@pulumi/vault 7.13.0-alpha.1789714277 → 7.13.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/agentRegistration.d.ts +2 -4
- package/agentRegistration.d.ts.map +1 -1
- package/agentRegistration.js +2 -4
- package/agentRegistration.js.map +1 -1
- package/azure/authBackendConfig.d.ts +82 -0
- package/azure/authBackendConfig.d.ts.map +1 -1
- package/azure/authBackendConfig.js +72 -0
- package/azure/authBackendConfig.js.map +1 -1
- package/certAuthBackendRole.d.ts +60 -5
- package/certAuthBackendRole.d.ts.map +1 -1
- package/certAuthBackendRole.js +37 -3
- package/certAuthBackendRole.js.map +1 -1
- package/jwt/authBackend.d.ts +1 -1
- package/jwt/authBackend.js +1 -1
- package/oauthResourceServerConfigProfile.d.ts +3 -22
- package/oauthResourceServerConfigProfile.d.ts.map +1 -1
- package/oauthResourceServerConfigProfile.js +3 -22
- package/oauthResourceServerConfigProfile.js.map +1 -1
- package/package.json +2 -2
- package/pkiexternalca/index.d.ts +12 -0
- package/pkiexternalca/index.d.ts.map +1 -1
- package/pkiexternalca/index.js +21 -1
- package/pkiexternalca/index.js.map +1 -1
- package/pkiexternalca/secretBackendAcmeAccount.d.ts +12 -0
- package/pkiexternalca/secretBackendAcmeAccount.d.ts.map +1 -1
- package/pkiexternalca/secretBackendAcmeAccount.js +2 -0
- package/pkiexternalca/secretBackendAcmeAccount.js.map +1 -1
- package/pkiexternalca/secretBackendDnsProviderAwsRoute53.d.ts +264 -0
- package/pkiexternalca/secretBackendDnsProviderAwsRoute53.d.ts.map +1 -0
- package/pkiexternalca/secretBackendDnsProviderAwsRoute53.js +151 -0
- package/pkiexternalca/secretBackendDnsProviderAwsRoute53.js.map +1 -0
- package/pkiexternalca/secretBackendDnsProviderAzure.d.ts +280 -0
- package/pkiexternalca/secretBackendDnsProviderAzure.d.ts.map +1 -0
- package/pkiexternalca/secretBackendDnsProviderAzure.js +157 -0
- package/pkiexternalca/secretBackendDnsProviderAzure.js.map +1 -0
- package/pkiexternalca/secretBackendDnsProviderGcp.d.ts +239 -0
- package/pkiexternalca/secretBackendDnsProviderGcp.d.ts.map +1 -0
- package/pkiexternalca/secretBackendDnsProviderGcp.js +146 -0
- package/pkiexternalca/secretBackendDnsProviderGcp.js.map +1 -0
- package/pkiexternalca/secretBackendDnsProviderRfc2136.d.ts +232 -0
- package/pkiexternalca/secretBackendDnsProviderRfc2136.d.ts.map +1 -0
- package/pkiexternalca/secretBackendDnsProviderRfc2136.js +161 -0
- package/pkiexternalca/secretBackendDnsProviderRfc2136.js.map +1 -0
- package/pkiexternalca/secretBackendRole.d.ts +26 -2
- package/pkiexternalca/secretBackendRole.d.ts.map +1 -1
- package/pkiexternalca/secretBackendRole.js +6 -2
- package/pkiexternalca/secretBackendRole.js.map +1 -1
- package/pkisecret/secretBackendCert.d.ts +15 -15
- package/pkisecret/secretBackendRootCert.d.ts +15 -15
- package/pkisecret/secretBackendRootSignIntermediate.d.ts +9 -9
- package/pkisecret/secretBackendSign.d.ts +12 -12
- package/transform/index.d.ts +6 -0
- package/transform/index.d.ts.map +1 -1
- package/transform/index.js +11 -1
- package/transform/index.js.map +1 -1
- package/transform/transformationTokenization.d.ts +210 -0
- package/transform/transformationTokenization.d.ts.map +1 -0
- package/transform/transformationTokenization.js +126 -0
- package/transform/transformationTokenization.js.map +1 -0
- package/transform/transformationTokenizationStore.d.ts +250 -0
- package/transform/transformationTokenizationStore.d.ts.map +1 -0
- package/transform/transformationTokenizationStore.js +161 -0
- package/transform/transformationTokenizationStore.js.map +1 -0
package/agentRegistration.d.ts
CHANGED
|
@@ -1,10 +1,8 @@
|
|
|
1
1
|
import * as pulumi from "@pulumi/pulumi";
|
|
2
2
|
/**
|
|
3
|
-
* > **Preview feature:** This feature is currently available as a preview and is possibly incomplete and subject to change. **We strongly discourage using preview or beta features with production workflows.**
|
|
4
|
-
*
|
|
5
3
|
* Manages Agent Registry records in Vault Enterprise. An Agent Registry record allows you to register Vault agents with specific identity entities and configure ceiling policies that limit the maximum permissions an agent can obtain.
|
|
6
4
|
*
|
|
7
|
-
* > **Important** This resource is available only in Vault Enterprise and requires Vault 2.0
|
|
5
|
+
* > **Important** This resource is available only in Vault Enterprise and requires Vault 2.1.0 or later.
|
|
8
6
|
*
|
|
9
7
|
* ## Notes
|
|
10
8
|
*
|
|
@@ -22,7 +20,7 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
22
20
|
*
|
|
23
21
|
* * **Enterprise Feature**: Agent Registry records are only available in Vault Enterprise. Attempting to use this resource with Vault Community Edition will result in an error.
|
|
24
22
|
*
|
|
25
|
-
* * **Version Requirement**: This resource requires Vault 2.0
|
|
23
|
+
* * **Version Requirement**: This resource requires Vault 2.1.0 or later.
|
|
26
24
|
*
|
|
27
25
|
* ## Import
|
|
28
26
|
*
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agentRegistration.d.ts","sourceRoot":"","sources":["../agentRegistration.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC
|
|
1
|
+
{"version":3,"file":"agentRegistration.d.ts","sourceRoot":"","sources":["../agentRegistration.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,qBAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,iBAAiB;IAOpJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,iBAAiB;IAO5D;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE;;OAEG;IACH,SAAgC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD;;OAEG;IACH,SAAgC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE;;;;OAIG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;OAEG;IACH,SAAwB,sBAAsB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,4BAA4B,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAEjE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAsC7F;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,sBAAsB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC3D;;OAEG;IACH,4BAA4B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC5C"}
|
package/agentRegistration.js
CHANGED
|
@@ -29,11 +29,9 @@ exports.AgentRegistration = void 0;
|
|
|
29
29
|
const pulumi = __importStar(require("@pulumi/pulumi"));
|
|
30
30
|
const utilities = __importStar(require("./utilities"));
|
|
31
31
|
/**
|
|
32
|
-
* > **Preview feature:** This feature is currently available as a preview and is possibly incomplete and subject to change. **We strongly discourage using preview or beta features with production workflows.**
|
|
33
|
-
*
|
|
34
32
|
* Manages Agent Registry records in Vault Enterprise. An Agent Registry record allows you to register Vault agents with specific identity entities and configure ceiling policies that limit the maximum permissions an agent can obtain.
|
|
35
33
|
*
|
|
36
|
-
* > **Important** This resource is available only in Vault Enterprise and requires Vault 2.0
|
|
34
|
+
* > **Important** This resource is available only in Vault Enterprise and requires Vault 2.1.0 or later.
|
|
37
35
|
*
|
|
38
36
|
* ## Notes
|
|
39
37
|
*
|
|
@@ -51,7 +49,7 @@ const utilities = __importStar(require("./utilities"));
|
|
|
51
49
|
*
|
|
52
50
|
* * **Enterprise Feature**: Agent Registry records are only available in Vault Enterprise. Attempting to use this resource with Vault Community Edition will result in an error.
|
|
53
51
|
*
|
|
54
|
-
* * **Version Requirement**: This resource requires Vault 2.0
|
|
52
|
+
* * **Version Requirement**: This resource requires Vault 2.1.0 or later.
|
|
55
53
|
*
|
|
56
54
|
* ## Import
|
|
57
55
|
*
|
package/agentRegistration.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agentRegistration.js","sourceRoot":"","sources":["../agentRegistration.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"agentRegistration.js","sourceRoot":"","sources":["../agentRegistration.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8CG;AACH,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,iDAAiD,CAAC;IAExF;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;IAqDD,YAAY,IAAY,EAAE,WAA4D,EAAE,IAAmC;QACvH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAiD,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,wBAAwB,CAAC,GAAG,KAAK,EAAE,sBAAsB,CAAC;YACzE,cAAc,CAAC,8BAA8B,CAAC,GAAG,KAAK,EAAE,4BAA4B,CAAC;YACrF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;SAC1C;aAAM;YACH,MAAM,IAAI,GAAG,WAAgD,CAAC;YAC9D,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,wBAAwB,CAAC,GAAG,IAAI,EAAE,sBAAsB,CAAC;YACxE,cAAc,CAAC,8BAA8B,CAAC,GAAG,IAAI,EAAE,4BAA4B,CAAC;YACpF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACnD,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;;AAnHL,8CAoHC"}
|
|
@@ -71,6 +71,76 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
71
71
|
* });
|
|
72
72
|
* ```
|
|
73
73
|
*
|
|
74
|
+
* You can configure the Azure auth engine to use static credentials with `rootCreds`. Requires Vault 2.2.0+:
|
|
75
|
+
*
|
|
76
|
+
* ```typescript
|
|
77
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
78
|
+
* import * as vault from "@pulumi/vault";
|
|
79
|
+
*
|
|
80
|
+
* const example = new vault.AuthBackend("example", {type: "azure"});
|
|
81
|
+
* const exampleAuthBackendConfig = new vault.azure.AuthBackendConfig("example", {
|
|
82
|
+
* backend: example.path,
|
|
83
|
+
* tenantId: "11111111-2222-3333-4444-555555555555",
|
|
84
|
+
* clientId: "11111111-2222-3333-4444-555555555555",
|
|
85
|
+
* clientSecret: "01234567890123456789",
|
|
86
|
+
* resource: "https://vault.hashicorp.com",
|
|
87
|
+
* authType: "root_creds",
|
|
88
|
+
* });
|
|
89
|
+
* ```
|
|
90
|
+
*
|
|
91
|
+
* You can configure the Azure auth engine to use Vault Plugin Workload Identity Federation with `pluginWif`. Requires Vault Enterprise 2.2.0+:
|
|
92
|
+
*
|
|
93
|
+
* ```typescript
|
|
94
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
95
|
+
* import * as vault from "@pulumi/vault";
|
|
96
|
+
*
|
|
97
|
+
* const example = new vault.AuthBackend("example", {
|
|
98
|
+
* type: "azure",
|
|
99
|
+
* identityTokenKey: "example-key",
|
|
100
|
+
* });
|
|
101
|
+
* const exampleAuthBackendConfig = new vault.azure.AuthBackendConfig("example", {
|
|
102
|
+
* backend: example.path,
|
|
103
|
+
* tenantId: "11111111-2222-3333-4444-555555555555",
|
|
104
|
+
* clientId: "11111111-2222-3333-4444-555555555555",
|
|
105
|
+
* resource: "https://vault.hashicorp.com",
|
|
106
|
+
* authType: "plugin_wif",
|
|
107
|
+
* identityTokenAudience: "<TOKEN_AUDIENCE>",
|
|
108
|
+
* identityTokenTtl: 3600,
|
|
109
|
+
* });
|
|
110
|
+
* ```
|
|
111
|
+
*
|
|
112
|
+
* You can configure the Azure auth engine to use AKS Workload Identity Federation with `aksWif` for a secretless, cross-tenant setup. Requires Vault 2.2.0+:
|
|
113
|
+
*
|
|
114
|
+
* ```typescript
|
|
115
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
116
|
+
* import * as vault from "@pulumi/vault";
|
|
117
|
+
*
|
|
118
|
+
* const example = new vault.AuthBackend("example", {type: "azure"});
|
|
119
|
+
* const exampleAuthBackendConfig = new vault.azure.AuthBackendConfig("example", {
|
|
120
|
+
* backend: example.path,
|
|
121
|
+
* tenantId: "11111111-2222-3333-4444-555555555555",
|
|
122
|
+
* clientId: "11111111-2222-3333-4444-555555555555",
|
|
123
|
+
* resource: "https://management.azure.com",
|
|
124
|
+
* authType: "aks_wif",
|
|
125
|
+
* });
|
|
126
|
+
* ```
|
|
127
|
+
*
|
|
128
|
+
* You can configure the Azure auth engine to use Azure Managed Service Identity with `msi` for a secretless setup. Requires Vault 2.2.0+:
|
|
129
|
+
*
|
|
130
|
+
* ```typescript
|
|
131
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
132
|
+
* import * as vault from "@pulumi/vault";
|
|
133
|
+
*
|
|
134
|
+
* const example = new vault.AuthBackend("example", {type: "azure"});
|
|
135
|
+
* const exampleAuthBackendConfig = new vault.azure.AuthBackendConfig("example", {
|
|
136
|
+
* backend: example.path,
|
|
137
|
+
* tenantId: "11111111-2222-3333-4444-555555555555",
|
|
138
|
+
* clientId: "11111111-2222-3333-4444-555555555555",
|
|
139
|
+
* resource: "https://management.azure.com",
|
|
140
|
+
* authType: "msi",
|
|
141
|
+
* });
|
|
142
|
+
* ```
|
|
143
|
+
*
|
|
74
144
|
* ## Ephemeral Attributes Reference
|
|
75
145
|
*
|
|
76
146
|
* The following write-only attributes are supported:
|
|
@@ -104,6 +174,10 @@ export declare class AuthBackendConfig extends pulumi.CustomResource {
|
|
|
104
174
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
105
175
|
*/
|
|
106
176
|
static isInstance(obj: any): obj is AuthBackendConfig;
|
|
177
|
+
/**
|
|
178
|
+
* The authentication method used by Vault to access Azure APIs. The following values are supported: `rootCreds`, `pluginWif`, `msi`, `aksWif`. Requires Vault 2.2.0+.
|
|
179
|
+
*/
|
|
180
|
+
readonly authType: pulumi.Output<string | undefined>;
|
|
107
181
|
/**
|
|
108
182
|
* The path the Azure auth backend being configured was
|
|
109
183
|
* mounted at. Defaults to `azure`.
|
|
@@ -217,6 +291,10 @@ export declare class AuthBackendConfig extends pulumi.CustomResource {
|
|
|
217
291
|
* Input properties used for looking up and filtering AuthBackendConfig resources.
|
|
218
292
|
*/
|
|
219
293
|
export interface AuthBackendConfigState {
|
|
294
|
+
/**
|
|
295
|
+
* The authentication method used by Vault to access Azure APIs. The following values are supported: `rootCreds`, `pluginWif`, `msi`, `aksWif`. Requires Vault 2.2.0+.
|
|
296
|
+
*/
|
|
297
|
+
authType?: pulumi.Input<string | undefined>;
|
|
220
298
|
/**
|
|
221
299
|
* The path the Azure auth backend being configured was
|
|
222
300
|
* mounted at. Defaults to `azure`.
|
|
@@ -322,6 +400,10 @@ export interface AuthBackendConfigState {
|
|
|
322
400
|
* The set of arguments for constructing a AuthBackendConfig resource.
|
|
323
401
|
*/
|
|
324
402
|
export interface AuthBackendConfigArgs {
|
|
403
|
+
/**
|
|
404
|
+
* The authentication method used by Vault to access Azure APIs. The following values are supported: `rootCreds`, `pluginWif`, `msi`, `aksWif`. Requires Vault 2.2.0+.
|
|
405
|
+
*/
|
|
406
|
+
authType?: pulumi.Input<string | undefined>;
|
|
325
407
|
/**
|
|
326
408
|
* The path the Azure auth backend being configured was
|
|
327
409
|
* mounted at. Defaults to `azure`.
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authBackendConfig.d.ts","sourceRoot":"","sources":["../../azure/authBackendConfig.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC
|
|
1
|
+
{"version":3,"file":"authBackendConfig.d.ts","sourceRoot":"","sources":["../../azure/authBackendConfig.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8JG;AACH,qBAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,sBAAsB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,iBAAiB;IAOpJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,iBAAiB;IAO5D;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpE;;;OAGG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnE;;;OAGG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpE;;;;OAIG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxE;;;OAGG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E;;;;OAIG;IACH,SAAwB,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjF;;;OAGG;IACH,SAAwB,wBAAwB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACrF;;;;OAIG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;;OAGG;IACH,SAAwB,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjF;;;;OAIG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;;OAGG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtE;;;OAGG;IACH,SAAwB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzE;;;;;OAKG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;;OAGG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD;;;OAGG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtE;;;;OAIG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E;;;;OAIG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5E;;;;;OAKG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E;;;OAGG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAExD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CA0D7F;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC/C;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC7D;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;;OAGG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzD;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;;;;OAKG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;OAGG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAClC"}
|
|
@@ -100,6 +100,76 @@ const utilities = __importStar(require("../utilities"));
|
|
|
100
100
|
* });
|
|
101
101
|
* ```
|
|
102
102
|
*
|
|
103
|
+
* You can configure the Azure auth engine to use static credentials with `rootCreds`. Requires Vault 2.2.0+:
|
|
104
|
+
*
|
|
105
|
+
* ```typescript
|
|
106
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
107
|
+
* import * as vault from "@pulumi/vault";
|
|
108
|
+
*
|
|
109
|
+
* const example = new vault.AuthBackend("example", {type: "azure"});
|
|
110
|
+
* const exampleAuthBackendConfig = new vault.azure.AuthBackendConfig("example", {
|
|
111
|
+
* backend: example.path,
|
|
112
|
+
* tenantId: "11111111-2222-3333-4444-555555555555",
|
|
113
|
+
* clientId: "11111111-2222-3333-4444-555555555555",
|
|
114
|
+
* clientSecret: "01234567890123456789",
|
|
115
|
+
* resource: "https://vault.hashicorp.com",
|
|
116
|
+
* authType: "root_creds",
|
|
117
|
+
* });
|
|
118
|
+
* ```
|
|
119
|
+
*
|
|
120
|
+
* You can configure the Azure auth engine to use Vault Plugin Workload Identity Federation with `pluginWif`. Requires Vault Enterprise 2.2.0+:
|
|
121
|
+
*
|
|
122
|
+
* ```typescript
|
|
123
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
124
|
+
* import * as vault from "@pulumi/vault";
|
|
125
|
+
*
|
|
126
|
+
* const example = new vault.AuthBackend("example", {
|
|
127
|
+
* type: "azure",
|
|
128
|
+
* identityTokenKey: "example-key",
|
|
129
|
+
* });
|
|
130
|
+
* const exampleAuthBackendConfig = new vault.azure.AuthBackendConfig("example", {
|
|
131
|
+
* backend: example.path,
|
|
132
|
+
* tenantId: "11111111-2222-3333-4444-555555555555",
|
|
133
|
+
* clientId: "11111111-2222-3333-4444-555555555555",
|
|
134
|
+
* resource: "https://vault.hashicorp.com",
|
|
135
|
+
* authType: "plugin_wif",
|
|
136
|
+
* identityTokenAudience: "<TOKEN_AUDIENCE>",
|
|
137
|
+
* identityTokenTtl: 3600,
|
|
138
|
+
* });
|
|
139
|
+
* ```
|
|
140
|
+
*
|
|
141
|
+
* You can configure the Azure auth engine to use AKS Workload Identity Federation with `aksWif` for a secretless, cross-tenant setup. Requires Vault 2.2.0+:
|
|
142
|
+
*
|
|
143
|
+
* ```typescript
|
|
144
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
145
|
+
* import * as vault from "@pulumi/vault";
|
|
146
|
+
*
|
|
147
|
+
* const example = new vault.AuthBackend("example", {type: "azure"});
|
|
148
|
+
* const exampleAuthBackendConfig = new vault.azure.AuthBackendConfig("example", {
|
|
149
|
+
* backend: example.path,
|
|
150
|
+
* tenantId: "11111111-2222-3333-4444-555555555555",
|
|
151
|
+
* clientId: "11111111-2222-3333-4444-555555555555",
|
|
152
|
+
* resource: "https://management.azure.com",
|
|
153
|
+
* authType: "aks_wif",
|
|
154
|
+
* });
|
|
155
|
+
* ```
|
|
156
|
+
*
|
|
157
|
+
* You can configure the Azure auth engine to use Azure Managed Service Identity with `msi` for a secretless setup. Requires Vault 2.2.0+:
|
|
158
|
+
*
|
|
159
|
+
* ```typescript
|
|
160
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
161
|
+
* import * as vault from "@pulumi/vault";
|
|
162
|
+
*
|
|
163
|
+
* const example = new vault.AuthBackend("example", {type: "azure"});
|
|
164
|
+
* const exampleAuthBackendConfig = new vault.azure.AuthBackendConfig("example", {
|
|
165
|
+
* backend: example.path,
|
|
166
|
+
* tenantId: "11111111-2222-3333-4444-555555555555",
|
|
167
|
+
* clientId: "11111111-2222-3333-4444-555555555555",
|
|
168
|
+
* resource: "https://management.azure.com",
|
|
169
|
+
* authType: "msi",
|
|
170
|
+
* });
|
|
171
|
+
* ```
|
|
172
|
+
*
|
|
103
173
|
* ## Ephemeral Attributes Reference
|
|
104
174
|
*
|
|
105
175
|
* The following write-only attributes are supported:
|
|
@@ -147,6 +217,7 @@ class AuthBackendConfig extends pulumi.CustomResource {
|
|
|
147
217
|
opts = opts || {};
|
|
148
218
|
if (opts.id) {
|
|
149
219
|
const state = argsOrState;
|
|
220
|
+
resourceInputs["authType"] = state?.authType;
|
|
150
221
|
resourceInputs["backend"] = state?.backend;
|
|
151
222
|
resourceInputs["clientId"] = state?.clientId;
|
|
152
223
|
resourceInputs["clientSecret"] = state?.clientSecret;
|
|
@@ -174,6 +245,7 @@ class AuthBackendConfig extends pulumi.CustomResource {
|
|
|
174
245
|
if (args?.tenantId === undefined && !opts.urn) {
|
|
175
246
|
throw new Error("Missing required property 'tenantId'");
|
|
176
247
|
}
|
|
248
|
+
resourceInputs["authType"] = args?.authType;
|
|
177
249
|
resourceInputs["backend"] = args?.backend;
|
|
178
250
|
resourceInputs["clientId"] = args?.clientId ? pulumi.secret(args.clientId) : undefined;
|
|
179
251
|
resourceInputs["clientSecret"] = args?.clientSecret ? pulumi.secret(args.clientSecret) : undefined;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"authBackendConfig.js","sourceRoot":"","sources":["../../azure/authBackendConfig.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAE1C
|
|
1
|
+
{"version":3,"file":"authBackendConfig.js","sourceRoot":"","sources":["../../azure/authBackendConfig.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,wDAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8JG;AACH,MAAa,iBAAkB,SAAQ,MAAM,CAAC,cAAc;IACxD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA8B,EAAE,IAAmC;QAC5H,OAAO,IAAI,iBAAiB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACxE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,iDAAiD,CAAC;IAExF;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,iBAAiB,CAAC,YAAY,CAAC;IAClE,CAAC;IAmHD,YAAY,IAAY,EAAE,WAA4D,EAAE,IAAmC;QACvH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAiD,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAgD,CAAC;YAC9D,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACnG,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzG,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,0BAA0B,CAAC,GAAG,IAAI,EAAE,wBAAwB,CAAC;YAC5E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;SAC1F;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,gBAAgB,EAAE,UAAU,CAAC,EAAE,CAAC;QAC3G,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACtE,CAAC;;AArML,8CAsMC"}
|
package/certAuthBackendRole.d.ts
CHANGED
|
@@ -28,6 +28,37 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
28
28
|
* tokenPolicies: ["foo"],
|
|
29
29
|
* });
|
|
30
30
|
* ```
|
|
31
|
+
*
|
|
32
|
+
* ### With Write-Only Certificate
|
|
33
|
+
*
|
|
34
|
+
* ```typescript
|
|
35
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
36
|
+
* import * as vault from "@pulumi/vault";
|
|
37
|
+
*
|
|
38
|
+
* const cert = new vault.AuthBackend("cert", {
|
|
39
|
+
* path: "cert",
|
|
40
|
+
* type: "cert",
|
|
41
|
+
* });
|
|
42
|
+
* const certCertAuthBackendRole = new vault.CertAuthBackendRole("cert", {
|
|
43
|
+
* name: "foo",
|
|
44
|
+
* certificateWo: caCertificate,
|
|
45
|
+
* certificateWoVersion: 1,
|
|
46
|
+
* backend: cert.path,
|
|
47
|
+
* allowedNames: [
|
|
48
|
+
* "foo.example.org",
|
|
49
|
+
* "baz.example.org",
|
|
50
|
+
* ],
|
|
51
|
+
* tokenTtl: 300,
|
|
52
|
+
* tokenMaxTtl: 600,
|
|
53
|
+
* tokenPolicies: ["foo"],
|
|
54
|
+
* });
|
|
55
|
+
* ```
|
|
56
|
+
*
|
|
57
|
+
* ## Ephemeral Attributes Reference
|
|
58
|
+
*
|
|
59
|
+
* The following write-only attributes are supported:
|
|
60
|
+
*
|
|
61
|
+
* * `certificateWo` - (Optional string) Write-only CA certificate used to validate client certificates. Use `certificateWo` to supply the certificate from an ephemeral resource. Exactly one of `certificateWo` or `certificate` must be specified. This attribute conflicts with `certificate`. **Note**: This property is write-only and will not be read from the API.
|
|
31
62
|
*/
|
|
32
63
|
export declare class CertAuthBackendRole extends pulumi.CustomResource {
|
|
33
64
|
/**
|
|
@@ -81,9 +112,17 @@ export declare class CertAuthBackendRole extends pulumi.CustomResource {
|
|
|
81
112
|
*/
|
|
82
113
|
readonly backend: pulumi.Output<string | undefined>;
|
|
83
114
|
/**
|
|
84
|
-
* CA certificate used to validate client certificates
|
|
115
|
+
* CA certificate used to validate client certificates. Exactly one of `certificate` or `certificateWo` must be specified. Conflicts with `certificateWo`. Changing this value updates the certificate in-place rather than recreating the resource. When `certificateWo` is used, this field is populated from the vault API response after apply.
|
|
85
116
|
*/
|
|
86
117
|
readonly certificate: pulumi.Output<string>;
|
|
118
|
+
/**
|
|
119
|
+
* **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
120
|
+
*/
|
|
121
|
+
readonly certificateWo: pulumi.Output<string | undefined>;
|
|
122
|
+
/**
|
|
123
|
+
* The version of `certificateWo` to use during write operations. Required with `certificateWo`. For more info see updating write-only attributes.
|
|
124
|
+
*/
|
|
125
|
+
readonly certificateWoVersion: pulumi.Output<number | undefined>;
|
|
87
126
|
/**
|
|
88
127
|
* The name to display on tokens issued under this role.
|
|
89
128
|
*/
|
|
@@ -192,7 +231,7 @@ export declare class CertAuthBackendRole extends pulumi.CustomResource {
|
|
|
192
231
|
* @param args The arguments to use to populate this resource's properties.
|
|
193
232
|
* @param opts A bag of options that control this resource's behavior.
|
|
194
233
|
*/
|
|
195
|
-
constructor(name: string, args
|
|
234
|
+
constructor(name: string, args?: CertAuthBackendRoleArgs, opts?: pulumi.CustomResourceOptions);
|
|
196
235
|
}
|
|
197
236
|
/**
|
|
198
237
|
* Input properties used for looking up and filtering CertAuthBackendRole resources.
|
|
@@ -234,9 +273,17 @@ export interface CertAuthBackendRoleState {
|
|
|
234
273
|
*/
|
|
235
274
|
backend?: pulumi.Input<string | undefined>;
|
|
236
275
|
/**
|
|
237
|
-
* CA certificate used to validate client certificates
|
|
276
|
+
* CA certificate used to validate client certificates. Exactly one of `certificate` or `certificateWo` must be specified. Conflicts with `certificateWo`. Changing this value updates the certificate in-place rather than recreating the resource. When `certificateWo` is used, this field is populated from the vault API response after apply.
|
|
238
277
|
*/
|
|
239
278
|
certificate?: pulumi.Input<string | undefined>;
|
|
279
|
+
/**
|
|
280
|
+
* **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
281
|
+
*/
|
|
282
|
+
certificateWo?: pulumi.Input<string | undefined>;
|
|
283
|
+
/**
|
|
284
|
+
* The version of `certificateWo` to use during write operations. Required with `certificateWo`. For more info see updating write-only attributes.
|
|
285
|
+
*/
|
|
286
|
+
certificateWoVersion?: pulumi.Input<number | undefined>;
|
|
240
287
|
/**
|
|
241
288
|
* The name to display on tokens issued under this role.
|
|
242
289
|
*/
|
|
@@ -379,9 +426,17 @@ export interface CertAuthBackendRoleArgs {
|
|
|
379
426
|
*/
|
|
380
427
|
backend?: pulumi.Input<string | undefined>;
|
|
381
428
|
/**
|
|
382
|
-
* CA certificate used to validate client certificates
|
|
429
|
+
* CA certificate used to validate client certificates. Exactly one of `certificate` or `certificateWo` must be specified. Conflicts with `certificateWo`. Changing this value updates the certificate in-place rather than recreating the resource. When `certificateWo` is used, this field is populated from the vault API response after apply.
|
|
430
|
+
*/
|
|
431
|
+
certificate?: pulumi.Input<string | undefined>;
|
|
432
|
+
/**
|
|
433
|
+
* **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
|
|
434
|
+
*/
|
|
435
|
+
certificateWo?: pulumi.Input<string | undefined>;
|
|
436
|
+
/**
|
|
437
|
+
* The version of `certificateWo` to use during write operations. Required with `certificateWo`. For more info see updating write-only attributes.
|
|
383
438
|
*/
|
|
384
|
-
|
|
439
|
+
certificateWoVersion?: pulumi.Input<number | undefined>;
|
|
385
440
|
/**
|
|
386
441
|
* The name to display on tokens issued under this role.
|
|
387
442
|
*/
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"certAuthBackendRole.d.ts","sourceRoot":"","sources":["../certAuthBackendRole.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC
|
|
1
|
+
{"version":3,"file":"certAuthBackendRole.d.ts","sourceRoot":"","sources":["../certAuthBackendRole.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,qBAAa,mBAAoB,SAAQ,MAAM,CAAC,cAAc;IAC1D;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,wBAAwB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,mBAAmB;IAOxJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,mBAAmB;IAO9D;;;OAGG;IACH,SAAwB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IAC1F;;OAEG;IACH,SAAwB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE;;OAEG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAClE;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D;;OAEG;IACH,SAAwB,0BAA0B,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IACxF;;OAEG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,SAAwB,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChF;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;;;;OAKG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACrE;;;;OAIG;IACH,SAAwB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9E;;;OAGG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5D;;;;;OAKG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7D;;;;OAIG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1E;;;;;OAKG;IACH,SAAwB,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpE;;;;;OAKG;IACH,SAAwB,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAClF;;;;;OAKG;IACH,SAAwB,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChF;;;OAGG;IACH,SAAwB,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IACpE;;OAEG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAC7E;;OAEG;IACH,SAAwB,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/E;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,oBAAoB,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjF;;OAEG;IACH,SAAwB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAC3E;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpE;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAErE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,uBAAuB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CA4EhG;AAED;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACrC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IAChF;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACpE;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC9E;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAChD;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACxD;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACxE;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxD;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACzD;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChD;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACpC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IAChF;;OAEG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACpE;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAChE;;OAEG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAC9E;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IAClE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACjD;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtD;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAChD;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACjD;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;;;OAKG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACxD;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACxE;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxD;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACzD;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAChD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAChD"}
|
package/certAuthBackendRole.js
CHANGED
|
@@ -57,6 +57,37 @@ const utilities = __importStar(require("./utilities"));
|
|
|
57
57
|
* tokenPolicies: ["foo"],
|
|
58
58
|
* });
|
|
59
59
|
* ```
|
|
60
|
+
*
|
|
61
|
+
* ### With Write-Only Certificate
|
|
62
|
+
*
|
|
63
|
+
* ```typescript
|
|
64
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
65
|
+
* import * as vault from "@pulumi/vault";
|
|
66
|
+
*
|
|
67
|
+
* const cert = new vault.AuthBackend("cert", {
|
|
68
|
+
* path: "cert",
|
|
69
|
+
* type: "cert",
|
|
70
|
+
* });
|
|
71
|
+
* const certCertAuthBackendRole = new vault.CertAuthBackendRole("cert", {
|
|
72
|
+
* name: "foo",
|
|
73
|
+
* certificateWo: caCertificate,
|
|
74
|
+
* certificateWoVersion: 1,
|
|
75
|
+
* backend: cert.path,
|
|
76
|
+
* allowedNames: [
|
|
77
|
+
* "foo.example.org",
|
|
78
|
+
* "baz.example.org",
|
|
79
|
+
* ],
|
|
80
|
+
* tokenTtl: 300,
|
|
81
|
+
* tokenMaxTtl: 600,
|
|
82
|
+
* tokenPolicies: ["foo"],
|
|
83
|
+
* });
|
|
84
|
+
* ```
|
|
85
|
+
*
|
|
86
|
+
* ## Ephemeral Attributes Reference
|
|
87
|
+
*
|
|
88
|
+
* The following write-only attributes are supported:
|
|
89
|
+
*
|
|
90
|
+
* * `certificateWo` - (Optional string) Write-only CA certificate used to validate client certificates. Use `certificateWo` to supply the certificate from an ephemeral resource. Exactly one of `certificateWo` or `certificate` must be specified. This attribute conflicts with `certificate`. **Note**: This property is write-only and will not be read from the API.
|
|
60
91
|
*/
|
|
61
92
|
class CertAuthBackendRole extends pulumi.CustomResource {
|
|
62
93
|
/**
|
|
@@ -97,6 +128,8 @@ class CertAuthBackendRole extends pulumi.CustomResource {
|
|
|
97
128
|
resourceInputs["allowedUriSans"] = state?.allowedUriSans;
|
|
98
129
|
resourceInputs["backend"] = state?.backend;
|
|
99
130
|
resourceInputs["certificate"] = state?.certificate;
|
|
131
|
+
resourceInputs["certificateWo"] = state?.certificateWo;
|
|
132
|
+
resourceInputs["certificateWoVersion"] = state?.certificateWoVersion;
|
|
100
133
|
resourceInputs["displayName"] = state?.displayName;
|
|
101
134
|
resourceInputs["name"] = state?.name;
|
|
102
135
|
resourceInputs["namespace"] = state?.namespace;
|
|
@@ -120,9 +153,6 @@ class CertAuthBackendRole extends pulumi.CustomResource {
|
|
|
120
153
|
}
|
|
121
154
|
else {
|
|
122
155
|
const args = argsOrState;
|
|
123
|
-
if (args?.certificate === undefined && !opts.urn) {
|
|
124
|
-
throw new Error("Missing required property 'certificate'");
|
|
125
|
-
}
|
|
126
156
|
resourceInputs["aliasMetadata"] = args?.aliasMetadata;
|
|
127
157
|
resourceInputs["allowedCommonNames"] = args?.allowedCommonNames;
|
|
128
158
|
resourceInputs["allowedDnsSans"] = args?.allowedDnsSans;
|
|
@@ -132,6 +162,8 @@ class CertAuthBackendRole extends pulumi.CustomResource {
|
|
|
132
162
|
resourceInputs["allowedUriSans"] = args?.allowedUriSans;
|
|
133
163
|
resourceInputs["backend"] = args?.backend;
|
|
134
164
|
resourceInputs["certificate"] = args?.certificate;
|
|
165
|
+
resourceInputs["certificateWo"] = args?.certificateWo ? pulumi.secret(args.certificateWo) : undefined;
|
|
166
|
+
resourceInputs["certificateWoVersion"] = args?.certificateWoVersion;
|
|
135
167
|
resourceInputs["displayName"] = args?.displayName;
|
|
136
168
|
resourceInputs["name"] = args?.name;
|
|
137
169
|
resourceInputs["namespace"] = args?.namespace;
|
|
@@ -154,6 +186,8 @@ class CertAuthBackendRole extends pulumi.CustomResource {
|
|
|
154
186
|
resourceInputs["tokenType"] = args?.tokenType;
|
|
155
187
|
}
|
|
156
188
|
opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
|
|
189
|
+
const secretOpts = { additionalSecretOutputs: ["certificateWo"] };
|
|
190
|
+
opts = pulumi.mergeOptions(opts, secretOpts);
|
|
157
191
|
super(CertAuthBackendRole.__pulumiType, name, resourceInputs, opts);
|
|
158
192
|
}
|
|
159
193
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"certAuthBackendRole.js","sourceRoot":"","sources":["../certAuthBackendRole.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"certAuthBackendRole.js","sourceRoot":"","sources":["../certAuthBackendRole.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4DG;AACH,MAAa,mBAAoB,SAAQ,MAAM,CAAC,cAAc;IAC1D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAgC,EAAE,IAAmC;QAC9H,OAAO,IAAI,mBAAmB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,qDAAqD,CAAC;IAE5F;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,mBAAmB,CAAC,YAAY,CAAC;IACpE,CAAC;IA6JD,YAAY,IAAY,EAAE,WAAgE,EAAE,IAAmC;QAC3H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAmD,CAAC;YAClE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;SAClD;aAAM;YACH,MAAM,IAAI,GAAG,WAAkD,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,EAAE,kBAAkB,CAAC;YAChE,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC;QAClE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,mBAAmB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACxE,CAAC;;AAjQL,kDAkQC"}
|
package/jwt/authBackend.d.ts
CHANGED
|
@@ -82,7 +82,7 @@ import * as outputs from "../types/output";
|
|
|
82
82
|
* });
|
|
83
83
|
* ```
|
|
84
84
|
*
|
|
85
|
-
* Configuring the auth backend with Okta provider(requires Vault 2.
|
|
85
|
+
* Configuring the auth backend with Okta provider(requires Vault 2.1.1+):
|
|
86
86
|
*
|
|
87
87
|
* ```typescript
|
|
88
88
|
* import * as pulumi from "@pulumi/pulumi";
|
package/jwt/authBackend.js
CHANGED
|
@@ -109,7 +109,7 @@ const utilities = __importStar(require("../utilities"));
|
|
|
109
109
|
* });
|
|
110
110
|
* ```
|
|
111
111
|
*
|
|
112
|
-
* Configuring the auth backend with Okta provider(requires Vault 2.
|
|
112
|
+
* Configuring the auth backend with Okta provider(requires Vault 2.1.1+):
|
|
113
113
|
*
|
|
114
114
|
* ```typescript
|
|
115
115
|
* import * as pulumi from "@pulumi/pulumi";
|
|
@@ -2,31 +2,12 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
import * as inputs from "./types/input";
|
|
3
3
|
import * as outputs from "./types/output";
|
|
4
4
|
/**
|
|
5
|
-
* > **Preview feature:** This feature is currently available as a preview and is possibly incomplete and subject to change. **We strongly discourage using preview or beta features with production workflows.**
|
|
6
|
-
*
|
|
7
5
|
* Manages OAuth Resource Server Configuration profiles in Vault Enterprise. These profiles define how Vault validates JWT tokens from OAuth 2.0 resource servers, enabling JWT-based authentication for API requests.
|
|
8
6
|
*
|
|
9
|
-
* > **Important** This resource is only
|
|
7
|
+
* > **Important** This resource is available only in Vault Enterprise and requires Vault 2.1.0 or later.
|
|
10
8
|
*
|
|
11
9
|
* ## Example Usage
|
|
12
10
|
*
|
|
13
|
-
* ### Enable the Feature
|
|
14
|
-
*
|
|
15
|
-
* ```typescript
|
|
16
|
-
* import * as pulumi from "@pulumi/pulumi";
|
|
17
|
-
* import * as vault from "@pulumi/vault";
|
|
18
|
-
*
|
|
19
|
-
* const oauth = new vault.ActivationFlags("oauth", {feature: "oauth-resource-server"});
|
|
20
|
-
* const example = new vault.OauthResourceServerConfigProfile("example", {
|
|
21
|
-
* profileName: "example-profile",
|
|
22
|
-
* issuerId: "https://example.com",
|
|
23
|
-
* useJwks: true,
|
|
24
|
-
* jwksUri: "https://example.com/.well-known/jwks.json",
|
|
25
|
-
* }, {
|
|
26
|
-
* dependsOn: [oauth],
|
|
27
|
-
* });
|
|
28
|
-
* ```
|
|
29
|
-
*
|
|
30
11
|
* ### JWKS-Based Profile
|
|
31
12
|
*
|
|
32
13
|
* ```typescript
|
|
@@ -150,9 +131,9 @@ import * as outputs from "./types/output";
|
|
|
150
131
|
*
|
|
151
132
|
* * **Clock Skew**: Use `clockSkewLeeway` to handle clock differences between systems. A value of 30-60 seconds is typically sufficient for most environments.
|
|
152
133
|
*
|
|
153
|
-
* * **Enterprise Feature**: OAuth Resource Server Configuration is only
|
|
134
|
+
* * **Enterprise Feature**: OAuth Resource Server Configuration is available only in Vault Enterprise. Attempting to use this resource with Vault Community Edition will result in an error.
|
|
154
135
|
*
|
|
155
|
-
* * **Version Requirement**: This resource requires Vault 2.0
|
|
136
|
+
* * **Version Requirement**: This resource requires Vault 2.1.0 or later.
|
|
156
137
|
*
|
|
157
138
|
* ## Security Considerations
|
|
158
139
|
*
|