@pulumi/vault 7.12.0-alpha.1786704608 → 7.12.0

package/aws/authBackendConfigIdentity.d.ts

@@ -62,7 +62,7 @@ export declare class AuthBackendConfigIdentity extends pulumi.CustomResource {
     readonly ec2Metadatas: pulumi.Output<string[] | undefined>;
     /**
      * How to generate the identity alias when using the iam auth method. Valid choices are
-     * `roleId`, `uniqueId`, and `fullArn`. Defaults to `roleId`
+     * `roleId`, `uniqueId`, `fullArn`, and `canonicalArn`. Defaults to `roleId`. `canonicalArn` requires Vault 1.16+.
      */
     readonly iamAlias: pulumi.Output<string | undefined>;
     /**
@@ -107,7 +107,7 @@ export interface AuthBackendConfigIdentityState {
     ec2Metadatas?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
      * How to generate the identity alias when using the iam auth method. Valid choices are
-     * `roleId`, `uniqueId`, and `fullArn`. Defaults to `roleId`
+     * `roleId`, `uniqueId`, `fullArn`, and `canonicalArn`. Defaults to `roleId`. `canonicalArn` requires Vault 1.16+.
      */
     iamAlias?: pulumi.Input<string | undefined>;
     /**
@@ -144,7 +144,7 @@ export interface AuthBackendConfigIdentityArgs {
     ec2Metadatas?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
      * How to generate the identity alias when using the iam auth method. Valid choices are
-     * `roleId`, `uniqueId`, and `fullArn`. Defaults to `roleId`
+     * `roleId`, `uniqueId`, `fullArn`, and `canonicalArn`. Defaults to `roleId`. `canonicalArn` requires Vault 1.16+.
      */
     iamAlias?: pulumi.Input<string | undefined>;
     /**

package/gcp/getKmsVerify.d.ts

@@ -0,0 +1,167 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * Verifies a digital signature against a digest using a GCP KMS signing key through Vault. This data source
+ * performs read-only signature verification operations.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Signature Verification
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as std from "@pulumi/std";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const gcpkms = new vault.gcp.KmsSecretBackend("gcpkms", {
+ *     path: "gcpkms",
+ *     credentialsWo: std.file({
+ *         input: "gcp-credentials.json",
+ *     }).then(invoke => invoke.result),
+ *     credentialsWoVersion: 1,
+ * });
+ * const signingKey = new vault.gcp.KmsSecretBackendKey("signing_key", {
+ *     mount: gcpkms.path,
+ *     keyName: "signing-key",
+ *     keyRing: "projects/my-project/locations/us-central1/keyRings/my-keyring",
+ *     purpose: "asymmetric_sign",
+ *     algorithm: "rsa_sign_pss_2048_sha256",
+ * });
+ * const signatureCheck = vault.gcp.getKmsVerifyOutput({
+ *     mount: gcpkms.path,
+ *     keyName: signingKey.keyName,
+ *     digest: std.base64encode({
+ *         input: "my message digest",
+ *     }).then(invoke => invoke.result),
+ *     signature: "BASE64_ENCODED_SIGNATURE",
+ *     keyVersion: 1,
+ * });
+ * export const signatureIsValid = signatureCheck.valid;
+ * ```
+ */
+export declare function getKmsVerify(args: GetKmsVerifyArgs, opts?: pulumi.InvokeOptions): Promise<GetKmsVerifyResult>;
+/**
+ * A collection of arguments for invoking getKmsVerify.
+ */
+export interface GetKmsVerifyArgs {
+    /**
+     * Base64-encoded digest to verify. The digest should be created using the hash algorithm
+     * specified in the key's algorithm (e.g., SHA256 for RSA_SIGN_PSS_2048_SHA256).
+     */
+    digest: string;
+    /**
+     * Name of the signing key to use for verification. This must reference a key with
+     * purpose `ASYMMETRIC_SIGN`.
+     */
+    keyName: string;
+    /**
+     * Specific version of the key to use for verification.
+     */
+    keyVersion: number;
+    /**
+     * Path where the GCP KMS secrets engine is mounted.
+     */
+    mount: string;
+    /**
+     * The namespace of the target resource.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured
+     * [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     * *Available only for Vault Enterprise*.
+     */
+    namespace?: string;
+    /**
+     * Base64-encoded signature to verify against the digest.
+     */
+    signature: string;
+}
+/**
+ * A collection of values returned by getKmsVerify.
+ */
+export interface GetKmsVerifyResult {
+    readonly digest: string;
+    readonly keyName: string;
+    readonly keyVersion: number;
+    readonly mount: string;
+    readonly namespace?: string;
+    readonly signature: string;
+    /**
+     * Boolean indicating whether the signature is valid (`true`) or invalid (`false`).
+     */
+    readonly valid: boolean;
+}
+/**
+ * Verifies a digital signature against a digest using a GCP KMS signing key through Vault. This data source
+ * performs read-only signature verification operations.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Signature Verification
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as std from "@pulumi/std";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const gcpkms = new vault.gcp.KmsSecretBackend("gcpkms", {
+ *     path: "gcpkms",
+ *     credentialsWo: std.file({
+ *         input: "gcp-credentials.json",
+ *     }).then(invoke => invoke.result),
+ *     credentialsWoVersion: 1,
+ * });
+ * const signingKey = new vault.gcp.KmsSecretBackendKey("signing_key", {
+ *     mount: gcpkms.path,
+ *     keyName: "signing-key",
+ *     keyRing: "projects/my-project/locations/us-central1/keyRings/my-keyring",
+ *     purpose: "asymmetric_sign",
+ *     algorithm: "rsa_sign_pss_2048_sha256",
+ * });
+ * const signatureCheck = vault.gcp.getKmsVerifyOutput({
+ *     mount: gcpkms.path,
+ *     keyName: signingKey.keyName,
+ *     digest: std.base64encode({
+ *         input: "my message digest",
+ *     }).then(invoke => invoke.result),
+ *     signature: "BASE64_ENCODED_SIGNATURE",
+ *     keyVersion: 1,
+ * });
+ * export const signatureIsValid = signatureCheck.valid;
+ * ```
+ */
+export declare function getKmsVerifyOutput(args: GetKmsVerifyOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetKmsVerifyResult>;
+/**
+ * A collection of arguments for invoking getKmsVerify.
+ */
+export interface GetKmsVerifyOutputArgs {
+    /**
+     * Base64-encoded digest to verify. The digest should be created using the hash algorithm
+     * specified in the key's algorithm (e.g., SHA256 for RSA_SIGN_PSS_2048_SHA256).
+     */
+    digest: pulumi.Input<string>;
+    /**
+     * Name of the signing key to use for verification. This must reference a key with
+     * purpose `ASYMMETRIC_SIGN`.
+     */
+    keyName: pulumi.Input<string>;
+    /**
+     * Specific version of the key to use for verification.
+     */
+    keyVersion: pulumi.Input<number>;
+    /**
+     * Path where the GCP KMS secrets engine is mounted.
+     */
+    mount: pulumi.Input<string>;
+    /**
+     * The namespace of the target resource.
+     * The value should not contain leading or trailing forward slashes.
+     * The `namespace` is always relative to the provider's configured
+     * [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+     * *Available only for Vault Enterprise*.
+     */
+    namespace?: pulumi.Input<string | undefined>;
+    /**
+     * Base64-encoded signature to verify against the digest.
+     */
+    signature: pulumi.Input<string>;
+}
+//# sourceMappingURL=getKmsVerify.d.ts.map

package/gcp/getKmsVerify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKmsVerify.d.ts","sourceRoot":"","sources":["../../gcp/getKmsVerify.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAU7G;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CAC3B;AACD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAUrI;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CACnC"}

package/gcp/getKmsVerify.js

@@ -0,0 +1,133 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getKmsVerifyOutput = exports.getKmsVerify = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("../utilities"));
+/**
+ * Verifies a digital signature against a digest using a GCP KMS signing key through Vault. This data source
+ * performs read-only signature verification operations.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Signature Verification
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as std from "@pulumi/std";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const gcpkms = new vault.gcp.KmsSecretBackend("gcpkms", {
+ *     path: "gcpkms",
+ *     credentialsWo: std.file({
+ *         input: "gcp-credentials.json",
+ *     }).then(invoke => invoke.result),
+ *     credentialsWoVersion: 1,
+ * });
+ * const signingKey = new vault.gcp.KmsSecretBackendKey("signing_key", {
+ *     mount: gcpkms.path,
+ *     keyName: "signing-key",
+ *     keyRing: "projects/my-project/locations/us-central1/keyRings/my-keyring",
+ *     purpose: "asymmetric_sign",
+ *     algorithm: "rsa_sign_pss_2048_sha256",
+ * });
+ * const signatureCheck = vault.gcp.getKmsVerifyOutput({
+ *     mount: gcpkms.path,
+ *     keyName: signingKey.keyName,
+ *     digest: std.base64encode({
+ *         input: "my message digest",
+ *     }).then(invoke => invoke.result),
+ *     signature: "BASE64_ENCODED_SIGNATURE",
+ *     keyVersion: 1,
+ * });
+ * export const signatureIsValid = signatureCheck.valid;
+ * ```
+ */
+function getKmsVerify(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("vault:gcp/getKmsVerify:getKmsVerify", {
+        "digest": args.digest,
+        "keyName": args.keyName,
+        "keyVersion": args.keyVersion,
+        "mount": args.mount,
+        "namespace": args.namespace,
+        "signature": args.signature,
+    }, opts);
+}
+exports.getKmsVerify = getKmsVerify;
+/**
+ * Verifies a digital signature against a digest using a GCP KMS signing key through Vault. This data source
+ * performs read-only signature verification operations.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Signature Verification
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as std from "@pulumi/std";
+ * import * as vault from "@pulumi/vault";
+ *
+ * const gcpkms = new vault.gcp.KmsSecretBackend("gcpkms", {
+ *     path: "gcpkms",
+ *     credentialsWo: std.file({
+ *         input: "gcp-credentials.json",
+ *     }).then(invoke => invoke.result),
+ *     credentialsWoVersion: 1,
+ * });
+ * const signingKey = new vault.gcp.KmsSecretBackendKey("signing_key", {
+ *     mount: gcpkms.path,
+ *     keyName: "signing-key",
+ *     keyRing: "projects/my-project/locations/us-central1/keyRings/my-keyring",
+ *     purpose: "asymmetric_sign",
+ *     algorithm: "rsa_sign_pss_2048_sha256",
+ * });
+ * const signatureCheck = vault.gcp.getKmsVerifyOutput({
+ *     mount: gcpkms.path,
+ *     keyName: signingKey.keyName,
+ *     digest: std.base64encode({
+ *         input: "my message digest",
+ *     }).then(invoke => invoke.result),
+ *     signature: "BASE64_ENCODED_SIGNATURE",
+ *     keyVersion: 1,
+ * });
+ * export const signatureIsValid = signatureCheck.valid;
+ * ```
+ */
+function getKmsVerifyOutput(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("vault:gcp/getKmsVerify:getKmsVerify", {
+        "digest": args.digest,
+        "keyName": args.keyName,
+        "keyVersion": args.keyVersion,
+        "mount": args.mount,
+        "namespace": args.namespace,
+        "signature": args.signature,
+    }, opts);
+}
+exports.getKmsVerifyOutput = getKmsVerifyOutput;
+//# sourceMappingURL=getKmsVerify.js.map

package/gcp/getKmsVerify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getKmsVerify.js","sourceRoot":"","sources":["../../gcp/getKmsVerify.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,SAAgB,YAAY,CAAC,IAAsB,EAAE,IAA2B;IAC5E,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qCAAqC,EAAE;QAChE,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,SAAS,EAAE,IAAI,CAAC,OAAO;QACvB,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,OAAO,EAAE,IAAI,CAAC,KAAK;QACnB,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,WAAW,EAAE,IAAI,CAAC,SAAS;KAC9B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAVD,oCAUC;AAqDD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,SAAgB,kBAAkB,CAAC,IAA4B,EAAE,IAAiC;IAC9F,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,qCAAqC,EAAE;QACtE,QAAQ,EAAE,IAAI,CAAC,MAAM;QACrB,SAAS,EAAE,IAAI,CAAC,OAAO;QACvB,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,OAAO,EAAE,IAAI,CAAC,KAAK;QACnB,WAAW,EAAE,IAAI,CAAC,SAAS;QAC3B,WAAW,EAAE,IAAI,CAAC,SAAS;KAC9B,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AAVD,gDAUC"}

package/gcp/index.d.ts

@@ -7,6 +7,15 @@ export declare const AuthBackendRole: typeof import("./authBackendRole").AuthBac
 export { GetAuthBackendRoleArgs, GetAuthBackendRoleResult, GetAuthBackendRoleOutputArgs } from "./getAuthBackendRole";
 export declare const getAuthBackendRole: typeof import("./getAuthBackendRole").getAuthBackendRole;
 export declare const getAuthBackendRoleOutput: typeof import("./getAuthBackendRole").getAuthBackendRoleOutput;
+export { GetKmsVerifyArgs, GetKmsVerifyResult, GetKmsVerifyOutputArgs } from "./getKmsVerify";
+export declare const getKmsVerify: typeof import("./getKmsVerify").getKmsVerify;
+export declare const getKmsVerifyOutput: typeof import("./getKmsVerify").getKmsVerifyOutput;
+export { KmsSecretBackendArgs, KmsSecretBackendState } from "./kmsSecretBackend";
+export type KmsSecretBackend = import("./kmsSecretBackend").KmsSecretBackend;
+export declare const KmsSecretBackend: typeof import("./kmsSecretBackend").KmsSecretBackend;
+export { KmsSecretBackendKeyArgs, KmsSecretBackendKeyState } from "./kmsSecretBackendKey";
+export type KmsSecretBackendKey = import("./kmsSecretBackendKey").KmsSecretBackendKey;
+export declare const KmsSecretBackendKey: typeof import("./kmsSecretBackendKey").KmsSecretBackendKey;
 export { SecretBackendArgs, SecretBackendState } from "./secretBackend";
 export type SecretBackend = import("./secretBackend").SecretBackend;
 export declare const SecretBackend: typeof import("./secretBackend").SecretBackend;

package/gcp/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../gcp/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,eAAe,EAAE,WAAW,CAAC;AAC9D,eAAO,MAAM,WAAW,EAAE,cAAc,eAAe,EAAE,WAAyB,CAAC;AAGnF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,OAAO,mBAAmB,EAAE,eAAe,CAAC;AAC1E,eAAO,MAAM,eAAe,EAAE,cAAc,mBAAmB,EAAE,eAA6B,CAAC;AAG/F,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACtH,eAAO,MAAM,kBAAkB,EAAE,cAAc,sBAAsB,EAAE,kBAAgC,CAAC;AACxG,eAAO,MAAM,wBAAwB,EAAE,cAAc,sBAAsB,EAAE,wBAAsC,CAAC;AAGpH,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,OAAO,iBAAiB,EAAE,aAAa,CAAC;AACpE,eAAO,MAAM,aAAa,EAAE,cAAc,iBAAiB,EAAE,aAA2B,CAAC;AAGzF,OAAO,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAC5G,MAAM,MAAM,yBAAyB,GAAG,OAAO,6BAA6B,EAAE,yBAAyB,CAAC;AACxG,eAAO,MAAM,yBAAyB,EAAE,cAAc,6BAA6B,EAAE,yBAAuC,CAAC;AAG7H,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,OAAO,iBAAiB,EAAE,aAAa,CAAC;AACpE,eAAO,MAAM,aAAa,EAAE,cAAc,iBAAiB,EAAE,aAA2B,CAAC;AAGzF,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,MAAM,MAAM,mBAAmB,GAAG,OAAO,uBAAuB,EAAE,mBAAmB,CAAC;AACtF,eAAO,MAAM,mBAAmB,EAAE,cAAc,uBAAuB,EAAE,mBAAiC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../gcp/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,MAAM,MAAM,WAAW,GAAG,OAAO,eAAe,EAAE,WAAW,CAAC;AAC9D,eAAO,MAAM,WAAW,EAAE,cAAc,eAAe,EAAE,WAAyB,CAAC;AAGnF,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9E,MAAM,MAAM,eAAe,GAAG,OAAO,mBAAmB,EAAE,eAAe,CAAC;AAC1E,eAAO,MAAM,eAAe,EAAE,cAAc,mBAAmB,EAAE,eAA6B,CAAC;AAG/F,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACtH,eAAO,MAAM,kBAAkB,EAAE,cAAc,sBAAsB,EAAE,kBAAgC,CAAC;AACxG,eAAO,MAAM,wBAAwB,EAAE,cAAc,sBAAsB,EAAE,wBAAsC,CAAC;AAGpH,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC9F,eAAO,MAAM,YAAY,EAAE,cAAc,gBAAgB,EAAE,YAA0B,CAAC;AACtF,eAAO,MAAM,kBAAkB,EAAE,cAAc,gBAAgB,EAAE,kBAAgC,CAAC;AAGlG,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACjF,MAAM,MAAM,gBAAgB,GAAG,OAAO,oBAAoB,EAAE,gBAAgB,CAAC;AAC7E,eAAO,MAAM,gBAAgB,EAAE,cAAc,oBAAoB,EAAE,gBAA8B,CAAC;AAGlG,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,MAAM,MAAM,mBAAmB,GAAG,OAAO,uBAAuB,EAAE,mBAAmB,CAAC;AACtF,eAAO,MAAM,mBAAmB,EAAE,cAAc,uBAAuB,EAAE,mBAAiC,CAAC;AAG3G,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,OAAO,iBAAiB,EAAE,aAAa,CAAC;AACpE,eAAO,MAAM,aAAa,EAAE,cAAc,iBAAiB,EAAE,aAA2B,CAAC;AAGzF,OAAO,EAAE,6BAA6B,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAC5G,MAAM,MAAM,yBAAyB,GAAG,OAAO,6BAA6B,EAAE,yBAAyB,CAAC;AACxG,eAAO,MAAM,yBAAyB,EAAE,cAAc,6BAA6B,EAAE,yBAAuC,CAAC;AAG7H,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,OAAO,iBAAiB,EAAE,aAAa,CAAC;AACpE,eAAO,MAAM,aAAa,EAAE,cAAc,iBAAiB,EAAE,aAA2B,CAAC;AAGzF,OAAO,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAC1F,MAAM,MAAM,mBAAmB,GAAG,OAAO,uBAAuB,EAAE,mBAAmB,CAAC;AACtF,eAAO,MAAM,mBAAmB,EAAE,cAAc,uBAAuB,EAAE,mBAAiC,CAAC"}

package/gcp/index.js

@@ -25,7 +25,7 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.SecretStaticAccount = exports.SecretRoleset = exports.SecretImpersonatedAccount = exports.SecretBackend = exports.getAuthBackendRoleOutput = exports.getAuthBackendRole = exports.AuthBackendRole = exports.AuthBackend = void 0;
+exports.SecretStaticAccount = exports.SecretRoleset = exports.SecretImpersonatedAccount = exports.SecretBackend = exports.KmsSecretBackendKey = exports.KmsSecretBackend = exports.getKmsVerifyOutput = exports.getKmsVerify = exports.getAuthBackendRoleOutput = exports.getAuthBackendRole = exports.AuthBackendRole = exports.AuthBackend = void 0;
 const pulumi = __importStar(require("@pulumi/pulumi"));
 const utilities = __importStar(require("../utilities"));
 exports.AuthBackend = null;
@@ -35,6 +35,13 @@ utilities.lazyLoad(exports, ["AuthBackendRole"], () => require("./authBackendRol
 exports.getAuthBackendRole = null;
 exports.getAuthBackendRoleOutput = null;
 utilities.lazyLoad(exports, ["getAuthBackendRole", "getAuthBackendRoleOutput"], () => require("./getAuthBackendRole"));
+exports.getKmsVerify = null;
+exports.getKmsVerifyOutput = null;
+utilities.lazyLoad(exports, ["getKmsVerify", "getKmsVerifyOutput"], () => require("./getKmsVerify"));
+exports.KmsSecretBackend = null;
+utilities.lazyLoad(exports, ["KmsSecretBackend"], () => require("./kmsSecretBackend"));
+exports.KmsSecretBackendKey = null;
+utilities.lazyLoad(exports, ["KmsSecretBackendKey"], () => require("./kmsSecretBackendKey"));
 exports.SecretBackend = null;
 utilities.lazyLoad(exports, ["SecretBackend"], () => require("./secretBackend"));
 exports.SecretImpersonatedAccount = null;
@@ -51,6 +58,10 @@ const _module = {
                 return new exports.AuthBackend(name, undefined, { urn });
             case "vault:gcp/authBackendRole:AuthBackendRole":
                 return new exports.AuthBackendRole(name, undefined, { urn });
+            case "vault:gcp/kmsSecretBackend:KmsSecretBackend":
+                return new exports.KmsSecretBackend(name, undefined, { urn });
+            case "vault:gcp/kmsSecretBackendKey:KmsSecretBackendKey":
+                return new exports.KmsSecretBackendKey(name, undefined, { urn });
             case "vault:gcp/secretBackend:SecretBackend":
                 return new exports.SecretBackend(name, undefined, { urn });
             case "vault:gcp/secretImpersonatedAccount:SecretImpersonatedAccount":
@@ -66,6 +77,8 @@ const _module = {
 };
 pulumi.runtime.registerResourceModule("vault", "gcp/authBackend", _module);
 pulumi.runtime.registerResourceModule("vault", "gcp/authBackendRole", _module);
+pulumi.runtime.registerResourceModule("vault", "gcp/kmsSecretBackend", _module);
+pulumi.runtime.registerResourceModule("vault", "gcp/kmsSecretBackendKey", _module);
 pulumi.runtime.registerResourceModule("vault", "gcp/secretBackend", _module);
 pulumi.runtime.registerResourceModule("vault", "gcp/secretImpersonatedAccount", _module);
 pulumi.runtime.registerResourceModule("vault", "gcp/secretRoleset", _module);

package/gcp/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../gcp/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAK7B,QAAA,WAAW,GAA+C,IAAW,CAAC;AACnF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;AAIhE,QAAA,eAAe,GAAuD,IAAW,CAAC;AAC/F,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAGxE,QAAA,kBAAkB,GAA6D,IAAW,CAAC;AAC3F,QAAA,wBAAwB,GAAmE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,oBAAoB,EAAC,0BAA0B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAIzG,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAIpE,QAAA,yBAAyB,GAA2E,IAAW,CAAC;AAC7H,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC;AAI5F,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAIpE,QAAA,mBAAmB,GAA+D,IAAW,CAAC;AAC3G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAG7F,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,mCAAmC;gBACpC,OAAO,IAAI,mBAAW,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACzD,KAAK,2CAA2C;gBAC5C,OAAO,IAAI,uBAAe,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,KAAK,uCAAuC;gBACxC,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,KAAK,+DAA+D;gBAChE,OAAO,IAAI,iCAAyB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACvE,KAAK,uCAAuC;gBACxC,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,KAAK,mDAAmD;gBACpD,OAAO,IAAI,2BAAmB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACjE;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAA;AAC1E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAA;AAC9E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;AAC5E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,+BAA+B,EAAE,OAAO,CAAC,CAAA;AACxF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;AAC5E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../gcp/index.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAK7B,QAAA,WAAW,GAA+C,IAAW,CAAC;AACnF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;AAIhE,QAAA,eAAe,GAAuD,IAAW,CAAC;AAC/F,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAGxE,QAAA,kBAAkB,GAA6D,IAAW,CAAC;AAC3F,QAAA,wBAAwB,GAAmE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,oBAAoB,EAAC,0BAA0B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAGzG,QAAA,YAAY,GAAiD,IAAW,CAAC;AACzE,QAAA,kBAAkB,GAAuD,IAAW,CAAC;AAClG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,cAAc,EAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAIvF,QAAA,gBAAgB,GAAyD,IAAW,CAAC;AAClG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAI1E,QAAA,mBAAmB,GAA+D,IAAW,CAAC;AAC3G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAIhF,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAIpE,QAAA,yBAAyB,GAA2E,IAAW,CAAC;AAC7H,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,2BAA2B,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC,CAAC;AAI5F,QAAA,aAAa,GAAmD,IAAW,CAAC;AACzF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAIpE,QAAA,mBAAmB,GAA+D,IAAW,CAAC;AAC3G,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC;AAG7F,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,mCAAmC;gBACpC,OAAO,IAAI,mBAAW,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACzD,KAAK,2CAA2C;gBAC5C,OAAO,IAAI,uBAAe,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,KAAK,6CAA6C;gBAC9C,OAAO,IAAI,wBAAgB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC9D,KAAK,mDAAmD;gBACpD,OAAO,IAAI,2BAAmB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACjE,KAAK,uCAAuC;gBACxC,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,KAAK,+DAA+D;gBAChE,OAAO,IAAI,iCAAyB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACvE,KAAK,uCAAuC;gBACxC,OAAO,IAAI,qBAAa,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3D,KAAK,mDAAmD;gBACpD,OAAO,IAAI,2BAAmB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACjE;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAAA;AAC1E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,qBAAqB,EAAE,OAAO,CAAC,CAAA;AAC9E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,sBAAsB,EAAE,OAAO,CAAC,CAAA;AAC/E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA;AAClF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;AAC5E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,+BAA+B,EAAE,OAAO,CAAC,CAAA;AACxF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;AAC5E,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,OAAO,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA"}