pulumi-tls 5.0.4__py3-none-any.whl → 5.0.5__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_tls/_utilities.py +5 -4
- pulumi_tls/cert_request.py +24 -24
- pulumi_tls/get_public_key.py +2 -2
- pulumi_tls/locally_signed_cert.py +4 -4
- pulumi_tls/outputs.py +2 -2
- pulumi_tls/private_key.py +8 -8
- pulumi_tls/provider.py +3 -3
- pulumi_tls/pulumi-plugin.json +1 -1
- pulumi_tls/self_signed_cert.py +16 -16
- {pulumi_tls-5.0.4.dist-info → pulumi_tls-5.0.5.dist-info}/METADATA +1 -1
- pulumi_tls-5.0.5.dist-info/RECORD +21 -0
- {pulumi_tls-5.0.4.dist-info → pulumi_tls-5.0.5.dist-info}/WHEEL +1 -1
- pulumi_tls-5.0.4.dist-info/RECORD +0 -21
- {pulumi_tls-5.0.4.dist-info → pulumi_tls-5.0.5.dist-info}/top_level.txt +0 -0
pulumi_tls/_utilities.py
CHANGED
@@ -13,10 +13,12 @@ import os
|
|
13
13
|
import sys
|
14
14
|
import typing
|
15
15
|
import warnings
|
16
|
+
import base64
|
16
17
|
|
17
18
|
import pulumi
|
18
19
|
import pulumi.runtime
|
19
20
|
from pulumi.runtime.sync_await import _sync_await
|
21
|
+
from pulumi.runtime.proto import resource_pb2
|
20
22
|
|
21
23
|
from semver import VersionInfo as SemverVersion
|
22
24
|
from parver import Version as PEP440Version
|
@@ -100,10 +102,6 @@ def _get_semver_version():
|
|
100
102
|
_version = _get_semver_version()
|
101
103
|
_version_str = str(_version)
|
102
104
|
|
103
|
-
|
104
|
-
def get_version():
|
105
|
-
return _version_str
|
106
|
-
|
107
105
|
def get_resource_opts_defaults() -> pulumi.ResourceOptions:
|
108
106
|
return pulumi.ResourceOptions(
|
109
107
|
version=get_version(),
|
@@ -324,3 +322,6 @@ def deprecated(message: str) -> typing.Callable[[C], C]:
|
|
324
322
|
|
325
323
|
def get_plugin_download_url():
|
326
324
|
return None
|
325
|
+
|
326
|
+
def get_version():
|
327
|
+
return _version_str
|
pulumi_tls/cert_request.py
CHANGED
@@ -23,7 +23,7 @@ class CertRequestArgs:
|
|
23
23
|
uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
24
24
|
"""
|
25
25
|
The set of arguments for constructing a CertRequest resource.
|
26
|
-
:param pulumi.Input[str] private_key_pem: Private key in PEM (RFC 1421) interpolation function.
|
26
|
+
:param pulumi.Input[str] private_key_pem: Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
27
27
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] dns_names: List of DNS names for which a certificate is being requested (i.e. certificate subjects).
|
28
28
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_addresses: List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
|
29
29
|
:param pulumi.Input['CertRequestSubjectArgs'] subject: The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
@@ -43,7 +43,7 @@ class CertRequestArgs:
|
|
43
43
|
@pulumi.getter(name="privateKeyPem")
|
44
44
|
def private_key_pem(self) -> pulumi.Input[str]:
|
45
45
|
"""
|
46
|
-
Private key in PEM (RFC 1421) interpolation function.
|
46
|
+
Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
47
47
|
"""
|
48
48
|
return pulumi.get(self, "private_key_pem")
|
49
49
|
|
@@ -112,11 +112,11 @@ class _CertRequestState:
|
|
112
112
|
uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
113
113
|
"""
|
114
114
|
Input properties used for looking up and filtering CertRequest resources.
|
115
|
-
:param pulumi.Input[str] cert_request_pem: The certificate request data in PEM (RFC 1421).
|
115
|
+
:param pulumi.Input[str] cert_request_pem: The certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
116
116
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] dns_names: List of DNS names for which a certificate is being requested (i.e. certificate subjects).
|
117
117
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_addresses: List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
|
118
118
|
:param pulumi.Input[str] key_algorithm: Name of the algorithm used when generating the private key provided in `private_key_pem`.
|
119
|
-
:param pulumi.Input[str] private_key_pem: Private key in PEM (RFC 1421) interpolation function.
|
119
|
+
:param pulumi.Input[str] private_key_pem: Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
120
120
|
:param pulumi.Input['CertRequestSubjectArgs'] subject: The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
121
121
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] uris: List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
122
122
|
"""
|
@@ -139,7 +139,7 @@ class _CertRequestState:
|
|
139
139
|
@pulumi.getter(name="certRequestPem")
|
140
140
|
def cert_request_pem(self) -> Optional[pulumi.Input[str]]:
|
141
141
|
"""
|
142
|
-
The certificate request data in PEM (RFC 1421).
|
142
|
+
The certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
143
143
|
"""
|
144
144
|
return pulumi.get(self, "cert_request_pem")
|
145
145
|
|
@@ -187,7 +187,7 @@ class _CertRequestState:
|
|
187
187
|
@pulumi.getter(name="privateKeyPem")
|
188
188
|
def private_key_pem(self) -> Optional[pulumi.Input[str]]:
|
189
189
|
"""
|
190
|
-
Private key in PEM (RFC 1421) interpolation function.
|
190
|
+
Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
191
191
|
"""
|
192
192
|
return pulumi.get(self, "private_key_pem")
|
193
193
|
|
@@ -228,7 +228,7 @@ class CertRequest(pulumi.CustomResource):
|
|
228
228
|
dns_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
229
229
|
ip_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
230
230
|
private_key_pem: Optional[pulumi.Input[str]] = None,
|
231
|
-
subject: Optional[pulumi.Input[
|
231
|
+
subject: Optional[pulumi.Input[Union['CertRequestSubjectArgs', 'CertRequestSubjectArgsDict']]] = None,
|
232
232
|
uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
233
233
|
__props__=None):
|
234
234
|
"""
|
@@ -241,18 +241,18 @@ class CertRequest(pulumi.CustomResource):
|
|
241
241
|
|
242
242
|
example = tls.CertRequest("example",
|
243
243
|
private_key_pem=std.file(input="private_key.pem").result,
|
244
|
-
subject=
|
245
|
-
common_name
|
246
|
-
organization
|
247
|
-
)
|
244
|
+
subject={
|
245
|
+
"common_name": "example.com",
|
246
|
+
"organization": "ACME Examples, Inc",
|
247
|
+
})
|
248
248
|
```
|
249
249
|
|
250
250
|
:param str resource_name: The name of the resource.
|
251
251
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
252
252
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] dns_names: List of DNS names for which a certificate is being requested (i.e. certificate subjects).
|
253
253
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_addresses: List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
|
254
|
-
:param pulumi.Input[str] private_key_pem: Private key in PEM (RFC 1421) interpolation function.
|
255
|
-
:param pulumi.Input[
|
254
|
+
:param pulumi.Input[str] private_key_pem: Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
255
|
+
:param pulumi.Input[Union['CertRequestSubjectArgs', 'CertRequestSubjectArgsDict']] subject: The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
256
256
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] uris: List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
257
257
|
"""
|
258
258
|
...
|
@@ -271,10 +271,10 @@ class CertRequest(pulumi.CustomResource):
|
|
271
271
|
|
272
272
|
example = tls.CertRequest("example",
|
273
273
|
private_key_pem=std.file(input="private_key.pem").result,
|
274
|
-
subject=
|
275
|
-
common_name
|
276
|
-
organization
|
277
|
-
)
|
274
|
+
subject={
|
275
|
+
"common_name": "example.com",
|
276
|
+
"organization": "ACME Examples, Inc",
|
277
|
+
})
|
278
278
|
```
|
279
279
|
|
280
280
|
:param str resource_name: The name of the resource.
|
@@ -295,7 +295,7 @@ class CertRequest(pulumi.CustomResource):
|
|
295
295
|
dns_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
296
296
|
ip_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
297
297
|
private_key_pem: Optional[pulumi.Input[str]] = None,
|
298
|
-
subject: Optional[pulumi.Input[
|
298
|
+
subject: Optional[pulumi.Input[Union['CertRequestSubjectArgs', 'CertRequestSubjectArgsDict']]] = None,
|
299
299
|
uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
300
300
|
__props__=None):
|
301
301
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
@@ -332,7 +332,7 @@ class CertRequest(pulumi.CustomResource):
|
|
332
332
|
ip_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
333
333
|
key_algorithm: Optional[pulumi.Input[str]] = None,
|
334
334
|
private_key_pem: Optional[pulumi.Input[str]] = None,
|
335
|
-
subject: Optional[pulumi.Input[
|
335
|
+
subject: Optional[pulumi.Input[Union['CertRequestSubjectArgs', 'CertRequestSubjectArgsDict']]] = None,
|
336
336
|
uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None) -> 'CertRequest':
|
337
337
|
"""
|
338
338
|
Get an existing CertRequest resource's state with the given name, id, and optional extra
|
@@ -341,12 +341,12 @@ class CertRequest(pulumi.CustomResource):
|
|
341
341
|
:param str resource_name: The unique name of the resulting resource.
|
342
342
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
343
343
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
344
|
-
:param pulumi.Input[str] cert_request_pem: The certificate request data in PEM (RFC 1421).
|
344
|
+
:param pulumi.Input[str] cert_request_pem: The certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
345
345
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] dns_names: List of DNS names for which a certificate is being requested (i.e. certificate subjects).
|
346
346
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_addresses: List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
|
347
347
|
:param pulumi.Input[str] key_algorithm: Name of the algorithm used when generating the private key provided in `private_key_pem`.
|
348
|
-
:param pulumi.Input[str] private_key_pem: Private key in PEM (RFC 1421) interpolation function.
|
349
|
-
:param pulumi.Input[
|
348
|
+
:param pulumi.Input[str] private_key_pem: Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
349
|
+
:param pulumi.Input[Union['CertRequestSubjectArgs', 'CertRequestSubjectArgsDict']] subject: The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
350
350
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] uris: List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
351
351
|
"""
|
352
352
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
@@ -366,7 +366,7 @@ class CertRequest(pulumi.CustomResource):
|
|
366
366
|
@pulumi.getter(name="certRequestPem")
|
367
367
|
def cert_request_pem(self) -> pulumi.Output[str]:
|
368
368
|
"""
|
369
|
-
The certificate request data in PEM (RFC 1421).
|
369
|
+
The certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
370
370
|
"""
|
371
371
|
return pulumi.get(self, "cert_request_pem")
|
372
372
|
|
@@ -398,7 +398,7 @@ class CertRequest(pulumi.CustomResource):
|
|
398
398
|
@pulumi.getter(name="privateKeyPem")
|
399
399
|
def private_key_pem(self) -> pulumi.Output[str]:
|
400
400
|
"""
|
401
|
-
Private key in PEM (RFC 1421) interpolation function.
|
401
|
+
Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
402
402
|
"""
|
403
403
|
return pulumi.get(self, "private_key_pem")
|
404
404
|
|
pulumi_tls/get_public_key.py
CHANGED
@@ -99,7 +99,7 @@ class GetPublicKeyResult:
|
|
99
99
|
@pulumi.getter(name="publicKeyOpenssh")
|
100
100
|
def public_key_openssh(self) -> str:
|
101
101
|
"""
|
102
|
-
The public key, in OpenSSH PEM (RFC 4716).
|
102
|
+
The public key, in [OpenSSH PEM (RFC 4716)](https://datatracker.ietf.org/doc/html/rfc4716) format. This is also known as ['Authorized Keys'](https://www.ssh.com/academy/ssh/authorized_keys/openssh#format-of-the-authorized-keys-file) format. This is not populated for `ECDSA` with curve `P224`, as it is not supported. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
103
103
|
"""
|
104
104
|
return pulumi.get(self, "public_key_openssh")
|
105
105
|
|
@@ -107,7 +107,7 @@ class GetPublicKeyResult:
|
|
107
107
|
@pulumi.getter(name="publicKeyPem")
|
108
108
|
def public_key_pem(self) -> str:
|
109
109
|
"""
|
110
|
-
The public key, in PEM (RFC 1421).
|
110
|
+
The public key, in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
111
111
|
"""
|
112
112
|
return pulumi.get(self, "public_key_pem")
|
113
113
|
|
@@ -160,7 +160,7 @@ class _LocallySignedCertState:
|
|
160
160
|
:param pulumi.Input[str] ca_cert_pem: Certificate data of the Certificate Authority (CA) in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
161
161
|
:param pulumi.Input[str] ca_key_algorithm: Name of the algorithm used when generating the private key provided in `ca_private_key_pem`.
|
162
162
|
:param pulumi.Input[str] ca_private_key_pem: Private key of the Certificate Authority (CA) used to sign the certificate, in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
163
|
-
:param pulumi.Input[str] cert_pem: Certificate data in PEM (RFC 1421).
|
163
|
+
:param pulumi.Input[str] cert_pem: Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
164
164
|
:param pulumi.Input[str] cert_request_pem: Certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
165
165
|
:param pulumi.Input[bool] is_ca_certificate: Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
|
166
166
|
:param pulumi.Input[bool] ready_for_renewal: Is the certificate either expired (i.e. beyond the `validity_period_hours`) or ready for an early renewal (i.e. within the `early_renewal_hours`)?
|
@@ -248,7 +248,7 @@ class _LocallySignedCertState:
|
|
248
248
|
@pulumi.getter(name="certPem")
|
249
249
|
def cert_pem(self) -> Optional[pulumi.Input[str]]:
|
250
250
|
"""
|
251
|
-
Certificate data in PEM (RFC 1421).
|
251
|
+
Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
252
252
|
"""
|
253
253
|
return pulumi.get(self, "cert_pem")
|
254
254
|
|
@@ -475,7 +475,7 @@ class LocallySignedCert(pulumi.CustomResource):
|
|
475
475
|
:param pulumi.Input[str] ca_cert_pem: Certificate data of the Certificate Authority (CA) in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
476
476
|
:param pulumi.Input[str] ca_key_algorithm: Name of the algorithm used when generating the private key provided in `ca_private_key_pem`.
|
477
477
|
:param pulumi.Input[str] ca_private_key_pem: Private key of the Certificate Authority (CA) used to sign the certificate, in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
478
|
-
:param pulumi.Input[str] cert_pem: Certificate data in PEM (RFC 1421).
|
478
|
+
:param pulumi.Input[str] cert_pem: Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
479
479
|
:param pulumi.Input[str] cert_request_pem: Certificate request data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format.
|
480
480
|
:param pulumi.Input[bool] is_ca_certificate: Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
|
481
481
|
:param pulumi.Input[bool] ready_for_renewal: Is the certificate either expired (i.e. beyond the `validity_period_hours`) or ready for an early renewal (i.e. within the `early_renewal_hours`)?
|
@@ -539,7 +539,7 @@ class LocallySignedCert(pulumi.CustomResource):
|
|
539
539
|
@pulumi.getter(name="certPem")
|
540
540
|
def cert_pem(self) -> pulumi.Output[str]:
|
541
541
|
"""
|
542
|
-
Certificate data in PEM (RFC 1421).
|
542
|
+
Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
543
543
|
"""
|
544
544
|
return pulumi.get(self, "cert_pem")
|
545
545
|
|
pulumi_tls/outputs.py
CHANGED
@@ -310,7 +310,7 @@ class GetCertificateCertificateResult(dict):
|
|
310
310
|
subject: str,
|
311
311
|
version: int):
|
312
312
|
"""
|
313
|
-
:param str cert_pem: Certificate data in PEM (RFC 1421).
|
313
|
+
:param str cert_pem: Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
314
314
|
:param bool is_ca: `true` if the certificate is of a CA (Certificate Authority).
|
315
315
|
:param str issuer: Who verified and signed the certificate, roughly following [RFC2253](https://tools.ietf.org/html/rfc2253).
|
316
316
|
:param str not_after: The time until which the certificate is invalid, as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
|
@@ -339,7 +339,7 @@ class GetCertificateCertificateResult(dict):
|
|
339
339
|
@pulumi.getter(name="certPem")
|
340
340
|
def cert_pem(self) -> str:
|
341
341
|
"""
|
342
|
-
Certificate data in PEM (RFC 1421).
|
342
|
+
Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
343
343
|
"""
|
344
344
|
return pulumi.get(self, "cert_pem")
|
345
345
|
|
pulumi_tls/private_key.py
CHANGED
@@ -88,8 +88,8 @@ class _PrivateKeyState:
|
|
88
88
|
:param pulumi.Input[str] private_key_pem_pkcs8: Private key data in [PKCS#8 PEM (RFC 5208)](https://datatracker.ietf.org/doc/html/rfc5208) format.
|
89
89
|
:param pulumi.Input[str] public_key_fingerprint_md5: The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:...`. Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations.
|
90
90
|
:param pulumi.Input[str] public_key_fingerprint_sha256: The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:...`. Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations.
|
91
|
-
:param pulumi.Input[str] public_key_openssh: The public key data in "Authorized Keys".
|
92
|
-
:param pulumi.Input[str] public_key_pem: Public key data in PEM (RFC 1421).
|
91
|
+
:param pulumi.Input[str] public_key_openssh: The public key data in ["Authorized Keys"](https://www.ssh.com/academy/ssh/authorized_keys/openssh#format-of-the-authorized-keys-file) format. This is not populated for `ECDSA` with curve `P224`, as it is not supported. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
92
|
+
:param pulumi.Input[str] public_key_pem: Public key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
93
93
|
:param pulumi.Input[int] rsa_bits: When `algorithm` is `RSA`, the size of the generated RSA key, in bits (default: `2048`).
|
94
94
|
"""
|
95
95
|
if algorithm is not None:
|
@@ -201,7 +201,7 @@ class _PrivateKeyState:
|
|
201
201
|
@pulumi.getter(name="publicKeyOpenssh")
|
202
202
|
def public_key_openssh(self) -> Optional[pulumi.Input[str]]:
|
203
203
|
"""
|
204
|
-
The public key data in "Authorized Keys".
|
204
|
+
The public key data in ["Authorized Keys"](https://www.ssh.com/academy/ssh/authorized_keys/openssh#format-of-the-authorized-keys-file) format. This is not populated for `ECDSA` with curve `P224`, as it is not supported. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
205
205
|
"""
|
206
206
|
return pulumi.get(self, "public_key_openssh")
|
207
207
|
|
@@ -213,7 +213,7 @@ class _PrivateKeyState:
|
|
213
213
|
@pulumi.getter(name="publicKeyPem")
|
214
214
|
def public_key_pem(self) -> Optional[pulumi.Input[str]]:
|
215
215
|
"""
|
216
|
-
Public key data in PEM (RFC 1421).
|
216
|
+
Public key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
217
217
|
"""
|
218
218
|
return pulumi.get(self, "public_key_pem")
|
219
219
|
|
@@ -334,8 +334,8 @@ class PrivateKey(pulumi.CustomResource):
|
|
334
334
|
:param pulumi.Input[str] private_key_pem_pkcs8: Private key data in [PKCS#8 PEM (RFC 5208)](https://datatracker.ietf.org/doc/html/rfc5208) format.
|
335
335
|
:param pulumi.Input[str] public_key_fingerprint_md5: The fingerprint of the public key data in OpenSSH MD5 hash format, e.g. `aa:bb:cc:...`. Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations.
|
336
336
|
:param pulumi.Input[str] public_key_fingerprint_sha256: The fingerprint of the public key data in OpenSSH SHA256 hash format, e.g. `SHA256:...`. Only available if the selected private key format is compatible, similarly to `public_key_openssh` and the ECDSA P224 limitations.
|
337
|
-
:param pulumi.Input[str] public_key_openssh: The public key data in "Authorized Keys".
|
338
|
-
:param pulumi.Input[str] public_key_pem: Public key data in PEM (RFC 1421).
|
337
|
+
:param pulumi.Input[str] public_key_openssh: The public key data in ["Authorized Keys"](https://www.ssh.com/academy/ssh/authorized_keys/openssh#format-of-the-authorized-keys-file) format. This is not populated for `ECDSA` with curve `P224`, as it is not supported. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
338
|
+
:param pulumi.Input[str] public_key_pem: Public key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
339
339
|
:param pulumi.Input[int] rsa_bits: When `algorithm` is `RSA`, the size of the generated RSA key, in bits (default: `2048`).
|
340
340
|
"""
|
341
341
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
@@ -414,7 +414,7 @@ class PrivateKey(pulumi.CustomResource):
|
|
414
414
|
@pulumi.getter(name="publicKeyOpenssh")
|
415
415
|
def public_key_openssh(self) -> pulumi.Output[str]:
|
416
416
|
"""
|
417
|
-
The public key data in "Authorized Keys".
|
417
|
+
The public key data in ["Authorized Keys"](https://www.ssh.com/academy/ssh/authorized_keys/openssh#format-of-the-authorized-keys-file) format. This is not populated for `ECDSA` with curve `P224`, as it is not supported. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
418
418
|
"""
|
419
419
|
return pulumi.get(self, "public_key_openssh")
|
420
420
|
|
@@ -422,7 +422,7 @@ class PrivateKey(pulumi.CustomResource):
|
|
422
422
|
@pulumi.getter(name="publicKeyPem")
|
423
423
|
def public_key_pem(self) -> pulumi.Output[str]:
|
424
424
|
"""
|
425
|
-
Public key data in PEM (RFC 1421).
|
425
|
+
Public key data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
426
426
|
"""
|
427
427
|
return pulumi.get(self, "public_key_pem")
|
428
428
|
|
pulumi_tls/provider.py
CHANGED
@@ -41,7 +41,7 @@ class Provider(pulumi.ProviderResource):
|
|
41
41
|
def __init__(__self__,
|
42
42
|
resource_name: str,
|
43
43
|
opts: Optional[pulumi.ResourceOptions] = None,
|
44
|
-
proxy: Optional[pulumi.Input[
|
44
|
+
proxy: Optional[pulumi.Input[Union['ProviderProxyArgs', 'ProviderProxyArgsDict']]] = None,
|
45
45
|
__props__=None):
|
46
46
|
"""
|
47
47
|
The provider type for the tls package. By default, resources use package-wide configuration
|
@@ -51,7 +51,7 @@ class Provider(pulumi.ProviderResource):
|
|
51
51
|
|
52
52
|
:param str resource_name: The name of the resource.
|
53
53
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
54
|
-
:param pulumi.Input[
|
54
|
+
:param pulumi.Input[Union['ProviderProxyArgs', 'ProviderProxyArgsDict']] proxy: Proxy used by resources and data sources that connect to external endpoints.
|
55
55
|
"""
|
56
56
|
...
|
57
57
|
@overload
|
@@ -80,7 +80,7 @@ class Provider(pulumi.ProviderResource):
|
|
80
80
|
def _internal_init(__self__,
|
81
81
|
resource_name: str,
|
82
82
|
opts: Optional[pulumi.ResourceOptions] = None,
|
83
|
-
proxy: Optional[pulumi.Input[
|
83
|
+
proxy: Optional[pulumi.Input[Union['ProviderProxyArgs', 'ProviderProxyArgsDict']]] = None,
|
84
84
|
__props__=None):
|
85
85
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
86
86
|
if not isinstance(opts, pulumi.ResourceOptions):
|
pulumi_tls/pulumi-plugin.json
CHANGED
pulumi_tls/self_signed_cert.py
CHANGED
@@ -30,7 +30,7 @@ class SelfSignedCertArgs:
|
|
30
30
|
"""
|
31
31
|
The set of arguments for constructing a SelfSignedCert resource.
|
32
32
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_uses: List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `any_extended`, `cert_signing`, `client_auth`, `code_signing`, `content_commitment`, `crl_signing`, `data_encipherment`, `decipher_only`, `digital_signature`, `email_protection`, `encipher_only`, `ipsec_end_system`, `ipsec_tunnel`, `ipsec_user`, `key_agreement`, `key_encipherment`, `microsoft_commercial_code_signing`, `microsoft_kernel_code_signing`, `microsoft_server_gated_crypto`, `netscape_server_gated_crypto`, `ocsp_signing`, `server_auth`, `timestamping`.
|
33
|
-
:param pulumi.Input[str] private_key_pem: Private key in PEM (RFC 1421) interpolation function.
|
33
|
+
:param pulumi.Input[str] private_key_pem: Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
34
34
|
:param pulumi.Input[int] validity_period_hours: Number of hours, after initial issuing, that the certificate will remain valid for.
|
35
35
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] dns_names: List of DNS names for which a certificate is being requested (i.e. certificate subjects).
|
36
36
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_addresses: List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
|
@@ -76,7 +76,7 @@ class SelfSignedCertArgs:
|
|
76
76
|
@pulumi.getter(name="privateKeyPem")
|
77
77
|
def private_key_pem(self) -> pulumi.Input[str]:
|
78
78
|
"""
|
79
|
-
Private key in PEM (RFC 1421) interpolation function.
|
79
|
+
Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
80
80
|
"""
|
81
81
|
return pulumi.get(self, "private_key_pem")
|
82
82
|
|
@@ -212,12 +212,12 @@ class _SelfSignedCertState:
|
|
212
212
|
"""
|
213
213
|
Input properties used for looking up and filtering SelfSignedCert resources.
|
214
214
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_uses: List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `any_extended`, `cert_signing`, `client_auth`, `code_signing`, `content_commitment`, `crl_signing`, `data_encipherment`, `decipher_only`, `digital_signature`, `email_protection`, `encipher_only`, `ipsec_end_system`, `ipsec_tunnel`, `ipsec_user`, `key_agreement`, `key_encipherment`, `microsoft_commercial_code_signing`, `microsoft_kernel_code_signing`, `microsoft_server_gated_crypto`, `netscape_server_gated_crypto`, `ocsp_signing`, `server_auth`, `timestamping`.
|
215
|
-
:param pulumi.Input[str] cert_pem: Certificate data in PEM (RFC 1421).
|
215
|
+
:param pulumi.Input[str] cert_pem: Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
216
216
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] dns_names: List of DNS names for which a certificate is being requested (i.e. certificate subjects).
|
217
217
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_addresses: List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
|
218
218
|
:param pulumi.Input[bool] is_ca_certificate: Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
|
219
219
|
:param pulumi.Input[str] key_algorithm: Name of the algorithm used when generating the private key provided in `private_key_pem`.
|
220
|
-
:param pulumi.Input[str] private_key_pem: Private key in PEM (RFC 1421) interpolation function.
|
220
|
+
:param pulumi.Input[str] private_key_pem: Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
221
221
|
:param pulumi.Input[bool] ready_for_renewal: Is the certificate either expired (i.e. beyond the `validity_period_hours`) or ready for an early renewal (i.e. within the `early_renewal_hours`)?
|
222
222
|
:param pulumi.Input[bool] set_authority_key_id: Should the generated certificate include an [authority key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
|
223
223
|
:param pulumi.Input[bool] set_subject_key_id: Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
|
@@ -276,7 +276,7 @@ class _SelfSignedCertState:
|
|
276
276
|
@pulumi.getter(name="certPem")
|
277
277
|
def cert_pem(self) -> Optional[pulumi.Input[str]]:
|
278
278
|
"""
|
279
|
-
Certificate data in PEM (RFC 1421).
|
279
|
+
Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
280
280
|
"""
|
281
281
|
return pulumi.get(self, "cert_pem")
|
282
282
|
|
@@ -345,7 +345,7 @@ class _SelfSignedCertState:
|
|
345
345
|
@pulumi.getter(name="privateKeyPem")
|
346
346
|
def private_key_pem(self) -> Optional[pulumi.Input[str]]:
|
347
347
|
"""
|
348
|
-
Private key in PEM (RFC 1421) interpolation function.
|
348
|
+
Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
349
349
|
"""
|
350
350
|
return pulumi.get(self, "private_key_pem")
|
351
351
|
|
@@ -463,7 +463,7 @@ class SelfSignedCert(pulumi.CustomResource):
|
|
463
463
|
private_key_pem: Optional[pulumi.Input[str]] = None,
|
464
464
|
set_authority_key_id: Optional[pulumi.Input[bool]] = None,
|
465
465
|
set_subject_key_id: Optional[pulumi.Input[bool]] = None,
|
466
|
-
subject: Optional[pulumi.Input[
|
466
|
+
subject: Optional[pulumi.Input[Union['SelfSignedCertSubjectArgs', 'SelfSignedCertSubjectArgsDict']]] = None,
|
467
467
|
uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
468
468
|
validity_period_hours: Optional[pulumi.Input[int]] = None,
|
469
469
|
__props__=None):
|
@@ -475,10 +475,10 @@ class SelfSignedCert(pulumi.CustomResource):
|
|
475
475
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] dns_names: List of DNS names for which a certificate is being requested (i.e. certificate subjects).
|
476
476
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_addresses: List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
|
477
477
|
:param pulumi.Input[bool] is_ca_certificate: Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
|
478
|
-
:param pulumi.Input[str] private_key_pem: Private key in PEM (RFC 1421) interpolation function.
|
478
|
+
:param pulumi.Input[str] private_key_pem: Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
479
479
|
:param pulumi.Input[bool] set_authority_key_id: Should the generated certificate include an [authority key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
|
480
480
|
:param pulumi.Input[bool] set_subject_key_id: Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
|
481
|
-
:param pulumi.Input[
|
481
|
+
:param pulumi.Input[Union['SelfSignedCertSubjectArgs', 'SelfSignedCertSubjectArgsDict']] subject: The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
482
482
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] uris: List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
483
483
|
:param pulumi.Input[int] validity_period_hours: Number of hours, after initial issuing, that the certificate will remain valid for.
|
484
484
|
"""
|
@@ -513,7 +513,7 @@ class SelfSignedCert(pulumi.CustomResource):
|
|
513
513
|
private_key_pem: Optional[pulumi.Input[str]] = None,
|
514
514
|
set_authority_key_id: Optional[pulumi.Input[bool]] = None,
|
515
515
|
set_subject_key_id: Optional[pulumi.Input[bool]] = None,
|
516
|
-
subject: Optional[pulumi.Input[
|
516
|
+
subject: Optional[pulumi.Input[Union['SelfSignedCertSubjectArgs', 'SelfSignedCertSubjectArgsDict']]] = None,
|
517
517
|
uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
518
518
|
validity_period_hours: Optional[pulumi.Input[int]] = None,
|
519
519
|
__props__=None):
|
@@ -570,7 +570,7 @@ class SelfSignedCert(pulumi.CustomResource):
|
|
570
570
|
ready_for_renewal: Optional[pulumi.Input[bool]] = None,
|
571
571
|
set_authority_key_id: Optional[pulumi.Input[bool]] = None,
|
572
572
|
set_subject_key_id: Optional[pulumi.Input[bool]] = None,
|
573
|
-
subject: Optional[pulumi.Input[
|
573
|
+
subject: Optional[pulumi.Input[Union['SelfSignedCertSubjectArgs', 'SelfSignedCertSubjectArgsDict']]] = None,
|
574
574
|
uris: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
575
575
|
validity_end_time: Optional[pulumi.Input[str]] = None,
|
576
576
|
validity_period_hours: Optional[pulumi.Input[int]] = None,
|
@@ -583,16 +583,16 @@ class SelfSignedCert(pulumi.CustomResource):
|
|
583
583
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
584
584
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
585
585
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_uses: List of key usages allowed for the issued certificate. Values are defined in [RFC 5280](https://datatracker.ietf.org/doc/html/rfc5280) and combine flags defined by both [Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.3) and [Extended Key Usages](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.12). Accepted values: `any_extended`, `cert_signing`, `client_auth`, `code_signing`, `content_commitment`, `crl_signing`, `data_encipherment`, `decipher_only`, `digital_signature`, `email_protection`, `encipher_only`, `ipsec_end_system`, `ipsec_tunnel`, `ipsec_user`, `key_agreement`, `key_encipherment`, `microsoft_commercial_code_signing`, `microsoft_kernel_code_signing`, `microsoft_server_gated_crypto`, `netscape_server_gated_crypto`, `ocsp_signing`, `server_auth`, `timestamping`.
|
586
|
-
:param pulumi.Input[str] cert_pem: Certificate data in PEM (RFC 1421).
|
586
|
+
:param pulumi.Input[str] cert_pem: Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
587
587
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] dns_names: List of DNS names for which a certificate is being requested (i.e. certificate subjects).
|
588
588
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_addresses: List of IP addresses for which a certificate is being requested (i.e. certificate subjects).
|
589
589
|
:param pulumi.Input[bool] is_ca_certificate: Is the generated certificate representing a Certificate Authority (CA) (default: `false`).
|
590
590
|
:param pulumi.Input[str] key_algorithm: Name of the algorithm used when generating the private key provided in `private_key_pem`.
|
591
|
-
:param pulumi.Input[str] private_key_pem: Private key in PEM (RFC 1421) interpolation function.
|
591
|
+
:param pulumi.Input[str] private_key_pem: Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
592
592
|
:param pulumi.Input[bool] ready_for_renewal: Is the certificate either expired (i.e. beyond the `validity_period_hours`) or ready for an early renewal (i.e. within the `early_renewal_hours`)?
|
593
593
|
:param pulumi.Input[bool] set_authority_key_id: Should the generated certificate include an [authority key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.1): for self-signed certificates this is the same value as the [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
|
594
594
|
:param pulumi.Input[bool] set_subject_key_id: Should the generated certificate include a [subject key identifier](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2) (default: `false`).
|
595
|
-
:param pulumi.Input[
|
595
|
+
:param pulumi.Input[Union['SelfSignedCertSubjectArgs', 'SelfSignedCertSubjectArgsDict']] subject: The subject for which a certificate is being requested. The acceptable arguments are all optional and their naming is based upon [Issuer Distinguished Names (RFC5280)](https://tools.ietf.org/html/rfc5280#section-4.1.2.4) section.
|
596
596
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] uris: List of URIs for which a certificate is being requested (i.e. certificate subjects).
|
597
597
|
:param pulumi.Input[str] validity_end_time: The time until which the certificate is invalid, expressed as an [RFC3339](https://tools.ietf.org/html/rfc3339) timestamp.
|
598
598
|
:param pulumi.Input[int] validity_period_hours: Number of hours, after initial issuing, that the certificate will remain valid for.
|
@@ -632,7 +632,7 @@ class SelfSignedCert(pulumi.CustomResource):
|
|
632
632
|
@pulumi.getter(name="certPem")
|
633
633
|
def cert_pem(self) -> pulumi.Output[str]:
|
634
634
|
"""
|
635
|
-
Certificate data in PEM (RFC 1421).
|
635
|
+
Certificate data in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format. **NOTE**: the [underlying](https://pkg.go.dev/encoding/pem#Encode) [libraries](https://pkg.go.dev/golang.org/x/crypto/ssh#MarshalAuthorizedKey) that generate this value append a `\\n` at the end of the PEM. In case this disrupts your use case, we recommend using `trimspace()`.
|
636
636
|
"""
|
637
637
|
return pulumi.get(self, "cert_pem")
|
638
638
|
|
@@ -677,7 +677,7 @@ class SelfSignedCert(pulumi.CustomResource):
|
|
677
677
|
@pulumi.getter(name="privateKeyPem")
|
678
678
|
def private_key_pem(self) -> pulumi.Output[str]:
|
679
679
|
"""
|
680
|
-
Private key in PEM (RFC 1421) interpolation function.
|
680
|
+
Private key in [PEM (RFC 1421)](https://datatracker.ietf.org/doc/html/rfc1421) format, that the certificate will belong to. This can be read from a separate file using the `file` interpolation function.
|
681
681
|
"""
|
682
682
|
return pulumi.get(self, "private_key_pem")
|
683
683
|
|
@@ -0,0 +1,21 @@
|
|
1
|
+
pulumi_tls/__init__.py,sha256=Fk7hjyRIMx42E0iGoNp4d238SBG6PAUxDzvlIndTJck,1523
|
2
|
+
pulumi_tls/_inputs.py,sha256=KVpnu-mvOyzrpVpdrb90KBWDhaN_i67rIkdR3d8qJlw,14351
|
3
|
+
pulumi_tls/_utilities.py,sha256=aNnnaO6zRha3FhNHonuabR4fJLWGXANtK5dlh1Mz95k,10506
|
4
|
+
pulumi_tls/cert_request.py,sha256=J-nSLGCQ-DY3z1P6784HiWeHuLDyCJlR3M903CA9spQ,22869
|
5
|
+
pulumi_tls/get_certificate.py,sha256=lUy1OLl5oA8GbQnOeVy6F7Sfd8pWSgCnZ1g9gV9Jr30,5540
|
6
|
+
pulumi_tls/get_public_key.py,sha256=JjrZKMzNVnrpX2TqusoO16NznvX9bgtqOrGxINuQPwk,11236
|
7
|
+
pulumi_tls/locally_signed_cert.py,sha256=042i5knGaEU0Ry7mGiWsm5FuaI73JBjU25gtoLAwyek,38231
|
8
|
+
pulumi_tls/outputs.py,sha256=c0gKt8fbu5LXJVKo3U_dqPvh-HGwg26hwitgd2saRfs,15577
|
9
|
+
pulumi_tls/private_key.py,sha256=PjQ6g4ziNLrlrh63q4lWMDAWh78XquAKJI_WJjuy0yQ,25361
|
10
|
+
pulumi_tls/provider.py,sha256=SL708ouDW7KsIDLhTE123QNkg9CWMENzCx9j4rrncHI,4613
|
11
|
+
pulumi_tls/pulumi-plugin.json,sha256=Nxrzxos9zZIpqWD5dKHH3vxFCAmXTjgJMOheI7Jmhis,62
|
12
|
+
pulumi_tls/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
13
|
+
pulumi_tls/self_signed_cert.py,sha256=1C1qkRwOMTljf_AZV5cZtlT9ruT_kVYsMdKdjoFGmsI,48468
|
14
|
+
pulumi_tls/config/__init__.py,sha256=cfY0smRZD3fDVc93ZIAxEl_IM2pynmXB52n3Ahzi030,285
|
15
|
+
pulumi_tls/config/__init__.pyi,sha256=kaPJpeRs8A7zNA-3MY-QL0zyxMV0oqUrYrsLj3HpqEg,474
|
16
|
+
pulumi_tls/config/outputs.py,sha256=SYfBlhKnqFeIaEpQLFgdBfABD4pzTkAlZTuwWWsGQ4A,2653
|
17
|
+
pulumi_tls/config/vars.py,sha256=wTZ5QbW-pH76tJ5PSA2zAFV4bPdtC5pmxQsV7jRd3c8,661
|
18
|
+
pulumi_tls-5.0.5.dist-info/METADATA,sha256=_YRrnN-SikSc0nTrL62gLvSc922NYoDRX7Oo7Ob40Mo,2416
|
19
|
+
pulumi_tls-5.0.5.dist-info/WHEEL,sha256=cVxcB9AmuTcXqmwrtPhNK88dr7IR_b6qagTj0UvIEbY,91
|
20
|
+
pulumi_tls-5.0.5.dist-info/top_level.txt,sha256=w0yJOTuCUb1BpNsSTm0FJZPucueobFIfzPGzjYklx1U,11
|
21
|
+
pulumi_tls-5.0.5.dist-info/RECORD,,
|
@@ -1,21 +0,0 @@
|
|
1
|
-
pulumi_tls/__init__.py,sha256=Fk7hjyRIMx42E0iGoNp4d238SBG6PAUxDzvlIndTJck,1523
|
2
|
-
pulumi_tls/_inputs.py,sha256=KVpnu-mvOyzrpVpdrb90KBWDhaN_i67rIkdR3d8qJlw,14351
|
3
|
-
pulumi_tls/_utilities.py,sha256=zozFZPZGnJJ7MjOYHQPdH-l-EHcRcX5lh5TVi22oTCw,10446
|
4
|
-
pulumi_tls/cert_request.py,sha256=IkUPm9Lq9q3WK9d0FbS4NS_F_sSS1T-nkxJB0Hpuzic,20435
|
5
|
-
pulumi_tls/get_certificate.py,sha256=lUy1OLl5oA8GbQnOeVy6F7Sfd8pWSgCnZ1g9gV9Jr30,5540
|
6
|
-
pulumi_tls/get_public_key.py,sha256=9rlku7HjE567b7gQaYv1e7NsuLmkyohuAK62yDBCq2g,10349
|
7
|
-
pulumi_tls/locally_signed_cert.py,sha256=EXoB5ayvWq-E6ypbL5MBm5bC3IBXCqdE8ztPR8EG0_8,36895
|
8
|
-
pulumi_tls/outputs.py,sha256=3Yjo4iKbFD4gJQhCGGWwocpCAuS3V-d6nvQ9lseB3Qg,14909
|
9
|
-
pulumi_tls/private_key.py,sha256=l7YLkUhXlp-lLWST8p34AoR0zMI_Dj2qRlQEf8sjMVg,22201
|
10
|
-
pulumi_tls/provider.py,sha256=GAIHbL660HmefqI6S05zA77JT1tVZVpxwSKnONjxqIM,4571
|
11
|
-
pulumi_tls/pulumi-plugin.json,sha256=P8LqKvpUaH4ewxQEY0rG46NRoWfIEq6Rm436XNVy95Q,62
|
12
|
-
pulumi_tls/py.typed,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
|
13
|
-
pulumi_tls/self_signed_cert.py,sha256=Yiqt5IbswDJvTiCdwN-jiWgtQgT003puNSAbF3tLVKM,45979
|
14
|
-
pulumi_tls/config/__init__.py,sha256=cfY0smRZD3fDVc93ZIAxEl_IM2pynmXB52n3Ahzi030,285
|
15
|
-
pulumi_tls/config/__init__.pyi,sha256=kaPJpeRs8A7zNA-3MY-QL0zyxMV0oqUrYrsLj3HpqEg,474
|
16
|
-
pulumi_tls/config/outputs.py,sha256=SYfBlhKnqFeIaEpQLFgdBfABD4pzTkAlZTuwWWsGQ4A,2653
|
17
|
-
pulumi_tls/config/vars.py,sha256=wTZ5QbW-pH76tJ5PSA2zAFV4bPdtC5pmxQsV7jRd3c8,661
|
18
|
-
pulumi_tls-5.0.4.dist-info/METADATA,sha256=V8iSxzA7JLM5AmcC-nVSGN_skbKLwsGDSqKVYePAsDo,2416
|
19
|
-
pulumi_tls-5.0.4.dist-info/WHEEL,sha256=y4mX-SOX4fYIkonsAGA5N0Oy-8_gI4FXw5HNI1xqvWg,91
|
20
|
-
pulumi_tls-5.0.4.dist-info/top_level.txt,sha256=w0yJOTuCUb1BpNsSTm0FJZPucueobFIfzPGzjYklx1U,11
|
21
|
-
pulumi_tls-5.0.4.dist-info/RECORD,,
|
File without changes
|