pulumi-vault 5.19.0a1705474292__py3-none-any.whl → 5.20.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +59 -0
- pulumi_vault/_inputs.py +380 -0
- pulumi_vault/_utilities.py +2 -2
- pulumi_vault/aws/secret_backend.py +188 -0
- pulumi_vault/aws/secret_backend_static_role.py +2 -2
- pulumi_vault/azure/backend.py +7 -21
- pulumi_vault/azure/backend_role.py +111 -0
- pulumi_vault/config/__init__.pyi +0 -3
- pulumi_vault/config/outputs.py +380 -0
- pulumi_vault/config/vars.py +0 -3
- pulumi_vault/consul/secret_backend.py +7 -35
- pulumi_vault/database/_inputs.py +536 -0
- pulumi_vault/database/outputs.py +483 -3
- pulumi_vault/gcp/_inputs.py +162 -4
- pulumi_vault/gcp/auth_backend.py +64 -3
- pulumi_vault/gcp/outputs.py +161 -4
- pulumi_vault/get_raft_autopilot_state.py +0 -12
- pulumi_vault/identity/group_alias.py +6 -6
- pulumi_vault/kubernetes/auth_backend_config.py +7 -7
- pulumi_vault/kubernetes/secret_backend_role.py +8 -4
- pulumi_vault/kv/_inputs.py +12 -0
- pulumi_vault/kv/outputs.py +12 -0
- pulumi_vault/ldap/secret_backend_dynamic_role.py +2 -2
- pulumi_vault/ldap/secret_backend_static_role.py +2 -2
- pulumi_vault/managed/_inputs.py +12 -0
- pulumi_vault/managed/keys.py +20 -0
- pulumi_vault/managed/outputs.py +12 -0
- pulumi_vault/mongodbatlas/secret_role.py +2 -2
- pulumi_vault/namespace.py +46 -14
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +0 -6
- pulumi_vault/pkisecret/secret_backend_issuer.py +0 -10
- pulumi_vault/pkisecret/secret_backend_role.py +54 -7
- pulumi_vault/rabbitmq/_inputs.py +36 -0
- pulumi_vault/rabbitmq/outputs.py +36 -0
- pulumi_vault/saml/auth_backend_role.py +7 -14
- pulumi_vault/secrets/__init__.py +14 -0
- pulumi_vault/secrets/sync_association.py +464 -0
- pulumi_vault/secrets/sync_aws_destination.py +564 -0
- pulumi_vault/secrets/sync_azure_destination.py +674 -0
- pulumi_vault/secrets/sync_config.py +297 -0
- pulumi_vault/secrets/sync_gcp_destination.py +438 -0
- pulumi_vault/secrets/sync_gh_destination.py +511 -0
- pulumi_vault/secrets/sync_vercel_destination.py +541 -0
- pulumi_vault/ssh/secret_backend_role.py +7 -14
- {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/METADATA +2 -2
- {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/RECORD +48 -40
- {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/WHEEL +0 -0
- {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/top_level.txt +0 -0
pulumi_vault/config/outputs.py
CHANGED
@@ -34,6 +34,10 @@ class AuthLogin(dict):
|
|
34
34
|
namespace: Optional[str] = None,
|
35
35
|
parameters: Optional[Mapping[str, str]] = None,
|
36
36
|
use_root_namespace: Optional[bool] = None):
|
37
|
+
"""
|
38
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
39
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
40
|
+
"""
|
37
41
|
pulumi.set(__self__, "path", path)
|
38
42
|
if method is not None:
|
39
43
|
pulumi.set(__self__, "method", method)
|
@@ -57,6 +61,9 @@ class AuthLogin(dict):
|
|
57
61
|
@property
|
58
62
|
@pulumi.getter
|
59
63
|
def namespace(self) -> Optional[str]:
|
64
|
+
"""
|
65
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
66
|
+
"""
|
60
67
|
return pulumi.get(self, "namespace")
|
61
68
|
|
62
69
|
@property
|
@@ -67,6 +74,9 @@ class AuthLogin(dict):
|
|
67
74
|
@property
|
68
75
|
@pulumi.getter(name="useRootNamespace")
|
69
76
|
def use_root_namespace(self) -> Optional[bool]:
|
77
|
+
"""
|
78
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
79
|
+
"""
|
70
80
|
return pulumi.get(self, "use_root_namespace")
|
71
81
|
|
72
82
|
|
@@ -89,6 +99,24 @@ class AuthLoginAws(dict):
|
|
89
99
|
mount: Optional[str] = None,
|
90
100
|
namespace: Optional[str] = None,
|
91
101
|
use_root_namespace: Optional[bool] = None):
|
102
|
+
"""
|
103
|
+
:param str role: The Vault role to use when logging into Vault.
|
104
|
+
:param str aws_access_key_id: The AWS access key ID.
|
105
|
+
:param str aws_iam_endpoint: The IAM endpoint URL.
|
106
|
+
:param str aws_profile: The name of the AWS profile.
|
107
|
+
:param str aws_region: The AWS region.
|
108
|
+
:param str aws_role_arn: The ARN of the AWS Role to assume.Used during STS AssumeRole
|
109
|
+
:param str aws_role_session_name: Specifies the name to attach to the AWS role session. Used during STS AssumeRole
|
110
|
+
:param str aws_secret_access_key: The AWS secret access key.
|
111
|
+
:param str aws_session_token: The AWS session token.
|
112
|
+
:param str aws_shared_credentials_file: Path to the AWS shared credentials file.
|
113
|
+
:param str aws_sts_endpoint: The STS endpoint URL.
|
114
|
+
:param str aws_web_identity_token_file: Path to the file containing an OAuth 2.0 access token or OpenID Connect ID token.
|
115
|
+
:param str header_value: The Vault header value to include in the STS signing request.
|
116
|
+
:param str mount: The path where the authentication engine is mounted.
|
117
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
118
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
119
|
+
"""
|
92
120
|
pulumi.set(__self__, "role", role)
|
93
121
|
if aws_access_key_id is not None:
|
94
122
|
pulumi.set(__self__, "aws_access_key_id", aws_access_key_id)
|
@@ -124,81 +152,129 @@ class AuthLoginAws(dict):
|
|
124
152
|
@property
|
125
153
|
@pulumi.getter
|
126
154
|
def role(self) -> str:
|
155
|
+
"""
|
156
|
+
The Vault role to use when logging into Vault.
|
157
|
+
"""
|
127
158
|
return pulumi.get(self, "role")
|
128
159
|
|
129
160
|
@property
|
130
161
|
@pulumi.getter(name="awsAccessKeyId")
|
131
162
|
def aws_access_key_id(self) -> Optional[str]:
|
163
|
+
"""
|
164
|
+
The AWS access key ID.
|
165
|
+
"""
|
132
166
|
return pulumi.get(self, "aws_access_key_id")
|
133
167
|
|
134
168
|
@property
|
135
169
|
@pulumi.getter(name="awsIamEndpoint")
|
136
170
|
def aws_iam_endpoint(self) -> Optional[str]:
|
171
|
+
"""
|
172
|
+
The IAM endpoint URL.
|
173
|
+
"""
|
137
174
|
return pulumi.get(self, "aws_iam_endpoint")
|
138
175
|
|
139
176
|
@property
|
140
177
|
@pulumi.getter(name="awsProfile")
|
141
178
|
def aws_profile(self) -> Optional[str]:
|
179
|
+
"""
|
180
|
+
The name of the AWS profile.
|
181
|
+
"""
|
142
182
|
return pulumi.get(self, "aws_profile")
|
143
183
|
|
144
184
|
@property
|
145
185
|
@pulumi.getter(name="awsRegion")
|
146
186
|
def aws_region(self) -> Optional[str]:
|
187
|
+
"""
|
188
|
+
The AWS region.
|
189
|
+
"""
|
147
190
|
return pulumi.get(self, "aws_region")
|
148
191
|
|
149
192
|
@property
|
150
193
|
@pulumi.getter(name="awsRoleArn")
|
151
194
|
def aws_role_arn(self) -> Optional[str]:
|
195
|
+
"""
|
196
|
+
The ARN of the AWS Role to assume.Used during STS AssumeRole
|
197
|
+
"""
|
152
198
|
return pulumi.get(self, "aws_role_arn")
|
153
199
|
|
154
200
|
@property
|
155
201
|
@pulumi.getter(name="awsRoleSessionName")
|
156
202
|
def aws_role_session_name(self) -> Optional[str]:
|
203
|
+
"""
|
204
|
+
Specifies the name to attach to the AWS role session. Used during STS AssumeRole
|
205
|
+
"""
|
157
206
|
return pulumi.get(self, "aws_role_session_name")
|
158
207
|
|
159
208
|
@property
|
160
209
|
@pulumi.getter(name="awsSecretAccessKey")
|
161
210
|
def aws_secret_access_key(self) -> Optional[str]:
|
211
|
+
"""
|
212
|
+
The AWS secret access key.
|
213
|
+
"""
|
162
214
|
return pulumi.get(self, "aws_secret_access_key")
|
163
215
|
|
164
216
|
@property
|
165
217
|
@pulumi.getter(name="awsSessionToken")
|
166
218
|
def aws_session_token(self) -> Optional[str]:
|
219
|
+
"""
|
220
|
+
The AWS session token.
|
221
|
+
"""
|
167
222
|
return pulumi.get(self, "aws_session_token")
|
168
223
|
|
169
224
|
@property
|
170
225
|
@pulumi.getter(name="awsSharedCredentialsFile")
|
171
226
|
def aws_shared_credentials_file(self) -> Optional[str]:
|
227
|
+
"""
|
228
|
+
Path to the AWS shared credentials file.
|
229
|
+
"""
|
172
230
|
return pulumi.get(self, "aws_shared_credentials_file")
|
173
231
|
|
174
232
|
@property
|
175
233
|
@pulumi.getter(name="awsStsEndpoint")
|
176
234
|
def aws_sts_endpoint(self) -> Optional[str]:
|
235
|
+
"""
|
236
|
+
The STS endpoint URL.
|
237
|
+
"""
|
177
238
|
return pulumi.get(self, "aws_sts_endpoint")
|
178
239
|
|
179
240
|
@property
|
180
241
|
@pulumi.getter(name="awsWebIdentityTokenFile")
|
181
242
|
def aws_web_identity_token_file(self) -> Optional[str]:
|
243
|
+
"""
|
244
|
+
Path to the file containing an OAuth 2.0 access token or OpenID Connect ID token.
|
245
|
+
"""
|
182
246
|
return pulumi.get(self, "aws_web_identity_token_file")
|
183
247
|
|
184
248
|
@property
|
185
249
|
@pulumi.getter(name="headerValue")
|
186
250
|
def header_value(self) -> Optional[str]:
|
251
|
+
"""
|
252
|
+
The Vault header value to include in the STS signing request.
|
253
|
+
"""
|
187
254
|
return pulumi.get(self, "header_value")
|
188
255
|
|
189
256
|
@property
|
190
257
|
@pulumi.getter
|
191
258
|
def mount(self) -> Optional[str]:
|
259
|
+
"""
|
260
|
+
The path where the authentication engine is mounted.
|
261
|
+
"""
|
192
262
|
return pulumi.get(self, "mount")
|
193
263
|
|
194
264
|
@property
|
195
265
|
@pulumi.getter
|
196
266
|
def namespace(self) -> Optional[str]:
|
267
|
+
"""
|
268
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
269
|
+
"""
|
197
270
|
return pulumi.get(self, "namespace")
|
198
271
|
|
199
272
|
@property
|
200
273
|
@pulumi.getter(name="useRootNamespace")
|
201
274
|
def use_root_namespace(self) -> Optional[bool]:
|
275
|
+
"""
|
276
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
277
|
+
"""
|
202
278
|
return pulumi.get(self, "use_root_namespace")
|
203
279
|
|
204
280
|
|
@@ -217,6 +293,20 @@ class AuthLoginAzure(dict):
|
|
217
293
|
use_root_namespace: Optional[bool] = None,
|
218
294
|
vm_name: Optional[str] = None,
|
219
295
|
vmss_name: Optional[str] = None):
|
296
|
+
"""
|
297
|
+
:param str resource_group_name: The resource group for the machine that generated the MSI token. This information can be obtained through instance metadata.
|
298
|
+
:param str role: Name of the login role.
|
299
|
+
:param str subscription_id: The subscription ID for the machine that generated the MSI token. This information can be obtained through instance metadata.
|
300
|
+
:param str client_id: The identity's client ID.
|
301
|
+
:param str jwt: A signed JSON Web Token. If not specified on will be created automatically
|
302
|
+
:param str mount: The path where the authentication engine is mounted.
|
303
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
304
|
+
:param str scope: The scopes to include in the token request.
|
305
|
+
:param str tenant_id: Provides the tenant ID to use in a multi-tenant authentication scenario.
|
306
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
307
|
+
:param str vm_name: The virtual machine name for the machine that generated the MSI token. This information can be obtained through instance metadata.
|
308
|
+
:param str vmss_name: The virtual machine scale set name for the machine that generated the MSI token. This information can be obtained through instance metadata.
|
309
|
+
"""
|
220
310
|
pulumi.set(__self__, "resource_group_name", resource_group_name)
|
221
311
|
pulumi.set(__self__, "role", role)
|
222
312
|
pulumi.set(__self__, "subscription_id", subscription_id)
|
@@ -242,61 +332,97 @@ class AuthLoginAzure(dict):
|
|
242
332
|
@property
|
243
333
|
@pulumi.getter(name="resourceGroupName")
|
244
334
|
def resource_group_name(self) -> str:
|
335
|
+
"""
|
336
|
+
The resource group for the machine that generated the MSI token. This information can be obtained through instance metadata.
|
337
|
+
"""
|
245
338
|
return pulumi.get(self, "resource_group_name")
|
246
339
|
|
247
340
|
@property
|
248
341
|
@pulumi.getter
|
249
342
|
def role(self) -> str:
|
343
|
+
"""
|
344
|
+
Name of the login role.
|
345
|
+
"""
|
250
346
|
return pulumi.get(self, "role")
|
251
347
|
|
252
348
|
@property
|
253
349
|
@pulumi.getter(name="subscriptionId")
|
254
350
|
def subscription_id(self) -> str:
|
351
|
+
"""
|
352
|
+
The subscription ID for the machine that generated the MSI token. This information can be obtained through instance metadata.
|
353
|
+
"""
|
255
354
|
return pulumi.get(self, "subscription_id")
|
256
355
|
|
257
356
|
@property
|
258
357
|
@pulumi.getter(name="clientId")
|
259
358
|
def client_id(self) -> Optional[str]:
|
359
|
+
"""
|
360
|
+
The identity's client ID.
|
361
|
+
"""
|
260
362
|
return pulumi.get(self, "client_id")
|
261
363
|
|
262
364
|
@property
|
263
365
|
@pulumi.getter
|
264
366
|
def jwt(self) -> Optional[str]:
|
367
|
+
"""
|
368
|
+
A signed JSON Web Token. If not specified on will be created automatically
|
369
|
+
"""
|
265
370
|
return pulumi.get(self, "jwt")
|
266
371
|
|
267
372
|
@property
|
268
373
|
@pulumi.getter
|
269
374
|
def mount(self) -> Optional[str]:
|
375
|
+
"""
|
376
|
+
The path where the authentication engine is mounted.
|
377
|
+
"""
|
270
378
|
return pulumi.get(self, "mount")
|
271
379
|
|
272
380
|
@property
|
273
381
|
@pulumi.getter
|
274
382
|
def namespace(self) -> Optional[str]:
|
383
|
+
"""
|
384
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
385
|
+
"""
|
275
386
|
return pulumi.get(self, "namespace")
|
276
387
|
|
277
388
|
@property
|
278
389
|
@pulumi.getter
|
279
390
|
def scope(self) -> Optional[str]:
|
391
|
+
"""
|
392
|
+
The scopes to include in the token request.
|
393
|
+
"""
|
280
394
|
return pulumi.get(self, "scope")
|
281
395
|
|
282
396
|
@property
|
283
397
|
@pulumi.getter(name="tenantId")
|
284
398
|
def tenant_id(self) -> Optional[str]:
|
399
|
+
"""
|
400
|
+
Provides the tenant ID to use in a multi-tenant authentication scenario.
|
401
|
+
"""
|
285
402
|
return pulumi.get(self, "tenant_id")
|
286
403
|
|
287
404
|
@property
|
288
405
|
@pulumi.getter(name="useRootNamespace")
|
289
406
|
def use_root_namespace(self) -> Optional[bool]:
|
407
|
+
"""
|
408
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
409
|
+
"""
|
290
410
|
return pulumi.get(self, "use_root_namespace")
|
291
411
|
|
292
412
|
@property
|
293
413
|
@pulumi.getter(name="vmName")
|
294
414
|
def vm_name(self) -> Optional[str]:
|
415
|
+
"""
|
416
|
+
The virtual machine name for the machine that generated the MSI token. This information can be obtained through instance metadata.
|
417
|
+
"""
|
295
418
|
return pulumi.get(self, "vm_name")
|
296
419
|
|
297
420
|
@property
|
298
421
|
@pulumi.getter(name="vmssName")
|
299
422
|
def vmss_name(self) -> Optional[str]:
|
423
|
+
"""
|
424
|
+
The virtual machine scale set name for the machine that generated the MSI token. This information can be obtained through instance metadata.
|
425
|
+
"""
|
300
426
|
return pulumi.get(self, "vmss_name")
|
301
427
|
|
302
428
|
|
@@ -309,6 +435,14 @@ class AuthLoginCert(dict):
|
|
309
435
|
name: Optional[str] = None,
|
310
436
|
namespace: Optional[str] = None,
|
311
437
|
use_root_namespace: Optional[bool] = None):
|
438
|
+
"""
|
439
|
+
:param str cert_file: Path to a file containing the client certificate.
|
440
|
+
:param str key_file: Path to a file containing the private key that the certificate was issued for.
|
441
|
+
:param str mount: The path where the authentication engine is mounted.
|
442
|
+
:param str name: Name of the certificate's role
|
443
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
444
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
445
|
+
"""
|
312
446
|
pulumi.set(__self__, "cert_file", cert_file)
|
313
447
|
pulumi.set(__self__, "key_file", key_file)
|
314
448
|
if mount is not None:
|
@@ -323,31 +457,49 @@ class AuthLoginCert(dict):
|
|
323
457
|
@property
|
324
458
|
@pulumi.getter(name="certFile")
|
325
459
|
def cert_file(self) -> str:
|
460
|
+
"""
|
461
|
+
Path to a file containing the client certificate.
|
462
|
+
"""
|
326
463
|
return pulumi.get(self, "cert_file")
|
327
464
|
|
328
465
|
@property
|
329
466
|
@pulumi.getter(name="keyFile")
|
330
467
|
def key_file(self) -> str:
|
468
|
+
"""
|
469
|
+
Path to a file containing the private key that the certificate was issued for.
|
470
|
+
"""
|
331
471
|
return pulumi.get(self, "key_file")
|
332
472
|
|
333
473
|
@property
|
334
474
|
@pulumi.getter
|
335
475
|
def mount(self) -> Optional[str]:
|
476
|
+
"""
|
477
|
+
The path where the authentication engine is mounted.
|
478
|
+
"""
|
336
479
|
return pulumi.get(self, "mount")
|
337
480
|
|
338
481
|
@property
|
339
482
|
@pulumi.getter
|
340
483
|
def name(self) -> Optional[str]:
|
484
|
+
"""
|
485
|
+
Name of the certificate's role
|
486
|
+
"""
|
341
487
|
return pulumi.get(self, "name")
|
342
488
|
|
343
489
|
@property
|
344
490
|
@pulumi.getter
|
345
491
|
def namespace(self) -> Optional[str]:
|
492
|
+
"""
|
493
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
494
|
+
"""
|
346
495
|
return pulumi.get(self, "namespace")
|
347
496
|
|
348
497
|
@property
|
349
498
|
@pulumi.getter(name="useRootNamespace")
|
350
499
|
def use_root_namespace(self) -> Optional[bool]:
|
500
|
+
"""
|
501
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
502
|
+
"""
|
351
503
|
return pulumi.get(self, "use_root_namespace")
|
352
504
|
|
353
505
|
|
@@ -361,6 +513,15 @@ class AuthLoginGcp(dict):
|
|
361
513
|
namespace: Optional[str] = None,
|
362
514
|
service_account: Optional[str] = None,
|
363
515
|
use_root_namespace: Optional[bool] = None):
|
516
|
+
"""
|
517
|
+
:param str role: Name of the login role.
|
518
|
+
:param str credentials: Path to the Google Cloud credentials file.
|
519
|
+
:param str jwt: A signed JSON Web Token.
|
520
|
+
:param str mount: The path where the authentication engine is mounted.
|
521
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
522
|
+
:param str service_account: IAM service account.
|
523
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
524
|
+
"""
|
364
525
|
pulumi.set(__self__, "role", role)
|
365
526
|
if credentials is not None:
|
366
527
|
pulumi.set(__self__, "credentials", credentials)
|
@@ -378,36 +539,57 @@ class AuthLoginGcp(dict):
|
|
378
539
|
@property
|
379
540
|
@pulumi.getter
|
380
541
|
def role(self) -> str:
|
542
|
+
"""
|
543
|
+
Name of the login role.
|
544
|
+
"""
|
381
545
|
return pulumi.get(self, "role")
|
382
546
|
|
383
547
|
@property
|
384
548
|
@pulumi.getter
|
385
549
|
def credentials(self) -> Optional[str]:
|
550
|
+
"""
|
551
|
+
Path to the Google Cloud credentials file.
|
552
|
+
"""
|
386
553
|
return pulumi.get(self, "credentials")
|
387
554
|
|
388
555
|
@property
|
389
556
|
@pulumi.getter
|
390
557
|
def jwt(self) -> Optional[str]:
|
558
|
+
"""
|
559
|
+
A signed JSON Web Token.
|
560
|
+
"""
|
391
561
|
return pulumi.get(self, "jwt")
|
392
562
|
|
393
563
|
@property
|
394
564
|
@pulumi.getter
|
395
565
|
def mount(self) -> Optional[str]:
|
566
|
+
"""
|
567
|
+
The path where the authentication engine is mounted.
|
568
|
+
"""
|
396
569
|
return pulumi.get(self, "mount")
|
397
570
|
|
398
571
|
@property
|
399
572
|
@pulumi.getter
|
400
573
|
def namespace(self) -> Optional[str]:
|
574
|
+
"""
|
575
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
576
|
+
"""
|
401
577
|
return pulumi.get(self, "namespace")
|
402
578
|
|
403
579
|
@property
|
404
580
|
@pulumi.getter(name="serviceAccount")
|
405
581
|
def service_account(self) -> Optional[str]:
|
582
|
+
"""
|
583
|
+
IAM service account.
|
584
|
+
"""
|
406
585
|
return pulumi.get(self, "service_account")
|
407
586
|
|
408
587
|
@property
|
409
588
|
@pulumi.getter(name="useRootNamespace")
|
410
589
|
def use_root_namespace(self) -> Optional[bool]:
|
590
|
+
"""
|
591
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
592
|
+
"""
|
411
593
|
return pulumi.get(self, "use_root_namespace")
|
412
594
|
|
413
595
|
|
@@ -419,6 +601,13 @@ class AuthLoginJwt(dict):
|
|
419
601
|
mount: Optional[str] = None,
|
420
602
|
namespace: Optional[str] = None,
|
421
603
|
use_root_namespace: Optional[bool] = None):
|
604
|
+
"""
|
605
|
+
:param str jwt: A signed JSON Web Token.
|
606
|
+
:param str role: Name of the login role.
|
607
|
+
:param str mount: The path where the authentication engine is mounted.
|
608
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
609
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
610
|
+
"""
|
422
611
|
pulumi.set(__self__, "jwt", jwt)
|
423
612
|
pulumi.set(__self__, "role", role)
|
424
613
|
if mount is not None:
|
@@ -431,26 +620,41 @@ class AuthLoginJwt(dict):
|
|
431
620
|
@property
|
432
621
|
@pulumi.getter
|
433
622
|
def jwt(self) -> str:
|
623
|
+
"""
|
624
|
+
A signed JSON Web Token.
|
625
|
+
"""
|
434
626
|
return pulumi.get(self, "jwt")
|
435
627
|
|
436
628
|
@property
|
437
629
|
@pulumi.getter
|
438
630
|
def role(self) -> str:
|
631
|
+
"""
|
632
|
+
Name of the login role.
|
633
|
+
"""
|
439
634
|
return pulumi.get(self, "role")
|
440
635
|
|
441
636
|
@property
|
442
637
|
@pulumi.getter
|
443
638
|
def mount(self) -> Optional[str]:
|
639
|
+
"""
|
640
|
+
The path where the authentication engine is mounted.
|
641
|
+
"""
|
444
642
|
return pulumi.get(self, "mount")
|
445
643
|
|
446
644
|
@property
|
447
645
|
@pulumi.getter
|
448
646
|
def namespace(self) -> Optional[str]:
|
647
|
+
"""
|
648
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
649
|
+
"""
|
449
650
|
return pulumi.get(self, "namespace")
|
450
651
|
|
451
652
|
@property
|
452
653
|
@pulumi.getter(name="useRootNamespace")
|
453
654
|
def use_root_namespace(self) -> Optional[bool]:
|
655
|
+
"""
|
656
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
657
|
+
"""
|
454
658
|
return pulumi.get(self, "use_root_namespace")
|
455
659
|
|
456
660
|
|
@@ -468,6 +672,19 @@ class AuthLoginKerberos(dict):
|
|
468
672
|
token: Optional[str] = None,
|
469
673
|
use_root_namespace: Optional[bool] = None,
|
470
674
|
username: Optional[str] = None):
|
675
|
+
"""
|
676
|
+
:param bool disable_fast_negotiation: Disable the Kerberos FAST negotiation.
|
677
|
+
:param str keytab_path: The Kerberos keytab file containing the entry of the login entity.
|
678
|
+
:param str krb5conf_path: A valid Kerberos configuration file e.g. /etc/krb5.conf.
|
679
|
+
:param str mount: The path where the authentication engine is mounted.
|
680
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
681
|
+
:param str realm: The Kerberos server's authoritative authentication domain
|
682
|
+
:param bool remove_instance_name: Strip the host from the username found in the keytab.
|
683
|
+
:param str service: The service principle name.
|
684
|
+
:param str token: Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO) token
|
685
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
686
|
+
:param str username: The username to login into Kerberos with.
|
687
|
+
"""
|
471
688
|
if disable_fast_negotiation is not None:
|
472
689
|
pulumi.set(__self__, "disable_fast_negotiation", disable_fast_negotiation)
|
473
690
|
if keytab_path is not None:
|
@@ -494,56 +711,89 @@ class AuthLoginKerberos(dict):
|
|
494
711
|
@property
|
495
712
|
@pulumi.getter(name="disableFastNegotiation")
|
496
713
|
def disable_fast_negotiation(self) -> Optional[bool]:
|
714
|
+
"""
|
715
|
+
Disable the Kerberos FAST negotiation.
|
716
|
+
"""
|
497
717
|
return pulumi.get(self, "disable_fast_negotiation")
|
498
718
|
|
499
719
|
@property
|
500
720
|
@pulumi.getter(name="keytabPath")
|
501
721
|
def keytab_path(self) -> Optional[str]:
|
722
|
+
"""
|
723
|
+
The Kerberos keytab file containing the entry of the login entity.
|
724
|
+
"""
|
502
725
|
return pulumi.get(self, "keytab_path")
|
503
726
|
|
504
727
|
@property
|
505
728
|
@pulumi.getter(name="krb5confPath")
|
506
729
|
def krb5conf_path(self) -> Optional[str]:
|
730
|
+
"""
|
731
|
+
A valid Kerberos configuration file e.g. /etc/krb5.conf.
|
732
|
+
"""
|
507
733
|
return pulumi.get(self, "krb5conf_path")
|
508
734
|
|
509
735
|
@property
|
510
736
|
@pulumi.getter
|
511
737
|
def mount(self) -> Optional[str]:
|
738
|
+
"""
|
739
|
+
The path where the authentication engine is mounted.
|
740
|
+
"""
|
512
741
|
return pulumi.get(self, "mount")
|
513
742
|
|
514
743
|
@property
|
515
744
|
@pulumi.getter
|
516
745
|
def namespace(self) -> Optional[str]:
|
746
|
+
"""
|
747
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
748
|
+
"""
|
517
749
|
return pulumi.get(self, "namespace")
|
518
750
|
|
519
751
|
@property
|
520
752
|
@pulumi.getter
|
521
753
|
def realm(self) -> Optional[str]:
|
754
|
+
"""
|
755
|
+
The Kerberos server's authoritative authentication domain
|
756
|
+
"""
|
522
757
|
return pulumi.get(self, "realm")
|
523
758
|
|
524
759
|
@property
|
525
760
|
@pulumi.getter(name="removeInstanceName")
|
526
761
|
def remove_instance_name(self) -> Optional[bool]:
|
762
|
+
"""
|
763
|
+
Strip the host from the username found in the keytab.
|
764
|
+
"""
|
527
765
|
return pulumi.get(self, "remove_instance_name")
|
528
766
|
|
529
767
|
@property
|
530
768
|
@pulumi.getter
|
531
769
|
def service(self) -> Optional[str]:
|
770
|
+
"""
|
771
|
+
The service principle name.
|
772
|
+
"""
|
532
773
|
return pulumi.get(self, "service")
|
533
774
|
|
534
775
|
@property
|
535
776
|
@pulumi.getter
|
536
777
|
def token(self) -> Optional[str]:
|
778
|
+
"""
|
779
|
+
Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO) token
|
780
|
+
"""
|
537
781
|
return pulumi.get(self, "token")
|
538
782
|
|
539
783
|
@property
|
540
784
|
@pulumi.getter(name="useRootNamespace")
|
541
785
|
def use_root_namespace(self) -> Optional[bool]:
|
786
|
+
"""
|
787
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
788
|
+
"""
|
542
789
|
return pulumi.get(self, "use_root_namespace")
|
543
790
|
|
544
791
|
@property
|
545
792
|
@pulumi.getter
|
546
793
|
def username(self) -> Optional[str]:
|
794
|
+
"""
|
795
|
+
The username to login into Kerberos with.
|
796
|
+
"""
|
547
797
|
return pulumi.get(self, "username")
|
548
798
|
|
549
799
|
|
@@ -555,6 +805,13 @@ class AuthLoginOci(dict):
|
|
555
805
|
mount: Optional[str] = None,
|
556
806
|
namespace: Optional[str] = None,
|
557
807
|
use_root_namespace: Optional[bool] = None):
|
808
|
+
"""
|
809
|
+
:param str auth_type: Authentication type to use when getting OCI credentials.
|
810
|
+
:param str role: Name of the login role.
|
811
|
+
:param str mount: The path where the authentication engine is mounted.
|
812
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
813
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
814
|
+
"""
|
558
815
|
pulumi.set(__self__, "auth_type", auth_type)
|
559
816
|
pulumi.set(__self__, "role", role)
|
560
817
|
if mount is not None:
|
@@ -567,26 +824,41 @@ class AuthLoginOci(dict):
|
|
567
824
|
@property
|
568
825
|
@pulumi.getter(name="authType")
|
569
826
|
def auth_type(self) -> str:
|
827
|
+
"""
|
828
|
+
Authentication type to use when getting OCI credentials.
|
829
|
+
"""
|
570
830
|
return pulumi.get(self, "auth_type")
|
571
831
|
|
572
832
|
@property
|
573
833
|
@pulumi.getter
|
574
834
|
def role(self) -> str:
|
835
|
+
"""
|
836
|
+
Name of the login role.
|
837
|
+
"""
|
575
838
|
return pulumi.get(self, "role")
|
576
839
|
|
577
840
|
@property
|
578
841
|
@pulumi.getter
|
579
842
|
def mount(self) -> Optional[str]:
|
843
|
+
"""
|
844
|
+
The path where the authentication engine is mounted.
|
845
|
+
"""
|
580
846
|
return pulumi.get(self, "mount")
|
581
847
|
|
582
848
|
@property
|
583
849
|
@pulumi.getter
|
584
850
|
def namespace(self) -> Optional[str]:
|
851
|
+
"""
|
852
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
853
|
+
"""
|
585
854
|
return pulumi.get(self, "namespace")
|
586
855
|
|
587
856
|
@property
|
588
857
|
@pulumi.getter(name="useRootNamespace")
|
589
858
|
def use_root_namespace(self) -> Optional[bool]:
|
859
|
+
"""
|
860
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
861
|
+
"""
|
590
862
|
return pulumi.get(self, "use_root_namespace")
|
591
863
|
|
592
864
|
|
@@ -599,6 +871,14 @@ class AuthLoginOidc(dict):
|
|
599
871
|
mount: Optional[str] = None,
|
600
872
|
namespace: Optional[str] = None,
|
601
873
|
use_root_namespace: Optional[bool] = None):
|
874
|
+
"""
|
875
|
+
:param str role: Name of the login role.
|
876
|
+
:param str callback_address: The callback address. Must be a valid URI without the path.
|
877
|
+
:param str callback_listener_address: The callback listener's address. Must be a valid URI without the path.
|
878
|
+
:param str mount: The path where the authentication engine is mounted.
|
879
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
880
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
881
|
+
"""
|
602
882
|
pulumi.set(__self__, "role", role)
|
603
883
|
if callback_address is not None:
|
604
884
|
pulumi.set(__self__, "callback_address", callback_address)
|
@@ -614,31 +894,49 @@ class AuthLoginOidc(dict):
|
|
614
894
|
@property
|
615
895
|
@pulumi.getter
|
616
896
|
def role(self) -> str:
|
897
|
+
"""
|
898
|
+
Name of the login role.
|
899
|
+
"""
|
617
900
|
return pulumi.get(self, "role")
|
618
901
|
|
619
902
|
@property
|
620
903
|
@pulumi.getter(name="callbackAddress")
|
621
904
|
def callback_address(self) -> Optional[str]:
|
905
|
+
"""
|
906
|
+
The callback address. Must be a valid URI without the path.
|
907
|
+
"""
|
622
908
|
return pulumi.get(self, "callback_address")
|
623
909
|
|
624
910
|
@property
|
625
911
|
@pulumi.getter(name="callbackListenerAddress")
|
626
912
|
def callback_listener_address(self) -> Optional[str]:
|
913
|
+
"""
|
914
|
+
The callback listener's address. Must be a valid URI without the path.
|
915
|
+
"""
|
627
916
|
return pulumi.get(self, "callback_listener_address")
|
628
917
|
|
629
918
|
@property
|
630
919
|
@pulumi.getter
|
631
920
|
def mount(self) -> Optional[str]:
|
921
|
+
"""
|
922
|
+
The path where the authentication engine is mounted.
|
923
|
+
"""
|
632
924
|
return pulumi.get(self, "mount")
|
633
925
|
|
634
926
|
@property
|
635
927
|
@pulumi.getter
|
636
928
|
def namespace(self) -> Optional[str]:
|
929
|
+
"""
|
930
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
931
|
+
"""
|
637
932
|
return pulumi.get(self, "namespace")
|
638
933
|
|
639
934
|
@property
|
640
935
|
@pulumi.getter(name="useRootNamespace")
|
641
936
|
def use_root_namespace(self) -> Optional[bool]:
|
937
|
+
"""
|
938
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
939
|
+
"""
|
642
940
|
return pulumi.get(self, "use_root_namespace")
|
643
941
|
|
644
942
|
|
@@ -650,6 +948,13 @@ class AuthLoginRadius(dict):
|
|
650
948
|
mount: Optional[str] = None,
|
651
949
|
namespace: Optional[str] = None,
|
652
950
|
use_root_namespace: Optional[bool] = None):
|
951
|
+
"""
|
952
|
+
:param str password: The Radius password for username.
|
953
|
+
:param str username: The Radius username.
|
954
|
+
:param str mount: The path where the authentication engine is mounted.
|
955
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
956
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
957
|
+
"""
|
653
958
|
pulumi.set(__self__, "password", password)
|
654
959
|
pulumi.set(__self__, "username", username)
|
655
960
|
if mount is not None:
|
@@ -662,26 +967,41 @@ class AuthLoginRadius(dict):
|
|
662
967
|
@property
|
663
968
|
@pulumi.getter
|
664
969
|
def password(self) -> str:
|
970
|
+
"""
|
971
|
+
The Radius password for username.
|
972
|
+
"""
|
665
973
|
return pulumi.get(self, "password")
|
666
974
|
|
667
975
|
@property
|
668
976
|
@pulumi.getter
|
669
977
|
def username(self) -> str:
|
978
|
+
"""
|
979
|
+
The Radius username.
|
980
|
+
"""
|
670
981
|
return pulumi.get(self, "username")
|
671
982
|
|
672
983
|
@property
|
673
984
|
@pulumi.getter
|
674
985
|
def mount(self) -> Optional[str]:
|
986
|
+
"""
|
987
|
+
The path where the authentication engine is mounted.
|
988
|
+
"""
|
675
989
|
return pulumi.get(self, "mount")
|
676
990
|
|
677
991
|
@property
|
678
992
|
@pulumi.getter
|
679
993
|
def namespace(self) -> Optional[str]:
|
994
|
+
"""
|
995
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
996
|
+
"""
|
680
997
|
return pulumi.get(self, "namespace")
|
681
998
|
|
682
999
|
@property
|
683
1000
|
@pulumi.getter(name="useRootNamespace")
|
684
1001
|
def use_root_namespace(self) -> Optional[bool]:
|
1002
|
+
"""
|
1003
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
1004
|
+
"""
|
685
1005
|
return pulumi.get(self, "use_root_namespace")
|
686
1006
|
|
687
1007
|
|
@@ -691,6 +1011,11 @@ class AuthLoginTokenFile(dict):
|
|
691
1011
|
filename: str,
|
692
1012
|
namespace: Optional[str] = None,
|
693
1013
|
use_root_namespace: Optional[bool] = None):
|
1014
|
+
"""
|
1015
|
+
:param str filename: The name of a file containing a single line that is a valid Vault token
|
1016
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
1017
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
1018
|
+
"""
|
694
1019
|
pulumi.set(__self__, "filename", filename)
|
695
1020
|
if namespace is not None:
|
696
1021
|
pulumi.set(__self__, "namespace", namespace)
|
@@ -700,16 +1025,25 @@ class AuthLoginTokenFile(dict):
|
|
700
1025
|
@property
|
701
1026
|
@pulumi.getter
|
702
1027
|
def filename(self) -> str:
|
1028
|
+
"""
|
1029
|
+
The name of a file containing a single line that is a valid Vault token
|
1030
|
+
"""
|
703
1031
|
return pulumi.get(self, "filename")
|
704
1032
|
|
705
1033
|
@property
|
706
1034
|
@pulumi.getter
|
707
1035
|
def namespace(self) -> Optional[str]:
|
1036
|
+
"""
|
1037
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
1038
|
+
"""
|
708
1039
|
return pulumi.get(self, "namespace")
|
709
1040
|
|
710
1041
|
@property
|
711
1042
|
@pulumi.getter(name="useRootNamespace")
|
712
1043
|
def use_root_namespace(self) -> Optional[bool]:
|
1044
|
+
"""
|
1045
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
1046
|
+
"""
|
713
1047
|
return pulumi.get(self, "use_root_namespace")
|
714
1048
|
|
715
1049
|
|
@@ -722,6 +1056,14 @@ class AuthLoginUserpass(dict):
|
|
722
1056
|
password: Optional[str] = None,
|
723
1057
|
password_file: Optional[str] = None,
|
724
1058
|
use_root_namespace: Optional[bool] = None):
|
1059
|
+
"""
|
1060
|
+
:param str username: Login with username
|
1061
|
+
:param str mount: The path where the authentication engine is mounted.
|
1062
|
+
:param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
1063
|
+
:param str password: Login with password
|
1064
|
+
:param str password_file: Login with password from a file
|
1065
|
+
:param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
1066
|
+
"""
|
725
1067
|
pulumi.set(__self__, "username", username)
|
726
1068
|
if mount is not None:
|
727
1069
|
pulumi.set(__self__, "mount", mount)
|
@@ -737,31 +1079,49 @@ class AuthLoginUserpass(dict):
|
|
737
1079
|
@property
|
738
1080
|
@pulumi.getter
|
739
1081
|
def username(self) -> str:
|
1082
|
+
"""
|
1083
|
+
Login with username
|
1084
|
+
"""
|
740
1085
|
return pulumi.get(self, "username")
|
741
1086
|
|
742
1087
|
@property
|
743
1088
|
@pulumi.getter
|
744
1089
|
def mount(self) -> Optional[str]:
|
1090
|
+
"""
|
1091
|
+
The path where the authentication engine is mounted.
|
1092
|
+
"""
|
745
1093
|
return pulumi.get(self, "mount")
|
746
1094
|
|
747
1095
|
@property
|
748
1096
|
@pulumi.getter
|
749
1097
|
def namespace(self) -> Optional[str]:
|
1098
|
+
"""
|
1099
|
+
The authentication engine's namespace. Conflicts with use_root_namespace
|
1100
|
+
"""
|
750
1101
|
return pulumi.get(self, "namespace")
|
751
1102
|
|
752
1103
|
@property
|
753
1104
|
@pulumi.getter
|
754
1105
|
def password(self) -> Optional[str]:
|
1106
|
+
"""
|
1107
|
+
Login with password
|
1108
|
+
"""
|
755
1109
|
return pulumi.get(self, "password")
|
756
1110
|
|
757
1111
|
@property
|
758
1112
|
@pulumi.getter(name="passwordFile")
|
759
1113
|
def password_file(self) -> Optional[str]:
|
1114
|
+
"""
|
1115
|
+
Login with password from a file
|
1116
|
+
"""
|
760
1117
|
return pulumi.get(self, "password_file")
|
761
1118
|
|
762
1119
|
@property
|
763
1120
|
@pulumi.getter(name="useRootNamespace")
|
764
1121
|
def use_root_namespace(self) -> Optional[bool]:
|
1122
|
+
"""
|
1123
|
+
Authenticate to the root Vault namespace. Conflicts with namespace
|
1124
|
+
"""
|
765
1125
|
return pulumi.get(self, "use_root_namespace")
|
766
1126
|
|
767
1127
|
|
@@ -770,17 +1130,27 @@ class ClientAuth(dict):
|
|
770
1130
|
def __init__(__self__, *,
|
771
1131
|
cert_file: str,
|
772
1132
|
key_file: str):
|
1133
|
+
"""
|
1134
|
+
:param str cert_file: Path to a file containing the client certificate.
|
1135
|
+
:param str key_file: Path to a file containing the private key that the certificate was issued for.
|
1136
|
+
"""
|
773
1137
|
pulumi.set(__self__, "cert_file", cert_file)
|
774
1138
|
pulumi.set(__self__, "key_file", key_file)
|
775
1139
|
|
776
1140
|
@property
|
777
1141
|
@pulumi.getter(name="certFile")
|
778
1142
|
def cert_file(self) -> str:
|
1143
|
+
"""
|
1144
|
+
Path to a file containing the client certificate.
|
1145
|
+
"""
|
779
1146
|
return pulumi.get(self, "cert_file")
|
780
1147
|
|
781
1148
|
@property
|
782
1149
|
@pulumi.getter(name="keyFile")
|
783
1150
|
def key_file(self) -> str:
|
1151
|
+
"""
|
1152
|
+
Path to a file containing the private key that the certificate was issued for.
|
1153
|
+
"""
|
784
1154
|
return pulumi.get(self, "key_file")
|
785
1155
|
|
786
1156
|
|
@@ -789,17 +1159,27 @@ class Headers(dict):
|
|
789
1159
|
def __init__(__self__, *,
|
790
1160
|
name: str,
|
791
1161
|
value: str):
|
1162
|
+
"""
|
1163
|
+
:param str name: The header name
|
1164
|
+
:param str value: The header value
|
1165
|
+
"""
|
792
1166
|
pulumi.set(__self__, "name", name)
|
793
1167
|
pulumi.set(__self__, "value", value)
|
794
1168
|
|
795
1169
|
@property
|
796
1170
|
@pulumi.getter
|
797
1171
|
def name(self) -> str:
|
1172
|
+
"""
|
1173
|
+
The header name
|
1174
|
+
"""
|
798
1175
|
return pulumi.get(self, "name")
|
799
1176
|
|
800
1177
|
@property
|
801
1178
|
@pulumi.getter
|
802
1179
|
def value(self) -> str:
|
1180
|
+
"""
|
1181
|
+
The header value
|
1182
|
+
"""
|
803
1183
|
return pulumi.get(self, "value")
|
804
1184
|
|
805
1185
|
|