pulumi-vault 5.19.0a1705474292__py3-none-any.whl → 5.20.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +59 -0
- pulumi_vault/_inputs.py +380 -0
- pulumi_vault/_utilities.py +2 -2
- pulumi_vault/aws/secret_backend.py +188 -0
- pulumi_vault/aws/secret_backend_static_role.py +2 -2
- pulumi_vault/azure/backend.py +7 -21
- pulumi_vault/azure/backend_role.py +111 -0
- pulumi_vault/config/__init__.pyi +0 -3
- pulumi_vault/config/outputs.py +380 -0
- pulumi_vault/config/vars.py +0 -3
- pulumi_vault/consul/secret_backend.py +7 -35
- pulumi_vault/database/_inputs.py +536 -0
- pulumi_vault/database/outputs.py +483 -3
- pulumi_vault/gcp/_inputs.py +162 -4
- pulumi_vault/gcp/auth_backend.py +64 -3
- pulumi_vault/gcp/outputs.py +161 -4
- pulumi_vault/get_raft_autopilot_state.py +0 -12
- pulumi_vault/identity/group_alias.py +6 -6
- pulumi_vault/kubernetes/auth_backend_config.py +7 -7
- pulumi_vault/kubernetes/secret_backend_role.py +8 -4
- pulumi_vault/kv/_inputs.py +12 -0
- pulumi_vault/kv/outputs.py +12 -0
- pulumi_vault/ldap/secret_backend_dynamic_role.py +2 -2
- pulumi_vault/ldap/secret_backend_static_role.py +2 -2
- pulumi_vault/managed/_inputs.py +12 -0
- pulumi_vault/managed/keys.py +20 -0
- pulumi_vault/managed/outputs.py +12 -0
- pulumi_vault/mongodbatlas/secret_role.py +2 -2
- pulumi_vault/namespace.py +46 -14
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +0 -6
- pulumi_vault/pkisecret/secret_backend_issuer.py +0 -10
- pulumi_vault/pkisecret/secret_backend_role.py +54 -7
- pulumi_vault/rabbitmq/_inputs.py +36 -0
- pulumi_vault/rabbitmq/outputs.py +36 -0
- pulumi_vault/saml/auth_backend_role.py +7 -14
- pulumi_vault/secrets/__init__.py +14 -0
- pulumi_vault/secrets/sync_association.py +464 -0
- pulumi_vault/secrets/sync_aws_destination.py +564 -0
- pulumi_vault/secrets/sync_azure_destination.py +674 -0
- pulumi_vault/secrets/sync_config.py +297 -0
- pulumi_vault/secrets/sync_gcp_destination.py +438 -0
- pulumi_vault/secrets/sync_gh_destination.py +511 -0
- pulumi_vault/secrets/sync_vercel_destination.py +541 -0
- pulumi_vault/ssh/secret_backend_role.py +7 -14
- {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/METADATA +2 -2
- {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/RECORD +48 -40
- {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/WHEEL +0 -0
- {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/top_level.txt +0 -0
@@ -0,0 +1,297 @@
|
|
1
|
+
# coding=utf-8
|
2
|
+
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
3
|
+
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
4
|
+
|
5
|
+
import copy
|
6
|
+
import warnings
|
7
|
+
import pulumi
|
8
|
+
import pulumi.runtime
|
9
|
+
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
10
|
+
from .. import _utilities
|
11
|
+
|
12
|
+
__all__ = ['SyncConfigArgs', 'SyncConfig']
|
13
|
+
|
14
|
+
@pulumi.input_type
|
15
|
+
class SyncConfigArgs:
|
16
|
+
def __init__(__self__, *,
|
17
|
+
disabled: Optional[pulumi.Input[bool]] = None,
|
18
|
+
namespace: Optional[pulumi.Input[str]] = None,
|
19
|
+
queue_capacity: Optional[pulumi.Input[int]] = None):
|
20
|
+
"""
|
21
|
+
The set of arguments for constructing a SyncConfig resource.
|
22
|
+
:param pulumi.Input[bool] disabled: Disables the syncing process between Vault and external destinations. Defaults to `false`.
|
23
|
+
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
24
|
+
This resource can only be configured in the root namespace.
|
25
|
+
*Available only for Vault Enterprise*.
|
26
|
+
:param pulumi.Input[int] queue_capacity: Maximum number of pending sync operations allowed on the queue. Defaults to `1000000`.
|
27
|
+
"""
|
28
|
+
if disabled is not None:
|
29
|
+
pulumi.set(__self__, "disabled", disabled)
|
30
|
+
if namespace is not None:
|
31
|
+
pulumi.set(__self__, "namespace", namespace)
|
32
|
+
if queue_capacity is not None:
|
33
|
+
pulumi.set(__self__, "queue_capacity", queue_capacity)
|
34
|
+
|
35
|
+
@property
|
36
|
+
@pulumi.getter
|
37
|
+
def disabled(self) -> Optional[pulumi.Input[bool]]:
|
38
|
+
"""
|
39
|
+
Disables the syncing process between Vault and external destinations. Defaults to `false`.
|
40
|
+
"""
|
41
|
+
return pulumi.get(self, "disabled")
|
42
|
+
|
43
|
+
@disabled.setter
|
44
|
+
def disabled(self, value: Optional[pulumi.Input[bool]]):
|
45
|
+
pulumi.set(self, "disabled", value)
|
46
|
+
|
47
|
+
@property
|
48
|
+
@pulumi.getter
|
49
|
+
def namespace(self) -> Optional[pulumi.Input[str]]:
|
50
|
+
"""
|
51
|
+
The namespace to provision the resource in.
|
52
|
+
This resource can only be configured in the root namespace.
|
53
|
+
*Available only for Vault Enterprise*.
|
54
|
+
"""
|
55
|
+
return pulumi.get(self, "namespace")
|
56
|
+
|
57
|
+
@namespace.setter
|
58
|
+
def namespace(self, value: Optional[pulumi.Input[str]]):
|
59
|
+
pulumi.set(self, "namespace", value)
|
60
|
+
|
61
|
+
@property
|
62
|
+
@pulumi.getter(name="queueCapacity")
|
63
|
+
def queue_capacity(self) -> Optional[pulumi.Input[int]]:
|
64
|
+
"""
|
65
|
+
Maximum number of pending sync operations allowed on the queue. Defaults to `1000000`.
|
66
|
+
"""
|
67
|
+
return pulumi.get(self, "queue_capacity")
|
68
|
+
|
69
|
+
@queue_capacity.setter
|
70
|
+
def queue_capacity(self, value: Optional[pulumi.Input[int]]):
|
71
|
+
pulumi.set(self, "queue_capacity", value)
|
72
|
+
|
73
|
+
|
74
|
+
@pulumi.input_type
|
75
|
+
class _SyncConfigState:
|
76
|
+
def __init__(__self__, *,
|
77
|
+
disabled: Optional[pulumi.Input[bool]] = None,
|
78
|
+
namespace: Optional[pulumi.Input[str]] = None,
|
79
|
+
queue_capacity: Optional[pulumi.Input[int]] = None):
|
80
|
+
"""
|
81
|
+
Input properties used for looking up and filtering SyncConfig resources.
|
82
|
+
:param pulumi.Input[bool] disabled: Disables the syncing process between Vault and external destinations. Defaults to `false`.
|
83
|
+
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
84
|
+
This resource can only be configured in the root namespace.
|
85
|
+
*Available only for Vault Enterprise*.
|
86
|
+
:param pulumi.Input[int] queue_capacity: Maximum number of pending sync operations allowed on the queue. Defaults to `1000000`.
|
87
|
+
"""
|
88
|
+
if disabled is not None:
|
89
|
+
pulumi.set(__self__, "disabled", disabled)
|
90
|
+
if namespace is not None:
|
91
|
+
pulumi.set(__self__, "namespace", namespace)
|
92
|
+
if queue_capacity is not None:
|
93
|
+
pulumi.set(__self__, "queue_capacity", queue_capacity)
|
94
|
+
|
95
|
+
@property
|
96
|
+
@pulumi.getter
|
97
|
+
def disabled(self) -> Optional[pulumi.Input[bool]]:
|
98
|
+
"""
|
99
|
+
Disables the syncing process between Vault and external destinations. Defaults to `false`.
|
100
|
+
"""
|
101
|
+
return pulumi.get(self, "disabled")
|
102
|
+
|
103
|
+
@disabled.setter
|
104
|
+
def disabled(self, value: Optional[pulumi.Input[bool]]):
|
105
|
+
pulumi.set(self, "disabled", value)
|
106
|
+
|
107
|
+
@property
|
108
|
+
@pulumi.getter
|
109
|
+
def namespace(self) -> Optional[pulumi.Input[str]]:
|
110
|
+
"""
|
111
|
+
The namespace to provision the resource in.
|
112
|
+
This resource can only be configured in the root namespace.
|
113
|
+
*Available only for Vault Enterprise*.
|
114
|
+
"""
|
115
|
+
return pulumi.get(self, "namespace")
|
116
|
+
|
117
|
+
@namespace.setter
|
118
|
+
def namespace(self, value: Optional[pulumi.Input[str]]):
|
119
|
+
pulumi.set(self, "namespace", value)
|
120
|
+
|
121
|
+
@property
|
122
|
+
@pulumi.getter(name="queueCapacity")
|
123
|
+
def queue_capacity(self) -> Optional[pulumi.Input[int]]:
|
124
|
+
"""
|
125
|
+
Maximum number of pending sync operations allowed on the queue. Defaults to `1000000`.
|
126
|
+
"""
|
127
|
+
return pulumi.get(self, "queue_capacity")
|
128
|
+
|
129
|
+
@queue_capacity.setter
|
130
|
+
def queue_capacity(self, value: Optional[pulumi.Input[int]]):
|
131
|
+
pulumi.set(self, "queue_capacity", value)
|
132
|
+
|
133
|
+
|
134
|
+
class SyncConfig(pulumi.CustomResource):
|
135
|
+
@overload
|
136
|
+
def __init__(__self__,
|
137
|
+
resource_name: str,
|
138
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
139
|
+
disabled: Optional[pulumi.Input[bool]] = None,
|
140
|
+
namespace: Optional[pulumi.Input[str]] = None,
|
141
|
+
queue_capacity: Optional[pulumi.Input[int]] = None,
|
142
|
+
__props__=None):
|
143
|
+
"""
|
144
|
+
Configures the secret sync global config.
|
145
|
+
The config is global and can only be managed in the root namespace.
|
146
|
+
|
147
|
+
> **Important** The config is global so the secrets.SyncConfig resource must not be defined
|
148
|
+
multiple times for the same Vault server. If multiple definition exists, the last one applied will be
|
149
|
+
effective.
|
150
|
+
|
151
|
+
## Example Usage
|
152
|
+
|
153
|
+
```python
|
154
|
+
import pulumi
|
155
|
+
import pulumi_vault as vault
|
156
|
+
|
157
|
+
global_config = vault.secrets.SyncConfig("globalConfig",
|
158
|
+
disabled=True,
|
159
|
+
queue_capacity=500000)
|
160
|
+
```
|
161
|
+
|
162
|
+
## Import
|
163
|
+
|
164
|
+
```sh
|
165
|
+
$ pulumi import vault:secrets/syncConfig:SyncConfig config global_config
|
166
|
+
```
|
167
|
+
|
168
|
+
:param str resource_name: The name of the resource.
|
169
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
170
|
+
:param pulumi.Input[bool] disabled: Disables the syncing process between Vault and external destinations. Defaults to `false`.
|
171
|
+
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
172
|
+
This resource can only be configured in the root namespace.
|
173
|
+
*Available only for Vault Enterprise*.
|
174
|
+
:param pulumi.Input[int] queue_capacity: Maximum number of pending sync operations allowed on the queue. Defaults to `1000000`.
|
175
|
+
"""
|
176
|
+
...
|
177
|
+
@overload
|
178
|
+
def __init__(__self__,
|
179
|
+
resource_name: str,
|
180
|
+
args: Optional[SyncConfigArgs] = None,
|
181
|
+
opts: Optional[pulumi.ResourceOptions] = None):
|
182
|
+
"""
|
183
|
+
Configures the secret sync global config.
|
184
|
+
The config is global and can only be managed in the root namespace.
|
185
|
+
|
186
|
+
> **Important** The config is global so the secrets.SyncConfig resource must not be defined
|
187
|
+
multiple times for the same Vault server. If multiple definition exists, the last one applied will be
|
188
|
+
effective.
|
189
|
+
|
190
|
+
## Example Usage
|
191
|
+
|
192
|
+
```python
|
193
|
+
import pulumi
|
194
|
+
import pulumi_vault as vault
|
195
|
+
|
196
|
+
global_config = vault.secrets.SyncConfig("globalConfig",
|
197
|
+
disabled=True,
|
198
|
+
queue_capacity=500000)
|
199
|
+
```
|
200
|
+
|
201
|
+
## Import
|
202
|
+
|
203
|
+
```sh
|
204
|
+
$ pulumi import vault:secrets/syncConfig:SyncConfig config global_config
|
205
|
+
```
|
206
|
+
|
207
|
+
:param str resource_name: The name of the resource.
|
208
|
+
:param SyncConfigArgs args: The arguments to use to populate this resource's properties.
|
209
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
210
|
+
"""
|
211
|
+
...
|
212
|
+
def __init__(__self__, resource_name: str, *args, **kwargs):
|
213
|
+
resource_args, opts = _utilities.get_resource_args_opts(SyncConfigArgs, pulumi.ResourceOptions, *args, **kwargs)
|
214
|
+
if resource_args is not None:
|
215
|
+
__self__._internal_init(resource_name, opts, **resource_args.__dict__)
|
216
|
+
else:
|
217
|
+
__self__._internal_init(resource_name, *args, **kwargs)
|
218
|
+
|
219
|
+
def _internal_init(__self__,
|
220
|
+
resource_name: str,
|
221
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
222
|
+
disabled: Optional[pulumi.Input[bool]] = None,
|
223
|
+
namespace: Optional[pulumi.Input[str]] = None,
|
224
|
+
queue_capacity: Optional[pulumi.Input[int]] = None,
|
225
|
+
__props__=None):
|
226
|
+
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
227
|
+
if not isinstance(opts, pulumi.ResourceOptions):
|
228
|
+
raise TypeError('Expected resource options to be a ResourceOptions instance')
|
229
|
+
if opts.id is None:
|
230
|
+
if __props__ is not None:
|
231
|
+
raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
|
232
|
+
__props__ = SyncConfigArgs.__new__(SyncConfigArgs)
|
233
|
+
|
234
|
+
__props__.__dict__["disabled"] = disabled
|
235
|
+
__props__.__dict__["namespace"] = namespace
|
236
|
+
__props__.__dict__["queue_capacity"] = queue_capacity
|
237
|
+
super(SyncConfig, __self__).__init__(
|
238
|
+
'vault:secrets/syncConfig:SyncConfig',
|
239
|
+
resource_name,
|
240
|
+
__props__,
|
241
|
+
opts)
|
242
|
+
|
243
|
+
@staticmethod
|
244
|
+
def get(resource_name: str,
|
245
|
+
id: pulumi.Input[str],
|
246
|
+
opts: Optional[pulumi.ResourceOptions] = None,
|
247
|
+
disabled: Optional[pulumi.Input[bool]] = None,
|
248
|
+
namespace: Optional[pulumi.Input[str]] = None,
|
249
|
+
queue_capacity: Optional[pulumi.Input[int]] = None) -> 'SyncConfig':
|
250
|
+
"""
|
251
|
+
Get an existing SyncConfig resource's state with the given name, id, and optional extra
|
252
|
+
properties used to qualify the lookup.
|
253
|
+
|
254
|
+
:param str resource_name: The unique name of the resulting resource.
|
255
|
+
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
256
|
+
:param pulumi.ResourceOptions opts: Options for the resource.
|
257
|
+
:param pulumi.Input[bool] disabled: Disables the syncing process between Vault and external destinations. Defaults to `false`.
|
258
|
+
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
259
|
+
This resource can only be configured in the root namespace.
|
260
|
+
*Available only for Vault Enterprise*.
|
261
|
+
:param pulumi.Input[int] queue_capacity: Maximum number of pending sync operations allowed on the queue. Defaults to `1000000`.
|
262
|
+
"""
|
263
|
+
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
264
|
+
|
265
|
+
__props__ = _SyncConfigState.__new__(_SyncConfigState)
|
266
|
+
|
267
|
+
__props__.__dict__["disabled"] = disabled
|
268
|
+
__props__.__dict__["namespace"] = namespace
|
269
|
+
__props__.__dict__["queue_capacity"] = queue_capacity
|
270
|
+
return SyncConfig(resource_name, opts=opts, __props__=__props__)
|
271
|
+
|
272
|
+
@property
|
273
|
+
@pulumi.getter
|
274
|
+
def disabled(self) -> pulumi.Output[Optional[bool]]:
|
275
|
+
"""
|
276
|
+
Disables the syncing process between Vault and external destinations. Defaults to `false`.
|
277
|
+
"""
|
278
|
+
return pulumi.get(self, "disabled")
|
279
|
+
|
280
|
+
@property
|
281
|
+
@pulumi.getter
|
282
|
+
def namespace(self) -> pulumi.Output[Optional[str]]:
|
283
|
+
"""
|
284
|
+
The namespace to provision the resource in.
|
285
|
+
This resource can only be configured in the root namespace.
|
286
|
+
*Available only for Vault Enterprise*.
|
287
|
+
"""
|
288
|
+
return pulumi.get(self, "namespace")
|
289
|
+
|
290
|
+
@property
|
291
|
+
@pulumi.getter(name="queueCapacity")
|
292
|
+
def queue_capacity(self) -> pulumi.Output[Optional[int]]:
|
293
|
+
"""
|
294
|
+
Maximum number of pending sync operations allowed on the queue. Defaults to `1000000`.
|
295
|
+
"""
|
296
|
+
return pulumi.get(self, "queue_capacity")
|
297
|
+
|