BackendConfigEst.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.BackendConfigEst = BackendConfigEst;
+/** @internal */
+BackendConfigEst.__pulumiType = 'vault:pkiSecret/backendConfigEst:BackendConfigEst';
+//# sourceMappingURL=backendConfigEst.js.map

package/pkisecret/backendConfigEst.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backendConfigEst.js","sourceRoot":"","sources":["../../pkisecret/backendConfigEst.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,0CAA0C;AAE1C;;;;;;;;;;;;GAYG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACvE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IAyDD,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;SACrE;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACrD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AApHL,4CAqHC;AAvGG,gBAAgB;AACO,6BAAY,GAAG,mDAAmD,CAAC"}

package/pkisecret/getBackendConfigEst.d.ts

@@ -0,0 +1,117 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as outputs from "../types/output";
+/**
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const pki = new vault.Mount("pki", {
+ *     path: "pki",
+ *     type: "pki",
+ *     description: "PKI secret engine mount",
+ * });
+ * const estConfig = vault.pkiSecret.getBackendConfigEstOutput({
+ *     backend: pki.path,
+ * });
+ * ```
+ */
+export declare function getBackendConfigEst(args: GetBackendConfigEstArgs, opts?: pulumi.InvokeOptions): Promise<GetBackendConfigEstResult>;
+/**
+ * A collection of arguments for invoking getBackendConfigEst.
+ */
+export interface GetBackendConfigEstArgs {
+    /**
+     * The path to the PKI secret backend to
+     * read the EST configuration from, with no leading or trailing `/`s.
+     */
+    backend: string;
+    /**
+     * The namespace of the target resource.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     * *Available only for Vault Enterprise*.
+     */
+    namespace?: string;
+}
+/**
+ * A collection of values returned by getBackendConfigEst.
+ */
+export interface GetBackendConfigEstResult {
+    /**
+     * Fields parsed from the CSR that appear in the audit and can be used by sentinel policies.
+     */
+    readonly auditFields: string[];
+    /**
+     * Lists the mount accessors EST should delegate authentication requests towards (see below for nested schema).
+     */
+    readonly authenticators: outputs.pkiSecret.GetBackendConfigEstAuthenticator[];
+    readonly backend: string;
+    /**
+     * If set, this mount is registered as the default `.well-known/est` URL path. Only a single mount can enable this across a Vault cluster.
+     */
+    readonly defaultMount: boolean;
+    /**
+     * Required to be set if defaultMount is enabled. Specifies the behavior for requests using the default EST label. Can be sign-verbatim or a role given by role:<role_name>.
+     */
+    readonly defaultPathPolicy: string;
+    /**
+     * If set, parse out fields from the provided CSR making them available for Sentinel policies.
+     */
+    readonly enableSentinelParsing: boolean;
+    /**
+     * Specifies whether EST is enabled.
+     */
+    readonly enabled: boolean;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    /**
+     * A pairing of an EST label with the redirected behavior for requests hitting that role. The path policy can be sign-verbatim or a role given by role:<role_name>. Labels must be unique across Vault cluster, and will register .well-known/est/<label> URL paths.
+     */
+    readonly labelToPathPolicy: {
+        [key: string]: any;
+    };
+    /**
+     * A read-only timestamp representing the last time the configuration was updated.
+     */
+    readonly lastUpdated: string;
+    readonly namespace?: string;
+}
+/**
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const pki = new vault.Mount("pki", {
+ *     path: "pki",
+ *     type: "pki",
+ *     description: "PKI secret engine mount",
+ * });
+ * const estConfig = vault.pkiSecret.getBackendConfigEstOutput({
+ *     backend: pki.path,
+ * });
+ * ```
+ */
+export declare function getBackendConfigEstOutput(args: GetBackendConfigEstOutputArgs, opts?: pulumi.InvokeOptions): pulumi.Output<GetBackendConfigEstResult>;
+/**
+ * A collection of arguments for invoking getBackendConfigEst.
+ */
+export interface GetBackendConfigEstOutputArgs {
+    /**
+     * The path to the PKI secret backend to
+     * read the EST configuration from, with no leading or trailing `/`s.
+     */
+    backend: pulumi.Input<string>;
+    /**
+     * The namespace of the target resource.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     * *Available only for Vault Enterprise*.
+     */
+    namespace?: pulumi.Input<string>;
+}