pulumi-harness 0.8.0a1743573050__py3-none-any.whl → 0.8.0a1744264283__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of pulumi-harness might be problematic. Click here for more details.
- pulumi_harness/__init__.py +1 -0
- pulumi_harness/_inputs.py +798 -797
- pulumi_harness/add_user_to_group.py +29 -28
- pulumi_harness/application.py +71 -70
- pulumi_harness/application_git_sync.py +71 -70
- pulumi_harness/autostopping/__init__.py +1 -0
- pulumi_harness/autostopping/_inputs.py +476 -475
- pulumi_harness/autostopping/aws_alb.py +140 -139
- pulumi_harness/autostopping/aws_proxy.py +168 -167
- pulumi_harness/autostopping/azure_gateway.py +186 -185
- pulumi_harness/autostopping/azure_proxy.py +196 -195
- pulumi_harness/autostopping/gcp_proxy.py +172 -171
- pulumi_harness/autostopping/get_aws_alb.py +49 -48
- pulumi_harness/autostopping/get_aws_proxy.py +59 -58
- pulumi_harness/autostopping/get_azure_gateway.py +66 -65
- pulumi_harness/autostopping/get_azure_proxy.py +69 -68
- pulumi_harness/autostopping/get_gcp_proxy.py +61 -60
- pulumi_harness/autostopping/get_rule_ecs.py +23 -22
- pulumi_harness/autostopping/get_rule_rds.py +18 -17
- pulumi_harness/autostopping/get_rule_vm.py +28 -27
- pulumi_harness/autostopping/get_schedule.py +13 -12
- pulumi_harness/autostopping/outputs.py +295 -294
- pulumi_harness/autostopping/rule_ecs.py +78 -77
- pulumi_harness/autostopping/rule_rds.py +64 -63
- pulumi_harness/autostopping/rule_vm.py +92 -91
- pulumi_harness/autostopping/schedule.py +92 -91
- pulumi_harness/chaos_infrastructure.py +127 -126
- pulumi_harness/cloudprovider/__init__.py +1 -0
- pulumi_harness/cloudprovider/_inputs.py +147 -146
- pulumi_harness/cloudprovider/aws.py +99 -98
- pulumi_harness/cloudprovider/azure.py +71 -70
- pulumi_harness/cloudprovider/datacenter.py +15 -14
- pulumi_harness/cloudprovider/gcp.py +57 -56
- pulumi_harness/cloudprovider/get_delegate_ids.py +18 -17
- pulumi_harness/cloudprovider/kubernetes.py +29 -28
- pulumi_harness/cloudprovider/outputs.py +89 -88
- pulumi_harness/cloudprovider/spot.py +43 -42
- pulumi_harness/cloudprovider/tanzu.py +85 -84
- pulumi_harness/cluster/__init__.py +1 -0
- pulumi_harness/cluster/get_orchestrator.py +17 -16
- pulumi_harness/cluster/orchestrator.py +43 -42
- pulumi_harness/config/__init__.py +1 -0
- pulumi_harness/config/__init__.pyi +1 -0
- pulumi_harness/config/vars.py +1 -0
- pulumi_harness/delegate_approval.py +36 -35
- pulumi_harness/encrypted_text.py +85 -84
- pulumi_harness/environment.py +57 -56
- pulumi_harness/get_application.py +31 -30
- pulumi_harness/get_chaos_infrastructure.py +22 -21
- pulumi_harness/get_current_account.py +8 -7
- pulumi_harness/get_delegate.py +33 -32
- pulumi_harness/get_encrypted_text.py +12 -11
- pulumi_harness/get_environment.py +19 -18
- pulumi_harness/get_git_connector.py +21 -20
- pulumi_harness/get_secret_manager.py +16 -15
- pulumi_harness/get_service.py +18 -17
- pulumi_harness/get_ssh_credential.py +11 -10
- pulumi_harness/get_sso_provider.py +12 -11
- pulumi_harness/get_trigger.py +21 -20
- pulumi_harness/get_user.py +17 -16
- pulumi_harness/get_user_group.py +11 -10
- pulumi_harness/get_yaml_config.py +14 -13
- pulumi_harness/git_connector.py +141 -140
- pulumi_harness/governance/__init__.py +1 -0
- pulumi_harness/governance/get_rule.py +11 -10
- pulumi_harness/governance/get_rule_enforcement.py +18 -17
- pulumi_harness/governance/get_rule_set.py +11 -10
- pulumi_harness/governance/rule.py +64 -63
- pulumi_harness/governance/rule_enforcement.py +162 -161
- pulumi_harness/governance/rule_set.py +64 -63
- pulumi_harness/infrastructure_definition.py +113 -112
- pulumi_harness/outputs.py +510 -509
- pulumi_harness/platform/__init__.py +1 -0
- pulumi_harness/platform/_inputs.py +4620 -4619
- pulumi_harness/platform/app_dynamics_connector.py +127 -126
- pulumi_harness/platform/artifactory_connector.py +113 -112
- pulumi_harness/platform/aws_cc_connector.py +141 -140
- pulumi_harness/platform/aws_connector.py +113 -112
- pulumi_harness/platform/aws_kms_connector.py +155 -154
- pulumi_harness/platform/aws_secret_manager_connector.py +197 -196
- pulumi_harness/platform/azure_cloud_cost_connector.py +127 -126
- pulumi_harness/platform/azure_cloud_provider_connector.py +141 -140
- pulumi_harness/platform/azure_key_vault_connector.py +197 -196
- pulumi_harness/platform/bitbucket_connector.py +141 -140
- pulumi_harness/platform/connector_azure_artifacts.py +113 -112
- pulumi_harness/platform/connector_custom_secret_manager.py +211 -210
- pulumi_harness/platform/connector_customhealthsource.py +155 -154
- pulumi_harness/platform/connector_gcp_kms.py +169 -168
- pulumi_harness/platform/connector_jdbc.py +113 -112
- pulumi_harness/platform/connector_pdc.py +99 -98
- pulumi_harness/platform/connector_rancher.py +127 -126
- pulumi_harness/platform/datadog_connector.py +141 -140
- pulumi_harness/platform/db_instance.py +141 -140
- pulumi_harness/platform/db_schema.py +99 -98
- pulumi_harness/platform/delegatetoken.py +113 -112
- pulumi_harness/platform/docker_connector.py +141 -140
- pulumi_harness/platform/dynatrace_connector.py +127 -126
- pulumi_harness/platform/elasticsearch_connector.py +113 -112
- pulumi_harness/platform/environment.py +141 -140
- pulumi_harness/platform/environment_clusters_mapping.py +64 -71
- pulumi_harness/platform/environment_group.py +85 -84
- pulumi_harness/platform/environment_service_overrides.py +85 -84
- pulumi_harness/platform/feature_flag.py +155 -154
- pulumi_harness/platform/feature_flag_api_key.py +120 -119
- pulumi_harness/platform/feature_flag_target.py +99 -98
- pulumi_harness/platform/feature_flag_target_group.py +113 -112
- pulumi_harness/platform/file_store_file.py +169 -168
- pulumi_harness/platform/file_store_folder.py +113 -112
- pulumi_harness/platform/filters.py +85 -84
- pulumi_harness/platform/gcp_cloud_cost_connector.py +127 -126
- pulumi_harness/platform/gcp_connector.py +113 -112
- pulumi_harness/platform/gcp_secret_manager_connector.py +155 -154
- pulumi_harness/platform/get_api_key.py +44 -43
- pulumi_harness/platform/get_app_dynamics_connector.py +27 -26
- pulumi_harness/platform/get_artifactory_connector.py +26 -25
- pulumi_harness/platform/get_aws_cc_connector.py +28 -27
- pulumi_harness/platform/get_aws_connector.py +25 -24
- pulumi_harness/platform/get_aws_kms_connector.py +29 -28
- pulumi_harness/platform/get_aws_secret_manager_connector.py +40 -39
- pulumi_harness/platform/get_azure_cloud_cost_connector.py +27 -26
- pulumi_harness/platform/get_azure_cloud_provider_connector.py +27 -26
- pulumi_harness/platform/get_azure_key_vault_connector.py +32 -31
- pulumi_harness/platform/get_bitbucket_connector.py +28 -27
- pulumi_harness/platform/get_ccm_filters.py +24 -23
- pulumi_harness/platform/get_connector_custom_secret_manager.py +33 -32
- pulumi_harness/platform/get_connector_customhealthsource.py +29 -28
- pulumi_harness/platform/get_connector_gcp_kms.py +30 -29
- pulumi_harness/platform/get_connector_jdbc.py +26 -25
- pulumi_harness/platform/get_connector_pdc.py +25 -24
- pulumi_harness/platform/get_connector_rancher.py +25 -24
- pulumi_harness/platform/get_current_account.py +8 -7
- pulumi_harness/platform/get_current_user.py +15 -14
- pulumi_harness/platform/get_datadog_connector.py +32 -31
- pulumi_harness/platform/get_db_instance.py +32 -31
- pulumi_harness/platform/get_db_schema.py +25 -24
- pulumi_harness/platform/get_delegatetoken.py +37 -36
- pulumi_harness/platform/get_docker_connector.py +27 -26
- pulumi_harness/platform/get_dynatrace_connector.py +27 -26
- pulumi_harness/platform/get_elasticsearch_connector.py +26 -25
- pulumi_harness/platform/get_environment.py +27 -26
- pulumi_harness/platform/get_environment_clusters_mapping.py +23 -22
- pulumi_harness/platform/get_environment_group.py +23 -22
- pulumi_harness/platform/get_environment_list.py +8 -7
- pulumi_harness/platform/get_environment_service_overrides.py +28 -27
- pulumi_harness/platform/get_file_store_file.py +31 -30
- pulumi_harness/platform/get_file_store_folder.py +27 -26
- pulumi_harness/platform/get_filters.py +24 -23
- pulumi_harness/platform/get_gcp_cloud_cost_connector.py +27 -26
- pulumi_harness/platform/get_gcp_connector.py +24 -23
- pulumi_harness/platform/get_gcp_secret_manager_connector.py +29 -28
- pulumi_harness/platform/get_git_connector.py +28 -27
- pulumi_harness/platform/get_github_connector.py +29 -28
- pulumi_harness/platform/get_gitlab_connector.py +29 -28
- pulumi_harness/platform/get_gitops_agent.py +35 -34
- pulumi_harness/platform/get_gitops_agent_deploy_yaml.py +43 -42
- pulumi_harness/platform/get_gitops_agent_operator_yaml.py +38 -37
- pulumi_harness/platform/get_gitops_app_project.py +27 -26
- pulumi_harness/platform/get_gitops_app_project_mapping.py +28 -27
- pulumi_harness/platform/get_gitops_applications.py +40 -39
- pulumi_harness/platform/get_gitops_cluster.py +27 -26
- pulumi_harness/platform/get_gitops_gnupg.py +27 -26
- pulumi_harness/platform/get_gitops_repo_cert.py +22 -21
- pulumi_harness/platform/get_gitops_repo_cred.py +27 -26
- pulumi_harness/platform/get_gitops_repository.py +28 -27
- pulumi_harness/platform/get_gitx_webhook.py +32 -31
- pulumi_harness/platform/get_har_registry.py +29 -28
- pulumi_harness/platform/get_helm_connector.py +26 -25
- pulumi_harness/platform/get_iacm_default_pipeline.py +23 -22
- pulumi_harness/platform/get_infra_module.py +66 -65
- pulumi_harness/platform/get_infra_variable_set.py +24 -23
- pulumi_harness/platform/get_infrastructure.py +32 -31
- pulumi_harness/platform/get_input_set.py +30 -29
- pulumi_harness/platform/get_jenkins_connector.py +26 -25
- pulumi_harness/platform/get_jira_connector.py +29 -28
- pulumi_harness/platform/get_kubernetes_cloud_cost_connector.py +26 -25
- pulumi_harness/platform/get_kubernetes_connector.py +25 -24
- pulumi_harness/platform/get_manual_freeze.py +29 -28
- pulumi_harness/platform/get_monitored_service.py +17 -16
- pulumi_harness/platform/get_nexus_connector.py +27 -26
- pulumi_harness/platform/get_notification_rule.py +17 -16
- pulumi_harness/platform/get_oci_helm_connector.py +26 -25
- pulumi_harness/platform/get_organization.py +14 -13
- pulumi_harness/platform/get_overrides.py +17 -16
- pulumi_harness/platform/get_pagerduty_connector.py +26 -25
- pulumi_harness/platform/get_permissions.py +12 -11
- pulumi_harness/platform/get_pipeline.py +27 -26
- pulumi_harness/platform/get_pipeline_filters.py +24 -23
- pulumi_harness/platform/get_pipeline_list.py +30 -29
- pulumi_harness/platform/get_policy.py +29 -28
- pulumi_harness/platform/get_policy_set.py +39 -38
- pulumi_harness/platform/get_project.py +21 -20
- pulumi_harness/platform/get_project_list.py +25 -24
- pulumi_harness/platform/get_prometheus_connector.py +28 -27
- pulumi_harness/platform/get_provider.py +5 -4
- pulumi_harness/platform/get_repo.py +48 -47
- pulumi_harness/platform/get_repo_rule_branch.py +36 -35
- pulumi_harness/platform/get_repo_webhook.py +55 -54
- pulumi_harness/platform/get_resource_group.py +27 -26
- pulumi_harness/platform/get_role_assignments.py +21 -20
- pulumi_harness/platform/get_roles.py +34 -33
- pulumi_harness/platform/get_secret_file.py +26 -25
- pulumi_harness/platform/get_secret_sshkey.py +25 -24
- pulumi_harness/platform/get_secret_text.py +27 -26
- pulumi_harness/platform/get_service.py +25 -24
- pulumi_harness/platform/get_service_account.py +26 -25
- pulumi_harness/platform/get_service_list.py +14 -13
- pulumi_harness/platform/get_service_now_connector.py +29 -28
- pulumi_harness/platform/get_service_overrides_v2.py +17 -16
- pulumi_harness/platform/get_slo.py +17 -16
- pulumi_harness/platform/get_splunk_connector.py +29 -28
- pulumi_harness/platform/get_spot_connector.py +24 -23
- pulumi_harness/platform/get_sumologic_connector.py +28 -27
- pulumi_harness/platform/get_tas_connector.py +26 -25
- pulumi_harness/platform/get_template.py +52 -51
- pulumi_harness/platform/get_template_filters.py +24 -23
- pulumi_harness/platform/get_terraform_cloud_connector.py +26 -25
- pulumi_harness/platform/get_token.py +79 -78
- pulumi_harness/platform/get_triggers.py +35 -34
- pulumi_harness/platform/get_user.py +22 -21
- pulumi_harness/platform/get_usergroup.py +32 -31
- pulumi_harness/platform/get_variables.py +20 -19
- pulumi_harness/platform/get_vault_connector.py +55 -54
- pulumi_harness/platform/get_workspace.py +51 -50
- pulumi_harness/platform/get_workspace_output_value.py +17 -16
- pulumi_harness/platform/git_connector.py +155 -154
- pulumi_harness/platform/git_ops_agent.py +141 -140
- pulumi_harness/platform/git_ops_applications.py +239 -238
- pulumi_harness/platform/git_ops_cluster.py +85 -84
- pulumi_harness/platform/git_ops_gnupg.py +64 -63
- pulumi_harness/platform/git_ops_repo_cert.py +57 -56
- pulumi_harness/platform/git_ops_repo_cred.py +85 -84
- pulumi_harness/platform/git_ops_repository.py +141 -140
- pulumi_harness/platform/github_connector.py +169 -168
- pulumi_harness/platform/gitlab_connector.py +155 -154
- pulumi_harness/platform/gitops_app_project.py +85 -84
- pulumi_harness/platform/gitops_app_project_mapping.py +78 -77
- pulumi_harness/platform/gitx_webhook.py +141 -140
- pulumi_harness/platform/har_registry.py +113 -112
- pulumi_harness/platform/helm_connector.py +127 -126
- pulumi_harness/platform/iacm_default_pipeline.py +71 -70
- pulumi_harness/platform/infra_module.py +183 -182
- pulumi_harness/platform/infra_variable_set.py +85 -84
- pulumi_harness/platform/infrastructure.py +155 -154
- pulumi_harness/platform/input_set.py +127 -126
- pulumi_harness/platform/jenkins_connector.py +113 -112
- pulumi_harness/platform/jira_connector.py +155 -154
- pulumi_harness/platform/kubernetes_cloud_cost_connector.py +113 -112
- pulumi_harness/platform/kubernetes_connector.py +113 -112
- pulumi_harness/platform/manual_freeze.py +113 -112
- pulumi_harness/platform/monitored_service.py +43 -42
- pulumi_harness/platform/newrelic_connector.py +141 -140
- pulumi_harness/platform/nexus_connector.py +127 -126
- pulumi_harness/platform/notification_rule.py +43 -42
- pulumi_harness/platform/oci_helm_connector.py +127 -126
- pulumi_harness/platform/organization.py +57 -56
- pulumi_harness/platform/outputs.py +4076 -4075
- pulumi_harness/platform/overrides.py +155 -154
- pulumi_harness/platform/pagerduty_connector.py +113 -112
- pulumi_harness/platform/pipeline.py +141 -140
- pulumi_harness/platform/pipeline_filters.py +85 -84
- pulumi_harness/platform/policy.py +239 -238
- pulumi_harness/platform/policy_set.py +127 -126
- pulumi_harness/platform/project.py +92 -91
- pulumi_harness/platform/prometheus_connector.py +141 -140
- pulumi_harness/platform/provider.py +57 -56
- pulumi_harness/platform/repo.py +155 -154
- pulumi_harness/platform/repo_rule_branch.py +113 -112
- pulumi_harness/platform/repo_webhook.py +162 -161
- pulumi_harness/platform/resource_group.py +127 -126
- pulumi_harness/platform/role_assignments.py +99 -98
- pulumi_harness/platform/roles.py +113 -112
- pulumi_harness/platform/secret_file.py +113 -112
- pulumi_harness/platform/secret_sshkey.py +99 -98
- pulumi_harness/platform/secret_text.py +127 -126
- pulumi_harness/platform/service.py +155 -154
- pulumi_harness/platform/service_account.py +113 -112
- pulumi_harness/platform/service_now_connector.py +155 -154
- pulumi_harness/platform/service_overrides_v2.py +155 -154
- pulumi_harness/platform/slo.py +43 -42
- pulumi_harness/platform/splunk_connector.py +155 -154
- pulumi_harness/platform/spot_connector.py +85 -84
- pulumi_harness/platform/sumologic_connector.py +141 -140
- pulumi_harness/platform/tas_connector.py +113 -112
- pulumi_harness/platform/template.py +169 -168
- pulumi_harness/platform/template_filters.py +85 -84
- pulumi_harness/platform/terraform_cloud_connector.py +123 -122
- pulumi_harness/platform/token.py +246 -245
- pulumi_harness/platform/triggers.py +141 -140
- pulumi_harness/platform/user.py +92 -91
- pulumi_harness/platform/usergroup.py +211 -210
- pulumi_harness/platform/variables.py +85 -84
- pulumi_harness/platform/vault_connector.py +519 -518
- pulumi_harness/platform/workspace.py +245 -244
- pulumi_harness/platform_api_key.py +141 -140
- pulumi_harness/platform_ccm_filters.py +85 -84
- pulumi_harness/provider.py +33 -32
- pulumi_harness/pulumi-plugin.json +1 -1
- pulumi_harness/service/__init__.py +1 -0
- pulumi_harness/service/_inputs.py +136 -135
- pulumi_harness/service/ami.py +43 -42
- pulumi_harness/service/codedeploy.py +43 -42
- pulumi_harness/service/ecs.py +43 -42
- pulumi_harness/service/helm.py +43 -42
- pulumi_harness/service/kubernetes.py +57 -56
- pulumi_harness/service/lambda_.py +43 -42
- pulumi_harness/service/outputs.py +82 -81
- pulumi_harness/service/ssh.py +57 -56
- pulumi_harness/service/tanzu.py +43 -42
- pulumi_harness/service/winrm.py +57 -56
- pulumi_harness/ssh_credential.py +15 -14
- pulumi_harness/user.py +78 -77
- pulumi_harness/user_group.py +43 -42
- pulumi_harness/user_group_permissions.py +29 -28
- pulumi_harness/yaml_config.py +50 -49
- {pulumi_harness-0.8.0a1743573050.dist-info → pulumi_harness-0.8.0a1744264283.dist-info}/METADATA +1 -1
- pulumi_harness-0.8.0a1744264283.dist-info/RECORD +320 -0
- pulumi_harness-0.8.0a1743573050.dist-info/RECORD +0 -320
- {pulumi_harness-0.8.0a1743573050.dist-info → pulumi_harness-0.8.0a1744264283.dist-info}/WHEEL +0 -0
- {pulumi_harness-0.8.0a1743573050.dist-info → pulumi_harness-0.8.0a1744264283.dist-info}/top_level.txt +0 -0
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
+
import builtins
|
|
5
6
|
import copy
|
|
6
7
|
import warnings
|
|
7
8
|
import sys
|
|
@@ -19,82 +20,82 @@ __all__ = ['VaultConnectorArgs', 'VaultConnector']
|
|
|
19
20
|
@pulumi.input_type
|
|
20
21
|
class VaultConnectorArgs:
|
|
21
22
|
def __init__(__self__, *,
|
|
22
|
-
identifier: pulumi.Input[str],
|
|
23
|
-
renewal_interval_minutes: pulumi.Input[int],
|
|
24
|
-
vault_url: pulumi.Input[str],
|
|
25
|
-
access_type: Optional[pulumi.Input[str]] = None,
|
|
26
|
-
app_role_id: Optional[pulumi.Input[str]] = None,
|
|
27
|
-
auth_token: Optional[pulumi.Input[str]] = None,
|
|
28
|
-
aws_region: Optional[pulumi.Input[str]] = None,
|
|
29
|
-
base_path: Optional[pulumi.Input[str]] = None,
|
|
30
|
-
default: Optional[pulumi.Input[bool]] = None,
|
|
31
|
-
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
32
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
33
|
-
execute_on_delegate: Optional[pulumi.Input[bool]] = None,
|
|
34
|
-
is_default: Optional[pulumi.Input[bool]] = None,
|
|
35
|
-
is_read_only: Optional[pulumi.Input[bool]] = None,
|
|
36
|
-
k8s_auth_endpoint: Optional[pulumi.Input[str]] = None,
|
|
37
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
38
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
39
|
-
org_id: Optional[pulumi.Input[str]] = None,
|
|
40
|
-
project_id: Optional[pulumi.Input[str]] = None,
|
|
41
|
-
read_only: Optional[pulumi.Input[bool]] = None,
|
|
42
|
-
renew_app_role_token: Optional[pulumi.Input[bool]] = None,
|
|
43
|
-
secret_engine_manually_configured: Optional[pulumi.Input[bool]] = None,
|
|
44
|
-
secret_engine_name: Optional[pulumi.Input[str]] = None,
|
|
45
|
-
secret_engine_version: Optional[pulumi.Input[int]] = None,
|
|
46
|
-
secret_id: Optional[pulumi.Input[str]] = None,
|
|
47
|
-
service_account_token_path: Optional[pulumi.Input[str]] = None,
|
|
48
|
-
sink_path: Optional[pulumi.Input[str]] = None,
|
|
49
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
50
|
-
use_aws_iam: Optional[pulumi.Input[bool]] = None,
|
|
51
|
-
use_jwt_auth: Optional[pulumi.Input[bool]] = None,
|
|
52
|
-
use_k8s_auth: Optional[pulumi.Input[bool]] = None,
|
|
53
|
-
use_vault_agent: Optional[pulumi.Input[bool]] = None,
|
|
54
|
-
vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
|
|
55
|
-
vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
|
|
56
|
-
vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
|
|
57
|
-
vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
|
|
58
|
-
xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None):
|
|
23
|
+
identifier: pulumi.Input[builtins.str],
|
|
24
|
+
renewal_interval_minutes: pulumi.Input[builtins.int],
|
|
25
|
+
vault_url: pulumi.Input[builtins.str],
|
|
26
|
+
access_type: Optional[pulumi.Input[builtins.str]] = None,
|
|
27
|
+
app_role_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
28
|
+
auth_token: Optional[pulumi.Input[builtins.str]] = None,
|
|
29
|
+
aws_region: Optional[pulumi.Input[builtins.str]] = None,
|
|
30
|
+
base_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
31
|
+
default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
32
|
+
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
33
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
|
34
|
+
execute_on_delegate: Optional[pulumi.Input[builtins.bool]] = None,
|
|
35
|
+
is_default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
36
|
+
is_read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
37
|
+
k8s_auth_endpoint: Optional[pulumi.Input[builtins.str]] = None,
|
|
38
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
39
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
40
|
+
org_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
41
|
+
project_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
42
|
+
read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
43
|
+
renew_app_role_token: Optional[pulumi.Input[builtins.bool]] = None,
|
|
44
|
+
secret_engine_manually_configured: Optional[pulumi.Input[builtins.bool]] = None,
|
|
45
|
+
secret_engine_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
46
|
+
secret_engine_version: Optional[pulumi.Input[builtins.int]] = None,
|
|
47
|
+
secret_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
48
|
+
service_account_token_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
49
|
+
sink_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
50
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
51
|
+
use_aws_iam: Optional[pulumi.Input[builtins.bool]] = None,
|
|
52
|
+
use_jwt_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
53
|
+
use_k8s_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
54
|
+
use_vault_agent: Optional[pulumi.Input[builtins.bool]] = None,
|
|
55
|
+
vault_aws_iam_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
56
|
+
vault_jwt_auth_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
57
|
+
vault_jwt_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
58
|
+
vault_k8s_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
59
|
+
xvault_aws_iam_server_id: Optional[pulumi.Input[builtins.str]] = None):
|
|
59
60
|
"""
|
|
60
61
|
The set of arguments for constructing a VaultConnector resource.
|
|
61
|
-
:param pulumi.Input[str] identifier: Unique identifier of the resource.
|
|
62
|
-
:param pulumi.Input[int] renewal_interval_minutes: The time interval for the token renewal.
|
|
63
|
-
:param pulumi.Input[str] vault_url: URL of the HashiCorp Vault.
|
|
64
|
-
:param pulumi.Input[str] access_type: Access type.
|
|
65
|
-
:param pulumi.Input[str] app_role_id: ID of App Role.
|
|
66
|
-
:param pulumi.Input[str] auth_token: Authentication token for Vault.
|
|
67
|
-
:param pulumi.Input[str] aws_region: AWS region where the AWS IAM authentication will happen.
|
|
68
|
-
:param pulumi.Input[str] base_path: Location of the Vault directory where the secret will be stored.
|
|
69
|
-
:param pulumi.Input[bool] default: Is default or not.
|
|
70
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
71
|
-
:param pulumi.Input[str] description: Description of the resource.
|
|
72
|
-
:param pulumi.Input[bool] execute_on_delegate: Execute on delegate or not.
|
|
73
|
-
:param pulumi.Input[bool] is_default: Is default or not.
|
|
74
|
-
:param pulumi.Input[bool] is_read_only: Read only or not.
|
|
75
|
-
:param pulumi.Input[str] k8s_auth_endpoint: The path where Kubernetes Auth is enabled in Vault.
|
|
76
|
-
:param pulumi.Input[str] name: Name of the resource.
|
|
77
|
-
:param pulumi.Input[str] namespace: Vault namespace where the Secret will be created.
|
|
78
|
-
:param pulumi.Input[str] org_id: Unique identifier of the organization.
|
|
79
|
-
:param pulumi.Input[str] project_id: Unique identifier of the project.
|
|
80
|
-
:param pulumi.Input[bool] read_only: Read only.
|
|
81
|
-
:param pulumi.Input[bool] renew_app_role_token: Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
82
|
-
:param pulumi.Input[bool] secret_engine_manually_configured: Manually entered Secret Engine.
|
|
83
|
-
:param pulumi.Input[str] secret_engine_name: Name of the Secret Engine.
|
|
84
|
-
:param pulumi.Input[int] secret_engine_version: Version of Secret Engine.
|
|
85
|
-
:param pulumi.Input[str] secret_id: ID of the Secret.
|
|
86
|
-
:param pulumi.Input[str] service_account_token_path: The Service Account token path in the K8s pod where the token is mounted.
|
|
87
|
-
:param pulumi.Input[str] sink_path: The location from which the authentication token should be read.
|
|
88
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] tags: Tags to associate with the resource.
|
|
89
|
-
:param pulumi.Input[bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
|
|
90
|
-
:param pulumi.Input[bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
|
|
91
|
-
:param pulumi.Input[bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
|
|
92
|
-
:param pulumi.Input[bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
|
|
93
|
-
:param pulumi.Input[str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
|
|
94
|
-
:param pulumi.Input[str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
|
|
95
|
-
:param pulumi.Input[str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
96
|
-
:param pulumi.Input[str] vault_k8s_auth_role: The role where K8s Auth will happen.
|
|
97
|
-
:param pulumi.Input[str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
62
|
+
:param pulumi.Input[builtins.str] identifier: Unique identifier of the resource.
|
|
63
|
+
:param pulumi.Input[builtins.int] renewal_interval_minutes: The time interval for the token renewal.
|
|
64
|
+
:param pulumi.Input[builtins.str] vault_url: URL of the HashiCorp Vault.
|
|
65
|
+
:param pulumi.Input[builtins.str] access_type: Access type.
|
|
66
|
+
:param pulumi.Input[builtins.str] app_role_id: ID of App Role.
|
|
67
|
+
:param pulumi.Input[builtins.str] auth_token: Authentication token for Vault.
|
|
68
|
+
:param pulumi.Input[builtins.str] aws_region: AWS region where the AWS IAM authentication will happen.
|
|
69
|
+
:param pulumi.Input[builtins.str] base_path: Location of the Vault directory where the secret will be stored.
|
|
70
|
+
:param pulumi.Input[builtins.bool] default: Is default or not.
|
|
71
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
72
|
+
:param pulumi.Input[builtins.str] description: Description of the resource.
|
|
73
|
+
:param pulumi.Input[builtins.bool] execute_on_delegate: Execute on delegate or not.
|
|
74
|
+
:param pulumi.Input[builtins.bool] is_default: Is default or not.
|
|
75
|
+
:param pulumi.Input[builtins.bool] is_read_only: Read only or not.
|
|
76
|
+
:param pulumi.Input[builtins.str] k8s_auth_endpoint: The path where Kubernetes Auth is enabled in Vault.
|
|
77
|
+
:param pulumi.Input[builtins.str] name: Name of the resource.
|
|
78
|
+
:param pulumi.Input[builtins.str] namespace: Vault namespace where the Secret will be created.
|
|
79
|
+
:param pulumi.Input[builtins.str] org_id: Unique identifier of the organization.
|
|
80
|
+
:param pulumi.Input[builtins.str] project_id: Unique identifier of the project.
|
|
81
|
+
:param pulumi.Input[builtins.bool] read_only: Read only.
|
|
82
|
+
:param pulumi.Input[builtins.bool] renew_app_role_token: Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
83
|
+
:param pulumi.Input[builtins.bool] secret_engine_manually_configured: Manually entered Secret Engine.
|
|
84
|
+
:param pulumi.Input[builtins.str] secret_engine_name: Name of the Secret Engine.
|
|
85
|
+
:param pulumi.Input[builtins.int] secret_engine_version: Version of Secret Engine.
|
|
86
|
+
:param pulumi.Input[builtins.str] secret_id: ID of the Secret.
|
|
87
|
+
:param pulumi.Input[builtins.str] service_account_token_path: The Service Account token path in the K8s pod where the token is mounted.
|
|
88
|
+
:param pulumi.Input[builtins.str] sink_path: The location from which the authentication token should be read.
|
|
89
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] tags: Tags to associate with the resource.
|
|
90
|
+
:param pulumi.Input[builtins.bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
|
|
91
|
+
:param pulumi.Input[builtins.bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
|
|
92
|
+
:param pulumi.Input[builtins.bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
|
|
93
|
+
:param pulumi.Input[builtins.bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
|
|
94
|
+
:param pulumi.Input[builtins.str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
|
|
95
|
+
:param pulumi.Input[builtins.str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
|
|
96
|
+
:param pulumi.Input[builtins.str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
97
|
+
:param pulumi.Input[builtins.str] vault_k8s_auth_role: The role where K8s Auth will happen.
|
|
98
|
+
:param pulumi.Input[builtins.str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
98
99
|
"""
|
|
99
100
|
pulumi.set(__self__, "identifier", identifier)
|
|
100
101
|
pulumi.set(__self__, "renewal_interval_minutes", renewal_interval_minutes)
|
|
@@ -170,528 +171,528 @@ class VaultConnectorArgs:
|
|
|
170
171
|
|
|
171
172
|
@property
|
|
172
173
|
@pulumi.getter
|
|
173
|
-
def identifier(self) -> pulumi.Input[str]:
|
|
174
|
+
def identifier(self) -> pulumi.Input[builtins.str]:
|
|
174
175
|
"""
|
|
175
176
|
Unique identifier of the resource.
|
|
176
177
|
"""
|
|
177
178
|
return pulumi.get(self, "identifier")
|
|
178
179
|
|
|
179
180
|
@identifier.setter
|
|
180
|
-
def identifier(self, value: pulumi.Input[str]):
|
|
181
|
+
def identifier(self, value: pulumi.Input[builtins.str]):
|
|
181
182
|
pulumi.set(self, "identifier", value)
|
|
182
183
|
|
|
183
184
|
@property
|
|
184
185
|
@pulumi.getter(name="renewalIntervalMinutes")
|
|
185
|
-
def renewal_interval_minutes(self) -> pulumi.Input[int]:
|
|
186
|
+
def renewal_interval_minutes(self) -> pulumi.Input[builtins.int]:
|
|
186
187
|
"""
|
|
187
188
|
The time interval for the token renewal.
|
|
188
189
|
"""
|
|
189
190
|
return pulumi.get(self, "renewal_interval_minutes")
|
|
190
191
|
|
|
191
192
|
@renewal_interval_minutes.setter
|
|
192
|
-
def renewal_interval_minutes(self, value: pulumi.Input[int]):
|
|
193
|
+
def renewal_interval_minutes(self, value: pulumi.Input[builtins.int]):
|
|
193
194
|
pulumi.set(self, "renewal_interval_minutes", value)
|
|
194
195
|
|
|
195
196
|
@property
|
|
196
197
|
@pulumi.getter(name="vaultUrl")
|
|
197
|
-
def vault_url(self) -> pulumi.Input[str]:
|
|
198
|
+
def vault_url(self) -> pulumi.Input[builtins.str]:
|
|
198
199
|
"""
|
|
199
200
|
URL of the HashiCorp Vault.
|
|
200
201
|
"""
|
|
201
202
|
return pulumi.get(self, "vault_url")
|
|
202
203
|
|
|
203
204
|
@vault_url.setter
|
|
204
|
-
def vault_url(self, value: pulumi.Input[str]):
|
|
205
|
+
def vault_url(self, value: pulumi.Input[builtins.str]):
|
|
205
206
|
pulumi.set(self, "vault_url", value)
|
|
206
207
|
|
|
207
208
|
@property
|
|
208
209
|
@pulumi.getter(name="accessType")
|
|
209
|
-
def access_type(self) -> Optional[pulumi.Input[str]]:
|
|
210
|
+
def access_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
210
211
|
"""
|
|
211
212
|
Access type.
|
|
212
213
|
"""
|
|
213
214
|
return pulumi.get(self, "access_type")
|
|
214
215
|
|
|
215
216
|
@access_type.setter
|
|
216
|
-
def access_type(self, value: Optional[pulumi.Input[str]]):
|
|
217
|
+
def access_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
217
218
|
pulumi.set(self, "access_type", value)
|
|
218
219
|
|
|
219
220
|
@property
|
|
220
221
|
@pulumi.getter(name="appRoleId")
|
|
221
|
-
def app_role_id(self) -> Optional[pulumi.Input[str]]:
|
|
222
|
+
def app_role_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
222
223
|
"""
|
|
223
224
|
ID of App Role.
|
|
224
225
|
"""
|
|
225
226
|
return pulumi.get(self, "app_role_id")
|
|
226
227
|
|
|
227
228
|
@app_role_id.setter
|
|
228
|
-
def app_role_id(self, value: Optional[pulumi.Input[str]]):
|
|
229
|
+
def app_role_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
229
230
|
pulumi.set(self, "app_role_id", value)
|
|
230
231
|
|
|
231
232
|
@property
|
|
232
233
|
@pulumi.getter(name="authToken")
|
|
233
|
-
def auth_token(self) -> Optional[pulumi.Input[str]]:
|
|
234
|
+
def auth_token(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
234
235
|
"""
|
|
235
236
|
Authentication token for Vault.
|
|
236
237
|
"""
|
|
237
238
|
return pulumi.get(self, "auth_token")
|
|
238
239
|
|
|
239
240
|
@auth_token.setter
|
|
240
|
-
def auth_token(self, value: Optional[pulumi.Input[str]]):
|
|
241
|
+
def auth_token(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
241
242
|
pulumi.set(self, "auth_token", value)
|
|
242
243
|
|
|
243
244
|
@property
|
|
244
245
|
@pulumi.getter(name="awsRegion")
|
|
245
|
-
def aws_region(self) -> Optional[pulumi.Input[str]]:
|
|
246
|
+
def aws_region(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
246
247
|
"""
|
|
247
248
|
AWS region where the AWS IAM authentication will happen.
|
|
248
249
|
"""
|
|
249
250
|
return pulumi.get(self, "aws_region")
|
|
250
251
|
|
|
251
252
|
@aws_region.setter
|
|
252
|
-
def aws_region(self, value: Optional[pulumi.Input[str]]):
|
|
253
|
+
def aws_region(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
253
254
|
pulumi.set(self, "aws_region", value)
|
|
254
255
|
|
|
255
256
|
@property
|
|
256
257
|
@pulumi.getter(name="basePath")
|
|
257
|
-
def base_path(self) -> Optional[pulumi.Input[str]]:
|
|
258
|
+
def base_path(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
258
259
|
"""
|
|
259
260
|
Location of the Vault directory where the secret will be stored.
|
|
260
261
|
"""
|
|
261
262
|
return pulumi.get(self, "base_path")
|
|
262
263
|
|
|
263
264
|
@base_path.setter
|
|
264
|
-
def base_path(self, value: Optional[pulumi.Input[str]]):
|
|
265
|
+
def base_path(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
265
266
|
pulumi.set(self, "base_path", value)
|
|
266
267
|
|
|
267
268
|
@property
|
|
268
269
|
@pulumi.getter
|
|
269
|
-
def default(self) -> Optional[pulumi.Input[bool]]:
|
|
270
|
+
def default(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
270
271
|
"""
|
|
271
272
|
Is default or not.
|
|
272
273
|
"""
|
|
273
274
|
return pulumi.get(self, "default")
|
|
274
275
|
|
|
275
276
|
@default.setter
|
|
276
|
-
def default(self, value: Optional[pulumi.Input[bool]]):
|
|
277
|
+
def default(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
277
278
|
pulumi.set(self, "default", value)
|
|
278
279
|
|
|
279
280
|
@property
|
|
280
281
|
@pulumi.getter(name="delegateSelectors")
|
|
281
|
-
def delegate_selectors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
282
|
+
def delegate_selectors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
282
283
|
"""
|
|
283
284
|
List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
284
285
|
"""
|
|
285
286
|
return pulumi.get(self, "delegate_selectors")
|
|
286
287
|
|
|
287
288
|
@delegate_selectors.setter
|
|
288
|
-
def delegate_selectors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
289
|
+
def delegate_selectors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
289
290
|
pulumi.set(self, "delegate_selectors", value)
|
|
290
291
|
|
|
291
292
|
@property
|
|
292
293
|
@pulumi.getter
|
|
293
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
|
294
|
+
def description(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
294
295
|
"""
|
|
295
296
|
Description of the resource.
|
|
296
297
|
"""
|
|
297
298
|
return pulumi.get(self, "description")
|
|
298
299
|
|
|
299
300
|
@description.setter
|
|
300
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
|
301
|
+
def description(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
301
302
|
pulumi.set(self, "description", value)
|
|
302
303
|
|
|
303
304
|
@property
|
|
304
305
|
@pulumi.getter(name="executeOnDelegate")
|
|
305
|
-
def execute_on_delegate(self) -> Optional[pulumi.Input[bool]]:
|
|
306
|
+
def execute_on_delegate(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
306
307
|
"""
|
|
307
308
|
Execute on delegate or not.
|
|
308
309
|
"""
|
|
309
310
|
return pulumi.get(self, "execute_on_delegate")
|
|
310
311
|
|
|
311
312
|
@execute_on_delegate.setter
|
|
312
|
-
def execute_on_delegate(self, value: Optional[pulumi.Input[bool]]):
|
|
313
|
+
def execute_on_delegate(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
313
314
|
pulumi.set(self, "execute_on_delegate", value)
|
|
314
315
|
|
|
315
316
|
@property
|
|
316
317
|
@pulumi.getter(name="isDefault")
|
|
317
|
-
def is_default(self) -> Optional[pulumi.Input[bool]]:
|
|
318
|
+
def is_default(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
318
319
|
"""
|
|
319
320
|
Is default or not.
|
|
320
321
|
"""
|
|
321
322
|
return pulumi.get(self, "is_default")
|
|
322
323
|
|
|
323
324
|
@is_default.setter
|
|
324
|
-
def is_default(self, value: Optional[pulumi.Input[bool]]):
|
|
325
|
+
def is_default(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
325
326
|
pulumi.set(self, "is_default", value)
|
|
326
327
|
|
|
327
328
|
@property
|
|
328
329
|
@pulumi.getter(name="isReadOnly")
|
|
329
|
-
def is_read_only(self) -> Optional[pulumi.Input[bool]]:
|
|
330
|
+
def is_read_only(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
330
331
|
"""
|
|
331
332
|
Read only or not.
|
|
332
333
|
"""
|
|
333
334
|
return pulumi.get(self, "is_read_only")
|
|
334
335
|
|
|
335
336
|
@is_read_only.setter
|
|
336
|
-
def is_read_only(self, value: Optional[pulumi.Input[bool]]):
|
|
337
|
+
def is_read_only(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
337
338
|
pulumi.set(self, "is_read_only", value)
|
|
338
339
|
|
|
339
340
|
@property
|
|
340
341
|
@pulumi.getter(name="k8sAuthEndpoint")
|
|
341
|
-
def k8s_auth_endpoint(self) -> Optional[pulumi.Input[str]]:
|
|
342
|
+
def k8s_auth_endpoint(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
342
343
|
"""
|
|
343
344
|
The path where Kubernetes Auth is enabled in Vault.
|
|
344
345
|
"""
|
|
345
346
|
return pulumi.get(self, "k8s_auth_endpoint")
|
|
346
347
|
|
|
347
348
|
@k8s_auth_endpoint.setter
|
|
348
|
-
def k8s_auth_endpoint(self, value: Optional[pulumi.Input[str]]):
|
|
349
|
+
def k8s_auth_endpoint(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
349
350
|
pulumi.set(self, "k8s_auth_endpoint", value)
|
|
350
351
|
|
|
351
352
|
@property
|
|
352
353
|
@pulumi.getter
|
|
353
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
354
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
354
355
|
"""
|
|
355
356
|
Name of the resource.
|
|
356
357
|
"""
|
|
357
358
|
return pulumi.get(self, "name")
|
|
358
359
|
|
|
359
360
|
@name.setter
|
|
360
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
361
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
361
362
|
pulumi.set(self, "name", value)
|
|
362
363
|
|
|
363
364
|
@property
|
|
364
365
|
@pulumi.getter
|
|
365
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
|
366
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
366
367
|
"""
|
|
367
368
|
Vault namespace where the Secret will be created.
|
|
368
369
|
"""
|
|
369
370
|
return pulumi.get(self, "namespace")
|
|
370
371
|
|
|
371
372
|
@namespace.setter
|
|
372
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
|
373
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
373
374
|
pulumi.set(self, "namespace", value)
|
|
374
375
|
|
|
375
376
|
@property
|
|
376
377
|
@pulumi.getter(name="orgId")
|
|
377
|
-
def org_id(self) -> Optional[pulumi.Input[str]]:
|
|
378
|
+
def org_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
378
379
|
"""
|
|
379
380
|
Unique identifier of the organization.
|
|
380
381
|
"""
|
|
381
382
|
return pulumi.get(self, "org_id")
|
|
382
383
|
|
|
383
384
|
@org_id.setter
|
|
384
|
-
def org_id(self, value: Optional[pulumi.Input[str]]):
|
|
385
|
+
def org_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
385
386
|
pulumi.set(self, "org_id", value)
|
|
386
387
|
|
|
387
388
|
@property
|
|
388
389
|
@pulumi.getter(name="projectId")
|
|
389
|
-
def project_id(self) -> Optional[pulumi.Input[str]]:
|
|
390
|
+
def project_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
390
391
|
"""
|
|
391
392
|
Unique identifier of the project.
|
|
392
393
|
"""
|
|
393
394
|
return pulumi.get(self, "project_id")
|
|
394
395
|
|
|
395
396
|
@project_id.setter
|
|
396
|
-
def project_id(self, value: Optional[pulumi.Input[str]]):
|
|
397
|
+
def project_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
397
398
|
pulumi.set(self, "project_id", value)
|
|
398
399
|
|
|
399
400
|
@property
|
|
400
401
|
@pulumi.getter(name="readOnly")
|
|
401
|
-
def read_only(self) -> Optional[pulumi.Input[bool]]:
|
|
402
|
+
def read_only(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
402
403
|
"""
|
|
403
404
|
Read only.
|
|
404
405
|
"""
|
|
405
406
|
return pulumi.get(self, "read_only")
|
|
406
407
|
|
|
407
408
|
@read_only.setter
|
|
408
|
-
def read_only(self, value: Optional[pulumi.Input[bool]]):
|
|
409
|
+
def read_only(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
409
410
|
pulumi.set(self, "read_only", value)
|
|
410
411
|
|
|
411
412
|
@property
|
|
412
413
|
@pulumi.getter(name="renewAppRoleToken")
|
|
413
|
-
def renew_app_role_token(self) -> Optional[pulumi.Input[bool]]:
|
|
414
|
+
def renew_app_role_token(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
414
415
|
"""
|
|
415
416
|
Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
416
417
|
"""
|
|
417
418
|
return pulumi.get(self, "renew_app_role_token")
|
|
418
419
|
|
|
419
420
|
@renew_app_role_token.setter
|
|
420
|
-
def renew_app_role_token(self, value: Optional[pulumi.Input[bool]]):
|
|
421
|
+
def renew_app_role_token(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
421
422
|
pulumi.set(self, "renew_app_role_token", value)
|
|
422
423
|
|
|
423
424
|
@property
|
|
424
425
|
@pulumi.getter(name="secretEngineManuallyConfigured")
|
|
425
|
-
def secret_engine_manually_configured(self) -> Optional[pulumi.Input[bool]]:
|
|
426
|
+
def secret_engine_manually_configured(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
426
427
|
"""
|
|
427
428
|
Manually entered Secret Engine.
|
|
428
429
|
"""
|
|
429
430
|
return pulumi.get(self, "secret_engine_manually_configured")
|
|
430
431
|
|
|
431
432
|
@secret_engine_manually_configured.setter
|
|
432
|
-
def secret_engine_manually_configured(self, value: Optional[pulumi.Input[bool]]):
|
|
433
|
+
def secret_engine_manually_configured(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
433
434
|
pulumi.set(self, "secret_engine_manually_configured", value)
|
|
434
435
|
|
|
435
436
|
@property
|
|
436
437
|
@pulumi.getter(name="secretEngineName")
|
|
437
|
-
def secret_engine_name(self) -> Optional[pulumi.Input[str]]:
|
|
438
|
+
def secret_engine_name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
438
439
|
"""
|
|
439
440
|
Name of the Secret Engine.
|
|
440
441
|
"""
|
|
441
442
|
return pulumi.get(self, "secret_engine_name")
|
|
442
443
|
|
|
443
444
|
@secret_engine_name.setter
|
|
444
|
-
def secret_engine_name(self, value: Optional[pulumi.Input[str]]):
|
|
445
|
+
def secret_engine_name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
445
446
|
pulumi.set(self, "secret_engine_name", value)
|
|
446
447
|
|
|
447
448
|
@property
|
|
448
449
|
@pulumi.getter(name="secretEngineVersion")
|
|
449
|
-
def secret_engine_version(self) -> Optional[pulumi.Input[int]]:
|
|
450
|
+
def secret_engine_version(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
450
451
|
"""
|
|
451
452
|
Version of Secret Engine.
|
|
452
453
|
"""
|
|
453
454
|
return pulumi.get(self, "secret_engine_version")
|
|
454
455
|
|
|
455
456
|
@secret_engine_version.setter
|
|
456
|
-
def secret_engine_version(self, value: Optional[pulumi.Input[int]]):
|
|
457
|
+
def secret_engine_version(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
457
458
|
pulumi.set(self, "secret_engine_version", value)
|
|
458
459
|
|
|
459
460
|
@property
|
|
460
461
|
@pulumi.getter(name="secretId")
|
|
461
|
-
def secret_id(self) -> Optional[pulumi.Input[str]]:
|
|
462
|
+
def secret_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
462
463
|
"""
|
|
463
464
|
ID of the Secret.
|
|
464
465
|
"""
|
|
465
466
|
return pulumi.get(self, "secret_id")
|
|
466
467
|
|
|
467
468
|
@secret_id.setter
|
|
468
|
-
def secret_id(self, value: Optional[pulumi.Input[str]]):
|
|
469
|
+
def secret_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
469
470
|
pulumi.set(self, "secret_id", value)
|
|
470
471
|
|
|
471
472
|
@property
|
|
472
473
|
@pulumi.getter(name="serviceAccountTokenPath")
|
|
473
|
-
def service_account_token_path(self) -> Optional[pulumi.Input[str]]:
|
|
474
|
+
def service_account_token_path(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
474
475
|
"""
|
|
475
476
|
The Service Account token path in the K8s pod where the token is mounted.
|
|
476
477
|
"""
|
|
477
478
|
return pulumi.get(self, "service_account_token_path")
|
|
478
479
|
|
|
479
480
|
@service_account_token_path.setter
|
|
480
|
-
def service_account_token_path(self, value: Optional[pulumi.Input[str]]):
|
|
481
|
+
def service_account_token_path(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
481
482
|
pulumi.set(self, "service_account_token_path", value)
|
|
482
483
|
|
|
483
484
|
@property
|
|
484
485
|
@pulumi.getter(name="sinkPath")
|
|
485
|
-
def sink_path(self) -> Optional[pulumi.Input[str]]:
|
|
486
|
+
def sink_path(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
486
487
|
"""
|
|
487
488
|
The location from which the authentication token should be read.
|
|
488
489
|
"""
|
|
489
490
|
return pulumi.get(self, "sink_path")
|
|
490
491
|
|
|
491
492
|
@sink_path.setter
|
|
492
|
-
def sink_path(self, value: Optional[pulumi.Input[str]]):
|
|
493
|
+
def sink_path(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
493
494
|
pulumi.set(self, "sink_path", value)
|
|
494
495
|
|
|
495
496
|
@property
|
|
496
497
|
@pulumi.getter
|
|
497
|
-
def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
498
|
+
def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
498
499
|
"""
|
|
499
500
|
Tags to associate with the resource.
|
|
500
501
|
"""
|
|
501
502
|
return pulumi.get(self, "tags")
|
|
502
503
|
|
|
503
504
|
@tags.setter
|
|
504
|
-
def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
505
|
+
def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
505
506
|
pulumi.set(self, "tags", value)
|
|
506
507
|
|
|
507
508
|
@property
|
|
508
509
|
@pulumi.getter(name="useAwsIam")
|
|
509
|
-
def use_aws_iam(self) -> Optional[pulumi.Input[bool]]:
|
|
510
|
+
def use_aws_iam(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
510
511
|
"""
|
|
511
512
|
Boolean value to indicate if AWS IAM is used for authentication.
|
|
512
513
|
"""
|
|
513
514
|
return pulumi.get(self, "use_aws_iam")
|
|
514
515
|
|
|
515
516
|
@use_aws_iam.setter
|
|
516
|
-
def use_aws_iam(self, value: Optional[pulumi.Input[bool]]):
|
|
517
|
+
def use_aws_iam(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
517
518
|
pulumi.set(self, "use_aws_iam", value)
|
|
518
519
|
|
|
519
520
|
@property
|
|
520
521
|
@pulumi.getter(name="useJwtAuth")
|
|
521
|
-
def use_jwt_auth(self) -> Optional[pulumi.Input[bool]]:
|
|
522
|
+
def use_jwt_auth(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
522
523
|
"""
|
|
523
524
|
Boolean value to indicate if JWT is used for authentication.
|
|
524
525
|
"""
|
|
525
526
|
return pulumi.get(self, "use_jwt_auth")
|
|
526
527
|
|
|
527
528
|
@use_jwt_auth.setter
|
|
528
|
-
def use_jwt_auth(self, value: Optional[pulumi.Input[bool]]):
|
|
529
|
+
def use_jwt_auth(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
529
530
|
pulumi.set(self, "use_jwt_auth", value)
|
|
530
531
|
|
|
531
532
|
@property
|
|
532
533
|
@pulumi.getter(name="useK8sAuth")
|
|
533
|
-
def use_k8s_auth(self) -> Optional[pulumi.Input[bool]]:
|
|
534
|
+
def use_k8s_auth(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
534
535
|
"""
|
|
535
536
|
Boolean value to indicate if K8s Auth is used for authentication.
|
|
536
537
|
"""
|
|
537
538
|
return pulumi.get(self, "use_k8s_auth")
|
|
538
539
|
|
|
539
540
|
@use_k8s_auth.setter
|
|
540
|
-
def use_k8s_auth(self, value: Optional[pulumi.Input[bool]]):
|
|
541
|
+
def use_k8s_auth(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
541
542
|
pulumi.set(self, "use_k8s_auth", value)
|
|
542
543
|
|
|
543
544
|
@property
|
|
544
545
|
@pulumi.getter(name="useVaultAgent")
|
|
545
|
-
def use_vault_agent(self) -> Optional[pulumi.Input[bool]]:
|
|
546
|
+
def use_vault_agent(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
546
547
|
"""
|
|
547
548
|
Boolean value to indicate if Vault Agent is used for authentication.
|
|
548
549
|
"""
|
|
549
550
|
return pulumi.get(self, "use_vault_agent")
|
|
550
551
|
|
|
551
552
|
@use_vault_agent.setter
|
|
552
|
-
def use_vault_agent(self, value: Optional[pulumi.Input[bool]]):
|
|
553
|
+
def use_vault_agent(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
553
554
|
pulumi.set(self, "use_vault_agent", value)
|
|
554
555
|
|
|
555
556
|
@property
|
|
556
557
|
@pulumi.getter(name="vaultAwsIamRole")
|
|
557
|
-
def vault_aws_iam_role(self) -> Optional[pulumi.Input[str]]:
|
|
558
|
+
def vault_aws_iam_role(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
558
559
|
"""
|
|
559
560
|
The Vault role defined to bind to aws iam account/role being accessed.
|
|
560
561
|
"""
|
|
561
562
|
return pulumi.get(self, "vault_aws_iam_role")
|
|
562
563
|
|
|
563
564
|
@vault_aws_iam_role.setter
|
|
564
|
-
def vault_aws_iam_role(self, value: Optional[pulumi.Input[str]]):
|
|
565
|
+
def vault_aws_iam_role(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
565
566
|
pulumi.set(self, "vault_aws_iam_role", value)
|
|
566
567
|
|
|
567
568
|
@property
|
|
568
569
|
@pulumi.getter(name="vaultJwtAuthPath")
|
|
569
|
-
def vault_jwt_auth_path(self) -> Optional[pulumi.Input[str]]:
|
|
570
|
+
def vault_jwt_auth_path(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
570
571
|
"""
|
|
571
572
|
Custom path at with JWT auth in enabled for Vault.
|
|
572
573
|
"""
|
|
573
574
|
return pulumi.get(self, "vault_jwt_auth_path")
|
|
574
575
|
|
|
575
576
|
@vault_jwt_auth_path.setter
|
|
576
|
-
def vault_jwt_auth_path(self, value: Optional[pulumi.Input[str]]):
|
|
577
|
+
def vault_jwt_auth_path(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
577
578
|
pulumi.set(self, "vault_jwt_auth_path", value)
|
|
578
579
|
|
|
579
580
|
@property
|
|
580
581
|
@pulumi.getter(name="vaultJwtAuthRole")
|
|
581
|
-
def vault_jwt_auth_role(self) -> Optional[pulumi.Input[str]]:
|
|
582
|
+
def vault_jwt_auth_role(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
582
583
|
"""
|
|
583
584
|
The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
584
585
|
"""
|
|
585
586
|
return pulumi.get(self, "vault_jwt_auth_role")
|
|
586
587
|
|
|
587
588
|
@vault_jwt_auth_role.setter
|
|
588
|
-
def vault_jwt_auth_role(self, value: Optional[pulumi.Input[str]]):
|
|
589
|
+
def vault_jwt_auth_role(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
589
590
|
pulumi.set(self, "vault_jwt_auth_role", value)
|
|
590
591
|
|
|
591
592
|
@property
|
|
592
593
|
@pulumi.getter(name="vaultK8sAuthRole")
|
|
593
|
-
def vault_k8s_auth_role(self) -> Optional[pulumi.Input[str]]:
|
|
594
|
+
def vault_k8s_auth_role(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
594
595
|
"""
|
|
595
596
|
The role where K8s Auth will happen.
|
|
596
597
|
"""
|
|
597
598
|
return pulumi.get(self, "vault_k8s_auth_role")
|
|
598
599
|
|
|
599
600
|
@vault_k8s_auth_role.setter
|
|
600
|
-
def vault_k8s_auth_role(self, value: Optional[pulumi.Input[str]]):
|
|
601
|
+
def vault_k8s_auth_role(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
601
602
|
pulumi.set(self, "vault_k8s_auth_role", value)
|
|
602
603
|
|
|
603
604
|
@property
|
|
604
605
|
@pulumi.getter(name="xvaultAwsIamServerId")
|
|
605
|
-
def xvault_aws_iam_server_id(self) -> Optional[pulumi.Input[str]]:
|
|
606
|
+
def xvault_aws_iam_server_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
606
607
|
"""
|
|
607
608
|
The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
608
609
|
"""
|
|
609
610
|
return pulumi.get(self, "xvault_aws_iam_server_id")
|
|
610
611
|
|
|
611
612
|
@xvault_aws_iam_server_id.setter
|
|
612
|
-
def xvault_aws_iam_server_id(self, value: Optional[pulumi.Input[str]]):
|
|
613
|
+
def xvault_aws_iam_server_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
613
614
|
pulumi.set(self, "xvault_aws_iam_server_id", value)
|
|
614
615
|
|
|
615
616
|
|
|
616
617
|
@pulumi.input_type
|
|
617
618
|
class _VaultConnectorState:
|
|
618
619
|
def __init__(__self__, *,
|
|
619
|
-
access_type: Optional[pulumi.Input[str]] = None,
|
|
620
|
-
app_role_id: Optional[pulumi.Input[str]] = None,
|
|
621
|
-
auth_token: Optional[pulumi.Input[str]] = None,
|
|
622
|
-
aws_region: Optional[pulumi.Input[str]] = None,
|
|
623
|
-
base_path: Optional[pulumi.Input[str]] = None,
|
|
624
|
-
default: Optional[pulumi.Input[bool]] = None,
|
|
625
|
-
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
626
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
627
|
-
execute_on_delegate: Optional[pulumi.Input[bool]] = None,
|
|
628
|
-
identifier: Optional[pulumi.Input[str]] = None,
|
|
629
|
-
is_default: Optional[pulumi.Input[bool]] = None,
|
|
630
|
-
is_read_only: Optional[pulumi.Input[bool]] = None,
|
|
631
|
-
k8s_auth_endpoint: Optional[pulumi.Input[str]] = None,
|
|
632
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
633
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
634
|
-
org_id: Optional[pulumi.Input[str]] = None,
|
|
635
|
-
project_id: Optional[pulumi.Input[str]] = None,
|
|
636
|
-
read_only: Optional[pulumi.Input[bool]] = None,
|
|
637
|
-
renew_app_role_token: Optional[pulumi.Input[bool]] = None,
|
|
638
|
-
renewal_interval_minutes: Optional[pulumi.Input[int]] = None,
|
|
639
|
-
secret_engine_manually_configured: Optional[pulumi.Input[bool]] = None,
|
|
640
|
-
secret_engine_name: Optional[pulumi.Input[str]] = None,
|
|
641
|
-
secret_engine_version: Optional[pulumi.Input[int]] = None,
|
|
642
|
-
secret_id: Optional[pulumi.Input[str]] = None,
|
|
643
|
-
service_account_token_path: Optional[pulumi.Input[str]] = None,
|
|
644
|
-
sink_path: Optional[pulumi.Input[str]] = None,
|
|
645
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
646
|
-
use_aws_iam: Optional[pulumi.Input[bool]] = None,
|
|
647
|
-
use_jwt_auth: Optional[pulumi.Input[bool]] = None,
|
|
648
|
-
use_k8s_auth: Optional[pulumi.Input[bool]] = None,
|
|
649
|
-
use_vault_agent: Optional[pulumi.Input[bool]] = None,
|
|
650
|
-
vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
|
|
651
|
-
vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
|
|
652
|
-
vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
|
|
653
|
-
vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
|
|
654
|
-
vault_url: Optional[pulumi.Input[str]] = None,
|
|
655
|
-
xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None):
|
|
620
|
+
access_type: Optional[pulumi.Input[builtins.str]] = None,
|
|
621
|
+
app_role_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
622
|
+
auth_token: Optional[pulumi.Input[builtins.str]] = None,
|
|
623
|
+
aws_region: Optional[pulumi.Input[builtins.str]] = None,
|
|
624
|
+
base_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
625
|
+
default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
626
|
+
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
627
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
|
628
|
+
execute_on_delegate: Optional[pulumi.Input[builtins.bool]] = None,
|
|
629
|
+
identifier: Optional[pulumi.Input[builtins.str]] = None,
|
|
630
|
+
is_default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
631
|
+
is_read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
632
|
+
k8s_auth_endpoint: Optional[pulumi.Input[builtins.str]] = None,
|
|
633
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
634
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
635
|
+
org_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
636
|
+
project_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
637
|
+
read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
638
|
+
renew_app_role_token: Optional[pulumi.Input[builtins.bool]] = None,
|
|
639
|
+
renewal_interval_minutes: Optional[pulumi.Input[builtins.int]] = None,
|
|
640
|
+
secret_engine_manually_configured: Optional[pulumi.Input[builtins.bool]] = None,
|
|
641
|
+
secret_engine_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
642
|
+
secret_engine_version: Optional[pulumi.Input[builtins.int]] = None,
|
|
643
|
+
secret_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
644
|
+
service_account_token_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
645
|
+
sink_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
646
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
647
|
+
use_aws_iam: Optional[pulumi.Input[builtins.bool]] = None,
|
|
648
|
+
use_jwt_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
649
|
+
use_k8s_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
650
|
+
use_vault_agent: Optional[pulumi.Input[builtins.bool]] = None,
|
|
651
|
+
vault_aws_iam_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
652
|
+
vault_jwt_auth_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
653
|
+
vault_jwt_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
654
|
+
vault_k8s_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
655
|
+
vault_url: Optional[pulumi.Input[builtins.str]] = None,
|
|
656
|
+
xvault_aws_iam_server_id: Optional[pulumi.Input[builtins.str]] = None):
|
|
656
657
|
"""
|
|
657
658
|
Input properties used for looking up and filtering VaultConnector resources.
|
|
658
|
-
:param pulumi.Input[str] access_type: Access type.
|
|
659
|
-
:param pulumi.Input[str] app_role_id: ID of App Role.
|
|
660
|
-
:param pulumi.Input[str] auth_token: Authentication token for Vault.
|
|
661
|
-
:param pulumi.Input[str] aws_region: AWS region where the AWS IAM authentication will happen.
|
|
662
|
-
:param pulumi.Input[str] base_path: Location of the Vault directory where the secret will be stored.
|
|
663
|
-
:param pulumi.Input[bool] default: Is default or not.
|
|
664
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
665
|
-
:param pulumi.Input[str] description: Description of the resource.
|
|
666
|
-
:param pulumi.Input[bool] execute_on_delegate: Execute on delegate or not.
|
|
667
|
-
:param pulumi.Input[str] identifier: Unique identifier of the resource.
|
|
668
|
-
:param pulumi.Input[bool] is_default: Is default or not.
|
|
669
|
-
:param pulumi.Input[bool] is_read_only: Read only or not.
|
|
670
|
-
:param pulumi.Input[str] k8s_auth_endpoint: The path where Kubernetes Auth is enabled in Vault.
|
|
671
|
-
:param pulumi.Input[str] name: Name of the resource.
|
|
672
|
-
:param pulumi.Input[str] namespace: Vault namespace where the Secret will be created.
|
|
673
|
-
:param pulumi.Input[str] org_id: Unique identifier of the organization.
|
|
674
|
-
:param pulumi.Input[str] project_id: Unique identifier of the project.
|
|
675
|
-
:param pulumi.Input[bool] read_only: Read only.
|
|
676
|
-
:param pulumi.Input[bool] renew_app_role_token: Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
677
|
-
:param pulumi.Input[int] renewal_interval_minutes: The time interval for the token renewal.
|
|
678
|
-
:param pulumi.Input[bool] secret_engine_manually_configured: Manually entered Secret Engine.
|
|
679
|
-
:param pulumi.Input[str] secret_engine_name: Name of the Secret Engine.
|
|
680
|
-
:param pulumi.Input[int] secret_engine_version: Version of Secret Engine.
|
|
681
|
-
:param pulumi.Input[str] secret_id: ID of the Secret.
|
|
682
|
-
:param pulumi.Input[str] service_account_token_path: The Service Account token path in the K8s pod where the token is mounted.
|
|
683
|
-
:param pulumi.Input[str] sink_path: The location from which the authentication token should be read.
|
|
684
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] tags: Tags to associate with the resource.
|
|
685
|
-
:param pulumi.Input[bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
|
|
686
|
-
:param pulumi.Input[bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
|
|
687
|
-
:param pulumi.Input[bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
|
|
688
|
-
:param pulumi.Input[bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
|
|
689
|
-
:param pulumi.Input[str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
|
|
690
|
-
:param pulumi.Input[str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
|
|
691
|
-
:param pulumi.Input[str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
692
|
-
:param pulumi.Input[str] vault_k8s_auth_role: The role where K8s Auth will happen.
|
|
693
|
-
:param pulumi.Input[str] vault_url: URL of the HashiCorp Vault.
|
|
694
|
-
:param pulumi.Input[str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
659
|
+
:param pulumi.Input[builtins.str] access_type: Access type.
|
|
660
|
+
:param pulumi.Input[builtins.str] app_role_id: ID of App Role.
|
|
661
|
+
:param pulumi.Input[builtins.str] auth_token: Authentication token for Vault.
|
|
662
|
+
:param pulumi.Input[builtins.str] aws_region: AWS region where the AWS IAM authentication will happen.
|
|
663
|
+
:param pulumi.Input[builtins.str] base_path: Location of the Vault directory where the secret will be stored.
|
|
664
|
+
:param pulumi.Input[builtins.bool] default: Is default or not.
|
|
665
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
666
|
+
:param pulumi.Input[builtins.str] description: Description of the resource.
|
|
667
|
+
:param pulumi.Input[builtins.bool] execute_on_delegate: Execute on delegate or not.
|
|
668
|
+
:param pulumi.Input[builtins.str] identifier: Unique identifier of the resource.
|
|
669
|
+
:param pulumi.Input[builtins.bool] is_default: Is default or not.
|
|
670
|
+
:param pulumi.Input[builtins.bool] is_read_only: Read only or not.
|
|
671
|
+
:param pulumi.Input[builtins.str] k8s_auth_endpoint: The path where Kubernetes Auth is enabled in Vault.
|
|
672
|
+
:param pulumi.Input[builtins.str] name: Name of the resource.
|
|
673
|
+
:param pulumi.Input[builtins.str] namespace: Vault namespace where the Secret will be created.
|
|
674
|
+
:param pulumi.Input[builtins.str] org_id: Unique identifier of the organization.
|
|
675
|
+
:param pulumi.Input[builtins.str] project_id: Unique identifier of the project.
|
|
676
|
+
:param pulumi.Input[builtins.bool] read_only: Read only.
|
|
677
|
+
:param pulumi.Input[builtins.bool] renew_app_role_token: Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
678
|
+
:param pulumi.Input[builtins.int] renewal_interval_minutes: The time interval for the token renewal.
|
|
679
|
+
:param pulumi.Input[builtins.bool] secret_engine_manually_configured: Manually entered Secret Engine.
|
|
680
|
+
:param pulumi.Input[builtins.str] secret_engine_name: Name of the Secret Engine.
|
|
681
|
+
:param pulumi.Input[builtins.int] secret_engine_version: Version of Secret Engine.
|
|
682
|
+
:param pulumi.Input[builtins.str] secret_id: ID of the Secret.
|
|
683
|
+
:param pulumi.Input[builtins.str] service_account_token_path: The Service Account token path in the K8s pod where the token is mounted.
|
|
684
|
+
:param pulumi.Input[builtins.str] sink_path: The location from which the authentication token should be read.
|
|
685
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] tags: Tags to associate with the resource.
|
|
686
|
+
:param pulumi.Input[builtins.bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
|
|
687
|
+
:param pulumi.Input[builtins.bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
|
|
688
|
+
:param pulumi.Input[builtins.bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
|
|
689
|
+
:param pulumi.Input[builtins.bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
|
|
690
|
+
:param pulumi.Input[builtins.str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
|
|
691
|
+
:param pulumi.Input[builtins.str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
|
|
692
|
+
:param pulumi.Input[builtins.str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
693
|
+
:param pulumi.Input[builtins.str] vault_k8s_auth_role: The role where K8s Auth will happen.
|
|
694
|
+
:param pulumi.Input[builtins.str] vault_url: URL of the HashiCorp Vault.
|
|
695
|
+
:param pulumi.Input[builtins.str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
695
696
|
"""
|
|
696
697
|
if access_type is not None:
|
|
697
698
|
pulumi.set(__self__, "access_type", access_type)
|
|
@@ -770,446 +771,446 @@ class _VaultConnectorState:
|
|
|
770
771
|
|
|
771
772
|
@property
|
|
772
773
|
@pulumi.getter(name="accessType")
|
|
773
|
-
def access_type(self) -> Optional[pulumi.Input[str]]:
|
|
774
|
+
def access_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
774
775
|
"""
|
|
775
776
|
Access type.
|
|
776
777
|
"""
|
|
777
778
|
return pulumi.get(self, "access_type")
|
|
778
779
|
|
|
779
780
|
@access_type.setter
|
|
780
|
-
def access_type(self, value: Optional[pulumi.Input[str]]):
|
|
781
|
+
def access_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
781
782
|
pulumi.set(self, "access_type", value)
|
|
782
783
|
|
|
783
784
|
@property
|
|
784
785
|
@pulumi.getter(name="appRoleId")
|
|
785
|
-
def app_role_id(self) -> Optional[pulumi.Input[str]]:
|
|
786
|
+
def app_role_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
786
787
|
"""
|
|
787
788
|
ID of App Role.
|
|
788
789
|
"""
|
|
789
790
|
return pulumi.get(self, "app_role_id")
|
|
790
791
|
|
|
791
792
|
@app_role_id.setter
|
|
792
|
-
def app_role_id(self, value: Optional[pulumi.Input[str]]):
|
|
793
|
+
def app_role_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
793
794
|
pulumi.set(self, "app_role_id", value)
|
|
794
795
|
|
|
795
796
|
@property
|
|
796
797
|
@pulumi.getter(name="authToken")
|
|
797
|
-
def auth_token(self) -> Optional[pulumi.Input[str]]:
|
|
798
|
+
def auth_token(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
798
799
|
"""
|
|
799
800
|
Authentication token for Vault.
|
|
800
801
|
"""
|
|
801
802
|
return pulumi.get(self, "auth_token")
|
|
802
803
|
|
|
803
804
|
@auth_token.setter
|
|
804
|
-
def auth_token(self, value: Optional[pulumi.Input[str]]):
|
|
805
|
+
def auth_token(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
805
806
|
pulumi.set(self, "auth_token", value)
|
|
806
807
|
|
|
807
808
|
@property
|
|
808
809
|
@pulumi.getter(name="awsRegion")
|
|
809
|
-
def aws_region(self) -> Optional[pulumi.Input[str]]:
|
|
810
|
+
def aws_region(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
810
811
|
"""
|
|
811
812
|
AWS region where the AWS IAM authentication will happen.
|
|
812
813
|
"""
|
|
813
814
|
return pulumi.get(self, "aws_region")
|
|
814
815
|
|
|
815
816
|
@aws_region.setter
|
|
816
|
-
def aws_region(self, value: Optional[pulumi.Input[str]]):
|
|
817
|
+
def aws_region(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
817
818
|
pulumi.set(self, "aws_region", value)
|
|
818
819
|
|
|
819
820
|
@property
|
|
820
821
|
@pulumi.getter(name="basePath")
|
|
821
|
-
def base_path(self) -> Optional[pulumi.Input[str]]:
|
|
822
|
+
def base_path(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
822
823
|
"""
|
|
823
824
|
Location of the Vault directory where the secret will be stored.
|
|
824
825
|
"""
|
|
825
826
|
return pulumi.get(self, "base_path")
|
|
826
827
|
|
|
827
828
|
@base_path.setter
|
|
828
|
-
def base_path(self, value: Optional[pulumi.Input[str]]):
|
|
829
|
+
def base_path(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
829
830
|
pulumi.set(self, "base_path", value)
|
|
830
831
|
|
|
831
832
|
@property
|
|
832
833
|
@pulumi.getter
|
|
833
|
-
def default(self) -> Optional[pulumi.Input[bool]]:
|
|
834
|
+
def default(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
834
835
|
"""
|
|
835
836
|
Is default or not.
|
|
836
837
|
"""
|
|
837
838
|
return pulumi.get(self, "default")
|
|
838
839
|
|
|
839
840
|
@default.setter
|
|
840
|
-
def default(self, value: Optional[pulumi.Input[bool]]):
|
|
841
|
+
def default(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
841
842
|
pulumi.set(self, "default", value)
|
|
842
843
|
|
|
843
844
|
@property
|
|
844
845
|
@pulumi.getter(name="delegateSelectors")
|
|
845
|
-
def delegate_selectors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
846
|
+
def delegate_selectors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
846
847
|
"""
|
|
847
848
|
List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
848
849
|
"""
|
|
849
850
|
return pulumi.get(self, "delegate_selectors")
|
|
850
851
|
|
|
851
852
|
@delegate_selectors.setter
|
|
852
|
-
def delegate_selectors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
853
|
+
def delegate_selectors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
853
854
|
pulumi.set(self, "delegate_selectors", value)
|
|
854
855
|
|
|
855
856
|
@property
|
|
856
857
|
@pulumi.getter
|
|
857
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
|
858
|
+
def description(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
858
859
|
"""
|
|
859
860
|
Description of the resource.
|
|
860
861
|
"""
|
|
861
862
|
return pulumi.get(self, "description")
|
|
862
863
|
|
|
863
864
|
@description.setter
|
|
864
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
|
865
|
+
def description(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
865
866
|
pulumi.set(self, "description", value)
|
|
866
867
|
|
|
867
868
|
@property
|
|
868
869
|
@pulumi.getter(name="executeOnDelegate")
|
|
869
|
-
def execute_on_delegate(self) -> Optional[pulumi.Input[bool]]:
|
|
870
|
+
def execute_on_delegate(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
870
871
|
"""
|
|
871
872
|
Execute on delegate or not.
|
|
872
873
|
"""
|
|
873
874
|
return pulumi.get(self, "execute_on_delegate")
|
|
874
875
|
|
|
875
876
|
@execute_on_delegate.setter
|
|
876
|
-
def execute_on_delegate(self, value: Optional[pulumi.Input[bool]]):
|
|
877
|
+
def execute_on_delegate(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
877
878
|
pulumi.set(self, "execute_on_delegate", value)
|
|
878
879
|
|
|
879
880
|
@property
|
|
880
881
|
@pulumi.getter
|
|
881
|
-
def identifier(self) -> Optional[pulumi.Input[str]]:
|
|
882
|
+
def identifier(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
882
883
|
"""
|
|
883
884
|
Unique identifier of the resource.
|
|
884
885
|
"""
|
|
885
886
|
return pulumi.get(self, "identifier")
|
|
886
887
|
|
|
887
888
|
@identifier.setter
|
|
888
|
-
def identifier(self, value: Optional[pulumi.Input[str]]):
|
|
889
|
+
def identifier(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
889
890
|
pulumi.set(self, "identifier", value)
|
|
890
891
|
|
|
891
892
|
@property
|
|
892
893
|
@pulumi.getter(name="isDefault")
|
|
893
|
-
def is_default(self) -> Optional[pulumi.Input[bool]]:
|
|
894
|
+
def is_default(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
894
895
|
"""
|
|
895
896
|
Is default or not.
|
|
896
897
|
"""
|
|
897
898
|
return pulumi.get(self, "is_default")
|
|
898
899
|
|
|
899
900
|
@is_default.setter
|
|
900
|
-
def is_default(self, value: Optional[pulumi.Input[bool]]):
|
|
901
|
+
def is_default(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
901
902
|
pulumi.set(self, "is_default", value)
|
|
902
903
|
|
|
903
904
|
@property
|
|
904
905
|
@pulumi.getter(name="isReadOnly")
|
|
905
|
-
def is_read_only(self) -> Optional[pulumi.Input[bool]]:
|
|
906
|
+
def is_read_only(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
906
907
|
"""
|
|
907
908
|
Read only or not.
|
|
908
909
|
"""
|
|
909
910
|
return pulumi.get(self, "is_read_only")
|
|
910
911
|
|
|
911
912
|
@is_read_only.setter
|
|
912
|
-
def is_read_only(self, value: Optional[pulumi.Input[bool]]):
|
|
913
|
+
def is_read_only(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
913
914
|
pulumi.set(self, "is_read_only", value)
|
|
914
915
|
|
|
915
916
|
@property
|
|
916
917
|
@pulumi.getter(name="k8sAuthEndpoint")
|
|
917
|
-
def k8s_auth_endpoint(self) -> Optional[pulumi.Input[str]]:
|
|
918
|
+
def k8s_auth_endpoint(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
918
919
|
"""
|
|
919
920
|
The path where Kubernetes Auth is enabled in Vault.
|
|
920
921
|
"""
|
|
921
922
|
return pulumi.get(self, "k8s_auth_endpoint")
|
|
922
923
|
|
|
923
924
|
@k8s_auth_endpoint.setter
|
|
924
|
-
def k8s_auth_endpoint(self, value: Optional[pulumi.Input[str]]):
|
|
925
|
+
def k8s_auth_endpoint(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
925
926
|
pulumi.set(self, "k8s_auth_endpoint", value)
|
|
926
927
|
|
|
927
928
|
@property
|
|
928
929
|
@pulumi.getter
|
|
929
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
930
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
930
931
|
"""
|
|
931
932
|
Name of the resource.
|
|
932
933
|
"""
|
|
933
934
|
return pulumi.get(self, "name")
|
|
934
935
|
|
|
935
936
|
@name.setter
|
|
936
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
937
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
937
938
|
pulumi.set(self, "name", value)
|
|
938
939
|
|
|
939
940
|
@property
|
|
940
941
|
@pulumi.getter
|
|
941
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
|
942
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
942
943
|
"""
|
|
943
944
|
Vault namespace where the Secret will be created.
|
|
944
945
|
"""
|
|
945
946
|
return pulumi.get(self, "namespace")
|
|
946
947
|
|
|
947
948
|
@namespace.setter
|
|
948
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
|
949
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
949
950
|
pulumi.set(self, "namespace", value)
|
|
950
951
|
|
|
951
952
|
@property
|
|
952
953
|
@pulumi.getter(name="orgId")
|
|
953
|
-
def org_id(self) -> Optional[pulumi.Input[str]]:
|
|
954
|
+
def org_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
954
955
|
"""
|
|
955
956
|
Unique identifier of the organization.
|
|
956
957
|
"""
|
|
957
958
|
return pulumi.get(self, "org_id")
|
|
958
959
|
|
|
959
960
|
@org_id.setter
|
|
960
|
-
def org_id(self, value: Optional[pulumi.Input[str]]):
|
|
961
|
+
def org_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
961
962
|
pulumi.set(self, "org_id", value)
|
|
962
963
|
|
|
963
964
|
@property
|
|
964
965
|
@pulumi.getter(name="projectId")
|
|
965
|
-
def project_id(self) -> Optional[pulumi.Input[str]]:
|
|
966
|
+
def project_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
966
967
|
"""
|
|
967
968
|
Unique identifier of the project.
|
|
968
969
|
"""
|
|
969
970
|
return pulumi.get(self, "project_id")
|
|
970
971
|
|
|
971
972
|
@project_id.setter
|
|
972
|
-
def project_id(self, value: Optional[pulumi.Input[str]]):
|
|
973
|
+
def project_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
973
974
|
pulumi.set(self, "project_id", value)
|
|
974
975
|
|
|
975
976
|
@property
|
|
976
977
|
@pulumi.getter(name="readOnly")
|
|
977
|
-
def read_only(self) -> Optional[pulumi.Input[bool]]:
|
|
978
|
+
def read_only(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
978
979
|
"""
|
|
979
980
|
Read only.
|
|
980
981
|
"""
|
|
981
982
|
return pulumi.get(self, "read_only")
|
|
982
983
|
|
|
983
984
|
@read_only.setter
|
|
984
|
-
def read_only(self, value: Optional[pulumi.Input[bool]]):
|
|
985
|
+
def read_only(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
985
986
|
pulumi.set(self, "read_only", value)
|
|
986
987
|
|
|
987
988
|
@property
|
|
988
989
|
@pulumi.getter(name="renewAppRoleToken")
|
|
989
|
-
def renew_app_role_token(self) -> Optional[pulumi.Input[bool]]:
|
|
990
|
+
def renew_app_role_token(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
990
991
|
"""
|
|
991
992
|
Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
992
993
|
"""
|
|
993
994
|
return pulumi.get(self, "renew_app_role_token")
|
|
994
995
|
|
|
995
996
|
@renew_app_role_token.setter
|
|
996
|
-
def renew_app_role_token(self, value: Optional[pulumi.Input[bool]]):
|
|
997
|
+
def renew_app_role_token(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
997
998
|
pulumi.set(self, "renew_app_role_token", value)
|
|
998
999
|
|
|
999
1000
|
@property
|
|
1000
1001
|
@pulumi.getter(name="renewalIntervalMinutes")
|
|
1001
|
-
def renewal_interval_minutes(self) -> Optional[pulumi.Input[int]]:
|
|
1002
|
+
def renewal_interval_minutes(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
1002
1003
|
"""
|
|
1003
1004
|
The time interval for the token renewal.
|
|
1004
1005
|
"""
|
|
1005
1006
|
return pulumi.get(self, "renewal_interval_minutes")
|
|
1006
1007
|
|
|
1007
1008
|
@renewal_interval_minutes.setter
|
|
1008
|
-
def renewal_interval_minutes(self, value: Optional[pulumi.Input[int]]):
|
|
1009
|
+
def renewal_interval_minutes(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
1009
1010
|
pulumi.set(self, "renewal_interval_minutes", value)
|
|
1010
1011
|
|
|
1011
1012
|
@property
|
|
1012
1013
|
@pulumi.getter(name="secretEngineManuallyConfigured")
|
|
1013
|
-
def secret_engine_manually_configured(self) -> Optional[pulumi.Input[bool]]:
|
|
1014
|
+
def secret_engine_manually_configured(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
1014
1015
|
"""
|
|
1015
1016
|
Manually entered Secret Engine.
|
|
1016
1017
|
"""
|
|
1017
1018
|
return pulumi.get(self, "secret_engine_manually_configured")
|
|
1018
1019
|
|
|
1019
1020
|
@secret_engine_manually_configured.setter
|
|
1020
|
-
def secret_engine_manually_configured(self, value: Optional[pulumi.Input[bool]]):
|
|
1021
|
+
def secret_engine_manually_configured(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
1021
1022
|
pulumi.set(self, "secret_engine_manually_configured", value)
|
|
1022
1023
|
|
|
1023
1024
|
@property
|
|
1024
1025
|
@pulumi.getter(name="secretEngineName")
|
|
1025
|
-
def secret_engine_name(self) -> Optional[pulumi.Input[str]]:
|
|
1026
|
+
def secret_engine_name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1026
1027
|
"""
|
|
1027
1028
|
Name of the Secret Engine.
|
|
1028
1029
|
"""
|
|
1029
1030
|
return pulumi.get(self, "secret_engine_name")
|
|
1030
1031
|
|
|
1031
1032
|
@secret_engine_name.setter
|
|
1032
|
-
def secret_engine_name(self, value: Optional[pulumi.Input[str]]):
|
|
1033
|
+
def secret_engine_name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1033
1034
|
pulumi.set(self, "secret_engine_name", value)
|
|
1034
1035
|
|
|
1035
1036
|
@property
|
|
1036
1037
|
@pulumi.getter(name="secretEngineVersion")
|
|
1037
|
-
def secret_engine_version(self) -> Optional[pulumi.Input[int]]:
|
|
1038
|
+
def secret_engine_version(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
1038
1039
|
"""
|
|
1039
1040
|
Version of Secret Engine.
|
|
1040
1041
|
"""
|
|
1041
1042
|
return pulumi.get(self, "secret_engine_version")
|
|
1042
1043
|
|
|
1043
1044
|
@secret_engine_version.setter
|
|
1044
|
-
def secret_engine_version(self, value: Optional[pulumi.Input[int]]):
|
|
1045
|
+
def secret_engine_version(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
1045
1046
|
pulumi.set(self, "secret_engine_version", value)
|
|
1046
1047
|
|
|
1047
1048
|
@property
|
|
1048
1049
|
@pulumi.getter(name="secretId")
|
|
1049
|
-
def secret_id(self) -> Optional[pulumi.Input[str]]:
|
|
1050
|
+
def secret_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1050
1051
|
"""
|
|
1051
1052
|
ID of the Secret.
|
|
1052
1053
|
"""
|
|
1053
1054
|
return pulumi.get(self, "secret_id")
|
|
1054
1055
|
|
|
1055
1056
|
@secret_id.setter
|
|
1056
|
-
def secret_id(self, value: Optional[pulumi.Input[str]]):
|
|
1057
|
+
def secret_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1057
1058
|
pulumi.set(self, "secret_id", value)
|
|
1058
1059
|
|
|
1059
1060
|
@property
|
|
1060
1061
|
@pulumi.getter(name="serviceAccountTokenPath")
|
|
1061
|
-
def service_account_token_path(self) -> Optional[pulumi.Input[str]]:
|
|
1062
|
+
def service_account_token_path(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1062
1063
|
"""
|
|
1063
1064
|
The Service Account token path in the K8s pod where the token is mounted.
|
|
1064
1065
|
"""
|
|
1065
1066
|
return pulumi.get(self, "service_account_token_path")
|
|
1066
1067
|
|
|
1067
1068
|
@service_account_token_path.setter
|
|
1068
|
-
def service_account_token_path(self, value: Optional[pulumi.Input[str]]):
|
|
1069
|
+
def service_account_token_path(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1069
1070
|
pulumi.set(self, "service_account_token_path", value)
|
|
1070
1071
|
|
|
1071
1072
|
@property
|
|
1072
1073
|
@pulumi.getter(name="sinkPath")
|
|
1073
|
-
def sink_path(self) -> Optional[pulumi.Input[str]]:
|
|
1074
|
+
def sink_path(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1074
1075
|
"""
|
|
1075
1076
|
The location from which the authentication token should be read.
|
|
1076
1077
|
"""
|
|
1077
1078
|
return pulumi.get(self, "sink_path")
|
|
1078
1079
|
|
|
1079
1080
|
@sink_path.setter
|
|
1080
|
-
def sink_path(self, value: Optional[pulumi.Input[str]]):
|
|
1081
|
+
def sink_path(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1081
1082
|
pulumi.set(self, "sink_path", value)
|
|
1082
1083
|
|
|
1083
1084
|
@property
|
|
1084
1085
|
@pulumi.getter
|
|
1085
|
-
def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
1086
|
+
def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
1086
1087
|
"""
|
|
1087
1088
|
Tags to associate with the resource.
|
|
1088
1089
|
"""
|
|
1089
1090
|
return pulumi.get(self, "tags")
|
|
1090
1091
|
|
|
1091
1092
|
@tags.setter
|
|
1092
|
-
def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
1093
|
+
def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
1093
1094
|
pulumi.set(self, "tags", value)
|
|
1094
1095
|
|
|
1095
1096
|
@property
|
|
1096
1097
|
@pulumi.getter(name="useAwsIam")
|
|
1097
|
-
def use_aws_iam(self) -> Optional[pulumi.Input[bool]]:
|
|
1098
|
+
def use_aws_iam(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
1098
1099
|
"""
|
|
1099
1100
|
Boolean value to indicate if AWS IAM is used for authentication.
|
|
1100
1101
|
"""
|
|
1101
1102
|
return pulumi.get(self, "use_aws_iam")
|
|
1102
1103
|
|
|
1103
1104
|
@use_aws_iam.setter
|
|
1104
|
-
def use_aws_iam(self, value: Optional[pulumi.Input[bool]]):
|
|
1105
|
+
def use_aws_iam(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
1105
1106
|
pulumi.set(self, "use_aws_iam", value)
|
|
1106
1107
|
|
|
1107
1108
|
@property
|
|
1108
1109
|
@pulumi.getter(name="useJwtAuth")
|
|
1109
|
-
def use_jwt_auth(self) -> Optional[pulumi.Input[bool]]:
|
|
1110
|
+
def use_jwt_auth(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
1110
1111
|
"""
|
|
1111
1112
|
Boolean value to indicate if JWT is used for authentication.
|
|
1112
1113
|
"""
|
|
1113
1114
|
return pulumi.get(self, "use_jwt_auth")
|
|
1114
1115
|
|
|
1115
1116
|
@use_jwt_auth.setter
|
|
1116
|
-
def use_jwt_auth(self, value: Optional[pulumi.Input[bool]]):
|
|
1117
|
+
def use_jwt_auth(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
1117
1118
|
pulumi.set(self, "use_jwt_auth", value)
|
|
1118
1119
|
|
|
1119
1120
|
@property
|
|
1120
1121
|
@pulumi.getter(name="useK8sAuth")
|
|
1121
|
-
def use_k8s_auth(self) -> Optional[pulumi.Input[bool]]:
|
|
1122
|
+
def use_k8s_auth(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
1122
1123
|
"""
|
|
1123
1124
|
Boolean value to indicate if K8s Auth is used for authentication.
|
|
1124
1125
|
"""
|
|
1125
1126
|
return pulumi.get(self, "use_k8s_auth")
|
|
1126
1127
|
|
|
1127
1128
|
@use_k8s_auth.setter
|
|
1128
|
-
def use_k8s_auth(self, value: Optional[pulumi.Input[bool]]):
|
|
1129
|
+
def use_k8s_auth(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
1129
1130
|
pulumi.set(self, "use_k8s_auth", value)
|
|
1130
1131
|
|
|
1131
1132
|
@property
|
|
1132
1133
|
@pulumi.getter(name="useVaultAgent")
|
|
1133
|
-
def use_vault_agent(self) -> Optional[pulumi.Input[bool]]:
|
|
1134
|
+
def use_vault_agent(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
1134
1135
|
"""
|
|
1135
1136
|
Boolean value to indicate if Vault Agent is used for authentication.
|
|
1136
1137
|
"""
|
|
1137
1138
|
return pulumi.get(self, "use_vault_agent")
|
|
1138
1139
|
|
|
1139
1140
|
@use_vault_agent.setter
|
|
1140
|
-
def use_vault_agent(self, value: Optional[pulumi.Input[bool]]):
|
|
1141
|
+
def use_vault_agent(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
1141
1142
|
pulumi.set(self, "use_vault_agent", value)
|
|
1142
1143
|
|
|
1143
1144
|
@property
|
|
1144
1145
|
@pulumi.getter(name="vaultAwsIamRole")
|
|
1145
|
-
def vault_aws_iam_role(self) -> Optional[pulumi.Input[str]]:
|
|
1146
|
+
def vault_aws_iam_role(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1146
1147
|
"""
|
|
1147
1148
|
The Vault role defined to bind to aws iam account/role being accessed.
|
|
1148
1149
|
"""
|
|
1149
1150
|
return pulumi.get(self, "vault_aws_iam_role")
|
|
1150
1151
|
|
|
1151
1152
|
@vault_aws_iam_role.setter
|
|
1152
|
-
def vault_aws_iam_role(self, value: Optional[pulumi.Input[str]]):
|
|
1153
|
+
def vault_aws_iam_role(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1153
1154
|
pulumi.set(self, "vault_aws_iam_role", value)
|
|
1154
1155
|
|
|
1155
1156
|
@property
|
|
1156
1157
|
@pulumi.getter(name="vaultJwtAuthPath")
|
|
1157
|
-
def vault_jwt_auth_path(self) -> Optional[pulumi.Input[str]]:
|
|
1158
|
+
def vault_jwt_auth_path(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1158
1159
|
"""
|
|
1159
1160
|
Custom path at with JWT auth in enabled for Vault.
|
|
1160
1161
|
"""
|
|
1161
1162
|
return pulumi.get(self, "vault_jwt_auth_path")
|
|
1162
1163
|
|
|
1163
1164
|
@vault_jwt_auth_path.setter
|
|
1164
|
-
def vault_jwt_auth_path(self, value: Optional[pulumi.Input[str]]):
|
|
1165
|
+
def vault_jwt_auth_path(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1165
1166
|
pulumi.set(self, "vault_jwt_auth_path", value)
|
|
1166
1167
|
|
|
1167
1168
|
@property
|
|
1168
1169
|
@pulumi.getter(name="vaultJwtAuthRole")
|
|
1169
|
-
def vault_jwt_auth_role(self) -> Optional[pulumi.Input[str]]:
|
|
1170
|
+
def vault_jwt_auth_role(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1170
1171
|
"""
|
|
1171
1172
|
The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
1172
1173
|
"""
|
|
1173
1174
|
return pulumi.get(self, "vault_jwt_auth_role")
|
|
1174
1175
|
|
|
1175
1176
|
@vault_jwt_auth_role.setter
|
|
1176
|
-
def vault_jwt_auth_role(self, value: Optional[pulumi.Input[str]]):
|
|
1177
|
+
def vault_jwt_auth_role(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1177
1178
|
pulumi.set(self, "vault_jwt_auth_role", value)
|
|
1178
1179
|
|
|
1179
1180
|
@property
|
|
1180
1181
|
@pulumi.getter(name="vaultK8sAuthRole")
|
|
1181
|
-
def vault_k8s_auth_role(self) -> Optional[pulumi.Input[str]]:
|
|
1182
|
+
def vault_k8s_auth_role(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1182
1183
|
"""
|
|
1183
1184
|
The role where K8s Auth will happen.
|
|
1184
1185
|
"""
|
|
1185
1186
|
return pulumi.get(self, "vault_k8s_auth_role")
|
|
1186
1187
|
|
|
1187
1188
|
@vault_k8s_auth_role.setter
|
|
1188
|
-
def vault_k8s_auth_role(self, value: Optional[pulumi.Input[str]]):
|
|
1189
|
+
def vault_k8s_auth_role(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1189
1190
|
pulumi.set(self, "vault_k8s_auth_role", value)
|
|
1190
1191
|
|
|
1191
1192
|
@property
|
|
1192
1193
|
@pulumi.getter(name="vaultUrl")
|
|
1193
|
-
def vault_url(self) -> Optional[pulumi.Input[str]]:
|
|
1194
|
+
def vault_url(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1194
1195
|
"""
|
|
1195
1196
|
URL of the HashiCorp Vault.
|
|
1196
1197
|
"""
|
|
1197
1198
|
return pulumi.get(self, "vault_url")
|
|
1198
1199
|
|
|
1199
1200
|
@vault_url.setter
|
|
1200
|
-
def vault_url(self, value: Optional[pulumi.Input[str]]):
|
|
1201
|
+
def vault_url(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1201
1202
|
pulumi.set(self, "vault_url", value)
|
|
1202
1203
|
|
|
1203
1204
|
@property
|
|
1204
1205
|
@pulumi.getter(name="xvaultAwsIamServerId")
|
|
1205
|
-
def xvault_aws_iam_server_id(self) -> Optional[pulumi.Input[str]]:
|
|
1206
|
+
def xvault_aws_iam_server_id(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
1206
1207
|
"""
|
|
1207
1208
|
The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
1208
1209
|
"""
|
|
1209
1210
|
return pulumi.get(self, "xvault_aws_iam_server_id")
|
|
1210
1211
|
|
|
1211
1212
|
@xvault_aws_iam_server_id.setter
|
|
1212
|
-
def xvault_aws_iam_server_id(self, value: Optional[pulumi.Input[str]]):
|
|
1213
|
+
def xvault_aws_iam_server_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
1213
1214
|
pulumi.set(self, "xvault_aws_iam_server_id", value)
|
|
1214
1215
|
|
|
1215
1216
|
|
|
@@ -1218,43 +1219,43 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1218
1219
|
def __init__(__self__,
|
|
1219
1220
|
resource_name: str,
|
|
1220
1221
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1221
|
-
access_type: Optional[pulumi.Input[str]] = None,
|
|
1222
|
-
app_role_id: Optional[pulumi.Input[str]] = None,
|
|
1223
|
-
auth_token: Optional[pulumi.Input[str]] = None,
|
|
1224
|
-
aws_region: Optional[pulumi.Input[str]] = None,
|
|
1225
|
-
base_path: Optional[pulumi.Input[str]] = None,
|
|
1226
|
-
default: Optional[pulumi.Input[bool]] = None,
|
|
1227
|
-
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1228
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
1229
|
-
execute_on_delegate: Optional[pulumi.Input[bool]] = None,
|
|
1230
|
-
identifier: Optional[pulumi.Input[str]] = None,
|
|
1231
|
-
is_default: Optional[pulumi.Input[bool]] = None,
|
|
1232
|
-
is_read_only: Optional[pulumi.Input[bool]] = None,
|
|
1233
|
-
k8s_auth_endpoint: Optional[pulumi.Input[str]] = None,
|
|
1234
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
1235
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
1236
|
-
org_id: Optional[pulumi.Input[str]] = None,
|
|
1237
|
-
project_id: Optional[pulumi.Input[str]] = None,
|
|
1238
|
-
read_only: Optional[pulumi.Input[bool]] = None,
|
|
1239
|
-
renew_app_role_token: Optional[pulumi.Input[bool]] = None,
|
|
1240
|
-
renewal_interval_minutes: Optional[pulumi.Input[int]] = None,
|
|
1241
|
-
secret_engine_manually_configured: Optional[pulumi.Input[bool]] = None,
|
|
1242
|
-
secret_engine_name: Optional[pulumi.Input[str]] = None,
|
|
1243
|
-
secret_engine_version: Optional[pulumi.Input[int]] = None,
|
|
1244
|
-
secret_id: Optional[pulumi.Input[str]] = None,
|
|
1245
|
-
service_account_token_path: Optional[pulumi.Input[str]] = None,
|
|
1246
|
-
sink_path: Optional[pulumi.Input[str]] = None,
|
|
1247
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1248
|
-
use_aws_iam: Optional[pulumi.Input[bool]] = None,
|
|
1249
|
-
use_jwt_auth: Optional[pulumi.Input[bool]] = None,
|
|
1250
|
-
use_k8s_auth: Optional[pulumi.Input[bool]] = None,
|
|
1251
|
-
use_vault_agent: Optional[pulumi.Input[bool]] = None,
|
|
1252
|
-
vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
|
|
1253
|
-
vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
|
|
1254
|
-
vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
|
|
1255
|
-
vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
|
|
1256
|
-
vault_url: Optional[pulumi.Input[str]] = None,
|
|
1257
|
-
xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None,
|
|
1222
|
+
access_type: Optional[pulumi.Input[builtins.str]] = None,
|
|
1223
|
+
app_role_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1224
|
+
auth_token: Optional[pulumi.Input[builtins.str]] = None,
|
|
1225
|
+
aws_region: Optional[pulumi.Input[builtins.str]] = None,
|
|
1226
|
+
base_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1227
|
+
default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1228
|
+
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
1229
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
|
1230
|
+
execute_on_delegate: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1231
|
+
identifier: Optional[pulumi.Input[builtins.str]] = None,
|
|
1232
|
+
is_default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1233
|
+
is_read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1234
|
+
k8s_auth_endpoint: Optional[pulumi.Input[builtins.str]] = None,
|
|
1235
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
1236
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
1237
|
+
org_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1238
|
+
project_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1239
|
+
read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1240
|
+
renew_app_role_token: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1241
|
+
renewal_interval_minutes: Optional[pulumi.Input[builtins.int]] = None,
|
|
1242
|
+
secret_engine_manually_configured: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1243
|
+
secret_engine_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
1244
|
+
secret_engine_version: Optional[pulumi.Input[builtins.int]] = None,
|
|
1245
|
+
secret_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1246
|
+
service_account_token_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1247
|
+
sink_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1248
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
1249
|
+
use_aws_iam: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1250
|
+
use_jwt_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1251
|
+
use_k8s_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1252
|
+
use_vault_agent: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1253
|
+
vault_aws_iam_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
1254
|
+
vault_jwt_auth_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1255
|
+
vault_jwt_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
1256
|
+
vault_k8s_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
1257
|
+
vault_url: Optional[pulumi.Input[builtins.str]] = None,
|
|
1258
|
+
xvault_aws_iam_server_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1258
1259
|
__props__=None):
|
|
1259
1260
|
"""
|
|
1260
1261
|
## Example Usage
|
|
@@ -1420,43 +1421,43 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1420
1421
|
|
|
1421
1422
|
:param str resource_name: The name of the resource.
|
|
1422
1423
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1423
|
-
:param pulumi.Input[str] access_type: Access type.
|
|
1424
|
-
:param pulumi.Input[str] app_role_id: ID of App Role.
|
|
1425
|
-
:param pulumi.Input[str] auth_token: Authentication token for Vault.
|
|
1426
|
-
:param pulumi.Input[str] aws_region: AWS region where the AWS IAM authentication will happen.
|
|
1427
|
-
:param pulumi.Input[str] base_path: Location of the Vault directory where the secret will be stored.
|
|
1428
|
-
:param pulumi.Input[bool] default: Is default or not.
|
|
1429
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
1430
|
-
:param pulumi.Input[str] description: Description of the resource.
|
|
1431
|
-
:param pulumi.Input[bool] execute_on_delegate: Execute on delegate or not.
|
|
1432
|
-
:param pulumi.Input[str] identifier: Unique identifier of the resource.
|
|
1433
|
-
:param pulumi.Input[bool] is_default: Is default or not.
|
|
1434
|
-
:param pulumi.Input[bool] is_read_only: Read only or not.
|
|
1435
|
-
:param pulumi.Input[str] k8s_auth_endpoint: The path where Kubernetes Auth is enabled in Vault.
|
|
1436
|
-
:param pulumi.Input[str] name: Name of the resource.
|
|
1437
|
-
:param pulumi.Input[str] namespace: Vault namespace where the Secret will be created.
|
|
1438
|
-
:param pulumi.Input[str] org_id: Unique identifier of the organization.
|
|
1439
|
-
:param pulumi.Input[str] project_id: Unique identifier of the project.
|
|
1440
|
-
:param pulumi.Input[bool] read_only: Read only.
|
|
1441
|
-
:param pulumi.Input[bool] renew_app_role_token: Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
1442
|
-
:param pulumi.Input[int] renewal_interval_minutes: The time interval for the token renewal.
|
|
1443
|
-
:param pulumi.Input[bool] secret_engine_manually_configured: Manually entered Secret Engine.
|
|
1444
|
-
:param pulumi.Input[str] secret_engine_name: Name of the Secret Engine.
|
|
1445
|
-
:param pulumi.Input[int] secret_engine_version: Version of Secret Engine.
|
|
1446
|
-
:param pulumi.Input[str] secret_id: ID of the Secret.
|
|
1447
|
-
:param pulumi.Input[str] service_account_token_path: The Service Account token path in the K8s pod where the token is mounted.
|
|
1448
|
-
:param pulumi.Input[str] sink_path: The location from which the authentication token should be read.
|
|
1449
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] tags: Tags to associate with the resource.
|
|
1450
|
-
:param pulumi.Input[bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
|
|
1451
|
-
:param pulumi.Input[bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
|
|
1452
|
-
:param pulumi.Input[bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
|
|
1453
|
-
:param pulumi.Input[bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
|
|
1454
|
-
:param pulumi.Input[str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
|
|
1455
|
-
:param pulumi.Input[str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
|
|
1456
|
-
:param pulumi.Input[str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
1457
|
-
:param pulumi.Input[str] vault_k8s_auth_role: The role where K8s Auth will happen.
|
|
1458
|
-
:param pulumi.Input[str] vault_url: URL of the HashiCorp Vault.
|
|
1459
|
-
:param pulumi.Input[str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
1424
|
+
:param pulumi.Input[builtins.str] access_type: Access type.
|
|
1425
|
+
:param pulumi.Input[builtins.str] app_role_id: ID of App Role.
|
|
1426
|
+
:param pulumi.Input[builtins.str] auth_token: Authentication token for Vault.
|
|
1427
|
+
:param pulumi.Input[builtins.str] aws_region: AWS region where the AWS IAM authentication will happen.
|
|
1428
|
+
:param pulumi.Input[builtins.str] base_path: Location of the Vault directory where the secret will be stored.
|
|
1429
|
+
:param pulumi.Input[builtins.bool] default: Is default or not.
|
|
1430
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
1431
|
+
:param pulumi.Input[builtins.str] description: Description of the resource.
|
|
1432
|
+
:param pulumi.Input[builtins.bool] execute_on_delegate: Execute on delegate or not.
|
|
1433
|
+
:param pulumi.Input[builtins.str] identifier: Unique identifier of the resource.
|
|
1434
|
+
:param pulumi.Input[builtins.bool] is_default: Is default or not.
|
|
1435
|
+
:param pulumi.Input[builtins.bool] is_read_only: Read only or not.
|
|
1436
|
+
:param pulumi.Input[builtins.str] k8s_auth_endpoint: The path where Kubernetes Auth is enabled in Vault.
|
|
1437
|
+
:param pulumi.Input[builtins.str] name: Name of the resource.
|
|
1438
|
+
:param pulumi.Input[builtins.str] namespace: Vault namespace where the Secret will be created.
|
|
1439
|
+
:param pulumi.Input[builtins.str] org_id: Unique identifier of the organization.
|
|
1440
|
+
:param pulumi.Input[builtins.str] project_id: Unique identifier of the project.
|
|
1441
|
+
:param pulumi.Input[builtins.bool] read_only: Read only.
|
|
1442
|
+
:param pulumi.Input[builtins.bool] renew_app_role_token: Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
1443
|
+
:param pulumi.Input[builtins.int] renewal_interval_minutes: The time interval for the token renewal.
|
|
1444
|
+
:param pulumi.Input[builtins.bool] secret_engine_manually_configured: Manually entered Secret Engine.
|
|
1445
|
+
:param pulumi.Input[builtins.str] secret_engine_name: Name of the Secret Engine.
|
|
1446
|
+
:param pulumi.Input[builtins.int] secret_engine_version: Version of Secret Engine.
|
|
1447
|
+
:param pulumi.Input[builtins.str] secret_id: ID of the Secret.
|
|
1448
|
+
:param pulumi.Input[builtins.str] service_account_token_path: The Service Account token path in the K8s pod where the token is mounted.
|
|
1449
|
+
:param pulumi.Input[builtins.str] sink_path: The location from which the authentication token should be read.
|
|
1450
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] tags: Tags to associate with the resource.
|
|
1451
|
+
:param pulumi.Input[builtins.bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
|
|
1452
|
+
:param pulumi.Input[builtins.bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
|
|
1453
|
+
:param pulumi.Input[builtins.bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
|
|
1454
|
+
:param pulumi.Input[builtins.bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
|
|
1455
|
+
:param pulumi.Input[builtins.str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
|
|
1456
|
+
:param pulumi.Input[builtins.str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
|
|
1457
|
+
:param pulumi.Input[builtins.str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
1458
|
+
:param pulumi.Input[builtins.str] vault_k8s_auth_role: The role where K8s Auth will happen.
|
|
1459
|
+
:param pulumi.Input[builtins.str] vault_url: URL of the HashiCorp Vault.
|
|
1460
|
+
:param pulumi.Input[builtins.str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
1460
1461
|
"""
|
|
1461
1462
|
...
|
|
1462
1463
|
@overload
|
|
@@ -1641,43 +1642,43 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1641
1642
|
def _internal_init(__self__,
|
|
1642
1643
|
resource_name: str,
|
|
1643
1644
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1644
|
-
access_type: Optional[pulumi.Input[str]] = None,
|
|
1645
|
-
app_role_id: Optional[pulumi.Input[str]] = None,
|
|
1646
|
-
auth_token: Optional[pulumi.Input[str]] = None,
|
|
1647
|
-
aws_region: Optional[pulumi.Input[str]] = None,
|
|
1648
|
-
base_path: Optional[pulumi.Input[str]] = None,
|
|
1649
|
-
default: Optional[pulumi.Input[bool]] = None,
|
|
1650
|
-
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1651
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
1652
|
-
execute_on_delegate: Optional[pulumi.Input[bool]] = None,
|
|
1653
|
-
identifier: Optional[pulumi.Input[str]] = None,
|
|
1654
|
-
is_default: Optional[pulumi.Input[bool]] = None,
|
|
1655
|
-
is_read_only: Optional[pulumi.Input[bool]] = None,
|
|
1656
|
-
k8s_auth_endpoint: Optional[pulumi.Input[str]] = None,
|
|
1657
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
1658
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
1659
|
-
org_id: Optional[pulumi.Input[str]] = None,
|
|
1660
|
-
project_id: Optional[pulumi.Input[str]] = None,
|
|
1661
|
-
read_only: Optional[pulumi.Input[bool]] = None,
|
|
1662
|
-
renew_app_role_token: Optional[pulumi.Input[bool]] = None,
|
|
1663
|
-
renewal_interval_minutes: Optional[pulumi.Input[int]] = None,
|
|
1664
|
-
secret_engine_manually_configured: Optional[pulumi.Input[bool]] = None,
|
|
1665
|
-
secret_engine_name: Optional[pulumi.Input[str]] = None,
|
|
1666
|
-
secret_engine_version: Optional[pulumi.Input[int]] = None,
|
|
1667
|
-
secret_id: Optional[pulumi.Input[str]] = None,
|
|
1668
|
-
service_account_token_path: Optional[pulumi.Input[str]] = None,
|
|
1669
|
-
sink_path: Optional[pulumi.Input[str]] = None,
|
|
1670
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1671
|
-
use_aws_iam: Optional[pulumi.Input[bool]] = None,
|
|
1672
|
-
use_jwt_auth: Optional[pulumi.Input[bool]] = None,
|
|
1673
|
-
use_k8s_auth: Optional[pulumi.Input[bool]] = None,
|
|
1674
|
-
use_vault_agent: Optional[pulumi.Input[bool]] = None,
|
|
1675
|
-
vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
|
|
1676
|
-
vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
|
|
1677
|
-
vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
|
|
1678
|
-
vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
|
|
1679
|
-
vault_url: Optional[pulumi.Input[str]] = None,
|
|
1680
|
-
xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None,
|
|
1645
|
+
access_type: Optional[pulumi.Input[builtins.str]] = None,
|
|
1646
|
+
app_role_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1647
|
+
auth_token: Optional[pulumi.Input[builtins.str]] = None,
|
|
1648
|
+
aws_region: Optional[pulumi.Input[builtins.str]] = None,
|
|
1649
|
+
base_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1650
|
+
default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1651
|
+
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
1652
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
|
1653
|
+
execute_on_delegate: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1654
|
+
identifier: Optional[pulumi.Input[builtins.str]] = None,
|
|
1655
|
+
is_default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1656
|
+
is_read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1657
|
+
k8s_auth_endpoint: Optional[pulumi.Input[builtins.str]] = None,
|
|
1658
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
1659
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
1660
|
+
org_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1661
|
+
project_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1662
|
+
read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1663
|
+
renew_app_role_token: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1664
|
+
renewal_interval_minutes: Optional[pulumi.Input[builtins.int]] = None,
|
|
1665
|
+
secret_engine_manually_configured: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1666
|
+
secret_engine_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
1667
|
+
secret_engine_version: Optional[pulumi.Input[builtins.int]] = None,
|
|
1668
|
+
secret_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1669
|
+
service_account_token_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1670
|
+
sink_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1671
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
1672
|
+
use_aws_iam: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1673
|
+
use_jwt_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1674
|
+
use_k8s_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1675
|
+
use_vault_agent: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1676
|
+
vault_aws_iam_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
1677
|
+
vault_jwt_auth_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1678
|
+
vault_jwt_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
1679
|
+
vault_k8s_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
1680
|
+
vault_url: Optional[pulumi.Input[builtins.str]] = None,
|
|
1681
|
+
xvault_aws_iam_server_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1681
1682
|
__props__=None):
|
|
1682
1683
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
1683
1684
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -1740,43 +1741,43 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1740
1741
|
def get(resource_name: str,
|
|
1741
1742
|
id: pulumi.Input[str],
|
|
1742
1743
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1743
|
-
access_type: Optional[pulumi.Input[str]] = None,
|
|
1744
|
-
app_role_id: Optional[pulumi.Input[str]] = None,
|
|
1745
|
-
auth_token: Optional[pulumi.Input[str]] = None,
|
|
1746
|
-
aws_region: Optional[pulumi.Input[str]] = None,
|
|
1747
|
-
base_path: Optional[pulumi.Input[str]] = None,
|
|
1748
|
-
default: Optional[pulumi.Input[bool]] = None,
|
|
1749
|
-
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1750
|
-
description: Optional[pulumi.Input[str]] = None,
|
|
1751
|
-
execute_on_delegate: Optional[pulumi.Input[bool]] = None,
|
|
1752
|
-
identifier: Optional[pulumi.Input[str]] = None,
|
|
1753
|
-
is_default: Optional[pulumi.Input[bool]] = None,
|
|
1754
|
-
is_read_only: Optional[pulumi.Input[bool]] = None,
|
|
1755
|
-
k8s_auth_endpoint: Optional[pulumi.Input[str]] = None,
|
|
1756
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
1757
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
1758
|
-
org_id: Optional[pulumi.Input[str]] = None,
|
|
1759
|
-
project_id: Optional[pulumi.Input[str]] = None,
|
|
1760
|
-
read_only: Optional[pulumi.Input[bool]] = None,
|
|
1761
|
-
renew_app_role_token: Optional[pulumi.Input[bool]] = None,
|
|
1762
|
-
renewal_interval_minutes: Optional[pulumi.Input[int]] = None,
|
|
1763
|
-
secret_engine_manually_configured: Optional[pulumi.Input[bool]] = None,
|
|
1764
|
-
secret_engine_name: Optional[pulumi.Input[str]] = None,
|
|
1765
|
-
secret_engine_version: Optional[pulumi.Input[int]] = None,
|
|
1766
|
-
secret_id: Optional[pulumi.Input[str]] = None,
|
|
1767
|
-
service_account_token_path: Optional[pulumi.Input[str]] = None,
|
|
1768
|
-
sink_path: Optional[pulumi.Input[str]] = None,
|
|
1769
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1770
|
-
use_aws_iam: Optional[pulumi.Input[bool]] = None,
|
|
1771
|
-
use_jwt_auth: Optional[pulumi.Input[bool]] = None,
|
|
1772
|
-
use_k8s_auth: Optional[pulumi.Input[bool]] = None,
|
|
1773
|
-
use_vault_agent: Optional[pulumi.Input[bool]] = None,
|
|
1774
|
-
vault_aws_iam_role: Optional[pulumi.Input[str]] = None,
|
|
1775
|
-
vault_jwt_auth_path: Optional[pulumi.Input[str]] = None,
|
|
1776
|
-
vault_jwt_auth_role: Optional[pulumi.Input[str]] = None,
|
|
1777
|
-
vault_k8s_auth_role: Optional[pulumi.Input[str]] = None,
|
|
1778
|
-
vault_url: Optional[pulumi.Input[str]] = None,
|
|
1779
|
-
xvault_aws_iam_server_id: Optional[pulumi.Input[str]] = None) -> 'VaultConnector':
|
|
1744
|
+
access_type: Optional[pulumi.Input[builtins.str]] = None,
|
|
1745
|
+
app_role_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1746
|
+
auth_token: Optional[pulumi.Input[builtins.str]] = None,
|
|
1747
|
+
aws_region: Optional[pulumi.Input[builtins.str]] = None,
|
|
1748
|
+
base_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1749
|
+
default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1750
|
+
delegate_selectors: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
1751
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
|
1752
|
+
execute_on_delegate: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1753
|
+
identifier: Optional[pulumi.Input[builtins.str]] = None,
|
|
1754
|
+
is_default: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1755
|
+
is_read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1756
|
+
k8s_auth_endpoint: Optional[pulumi.Input[builtins.str]] = None,
|
|
1757
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
1758
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
1759
|
+
org_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1760
|
+
project_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1761
|
+
read_only: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1762
|
+
renew_app_role_token: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1763
|
+
renewal_interval_minutes: Optional[pulumi.Input[builtins.int]] = None,
|
|
1764
|
+
secret_engine_manually_configured: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1765
|
+
secret_engine_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
1766
|
+
secret_engine_version: Optional[pulumi.Input[builtins.int]] = None,
|
|
1767
|
+
secret_id: Optional[pulumi.Input[builtins.str]] = None,
|
|
1768
|
+
service_account_token_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1769
|
+
sink_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1770
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
1771
|
+
use_aws_iam: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1772
|
+
use_jwt_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1773
|
+
use_k8s_auth: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1774
|
+
use_vault_agent: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1775
|
+
vault_aws_iam_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
1776
|
+
vault_jwt_auth_path: Optional[pulumi.Input[builtins.str]] = None,
|
|
1777
|
+
vault_jwt_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
1778
|
+
vault_k8s_auth_role: Optional[pulumi.Input[builtins.str]] = None,
|
|
1779
|
+
vault_url: Optional[pulumi.Input[builtins.str]] = None,
|
|
1780
|
+
xvault_aws_iam_server_id: Optional[pulumi.Input[builtins.str]] = None) -> 'VaultConnector':
|
|
1780
1781
|
"""
|
|
1781
1782
|
Get an existing VaultConnector resource's state with the given name, id, and optional extra
|
|
1782
1783
|
properties used to qualify the lookup.
|
|
@@ -1784,43 +1785,43 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1784
1785
|
:param str resource_name: The unique name of the resulting resource.
|
|
1785
1786
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
1786
1787
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1787
|
-
:param pulumi.Input[str] access_type: Access type.
|
|
1788
|
-
:param pulumi.Input[str] app_role_id: ID of App Role.
|
|
1789
|
-
:param pulumi.Input[str] auth_token: Authentication token for Vault.
|
|
1790
|
-
:param pulumi.Input[str] aws_region: AWS region where the AWS IAM authentication will happen.
|
|
1791
|
-
:param pulumi.Input[str] base_path: Location of the Vault directory where the secret will be stored.
|
|
1792
|
-
:param pulumi.Input[bool] default: Is default or not.
|
|
1793
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
1794
|
-
:param pulumi.Input[str] description: Description of the resource.
|
|
1795
|
-
:param pulumi.Input[bool] execute_on_delegate: Execute on delegate or not.
|
|
1796
|
-
:param pulumi.Input[str] identifier: Unique identifier of the resource.
|
|
1797
|
-
:param pulumi.Input[bool] is_default: Is default or not.
|
|
1798
|
-
:param pulumi.Input[bool] is_read_only: Read only or not.
|
|
1799
|
-
:param pulumi.Input[str] k8s_auth_endpoint: The path where Kubernetes Auth is enabled in Vault.
|
|
1800
|
-
:param pulumi.Input[str] name: Name of the resource.
|
|
1801
|
-
:param pulumi.Input[str] namespace: Vault namespace where the Secret will be created.
|
|
1802
|
-
:param pulumi.Input[str] org_id: Unique identifier of the organization.
|
|
1803
|
-
:param pulumi.Input[str] project_id: Unique identifier of the project.
|
|
1804
|
-
:param pulumi.Input[bool] read_only: Read only.
|
|
1805
|
-
:param pulumi.Input[bool] renew_app_role_token: Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
1806
|
-
:param pulumi.Input[int] renewal_interval_minutes: The time interval for the token renewal.
|
|
1807
|
-
:param pulumi.Input[bool] secret_engine_manually_configured: Manually entered Secret Engine.
|
|
1808
|
-
:param pulumi.Input[str] secret_engine_name: Name of the Secret Engine.
|
|
1809
|
-
:param pulumi.Input[int] secret_engine_version: Version of Secret Engine.
|
|
1810
|
-
:param pulumi.Input[str] secret_id: ID of the Secret.
|
|
1811
|
-
:param pulumi.Input[str] service_account_token_path: The Service Account token path in the K8s pod where the token is mounted.
|
|
1812
|
-
:param pulumi.Input[str] sink_path: The location from which the authentication token should be read.
|
|
1813
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] tags: Tags to associate with the resource.
|
|
1814
|
-
:param pulumi.Input[bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
|
|
1815
|
-
:param pulumi.Input[bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
|
|
1816
|
-
:param pulumi.Input[bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
|
|
1817
|
-
:param pulumi.Input[bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
|
|
1818
|
-
:param pulumi.Input[str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
|
|
1819
|
-
:param pulumi.Input[str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
|
|
1820
|
-
:param pulumi.Input[str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
1821
|
-
:param pulumi.Input[str] vault_k8s_auth_role: The role where K8s Auth will happen.
|
|
1822
|
-
:param pulumi.Input[str] vault_url: URL of the HashiCorp Vault.
|
|
1823
|
-
:param pulumi.Input[str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
1788
|
+
:param pulumi.Input[builtins.str] access_type: Access type.
|
|
1789
|
+
:param pulumi.Input[builtins.str] app_role_id: ID of App Role.
|
|
1790
|
+
:param pulumi.Input[builtins.str] auth_token: Authentication token for Vault.
|
|
1791
|
+
:param pulumi.Input[builtins.str] aws_region: AWS region where the AWS IAM authentication will happen.
|
|
1792
|
+
:param pulumi.Input[builtins.str] base_path: Location of the Vault directory where the secret will be stored.
|
|
1793
|
+
:param pulumi.Input[builtins.bool] default: Is default or not.
|
|
1794
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] delegate_selectors: List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
1795
|
+
:param pulumi.Input[builtins.str] description: Description of the resource.
|
|
1796
|
+
:param pulumi.Input[builtins.bool] execute_on_delegate: Execute on delegate or not.
|
|
1797
|
+
:param pulumi.Input[builtins.str] identifier: Unique identifier of the resource.
|
|
1798
|
+
:param pulumi.Input[builtins.bool] is_default: Is default or not.
|
|
1799
|
+
:param pulumi.Input[builtins.bool] is_read_only: Read only or not.
|
|
1800
|
+
:param pulumi.Input[builtins.str] k8s_auth_endpoint: The path where Kubernetes Auth is enabled in Vault.
|
|
1801
|
+
:param pulumi.Input[builtins.str] name: Name of the resource.
|
|
1802
|
+
:param pulumi.Input[builtins.str] namespace: Vault namespace where the Secret will be created.
|
|
1803
|
+
:param pulumi.Input[builtins.str] org_id: Unique identifier of the organization.
|
|
1804
|
+
:param pulumi.Input[builtins.str] project_id: Unique identifier of the project.
|
|
1805
|
+
:param pulumi.Input[builtins.bool] read_only: Read only.
|
|
1806
|
+
:param pulumi.Input[builtins.bool] renew_app_role_token: Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
1807
|
+
:param pulumi.Input[builtins.int] renewal_interval_minutes: The time interval for the token renewal.
|
|
1808
|
+
:param pulumi.Input[builtins.bool] secret_engine_manually_configured: Manually entered Secret Engine.
|
|
1809
|
+
:param pulumi.Input[builtins.str] secret_engine_name: Name of the Secret Engine.
|
|
1810
|
+
:param pulumi.Input[builtins.int] secret_engine_version: Version of Secret Engine.
|
|
1811
|
+
:param pulumi.Input[builtins.str] secret_id: ID of the Secret.
|
|
1812
|
+
:param pulumi.Input[builtins.str] service_account_token_path: The Service Account token path in the K8s pod where the token is mounted.
|
|
1813
|
+
:param pulumi.Input[builtins.str] sink_path: The location from which the authentication token should be read.
|
|
1814
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] tags: Tags to associate with the resource.
|
|
1815
|
+
:param pulumi.Input[builtins.bool] use_aws_iam: Boolean value to indicate if AWS IAM is used for authentication.
|
|
1816
|
+
:param pulumi.Input[builtins.bool] use_jwt_auth: Boolean value to indicate if JWT is used for authentication.
|
|
1817
|
+
:param pulumi.Input[builtins.bool] use_k8s_auth: Boolean value to indicate if K8s Auth is used for authentication.
|
|
1818
|
+
:param pulumi.Input[builtins.bool] use_vault_agent: Boolean value to indicate if Vault Agent is used for authentication.
|
|
1819
|
+
:param pulumi.Input[builtins.str] vault_aws_iam_role: The Vault role defined to bind to aws iam account/role being accessed.
|
|
1820
|
+
:param pulumi.Input[builtins.str] vault_jwt_auth_path: Custom path at with JWT auth in enabled for Vault.
|
|
1821
|
+
:param pulumi.Input[builtins.str] vault_jwt_auth_role: The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
1822
|
+
:param pulumi.Input[builtins.str] vault_k8s_auth_role: The role where K8s Auth will happen.
|
|
1823
|
+
:param pulumi.Input[builtins.str] vault_url: URL of the HashiCorp Vault.
|
|
1824
|
+
:param pulumi.Input[builtins.str] xvault_aws_iam_server_id: The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
1824
1825
|
"""
|
|
1825
1826
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
1826
1827
|
|
|
@@ -1867,7 +1868,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1867
1868
|
|
|
1868
1869
|
@property
|
|
1869
1870
|
@pulumi.getter(name="accessType")
|
|
1870
|
-
def access_type(self) -> pulumi.Output[Optional[str]]:
|
|
1871
|
+
def access_type(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1871
1872
|
"""
|
|
1872
1873
|
Access type.
|
|
1873
1874
|
"""
|
|
@@ -1875,7 +1876,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1875
1876
|
|
|
1876
1877
|
@property
|
|
1877
1878
|
@pulumi.getter(name="appRoleId")
|
|
1878
|
-
def app_role_id(self) -> pulumi.Output[Optional[str]]:
|
|
1879
|
+
def app_role_id(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1879
1880
|
"""
|
|
1880
1881
|
ID of App Role.
|
|
1881
1882
|
"""
|
|
@@ -1883,7 +1884,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1883
1884
|
|
|
1884
1885
|
@property
|
|
1885
1886
|
@pulumi.getter(name="authToken")
|
|
1886
|
-
def auth_token(self) -> pulumi.Output[str]:
|
|
1887
|
+
def auth_token(self) -> pulumi.Output[builtins.str]:
|
|
1887
1888
|
"""
|
|
1888
1889
|
Authentication token for Vault.
|
|
1889
1890
|
"""
|
|
@@ -1891,7 +1892,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1891
1892
|
|
|
1892
1893
|
@property
|
|
1893
1894
|
@pulumi.getter(name="awsRegion")
|
|
1894
|
-
def aws_region(self) -> pulumi.Output[Optional[str]]:
|
|
1895
|
+
def aws_region(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1895
1896
|
"""
|
|
1896
1897
|
AWS region where the AWS IAM authentication will happen.
|
|
1897
1898
|
"""
|
|
@@ -1899,7 +1900,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1899
1900
|
|
|
1900
1901
|
@property
|
|
1901
1902
|
@pulumi.getter(name="basePath")
|
|
1902
|
-
def base_path(self) -> pulumi.Output[Optional[str]]:
|
|
1903
|
+
def base_path(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1903
1904
|
"""
|
|
1904
1905
|
Location of the Vault directory where the secret will be stored.
|
|
1905
1906
|
"""
|
|
@@ -1907,7 +1908,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1907
1908
|
|
|
1908
1909
|
@property
|
|
1909
1910
|
@pulumi.getter
|
|
1910
|
-
def default(self) -> pulumi.Output[Optional[bool]]:
|
|
1911
|
+
def default(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1911
1912
|
"""
|
|
1912
1913
|
Is default or not.
|
|
1913
1914
|
"""
|
|
@@ -1915,7 +1916,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1915
1916
|
|
|
1916
1917
|
@property
|
|
1917
1918
|
@pulumi.getter(name="delegateSelectors")
|
|
1918
|
-
def delegate_selectors(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
1919
|
+
def delegate_selectors(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
1919
1920
|
"""
|
|
1920
1921
|
List of Delegate Selectors that belong to the same Delegate and are used to connect to the Secret Manager.
|
|
1921
1922
|
"""
|
|
@@ -1923,7 +1924,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1923
1924
|
|
|
1924
1925
|
@property
|
|
1925
1926
|
@pulumi.getter
|
|
1926
|
-
def description(self) -> pulumi.Output[Optional[str]]:
|
|
1927
|
+
def description(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1927
1928
|
"""
|
|
1928
1929
|
Description of the resource.
|
|
1929
1930
|
"""
|
|
@@ -1931,7 +1932,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1931
1932
|
|
|
1932
1933
|
@property
|
|
1933
1934
|
@pulumi.getter(name="executeOnDelegate")
|
|
1934
|
-
def execute_on_delegate(self) -> pulumi.Output[Optional[bool]]:
|
|
1935
|
+
def execute_on_delegate(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1935
1936
|
"""
|
|
1936
1937
|
Execute on delegate or not.
|
|
1937
1938
|
"""
|
|
@@ -1939,7 +1940,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1939
1940
|
|
|
1940
1941
|
@property
|
|
1941
1942
|
@pulumi.getter
|
|
1942
|
-
def identifier(self) -> pulumi.Output[str]:
|
|
1943
|
+
def identifier(self) -> pulumi.Output[builtins.str]:
|
|
1943
1944
|
"""
|
|
1944
1945
|
Unique identifier of the resource.
|
|
1945
1946
|
"""
|
|
@@ -1947,7 +1948,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1947
1948
|
|
|
1948
1949
|
@property
|
|
1949
1950
|
@pulumi.getter(name="isDefault")
|
|
1950
|
-
def is_default(self) -> pulumi.Output[Optional[bool]]:
|
|
1951
|
+
def is_default(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1951
1952
|
"""
|
|
1952
1953
|
Is default or not.
|
|
1953
1954
|
"""
|
|
@@ -1955,7 +1956,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1955
1956
|
|
|
1956
1957
|
@property
|
|
1957
1958
|
@pulumi.getter(name="isReadOnly")
|
|
1958
|
-
def is_read_only(self) -> pulumi.Output[Optional[bool]]:
|
|
1959
|
+
def is_read_only(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1959
1960
|
"""
|
|
1960
1961
|
Read only or not.
|
|
1961
1962
|
"""
|
|
@@ -1963,7 +1964,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1963
1964
|
|
|
1964
1965
|
@property
|
|
1965
1966
|
@pulumi.getter(name="k8sAuthEndpoint")
|
|
1966
|
-
def k8s_auth_endpoint(self) -> pulumi.Output[Optional[str]]:
|
|
1967
|
+
def k8s_auth_endpoint(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1967
1968
|
"""
|
|
1968
1969
|
The path where Kubernetes Auth is enabled in Vault.
|
|
1969
1970
|
"""
|
|
@@ -1971,7 +1972,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1971
1972
|
|
|
1972
1973
|
@property
|
|
1973
1974
|
@pulumi.getter
|
|
1974
|
-
def name(self) -> pulumi.Output[str]:
|
|
1975
|
+
def name(self) -> pulumi.Output[builtins.str]:
|
|
1975
1976
|
"""
|
|
1976
1977
|
Name of the resource.
|
|
1977
1978
|
"""
|
|
@@ -1979,7 +1980,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1979
1980
|
|
|
1980
1981
|
@property
|
|
1981
1982
|
@pulumi.getter
|
|
1982
|
-
def namespace(self) -> pulumi.Output[Optional[str]]:
|
|
1983
|
+
def namespace(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1983
1984
|
"""
|
|
1984
1985
|
Vault namespace where the Secret will be created.
|
|
1985
1986
|
"""
|
|
@@ -1987,7 +1988,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1987
1988
|
|
|
1988
1989
|
@property
|
|
1989
1990
|
@pulumi.getter(name="orgId")
|
|
1990
|
-
def org_id(self) -> pulumi.Output[Optional[str]]:
|
|
1991
|
+
def org_id(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1991
1992
|
"""
|
|
1992
1993
|
Unique identifier of the organization.
|
|
1993
1994
|
"""
|
|
@@ -1995,7 +1996,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
1995
1996
|
|
|
1996
1997
|
@property
|
|
1997
1998
|
@pulumi.getter(name="projectId")
|
|
1998
|
-
def project_id(self) -> pulumi.Output[Optional[str]]:
|
|
1999
|
+
def project_id(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1999
2000
|
"""
|
|
2000
2001
|
Unique identifier of the project.
|
|
2001
2002
|
"""
|
|
@@ -2003,7 +2004,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2003
2004
|
|
|
2004
2005
|
@property
|
|
2005
2006
|
@pulumi.getter(name="readOnly")
|
|
2006
|
-
def read_only(self) -> pulumi.Output[Optional[bool]]:
|
|
2007
|
+
def read_only(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
2007
2008
|
"""
|
|
2008
2009
|
Read only.
|
|
2009
2010
|
"""
|
|
@@ -2011,7 +2012,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2011
2012
|
|
|
2012
2013
|
@property
|
|
2013
2014
|
@pulumi.getter(name="renewAppRoleToken")
|
|
2014
|
-
def renew_app_role_token(self) -> pulumi.Output[bool]:
|
|
2015
|
+
def renew_app_role_token(self) -> pulumi.Output[builtins.bool]:
|
|
2015
2016
|
"""
|
|
2016
2017
|
Boolean value to indicate if AppRole token renewal is enabled or not.
|
|
2017
2018
|
"""
|
|
@@ -2019,7 +2020,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2019
2020
|
|
|
2020
2021
|
@property
|
|
2021
2022
|
@pulumi.getter(name="renewalIntervalMinutes")
|
|
2022
|
-
def renewal_interval_minutes(self) -> pulumi.Output[int]:
|
|
2023
|
+
def renewal_interval_minutes(self) -> pulumi.Output[builtins.int]:
|
|
2023
2024
|
"""
|
|
2024
2025
|
The time interval for the token renewal.
|
|
2025
2026
|
"""
|
|
@@ -2027,7 +2028,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2027
2028
|
|
|
2028
2029
|
@property
|
|
2029
2030
|
@pulumi.getter(name="secretEngineManuallyConfigured")
|
|
2030
|
-
def secret_engine_manually_configured(self) -> pulumi.Output[Optional[bool]]:
|
|
2031
|
+
def secret_engine_manually_configured(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
2031
2032
|
"""
|
|
2032
2033
|
Manually entered Secret Engine.
|
|
2033
2034
|
"""
|
|
@@ -2035,7 +2036,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2035
2036
|
|
|
2036
2037
|
@property
|
|
2037
2038
|
@pulumi.getter(name="secretEngineName")
|
|
2038
|
-
def secret_engine_name(self) -> pulumi.Output[Optional[str]]:
|
|
2039
|
+
def secret_engine_name(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
2039
2040
|
"""
|
|
2040
2041
|
Name of the Secret Engine.
|
|
2041
2042
|
"""
|
|
@@ -2043,7 +2044,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2043
2044
|
|
|
2044
2045
|
@property
|
|
2045
2046
|
@pulumi.getter(name="secretEngineVersion")
|
|
2046
|
-
def secret_engine_version(self) -> pulumi.Output[Optional[int]]:
|
|
2047
|
+
def secret_engine_version(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
2047
2048
|
"""
|
|
2048
2049
|
Version of Secret Engine.
|
|
2049
2050
|
"""
|
|
@@ -2051,7 +2052,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2051
2052
|
|
|
2052
2053
|
@property
|
|
2053
2054
|
@pulumi.getter(name="secretId")
|
|
2054
|
-
def secret_id(self) -> pulumi.Output[Optional[str]]:
|
|
2055
|
+
def secret_id(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
2055
2056
|
"""
|
|
2056
2057
|
ID of the Secret.
|
|
2057
2058
|
"""
|
|
@@ -2059,7 +2060,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2059
2060
|
|
|
2060
2061
|
@property
|
|
2061
2062
|
@pulumi.getter(name="serviceAccountTokenPath")
|
|
2062
|
-
def service_account_token_path(self) -> pulumi.Output[Optional[str]]:
|
|
2063
|
+
def service_account_token_path(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
2063
2064
|
"""
|
|
2064
2065
|
The Service Account token path in the K8s pod where the token is mounted.
|
|
2065
2066
|
"""
|
|
@@ -2067,7 +2068,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2067
2068
|
|
|
2068
2069
|
@property
|
|
2069
2070
|
@pulumi.getter(name="sinkPath")
|
|
2070
|
-
def sink_path(self) -> pulumi.Output[Optional[str]]:
|
|
2071
|
+
def sink_path(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
2071
2072
|
"""
|
|
2072
2073
|
The location from which the authentication token should be read.
|
|
2073
2074
|
"""
|
|
@@ -2075,7 +2076,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2075
2076
|
|
|
2076
2077
|
@property
|
|
2077
2078
|
@pulumi.getter
|
|
2078
|
-
def tags(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
2079
|
+
def tags(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
2079
2080
|
"""
|
|
2080
2081
|
Tags to associate with the resource.
|
|
2081
2082
|
"""
|
|
@@ -2083,7 +2084,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2083
2084
|
|
|
2084
2085
|
@property
|
|
2085
2086
|
@pulumi.getter(name="useAwsIam")
|
|
2086
|
-
def use_aws_iam(self) -> pulumi.Output[Optional[bool]]:
|
|
2087
|
+
def use_aws_iam(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
2087
2088
|
"""
|
|
2088
2089
|
Boolean value to indicate if AWS IAM is used for authentication.
|
|
2089
2090
|
"""
|
|
@@ -2091,7 +2092,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2091
2092
|
|
|
2092
2093
|
@property
|
|
2093
2094
|
@pulumi.getter(name="useJwtAuth")
|
|
2094
|
-
def use_jwt_auth(self) -> pulumi.Output[Optional[bool]]:
|
|
2095
|
+
def use_jwt_auth(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
2095
2096
|
"""
|
|
2096
2097
|
Boolean value to indicate if JWT is used for authentication.
|
|
2097
2098
|
"""
|
|
@@ -2099,7 +2100,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2099
2100
|
|
|
2100
2101
|
@property
|
|
2101
2102
|
@pulumi.getter(name="useK8sAuth")
|
|
2102
|
-
def use_k8s_auth(self) -> pulumi.Output[Optional[bool]]:
|
|
2103
|
+
def use_k8s_auth(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
2103
2104
|
"""
|
|
2104
2105
|
Boolean value to indicate if K8s Auth is used for authentication.
|
|
2105
2106
|
"""
|
|
@@ -2107,7 +2108,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2107
2108
|
|
|
2108
2109
|
@property
|
|
2109
2110
|
@pulumi.getter(name="useVaultAgent")
|
|
2110
|
-
def use_vault_agent(self) -> pulumi.Output[Optional[bool]]:
|
|
2111
|
+
def use_vault_agent(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
2111
2112
|
"""
|
|
2112
2113
|
Boolean value to indicate if Vault Agent is used for authentication.
|
|
2113
2114
|
"""
|
|
@@ -2115,7 +2116,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2115
2116
|
|
|
2116
2117
|
@property
|
|
2117
2118
|
@pulumi.getter(name="vaultAwsIamRole")
|
|
2118
|
-
def vault_aws_iam_role(self) -> pulumi.Output[Optional[str]]:
|
|
2119
|
+
def vault_aws_iam_role(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
2119
2120
|
"""
|
|
2120
2121
|
The Vault role defined to bind to aws iam account/role being accessed.
|
|
2121
2122
|
"""
|
|
@@ -2123,7 +2124,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2123
2124
|
|
|
2124
2125
|
@property
|
|
2125
2126
|
@pulumi.getter(name="vaultJwtAuthPath")
|
|
2126
|
-
def vault_jwt_auth_path(self) -> pulumi.Output[Optional[str]]:
|
|
2127
|
+
def vault_jwt_auth_path(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
2127
2128
|
"""
|
|
2128
2129
|
Custom path at with JWT auth in enabled for Vault.
|
|
2129
2130
|
"""
|
|
@@ -2131,7 +2132,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2131
2132
|
|
|
2132
2133
|
@property
|
|
2133
2134
|
@pulumi.getter(name="vaultJwtAuthRole")
|
|
2134
|
-
def vault_jwt_auth_role(self) -> pulumi.Output[Optional[str]]:
|
|
2135
|
+
def vault_jwt_auth_role(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
2135
2136
|
"""
|
|
2136
2137
|
The Vault role defined with JWT auth type for accessing Vault as per policies binded.
|
|
2137
2138
|
"""
|
|
@@ -2139,7 +2140,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2139
2140
|
|
|
2140
2141
|
@property
|
|
2141
2142
|
@pulumi.getter(name="vaultK8sAuthRole")
|
|
2142
|
-
def vault_k8s_auth_role(self) -> pulumi.Output[Optional[str]]:
|
|
2143
|
+
def vault_k8s_auth_role(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
2143
2144
|
"""
|
|
2144
2145
|
The role where K8s Auth will happen.
|
|
2145
2146
|
"""
|
|
@@ -2147,7 +2148,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2147
2148
|
|
|
2148
2149
|
@property
|
|
2149
2150
|
@pulumi.getter(name="vaultUrl")
|
|
2150
|
-
def vault_url(self) -> pulumi.Output[str]:
|
|
2151
|
+
def vault_url(self) -> pulumi.Output[builtins.str]:
|
|
2151
2152
|
"""
|
|
2152
2153
|
URL of the HashiCorp Vault.
|
|
2153
2154
|
"""
|
|
@@ -2155,7 +2156,7 @@ class VaultConnector(pulumi.CustomResource):
|
|
|
2155
2156
|
|
|
2156
2157
|
@property
|
|
2157
2158
|
@pulumi.getter(name="xvaultAwsIamServerId")
|
|
2158
|
-
def xvault_aws_iam_server_id(self) -> pulumi.Output[Optional[str]]:
|
|
2159
|
+
def xvault_aws_iam_server_id(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
2159
2160
|
"""
|
|
2160
2161
|
The AWS IAM Header Server ID that has been configured for this AWS IAM instance.
|
|
2161
2162
|
"""
|