@pulumi/vault 6.3.0 → 6.4.0-alpha.1723820369

package/aws/authBackendLogin.d.ts

@@ -74,7 +74,7 @@ export declare class AuthBackendLogin extends pulumi.CustomResource {
      * authentication used to generate this token.
      */
     readonly metadata: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     }>;
     /**
      * The namespace to provision the resource in.
@@ -181,7 +181,7 @@ export interface AuthBackendLoginState {
      * authentication used to generate this token.
      */
     metadata?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The namespace to provision the resource in.

package/config/uiCustomMessage.d.ts

@@ -41,7 +41,7 @@ export declare class UiCustomMessage extends pulumi.CustomResource {
      * A map containing additional options for the custom message
      */
     readonly options: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * The starting time of the active period of the custom message
@@ -92,7 +92,7 @@ export interface UiCustomMessageState {
      * A map containing additional options for the custom message
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The starting time of the active period of the custom message
@@ -135,7 +135,7 @@ export interface UiCustomMessageArgs {
      * A map containing additional options for the custom message
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The starting time of the active period of the custom message

package/database/secretBackendConnection.d.ts

@@ -70,7 +70,7 @@ export declare class SecretBackendConnection extends pulumi.CustomResource {
      * A map of sensitive data to pass to the endpoint. Useful for templated connection strings.
      */
     readonly data: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * A nested block containing configuration options for Elasticsearch connections.
@@ -196,7 +196,7 @@ export interface SecretBackendConnectionState {
      * A map of sensitive data to pass to the endpoint. Useful for templated connection strings.
      */
     data?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * A nested block containing configuration options for Elasticsearch connections.
@@ -314,7 +314,7 @@ export interface SecretBackendConnectionArgs {
      * A map of sensitive data to pass to the endpoint. Useful for templated connection strings.
      */
     data?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * A nested block containing configuration options for Elasticsearch connections.

package/database/secretBackendRole.d.ts

@@ -69,7 +69,7 @@ export declare class SecretBackendRole extends pulumi.CustomResource {
      * The following options are available for each `credentialType` value:
      */
     readonly credentialConfig: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * Specifies the type of credential that
@@ -147,7 +147,7 @@ export interface SecretBackendRoleState {
      * The following options are available for each `credentialType` value:
      */
     credentialConfig?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * Specifies the type of credential that
@@ -217,7 +217,7 @@ export interface SecretBackendRoleArgs {
      * The following options are available for each `credentialType` value:
      */
     credentialConfig?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * Specifies the type of credential that

package/database/secretsMount.d.ts

@@ -197,7 +197,7 @@ export declare class SecretsMount extends pulumi.CustomResource {
      * Specifies mount type specific options that are passed to the backend
      */
     readonly options: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * A nested block containing configuration options for Oracle connections.
@@ -384,7 +384,7 @@ export interface SecretsMountState {
      * Specifies mount type specific options that are passed to the backend
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * A nested block containing configuration options for Oracle connections.
@@ -555,7 +555,7 @@ export interface SecretsMountArgs {
      * Specifies mount type specific options that are passed to the backend
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * A nested block containing configuration options for Oracle connections.

package/generic/getSecret.d.ts

@@ -79,7 +79,7 @@ export interface GetSecretResult {
      * serialized as JSON.
      */
     readonly data: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * A string containing the full data payload retrieved from

package/generic/secret.d.ts

@@ -31,7 +31,7 @@ export declare class Secret extends pulumi.CustomResource {
      * serialized as JSON.
      */
     readonly data: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     }>;
     /**
      * String containing a JSON-encoded object that will be
@@ -86,7 +86,7 @@ export interface SecretState {
      * serialized as JSON.
      */
     data?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * String containing a JSON-encoded object that will be

package/getNamespace.d.ts

@@ -66,7 +66,7 @@ export interface GetNamespaceResult {
      * *Requires Vault 1.12+.*
      */
     readonly customMetadata: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * The provider-assigned unique ID for this managed resource.

package/getRaftAutopilotState.d.ts

@@ -56,7 +56,7 @@ export interface GetRaftAutopilotStateResult {
      * Additional output related to redundancy zones stored as a serialized map of strings.
      */
     readonly redundancyZones: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * Additional output related to redundancy zones.
@@ -66,7 +66,7 @@ export interface GetRaftAutopilotStateResult {
      * Additionaly output related to servers in the cluster stored as a serialized map of strings.
      */
     readonly servers: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * Additionaly output related to servers in the cluster.
@@ -76,7 +76,7 @@ export interface GetRaftAutopilotStateResult {
      * Additional output related to upgrade information stored as a serialized map of strings.
      */
     readonly upgradeInfo: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * Additional output related to upgrade information.

package/identity/getEntity.d.ts

@@ -108,7 +108,7 @@ export interface GetEntityResult {
      * Arbitrary metadata
      */
     readonly metadata: {
-        [key: string]: any;
+        [key: string]: string;
     };
     readonly namespace?: string;
     /**

package/identity/getGroup.d.ts

@@ -78,7 +78,7 @@ export interface GetGroupResult {
      * Arbitrary metadata
      */
     readonly aliasMetadata: {
-        [key: string]: any;
+        [key: string]: string;
     };
     readonly aliasMountAccessor: string;
     /**
@@ -121,7 +121,7 @@ export interface GetGroupResult {
      * Arbitrary metadata
      */
     readonly metadata: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * Modify index of the group

package/identity/getOidcPublicKeys.d.ts

@@ -62,7 +62,7 @@ export interface GetOidcPublicKeysResult {
      * Clients can use them to validate the authenticity of an identity token.
      */
     readonly keys: {
-        [key: string]: any;
+        [key: string]: string;
     }[];
     readonly name: string;
     readonly namespace?: string;

package/jwt/authBackendRole.d.ts

@@ -99,7 +99,7 @@ export declare class AuthBackendRole extends pulumi.CustomResource {
      * comma-separated values, e.g. `"red"` or `"red,green,blue"`.
      */
     readonly boundClaims: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * How to interpret values in the claims/values
@@ -117,7 +117,7 @@ export declare class AuthBackendRole extends pulumi.CustomResource {
      * to specified metadata fields (values).
      */
     readonly claimMappings: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * The amount of leeway to add to all claims to account for clock skew, in
@@ -262,7 +262,7 @@ export interface AuthBackendRoleState {
      * comma-separated values, e.g. `"red"` or `"red,green,blue"`.
      */
     boundClaims?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * How to interpret values in the claims/values
@@ -280,7 +280,7 @@ export interface AuthBackendRoleState {
      * to specified metadata fields (values).
      */
     claimMappings?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The amount of leeway to add to all claims to account for clock skew, in
@@ -417,7 +417,7 @@ export interface AuthBackendRoleArgs {
      * comma-separated values, e.g. `"red"` or `"red,green,blue"`.
      */
     boundClaims?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * How to interpret values in the claims/values
@@ -435,7 +435,7 @@ export interface AuthBackendRoleArgs {
      * to specified metadata fields (values).
      */
     claimMappings?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The amount of leeway to add to all claims to account for clock skew, in

package/kubernetes/secretBackend.d.ts

@@ -128,7 +128,7 @@ export declare class SecretBackend extends pulumi.CustomResource {
      * Specifies mount type specific options that are passed to the backend
      */
     readonly options: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * List of headers to allow and pass from the request to the plugin
@@ -246,7 +246,7 @@ export interface SecretBackendState {
      * Specifies mount type specific options that are passed to the backend
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * List of headers to allow and pass from the request to the plugin
@@ -352,7 +352,7 @@ export interface SecretBackendArgs {
      * Specifies mount type specific options that are passed to the backend
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * List of headers to allow and pass from the request to the plugin

package/kv/getSecret.d.ts

@@ -58,7 +58,7 @@ export interface GetSecretResult {
      * serialized as JSON.
      */
     readonly data: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * JSON-encoded string that that is

package/kv/getSecretSubkeysV2.d.ts

@@ -76,7 +76,7 @@ export interface GetSecretSubkeysV2Result {
      * Subkeys for the KV-V2 secret stored as a serialized map of strings.
      */
     readonly data: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * Subkeys for the KV-V2 secret read from Vault.

package/kv/getSecretV2.d.ts

@@ -74,7 +74,7 @@ export interface GetSecretV2Result {
      * Custom metadata for the secret.
      */
     readonly customMetadata: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * A mapping whose keys are the top-level data keys returned from
@@ -83,7 +83,7 @@ export interface GetSecretV2Result {
      * serialized as JSON.
      */
     readonly data: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * JSON-encoded string that that is

package/kv/secret.d.ts

@@ -66,7 +66,7 @@ export declare class Secret extends pulumi.CustomResource {
      * serialized as JSON.
      */
     readonly data: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     }>;
     /**
      * JSON-encoded string that will be
@@ -104,7 +104,7 @@ export interface SecretState {
      * serialized as JSON.
      */
     data?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * JSON-encoded string that will be

package/kv/secretV2.d.ts

@@ -103,7 +103,7 @@ export declare class SecretV2 extends pulumi.CustomResource {
      * serialized as JSON.
      */
     readonly data: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     }>;
     /**
      * JSON-encoded string that will be
@@ -124,7 +124,7 @@ export declare class SecretV2 extends pulumi.CustomResource {
      * Metadata associated with this secret read from Vault.
      */
     readonly metadata: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     }>;
     /**
      * Path where KV-V2 engine is mounted.
@@ -148,7 +148,7 @@ export declare class SecretV2 extends pulumi.CustomResource {
      * An object that holds option settings.
      */
     readonly options: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * Full path where the KV-V2 secret will be written.
@@ -187,7 +187,7 @@ export interface SecretV2State {
      * serialized as JSON.
      */
     data?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * JSON-encoded string that will be
@@ -208,7 +208,7 @@ export interface SecretV2State {
      * Metadata associated with this secret read from Vault.
      */
     metadata?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * Path where KV-V2 engine is mounted.
@@ -232,7 +232,7 @@ export interface SecretV2State {
      * An object that holds option settings.
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * Full path where the KV-V2 secret will be written.
@@ -293,6 +293,6 @@ export interface SecretV2Args {
      * An object that holds option settings.
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
 }

package/ldap/secretBackend.d.ts

@@ -139,7 +139,7 @@ export declare class SecretBackend extends pulumi.CustomResource {
      * Specifies mount type specific options that are passed to the backend
      */
     readonly options: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * List of headers to allow and pass from the request to the plugin
@@ -309,7 +309,7 @@ export interface SecretBackendState {
      * Specifies mount type specific options that are passed to the backend
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * List of headers to allow and pass from the request to the plugin
@@ -467,7 +467,7 @@ export interface SecretBackendArgs {
      * Specifies mount type specific options that are passed to the backend
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * List of headers to allow and pass from the request to the plugin

package/mount.d.ts

@@ -39,7 +39,7 @@ import * as pulumi from "@pulumi/pulumi";
  *     type: "transit",
  *     description: "This is an example transit secret engine mount",
  *     options: {
- *         convergent_encryption: false,
+ *         convergent_encryption: "false",
  *     },
  * });
  * ```
@@ -148,7 +148,7 @@ export declare class Mount extends pulumi.CustomResource {
      * Specifies mount type specific options that are passed to the backend
      */
     readonly options: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * List of headers to allow and pass from the request to
@@ -253,7 +253,7 @@ export interface MountState {
      * Specifies mount type specific options that are passed to the backend
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * List of headers to allow and pass from the request to
@@ -346,7 +346,7 @@ export interface MountArgs {
      * Specifies mount type specific options that are passed to the backend
      */
     options?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * List of headers to allow and pass from the request to

package/mount.js

@@ -45,7 +45,7 @@ const utilities = require("./utilities");
  *     type: "transit",
  *     description: "This is an example transit secret engine mount",
  *     options: {
- *         convergent_encryption: false,
+ *         convergent_encryption: "false",
  *     },
  * });
  * ```

package/namespace.d.ts

@@ -71,7 +71,7 @@ export declare class Namespace extends pulumi.CustomResource {
      * is `map[string]string`. Requires Vault version 1.12+.
      */
     readonly customMetadata: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     }>;
     /**
      * The namespace to provision the resource in.
@@ -111,7 +111,7 @@ export interface NamespaceState {
      * is `map[string]string`. Requires Vault version 1.12+.
      */
     customMetadata?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The namespace to provision the resource in.
@@ -143,7 +143,7 @@ export interface NamespaceArgs {
      * is `map[string]string`. Requires Vault version 1.12+.
      */
     customMetadata?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The namespace to provision the resource in.

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@pulumi/vault",
-    "version": "6.3.0",
+    "version": "6.4.0-alpha.1723820369",
     "description": "A Pulumi package for creating and managing HashiCorp Vault cloud resources.",
     "keywords": [
         "pulumi",
@@ -23,6 +23,6 @@
     "pulumi": {
         "resource": true,
         "name": "vault",
-        "version": "6.3.0"
+        "version": "6.4.0-alpha.1723820369"
     }
 }

package/pkisecret/backendConfigEst.d.ts

@@ -65,7 +65,7 @@ export declare class BackendConfigEst extends pulumi.CustomResource {
      * Configures a pairing of an EST label with the redirected behavior for requests hitting that role. The path policy can be sign-verbatim or a role given by role:<role_name>. Labels must be unique across Vault cluster, and will register .well-known/est/<label> URL paths.
      */
     readonly labelToPathPolicy: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * A read-only timestamp representing the last time the configuration was updated.
@@ -126,7 +126,7 @@ export interface BackendConfigEstState {
      * Configures a pairing of an EST label with the redirected behavior for requests hitting that role. The path policy can be sign-verbatim or a role given by role:<role_name>. Labels must be unique across Vault cluster, and will register .well-known/est/<label> URL paths.
      */
     labelToPathPolicy?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * A read-only timestamp representing the last time the configuration was updated.
@@ -179,7 +179,7 @@ export interface BackendConfigEstArgs {
      * Configures a pairing of an EST label with the redirected behavior for requests hitting that role. The path policy can be sign-verbatim or a role given by role:<role_name>. Labels must be unique across Vault cluster, and will register .well-known/est/<label> URL paths.
      */
     labelToPathPolicy?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The namespace of the target resource.

package/pkisecret/getBackendConfigEst.d.ts

@@ -72,7 +72,7 @@ export interface GetBackendConfigEstResult {
      * A pairing of an EST label with the redirected behavior for requests hitting that role. The path policy can be sign-verbatim or a role given by role:<role_name>. Labels must be unique across Vault cluster, and will register .well-known/est/<label> URL paths.
      */
     readonly labelToPathPolicy: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * A read-only timestamp representing the last time the configuration was updated.

package/pkisecret/getBackendIssuers.d.ts

@@ -54,7 +54,7 @@ export interface GetBackendIssuersResult {
      * Map of issuer strings read from Vault.
      */
     readonly keyInfo: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * JSON-encoded issuer data read from Vault.

package/pkisecret/getBackendKeys.d.ts

@@ -54,7 +54,7 @@ export interface GetBackendKeysResult {
      * Map of key strings read from Vault.
      */
     readonly keyInfo: {
-        [key: string]: any;
+        [key: string]: string;
     };
     /**
      * JSON-encoded key data read from Vault.

package/saml/authBackendRole.d.ts

@@ -59,7 +59,7 @@ export declare class AuthBackendRole extends pulumi.CustomResource {
      * exist in the SAML assertion.
      */
     readonly boundAttributes: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * The type of matching assertion to perform on
@@ -148,7 +148,7 @@ export interface AuthBackendRoleState {
      * exist in the SAML assertion.
      */
     boundAttributes?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The type of matching assertion to perform on
@@ -229,7 +229,7 @@ export interface AuthBackendRoleArgs {
      * exist in the SAML assertion.
      */
     boundAttributes?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * The type of matching assertion to perform on

package/secrets/syncAwsDestination.d.ts

@@ -54,7 +54,7 @@ export declare class SyncAwsDestination extends pulumi.CustomResource {
      * Custom tags to set on the secret managed at the destination.
      */
     readonly customTags: pulumi.Output<{
-        [key: string]: any;
+        [key: string]: string;
     } | undefined>;
     /**
      * Optional extra protection that must match the trust policy granting access to the
@@ -131,7 +131,7 @@ export interface SyncAwsDestinationState {
      * Custom tags to set on the secret managed at the destination.
      */
     customTags?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * Optional extra protection that must match the trust policy granting access to the
@@ -200,7 +200,7 @@ export interface SyncAwsDestinationArgs {
      * Custom tags to set on the secret managed at the destination.
      */
     customTags?: pulumi.Input<{
-        [key: string]: any;
+        [key: string]: pulumi.Input<string>;
     }>;
     /**
      * Optional extra protection that must match the trust policy granting access to the