pulumi-azuread 5.48.0a1706744699__py3-none-any.whl → 6.8.0a1766208344__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-azuread might be problematic. Click here for more details.
- pulumi_azuread/__init__.py +48 -1
- pulumi_azuread/_inputs.py +3803 -919
- pulumi_azuread/_utilities.py +52 -12
- pulumi_azuread/access_package.py +84 -78
- pulumi_azuread/access_package_assignment_policy.py +202 -196
- pulumi_azuread/access_package_catalog.py +82 -76
- pulumi_azuread/access_package_catalog_role_assignment.py +73 -67
- pulumi_azuread/access_package_resource_catalog_association.py +73 -67
- pulumi_azuread/access_package_resource_package_association.py +79 -73
- pulumi_azuread/administrative_unit.py +120 -100
- pulumi_azuread/administrative_unit_member.py +66 -50
- pulumi_azuread/administrative_unit_role_member.py +75 -69
- pulumi_azuread/app_role_assignment.py +164 -264
- pulumi_azuread/application.py +766 -692
- pulumi_azuread/application_api_access.py +84 -80
- pulumi_azuread/application_app_role.py +120 -116
- pulumi_azuread/application_certificate.py +349 -211
- pulumi_azuread/application_fallback_public_client.py +50 -44
- pulumi_azuread/application_federated_identity_credential.py +142 -197
- pulumi_azuread/application_from_template.py +90 -84
- pulumi_azuread/application_identifier_uri.py +56 -52
- pulumi_azuread/application_known_clients.py +50 -44
- pulumi_azuread/application_optional_claims.py +87 -81
- pulumi_azuread/application_owner.py +76 -42
- pulumi_azuread/application_password.py +159 -205
- pulumi_azuread/application_permission_scope.py +160 -156
- pulumi_azuread/application_pre_authorized.py +120 -236
- pulumi_azuread/application_redirect_uris.py +75 -69
- pulumi_azuread/application_registration.py +315 -309
- pulumi_azuread/authentication_strength_policy.py +73 -67
- pulumi_azuread/claims_mapping_policy.py +48 -42
- pulumi_azuread/conditional_access_policy.py +248 -232
- pulumi_azuread/config/__init__.py +2 -1
- pulumi_azuread/config/__init__.pyi +23 -17
- pulumi_azuread/config/vars.py +47 -37
- pulumi_azuread/custom_directory_role.py +128 -122
- pulumi_azuread/directory_role.py +60 -54
- pulumi_azuread/directory_role_assignment.py +194 -181
- pulumi_azuread/directory_role_eligibility_schedule_request.py +86 -80
- pulumi_azuread/directory_role_member.py +54 -48
- pulumi_azuread/get_access_package.py +45 -31
- pulumi_azuread/get_access_package_catalog.py +40 -27
- pulumi_azuread/get_access_package_catalog_role.py +39 -25
- pulumi_azuread/get_administrative_unit.py +42 -27
- pulumi_azuread/get_application.py +135 -94
- pulumi_azuread/get_application_published_app_ids.py +42 -47
- pulumi_azuread/get_application_template.py +49 -33
- pulumi_azuread/get_client_config.py +24 -15
- pulumi_azuread/get_directory_object.py +32 -21
- pulumi_azuread/get_directory_role_templates.py +20 -12
- pulumi_azuread/get_directory_roles.py +23 -14
- pulumi_azuread/get_domains.py +65 -46
- pulumi_azuread/get_group.py +147 -88
- pulumi_azuread/get_group_role_management_policy.py +178 -0
- pulumi_azuread/get_groups.py +71 -51
- pulumi_azuread/get_named_location.py +47 -22
- pulumi_azuread/get_service_principal.py +108 -90
- pulumi_azuread/get_service_principals.py +60 -64
- pulumi_azuread/get_user.py +186 -118
- pulumi_azuread/get_users.py +96 -53
- pulumi_azuread/group.py +622 -464
- pulumi_azuread/group_member.py +56 -50
- pulumi_azuread/group_role_management_policy.py +544 -0
- pulumi_azuread/group_without_members.py +1610 -0
- pulumi_azuread/invitation.py +126 -120
- pulumi_azuread/named_location.py +90 -76
- pulumi_azuread/outputs.py +2844 -1308
- pulumi_azuread/privileged_access_group_assignment_schedule.py +695 -0
- pulumi_azuread/privileged_access_group_eligibility_schedule.py +695 -0
- pulumi_azuread/provider.py +292 -246
- pulumi_azuread/pulumi-plugin.json +2 -1
- pulumi_azuread/service_principal.py +400 -461
- pulumi_azuread/service_principal_certificate.py +230 -145
- pulumi_azuread/service_principal_claims_mapping_policy_assignment.py +53 -47
- pulumi_azuread/service_principal_delegated_permission_grant.py +146 -140
- pulumi_azuread/service_principal_password.py +156 -141
- pulumi_azuread/service_principal_token_signing_certificate.py +119 -124
- pulumi_azuread/synchronization_job.py +105 -111
- pulumi_azuread/synchronization_job_provision_on_demand.py +396 -0
- pulumi_azuread/synchronization_secret.py +64 -70
- pulumi_azuread/user.py +776 -730
- pulumi_azuread/user_flow_attribute.py +76 -70
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/METADATA +21 -20
- pulumi_azuread-6.8.0a1766208344.dist-info/RECORD +87 -0
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/WHEEL +1 -1
- pulumi_azuread-5.48.0a1706744699.dist-info/RECORD +0 -81
- {pulumi_azuread-5.48.0a1706744699.dist-info → pulumi_azuread-6.8.0a1766208344.dist-info}/top_level.txt +0 -0
|
@@ -1,12 +1,17 @@
|
|
|
1
1
|
# coding=utf-8
|
|
2
|
-
# *** WARNING: this file was generated by
|
|
2
|
+
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import
|
|
5
|
+
import builtins as _builtins
|
|
6
6
|
import warnings
|
|
7
|
+
import sys
|
|
7
8
|
import pulumi
|
|
8
9
|
import pulumi.runtime
|
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
|
11
|
+
if sys.version_info >= (3, 11):
|
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
|
13
|
+
else:
|
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
|
10
15
|
from . import _utilities
|
|
11
16
|
|
|
12
17
|
__all__ = ['ServicePrincipalTokenSigningCertificateArgs', 'ServicePrincipalTokenSigningCertificate']
|
|
@@ -14,17 +19,16 @@ __all__ = ['ServicePrincipalTokenSigningCertificateArgs', 'ServicePrincipalToken
|
|
|
14
19
|
@pulumi.input_type
|
|
15
20
|
class ServicePrincipalTokenSigningCertificateArgs:
|
|
16
21
|
def __init__(__self__, *,
|
|
17
|
-
service_principal_id: pulumi.Input[str],
|
|
18
|
-
display_name: Optional[pulumi.Input[str]] = None,
|
|
19
|
-
end_date: Optional[pulumi.Input[str]] = None):
|
|
22
|
+
service_principal_id: pulumi.Input[_builtins.str],
|
|
23
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
24
|
+
end_date: Optional[pulumi.Input[_builtins.str]] = None):
|
|
20
25
|
"""
|
|
21
26
|
The set of arguments for constructing a ServicePrincipalTokenSigningCertificate resource.
|
|
22
|
-
:param pulumi.Input[str] service_principal_id: The
|
|
23
|
-
:param pulumi.Input[str] display_name: Specifies a friendly name for the certificate.
|
|
24
|
-
Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
27
|
+
:param pulumi.Input[_builtins.str] service_principal_id: The ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
|
|
28
|
+
:param pulumi.Input[_builtins.str] display_name: Specifies a friendly name for the certificate. Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
25
29
|
|
|
26
30
|
> If not specified, it will default to `CN=Microsoft Azure Federated SSO Certificate`.
|
|
27
|
-
:param pulumi.Input[str] end_date: The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
31
|
+
:param pulumi.Input[_builtins.str] end_date: The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
28
32
|
"""
|
|
29
33
|
pulumi.set(__self__, "service_principal_id", service_principal_id)
|
|
30
34
|
if display_name is not None:
|
|
@@ -32,69 +36,66 @@ class ServicePrincipalTokenSigningCertificateArgs:
|
|
|
32
36
|
if end_date is not None:
|
|
33
37
|
pulumi.set(__self__, "end_date", end_date)
|
|
34
38
|
|
|
35
|
-
@property
|
|
39
|
+
@_builtins.property
|
|
36
40
|
@pulumi.getter(name="servicePrincipalId")
|
|
37
|
-
def service_principal_id(self) -> pulumi.Input[str]:
|
|
41
|
+
def service_principal_id(self) -> pulumi.Input[_builtins.str]:
|
|
38
42
|
"""
|
|
39
|
-
The
|
|
43
|
+
The ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
|
|
40
44
|
"""
|
|
41
45
|
return pulumi.get(self, "service_principal_id")
|
|
42
46
|
|
|
43
47
|
@service_principal_id.setter
|
|
44
|
-
def service_principal_id(self, value: pulumi.Input[str]):
|
|
48
|
+
def service_principal_id(self, value: pulumi.Input[_builtins.str]):
|
|
45
49
|
pulumi.set(self, "service_principal_id", value)
|
|
46
50
|
|
|
47
|
-
@property
|
|
51
|
+
@_builtins.property
|
|
48
52
|
@pulumi.getter(name="displayName")
|
|
49
|
-
def display_name(self) -> Optional[pulumi.Input[str]]:
|
|
53
|
+
def display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
50
54
|
"""
|
|
51
|
-
Specifies a friendly name for the certificate.
|
|
52
|
-
Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
55
|
+
Specifies a friendly name for the certificate. Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
53
56
|
|
|
54
57
|
> If not specified, it will default to `CN=Microsoft Azure Federated SSO Certificate`.
|
|
55
58
|
"""
|
|
56
59
|
return pulumi.get(self, "display_name")
|
|
57
60
|
|
|
58
61
|
@display_name.setter
|
|
59
|
-
def display_name(self, value: Optional[pulumi.Input[str]]):
|
|
62
|
+
def display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
60
63
|
pulumi.set(self, "display_name", value)
|
|
61
64
|
|
|
62
|
-
@property
|
|
65
|
+
@_builtins.property
|
|
63
66
|
@pulumi.getter(name="endDate")
|
|
64
|
-
def end_date(self) -> Optional[pulumi.Input[str]]:
|
|
67
|
+
def end_date(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
65
68
|
"""
|
|
66
69
|
The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
67
70
|
"""
|
|
68
71
|
return pulumi.get(self, "end_date")
|
|
69
72
|
|
|
70
73
|
@end_date.setter
|
|
71
|
-
def end_date(self, value: Optional[pulumi.Input[str]]):
|
|
74
|
+
def end_date(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
72
75
|
pulumi.set(self, "end_date", value)
|
|
73
76
|
|
|
74
77
|
|
|
75
78
|
@pulumi.input_type
|
|
76
79
|
class _ServicePrincipalTokenSigningCertificateState:
|
|
77
80
|
def __init__(__self__, *,
|
|
78
|
-
display_name: Optional[pulumi.Input[str]] = None,
|
|
79
|
-
end_date: Optional[pulumi.Input[str]] = None,
|
|
80
|
-
key_id: Optional[pulumi.Input[str]] = None,
|
|
81
|
-
service_principal_id: Optional[pulumi.Input[str]] = None,
|
|
82
|
-
start_date: Optional[pulumi.Input[str]] = None,
|
|
83
|
-
thumbprint: Optional[pulumi.Input[str]] = None,
|
|
84
|
-
value: Optional[pulumi.Input[str]] = None):
|
|
81
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
82
|
+
end_date: Optional[pulumi.Input[_builtins.str]] = None,
|
|
83
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
84
|
+
service_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
85
|
+
start_date: Optional[pulumi.Input[_builtins.str]] = None,
|
|
86
|
+
thumbprint: Optional[pulumi.Input[_builtins.str]] = None,
|
|
87
|
+
value: Optional[pulumi.Input[_builtins.str]] = None):
|
|
85
88
|
"""
|
|
86
89
|
Input properties used for looking up and filtering ServicePrincipalTokenSigningCertificate resources.
|
|
87
|
-
:param pulumi.Input[str] display_name: Specifies a friendly name for the certificate.
|
|
88
|
-
Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
90
|
+
:param pulumi.Input[_builtins.str] display_name: Specifies a friendly name for the certificate. Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
89
91
|
|
|
90
92
|
> If not specified, it will default to `CN=Microsoft Azure Federated SSO Certificate`.
|
|
91
|
-
:param pulumi.Input[str] end_date: The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
92
|
-
:param pulumi.Input[str] key_id: A UUID used to uniquely identify the verify certificate.
|
|
93
|
-
:param pulumi.Input[str] service_principal_id: The
|
|
94
|
-
:param pulumi.Input[str] start_date: The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`).
|
|
95
|
-
:param pulumi.Input[str] thumbprint: A SHA-1 generated thumbprint of the token signing certificate, which can be used to set the preferred signing certificate for a service principal.
|
|
96
|
-
:param pulumi.Input[str] value: The certificate data, which is PEM encoded but does not include the
|
|
97
|
-
header `-----BEGIN CERTIFICATE-----\\n` or the footer `\\n-----END CERTIFICATE-----`.
|
|
93
|
+
:param pulumi.Input[_builtins.str] end_date: The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
94
|
+
:param pulumi.Input[_builtins.str] key_id: A UUID used to uniquely identify the verify certificate.
|
|
95
|
+
:param pulumi.Input[_builtins.str] service_principal_id: The ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
|
|
96
|
+
:param pulumi.Input[_builtins.str] start_date: The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`).
|
|
97
|
+
:param pulumi.Input[_builtins.str] thumbprint: A SHA-1 generated thumbprint of the token signing certificate, which can be used to set the preferred signing certificate for a service principal.
|
|
98
|
+
:param pulumi.Input[_builtins.str] value: The certificate data, which is PEM encoded but does not include the header `-----BEGIN CERTIFICATE-----\\n` or the footer `\\n-----END CERTIFICATE-----`.
|
|
98
99
|
"""
|
|
99
100
|
if display_name is not None:
|
|
100
101
|
pulumi.set(__self__, "display_name", display_name)
|
|
@@ -111,103 +112,102 @@ class _ServicePrincipalTokenSigningCertificateState:
|
|
|
111
112
|
if value is not None:
|
|
112
113
|
pulumi.set(__self__, "value", value)
|
|
113
114
|
|
|
114
|
-
@property
|
|
115
|
+
@_builtins.property
|
|
115
116
|
@pulumi.getter(name="displayName")
|
|
116
|
-
def display_name(self) -> Optional[pulumi.Input[str]]:
|
|
117
|
+
def display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
117
118
|
"""
|
|
118
|
-
Specifies a friendly name for the certificate.
|
|
119
|
-
Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
119
|
+
Specifies a friendly name for the certificate. Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
120
120
|
|
|
121
121
|
> If not specified, it will default to `CN=Microsoft Azure Federated SSO Certificate`.
|
|
122
122
|
"""
|
|
123
123
|
return pulumi.get(self, "display_name")
|
|
124
124
|
|
|
125
125
|
@display_name.setter
|
|
126
|
-
def display_name(self, value: Optional[pulumi.Input[str]]):
|
|
126
|
+
def display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
127
127
|
pulumi.set(self, "display_name", value)
|
|
128
128
|
|
|
129
|
-
@property
|
|
129
|
+
@_builtins.property
|
|
130
130
|
@pulumi.getter(name="endDate")
|
|
131
|
-
def end_date(self) -> Optional[pulumi.Input[str]]:
|
|
131
|
+
def end_date(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
132
132
|
"""
|
|
133
133
|
The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
134
134
|
"""
|
|
135
135
|
return pulumi.get(self, "end_date")
|
|
136
136
|
|
|
137
137
|
@end_date.setter
|
|
138
|
-
def end_date(self, value: Optional[pulumi.Input[str]]):
|
|
138
|
+
def end_date(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
139
139
|
pulumi.set(self, "end_date", value)
|
|
140
140
|
|
|
141
|
-
@property
|
|
141
|
+
@_builtins.property
|
|
142
142
|
@pulumi.getter(name="keyId")
|
|
143
|
-
def key_id(self) -> Optional[pulumi.Input[str]]:
|
|
143
|
+
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
144
144
|
"""
|
|
145
145
|
A UUID used to uniquely identify the verify certificate.
|
|
146
146
|
"""
|
|
147
147
|
return pulumi.get(self, "key_id")
|
|
148
148
|
|
|
149
149
|
@key_id.setter
|
|
150
|
-
def key_id(self, value: Optional[pulumi.Input[str]]):
|
|
150
|
+
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
151
151
|
pulumi.set(self, "key_id", value)
|
|
152
152
|
|
|
153
|
-
@property
|
|
153
|
+
@_builtins.property
|
|
154
154
|
@pulumi.getter(name="servicePrincipalId")
|
|
155
|
-
def service_principal_id(self) -> Optional[pulumi.Input[str]]:
|
|
155
|
+
def service_principal_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
156
156
|
"""
|
|
157
|
-
The
|
|
157
|
+
The ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
|
|
158
158
|
"""
|
|
159
159
|
return pulumi.get(self, "service_principal_id")
|
|
160
160
|
|
|
161
161
|
@service_principal_id.setter
|
|
162
|
-
def service_principal_id(self, value: Optional[pulumi.Input[str]]):
|
|
162
|
+
def service_principal_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
163
163
|
pulumi.set(self, "service_principal_id", value)
|
|
164
164
|
|
|
165
|
-
@property
|
|
165
|
+
@_builtins.property
|
|
166
166
|
@pulumi.getter(name="startDate")
|
|
167
|
-
def start_date(self) -> Optional[pulumi.Input[str]]:
|
|
167
|
+
def start_date(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
168
168
|
"""
|
|
169
169
|
The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`).
|
|
170
170
|
"""
|
|
171
171
|
return pulumi.get(self, "start_date")
|
|
172
172
|
|
|
173
173
|
@start_date.setter
|
|
174
|
-
def start_date(self, value: Optional[pulumi.Input[str]]):
|
|
174
|
+
def start_date(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
175
175
|
pulumi.set(self, "start_date", value)
|
|
176
176
|
|
|
177
|
-
@property
|
|
177
|
+
@_builtins.property
|
|
178
178
|
@pulumi.getter
|
|
179
|
-
def thumbprint(self) -> Optional[pulumi.Input[str]]:
|
|
179
|
+
def thumbprint(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
180
180
|
"""
|
|
181
181
|
A SHA-1 generated thumbprint of the token signing certificate, which can be used to set the preferred signing certificate for a service principal.
|
|
182
182
|
"""
|
|
183
183
|
return pulumi.get(self, "thumbprint")
|
|
184
184
|
|
|
185
185
|
@thumbprint.setter
|
|
186
|
-
def thumbprint(self, value: Optional[pulumi.Input[str]]):
|
|
186
|
+
def thumbprint(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
187
187
|
pulumi.set(self, "thumbprint", value)
|
|
188
188
|
|
|
189
|
-
@property
|
|
189
|
+
@_builtins.property
|
|
190
190
|
@pulumi.getter
|
|
191
|
-
def value(self) -> Optional[pulumi.Input[str]]:
|
|
191
|
+
def value(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
192
192
|
"""
|
|
193
|
-
The certificate data, which is PEM encoded but does not include the
|
|
194
|
-
header `-----BEGIN CERTIFICATE-----\\n` or the footer `\\n-----END CERTIFICATE-----`.
|
|
193
|
+
The certificate data, which is PEM encoded but does not include the header `-----BEGIN CERTIFICATE-----\\n` or the footer `\\n-----END CERTIFICATE-----`.
|
|
195
194
|
"""
|
|
196
195
|
return pulumi.get(self, "value")
|
|
197
196
|
|
|
198
197
|
@value.setter
|
|
199
|
-
def value(self, value: Optional[pulumi.Input[str]]):
|
|
198
|
+
def value(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
200
199
|
pulumi.set(self, "value", value)
|
|
201
200
|
|
|
202
201
|
|
|
202
|
+
@pulumi.type_token("azuread:index/servicePrincipalTokenSigningCertificate:ServicePrincipalTokenSigningCertificate")
|
|
203
203
|
class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
204
204
|
@overload
|
|
205
205
|
def __init__(__self__,
|
|
206
206
|
resource_name: str,
|
|
207
207
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
208
|
-
display_name: Optional[pulumi.Input[str]] = None,
|
|
209
|
-
end_date: Optional[pulumi.Input[str]] = None,
|
|
210
|
-
service_principal_id: Optional[pulumi.Input[str]] = None,
|
|
208
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
209
|
+
end_date: Optional[pulumi.Input[_builtins.str]] = None,
|
|
210
|
+
service_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
211
211
|
__props__=None):
|
|
212
212
|
"""
|
|
213
213
|
## Example Usage
|
|
@@ -218,9 +218,9 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
218
218
|
import pulumi
|
|
219
219
|
import pulumi_azuread as azuread
|
|
220
220
|
|
|
221
|
-
|
|
222
|
-
example_service_principal = azuread.ServicePrincipal("
|
|
223
|
-
example_service_principal_token_signing_certificate = azuread.ServicePrincipalTokenSigningCertificate("
|
|
221
|
+
example = azuread.Application("example", display_name="example")
|
|
222
|
+
example_service_principal = azuread.ServicePrincipal("example", client_id=example.client_id)
|
|
223
|
+
example_service_principal_token_signing_certificate = azuread.ServicePrincipalTokenSigningCertificate("example", service_principal_id=example_service_principal.id)
|
|
224
224
|
```
|
|
225
225
|
|
|
226
226
|
*Using custom settings*
|
|
@@ -229,9 +229,9 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
229
229
|
import pulumi
|
|
230
230
|
import pulumi_azuread as azuread
|
|
231
231
|
|
|
232
|
-
|
|
233
|
-
example_service_principal = azuread.ServicePrincipal("
|
|
234
|
-
example_service_principal_token_signing_certificate = azuread.ServicePrincipalTokenSigningCertificate("
|
|
232
|
+
example = azuread.Application("example", display_name="example")
|
|
233
|
+
example_service_principal = azuread.ServicePrincipal("example", client_id=example.client_id)
|
|
234
|
+
example_service_principal_token_signing_certificate = azuread.ServicePrincipalTokenSigningCertificate("example",
|
|
235
235
|
service_principal_id=example_service_principal.id,
|
|
236
236
|
display_name="CN=example.com",
|
|
237
237
|
end_date="2023-05-01T01:02:03Z")
|
|
@@ -242,19 +242,18 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
242
242
|
Token signing certificates can be imported using the object ID of the associated service principal and the key ID of the verify certificate credential, e.g.
|
|
243
243
|
|
|
244
244
|
```sh
|
|
245
|
-
|
|
245
|
+
$ pulumi import azuread:index/servicePrincipalTokenSigningCertificate:ServicePrincipalTokenSigningCertificate example 00000000-0000-0000-0000-000000000000/tokenSigningCertificate/11111111-1111-1111-1111-111111111111
|
|
246
246
|
```
|
|
247
247
|
|
|
248
|
-
|
|
248
|
+
-> This ID format is unique to Terraform and is composed of the service principal's object ID, the string "tokenSigningCertificate" and the verify certificate's key ID in the format `{ServicePrincipalObjectId}/tokenSigningCertificate/{CertificateKeyId}`.
|
|
249
249
|
|
|
250
250
|
:param str resource_name: The name of the resource.
|
|
251
251
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
252
|
-
:param pulumi.Input[str] display_name: Specifies a friendly name for the certificate.
|
|
253
|
-
Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
252
|
+
:param pulumi.Input[_builtins.str] display_name: Specifies a friendly name for the certificate. Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
254
253
|
|
|
255
254
|
> If not specified, it will default to `CN=Microsoft Azure Federated SSO Certificate`.
|
|
256
|
-
:param pulumi.Input[str] end_date: The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
257
|
-
:param pulumi.Input[str] service_principal_id: The
|
|
255
|
+
:param pulumi.Input[_builtins.str] end_date: The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
256
|
+
:param pulumi.Input[_builtins.str] service_principal_id: The ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
|
|
258
257
|
"""
|
|
259
258
|
...
|
|
260
259
|
@overload
|
|
@@ -271,9 +270,9 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
271
270
|
import pulumi
|
|
272
271
|
import pulumi_azuread as azuread
|
|
273
272
|
|
|
274
|
-
|
|
275
|
-
example_service_principal = azuread.ServicePrincipal("
|
|
276
|
-
example_service_principal_token_signing_certificate = azuread.ServicePrincipalTokenSigningCertificate("
|
|
273
|
+
example = azuread.Application("example", display_name="example")
|
|
274
|
+
example_service_principal = azuread.ServicePrincipal("example", client_id=example.client_id)
|
|
275
|
+
example_service_principal_token_signing_certificate = azuread.ServicePrincipalTokenSigningCertificate("example", service_principal_id=example_service_principal.id)
|
|
277
276
|
```
|
|
278
277
|
|
|
279
278
|
*Using custom settings*
|
|
@@ -282,9 +281,9 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
282
281
|
import pulumi
|
|
283
282
|
import pulumi_azuread as azuread
|
|
284
283
|
|
|
285
|
-
|
|
286
|
-
example_service_principal = azuread.ServicePrincipal("
|
|
287
|
-
example_service_principal_token_signing_certificate = azuread.ServicePrincipalTokenSigningCertificate("
|
|
284
|
+
example = azuread.Application("example", display_name="example")
|
|
285
|
+
example_service_principal = azuread.ServicePrincipal("example", client_id=example.client_id)
|
|
286
|
+
example_service_principal_token_signing_certificate = azuread.ServicePrincipalTokenSigningCertificate("example",
|
|
288
287
|
service_principal_id=example_service_principal.id,
|
|
289
288
|
display_name="CN=example.com",
|
|
290
289
|
end_date="2023-05-01T01:02:03Z")
|
|
@@ -295,10 +294,10 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
295
294
|
Token signing certificates can be imported using the object ID of the associated service principal and the key ID of the verify certificate credential, e.g.
|
|
296
295
|
|
|
297
296
|
```sh
|
|
298
|
-
|
|
297
|
+
$ pulumi import azuread:index/servicePrincipalTokenSigningCertificate:ServicePrincipalTokenSigningCertificate example 00000000-0000-0000-0000-000000000000/tokenSigningCertificate/11111111-1111-1111-1111-111111111111
|
|
299
298
|
```
|
|
300
299
|
|
|
301
|
-
|
|
300
|
+
-> This ID format is unique to Terraform and is composed of the service principal's object ID, the string "tokenSigningCertificate" and the verify certificate's key ID in the format `{ServicePrincipalObjectId}/tokenSigningCertificate/{CertificateKeyId}`.
|
|
302
301
|
|
|
303
302
|
:param str resource_name: The name of the resource.
|
|
304
303
|
:param ServicePrincipalTokenSigningCertificateArgs args: The arguments to use to populate this resource's properties.
|
|
@@ -315,9 +314,9 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
315
314
|
def _internal_init(__self__,
|
|
316
315
|
resource_name: str,
|
|
317
316
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
318
|
-
display_name: Optional[pulumi.Input[str]] = None,
|
|
319
|
-
end_date: Optional[pulumi.Input[str]] = None,
|
|
320
|
-
service_principal_id: Optional[pulumi.Input[str]] = None,
|
|
317
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
318
|
+
end_date: Optional[pulumi.Input[_builtins.str]] = None,
|
|
319
|
+
service_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
321
320
|
__props__=None):
|
|
322
321
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
323
322
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -348,13 +347,13 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
348
347
|
def get(resource_name: str,
|
|
349
348
|
id: pulumi.Input[str],
|
|
350
349
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
351
|
-
display_name: Optional[pulumi.Input[str]] = None,
|
|
352
|
-
end_date: Optional[pulumi.Input[str]] = None,
|
|
353
|
-
key_id: Optional[pulumi.Input[str]] = None,
|
|
354
|
-
service_principal_id: Optional[pulumi.Input[str]] = None,
|
|
355
|
-
start_date: Optional[pulumi.Input[str]] = None,
|
|
356
|
-
thumbprint: Optional[pulumi.Input[str]] = None,
|
|
357
|
-
value: Optional[pulumi.Input[str]] = None) -> 'ServicePrincipalTokenSigningCertificate':
|
|
350
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
351
|
+
end_date: Optional[pulumi.Input[_builtins.str]] = None,
|
|
352
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
353
|
+
service_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
354
|
+
start_date: Optional[pulumi.Input[_builtins.str]] = None,
|
|
355
|
+
thumbprint: Optional[pulumi.Input[_builtins.str]] = None,
|
|
356
|
+
value: Optional[pulumi.Input[_builtins.str]] = None) -> 'ServicePrincipalTokenSigningCertificate':
|
|
358
357
|
"""
|
|
359
358
|
Get an existing ServicePrincipalTokenSigningCertificate resource's state with the given name, id, and optional extra
|
|
360
359
|
properties used to qualify the lookup.
|
|
@@ -362,17 +361,15 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
362
361
|
:param str resource_name: The unique name of the resulting resource.
|
|
363
362
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
364
363
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
365
|
-
:param pulumi.Input[str] display_name: Specifies a friendly name for the certificate.
|
|
366
|
-
Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
364
|
+
:param pulumi.Input[_builtins.str] display_name: Specifies a friendly name for the certificate. Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
367
365
|
|
|
368
366
|
> If not specified, it will default to `CN=Microsoft Azure Federated SSO Certificate`.
|
|
369
|
-
:param pulumi.Input[str] end_date: The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
370
|
-
:param pulumi.Input[str] key_id: A UUID used to uniquely identify the verify certificate.
|
|
371
|
-
:param pulumi.Input[str] service_principal_id: The
|
|
372
|
-
:param pulumi.Input[str] start_date: The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`).
|
|
373
|
-
:param pulumi.Input[str] thumbprint: A SHA-1 generated thumbprint of the token signing certificate, which can be used to set the preferred signing certificate for a service principal.
|
|
374
|
-
:param pulumi.Input[str] value: The certificate data, which is PEM encoded but does not include the
|
|
375
|
-
header `-----BEGIN CERTIFICATE-----\\n` or the footer `\\n-----END CERTIFICATE-----`.
|
|
367
|
+
:param pulumi.Input[_builtins.str] end_date: The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
368
|
+
:param pulumi.Input[_builtins.str] key_id: A UUID used to uniquely identify the verify certificate.
|
|
369
|
+
:param pulumi.Input[_builtins.str] service_principal_id: The ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
|
|
370
|
+
:param pulumi.Input[_builtins.str] start_date: The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`).
|
|
371
|
+
:param pulumi.Input[_builtins.str] thumbprint: A SHA-1 generated thumbprint of the token signing certificate, which can be used to set the preferred signing certificate for a service principal.
|
|
372
|
+
:param pulumi.Input[_builtins.str] value: The certificate data, which is PEM encoded but does not include the header `-----BEGIN CERTIFICATE-----\\n` or the footer `\\n-----END CERTIFICATE-----`.
|
|
376
373
|
"""
|
|
377
374
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
378
375
|
|
|
@@ -387,63 +384,61 @@ class ServicePrincipalTokenSigningCertificate(pulumi.CustomResource):
|
|
|
387
384
|
__props__.__dict__["value"] = value
|
|
388
385
|
return ServicePrincipalTokenSigningCertificate(resource_name, opts=opts, __props__=__props__)
|
|
389
386
|
|
|
390
|
-
@property
|
|
387
|
+
@_builtins.property
|
|
391
388
|
@pulumi.getter(name="displayName")
|
|
392
|
-
def display_name(self) -> pulumi.Output[str]:
|
|
389
|
+
def display_name(self) -> pulumi.Output[_builtins.str]:
|
|
393
390
|
"""
|
|
394
|
-
Specifies a friendly name for the certificate.
|
|
395
|
-
Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
391
|
+
Specifies a friendly name for the certificate. Must start with `CN=`. Changing this field forces a new resource to be created.
|
|
396
392
|
|
|
397
393
|
> If not specified, it will default to `CN=Microsoft Azure Federated SSO Certificate`.
|
|
398
394
|
"""
|
|
399
395
|
return pulumi.get(self, "display_name")
|
|
400
396
|
|
|
401
|
-
@property
|
|
397
|
+
@_builtins.property
|
|
402
398
|
@pulumi.getter(name="endDate")
|
|
403
|
-
def end_date(self) -> pulumi.Output[str]:
|
|
399
|
+
def end_date(self) -> pulumi.Output[_builtins.str]:
|
|
404
400
|
"""
|
|
405
401
|
The end date until which the token signing certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`). Changing this field forces a new resource to be created.
|
|
406
402
|
"""
|
|
407
403
|
return pulumi.get(self, "end_date")
|
|
408
404
|
|
|
409
|
-
@property
|
|
405
|
+
@_builtins.property
|
|
410
406
|
@pulumi.getter(name="keyId")
|
|
411
|
-
def key_id(self) -> pulumi.Output[str]:
|
|
407
|
+
def key_id(self) -> pulumi.Output[_builtins.str]:
|
|
412
408
|
"""
|
|
413
409
|
A UUID used to uniquely identify the verify certificate.
|
|
414
410
|
"""
|
|
415
411
|
return pulumi.get(self, "key_id")
|
|
416
412
|
|
|
417
|
-
@property
|
|
413
|
+
@_builtins.property
|
|
418
414
|
@pulumi.getter(name="servicePrincipalId")
|
|
419
|
-
def service_principal_id(self) -> pulumi.Output[str]:
|
|
415
|
+
def service_principal_id(self) -> pulumi.Output[_builtins.str]:
|
|
420
416
|
"""
|
|
421
|
-
The
|
|
417
|
+
The ID of the service principal for which this certificate should be created. Changing this field forces a new resource to be created.
|
|
422
418
|
"""
|
|
423
419
|
return pulumi.get(self, "service_principal_id")
|
|
424
420
|
|
|
425
|
-
@property
|
|
421
|
+
@_builtins.property
|
|
426
422
|
@pulumi.getter(name="startDate")
|
|
427
|
-
def start_date(self) -> pulumi.Output[str]:
|
|
423
|
+
def start_date(self) -> pulumi.Output[_builtins.str]:
|
|
428
424
|
"""
|
|
429
425
|
The start date from which the certificate is valid, formatted as an RFC3339 date string (e.g. `2018-01-01T01:02:03Z`).
|
|
430
426
|
"""
|
|
431
427
|
return pulumi.get(self, "start_date")
|
|
432
428
|
|
|
433
|
-
@property
|
|
429
|
+
@_builtins.property
|
|
434
430
|
@pulumi.getter
|
|
435
|
-
def thumbprint(self) -> pulumi.Output[str]:
|
|
431
|
+
def thumbprint(self) -> pulumi.Output[_builtins.str]:
|
|
436
432
|
"""
|
|
437
433
|
A SHA-1 generated thumbprint of the token signing certificate, which can be used to set the preferred signing certificate for a service principal.
|
|
438
434
|
"""
|
|
439
435
|
return pulumi.get(self, "thumbprint")
|
|
440
436
|
|
|
441
|
-
@property
|
|
437
|
+
@_builtins.property
|
|
442
438
|
@pulumi.getter
|
|
443
|
-
def value(self) -> pulumi.Output[str]:
|
|
439
|
+
def value(self) -> pulumi.Output[_builtins.str]:
|
|
444
440
|
"""
|
|
445
|
-
The certificate data, which is PEM encoded but does not include the
|
|
446
|
-
header `-----BEGIN CERTIFICATE-----\\n` or the footer `\\n-----END CERTIFICATE-----`.
|
|
441
|
+
The certificate data, which is PEM encoded but does not include the header `-----BEGIN CERTIFICATE-----\\n` or the footer `\\n-----END CERTIFICATE-----`.
|
|
447
442
|
"""
|
|
448
443
|
return pulumi.get(self, "value")
|
|
449
444
|
|