pulumi-vault 5.19.0a1705474292__py3-none-any.whl → 5.20.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (48) hide show
  1. pulumi_vault/__init__.py +59 -0
  2. pulumi_vault/_inputs.py +380 -0
  3. pulumi_vault/_utilities.py +2 -2
  4. pulumi_vault/aws/secret_backend.py +188 -0
  5. pulumi_vault/aws/secret_backend_static_role.py +2 -2
  6. pulumi_vault/azure/backend.py +7 -21
  7. pulumi_vault/azure/backend_role.py +111 -0
  8. pulumi_vault/config/__init__.pyi +0 -3
  9. pulumi_vault/config/outputs.py +380 -0
  10. pulumi_vault/config/vars.py +0 -3
  11. pulumi_vault/consul/secret_backend.py +7 -35
  12. pulumi_vault/database/_inputs.py +536 -0
  13. pulumi_vault/database/outputs.py +483 -3
  14. pulumi_vault/gcp/_inputs.py +162 -4
  15. pulumi_vault/gcp/auth_backend.py +64 -3
  16. pulumi_vault/gcp/outputs.py +161 -4
  17. pulumi_vault/get_raft_autopilot_state.py +0 -12
  18. pulumi_vault/identity/group_alias.py +6 -6
  19. pulumi_vault/kubernetes/auth_backend_config.py +7 -7
  20. pulumi_vault/kubernetes/secret_backend_role.py +8 -4
  21. pulumi_vault/kv/_inputs.py +12 -0
  22. pulumi_vault/kv/outputs.py +12 -0
  23. pulumi_vault/ldap/secret_backend_dynamic_role.py +2 -2
  24. pulumi_vault/ldap/secret_backend_static_role.py +2 -2
  25. pulumi_vault/managed/_inputs.py +12 -0
  26. pulumi_vault/managed/keys.py +20 -0
  27. pulumi_vault/managed/outputs.py +12 -0
  28. pulumi_vault/mongodbatlas/secret_role.py +2 -2
  29. pulumi_vault/namespace.py +46 -14
  30. pulumi_vault/pkisecret/secret_backend_config_issuers.py +0 -6
  31. pulumi_vault/pkisecret/secret_backend_issuer.py +0 -10
  32. pulumi_vault/pkisecret/secret_backend_role.py +54 -7
  33. pulumi_vault/rabbitmq/_inputs.py +36 -0
  34. pulumi_vault/rabbitmq/outputs.py +36 -0
  35. pulumi_vault/saml/auth_backend_role.py +7 -14
  36. pulumi_vault/secrets/__init__.py +14 -0
  37. pulumi_vault/secrets/sync_association.py +464 -0
  38. pulumi_vault/secrets/sync_aws_destination.py +564 -0
  39. pulumi_vault/secrets/sync_azure_destination.py +674 -0
  40. pulumi_vault/secrets/sync_config.py +297 -0
  41. pulumi_vault/secrets/sync_gcp_destination.py +438 -0
  42. pulumi_vault/secrets/sync_gh_destination.py +511 -0
  43. pulumi_vault/secrets/sync_vercel_destination.py +541 -0
  44. pulumi_vault/ssh/secret_backend_role.py +7 -14
  45. {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/METADATA +2 -2
  46. {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/RECORD +48 -40
  47. {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/WHEEL +0 -0
  48. {pulumi_vault-5.19.0a1705474292.dist-info → pulumi_vault-5.20.0.dist-info}/top_level.txt +0 -0
@@ -34,6 +34,10 @@ class AuthLogin(dict):
34
34
  namespace: Optional[str] = None,
35
35
  parameters: Optional[Mapping[str, str]] = None,
36
36
  use_root_namespace: Optional[bool] = None):
37
+ """
38
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
39
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
40
+ """
37
41
  pulumi.set(__self__, "path", path)
38
42
  if method is not None:
39
43
  pulumi.set(__self__, "method", method)
@@ -57,6 +61,9 @@ class AuthLogin(dict):
57
61
  @property
58
62
  @pulumi.getter
59
63
  def namespace(self) -> Optional[str]:
64
+ """
65
+ The authentication engine's namespace. Conflicts with use_root_namespace
66
+ """
60
67
  return pulumi.get(self, "namespace")
61
68
 
62
69
  @property
@@ -67,6 +74,9 @@ class AuthLogin(dict):
67
74
  @property
68
75
  @pulumi.getter(name="useRootNamespace")
69
76
  def use_root_namespace(self) -> Optional[bool]:
77
+ """
78
+ Authenticate to the root Vault namespace. Conflicts with namespace
79
+ """
70
80
  return pulumi.get(self, "use_root_namespace")
71
81
 
72
82
 
@@ -89,6 +99,24 @@ class AuthLoginAws(dict):
89
99
  mount: Optional[str] = None,
90
100
  namespace: Optional[str] = None,
91
101
  use_root_namespace: Optional[bool] = None):
102
+ """
103
+ :param str role: The Vault role to use when logging into Vault.
104
+ :param str aws_access_key_id: The AWS access key ID.
105
+ :param str aws_iam_endpoint: The IAM endpoint URL.
106
+ :param str aws_profile: The name of the AWS profile.
107
+ :param str aws_region: The AWS region.
108
+ :param str aws_role_arn: The ARN of the AWS Role to assume.Used during STS AssumeRole
109
+ :param str aws_role_session_name: Specifies the name to attach to the AWS role session. Used during STS AssumeRole
110
+ :param str aws_secret_access_key: The AWS secret access key.
111
+ :param str aws_session_token: The AWS session token.
112
+ :param str aws_shared_credentials_file: Path to the AWS shared credentials file.
113
+ :param str aws_sts_endpoint: The STS endpoint URL.
114
+ :param str aws_web_identity_token_file: Path to the file containing an OAuth 2.0 access token or OpenID Connect ID token.
115
+ :param str header_value: The Vault header value to include in the STS signing request.
116
+ :param str mount: The path where the authentication engine is mounted.
117
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
118
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
119
+ """
92
120
  pulumi.set(__self__, "role", role)
93
121
  if aws_access_key_id is not None:
94
122
  pulumi.set(__self__, "aws_access_key_id", aws_access_key_id)
@@ -124,81 +152,129 @@ class AuthLoginAws(dict):
124
152
  @property
125
153
  @pulumi.getter
126
154
  def role(self) -> str:
155
+ """
156
+ The Vault role to use when logging into Vault.
157
+ """
127
158
  return pulumi.get(self, "role")
128
159
 
129
160
  @property
130
161
  @pulumi.getter(name="awsAccessKeyId")
131
162
  def aws_access_key_id(self) -> Optional[str]:
163
+ """
164
+ The AWS access key ID.
165
+ """
132
166
  return pulumi.get(self, "aws_access_key_id")
133
167
 
134
168
  @property
135
169
  @pulumi.getter(name="awsIamEndpoint")
136
170
  def aws_iam_endpoint(self) -> Optional[str]:
171
+ """
172
+ The IAM endpoint URL.
173
+ """
137
174
  return pulumi.get(self, "aws_iam_endpoint")
138
175
 
139
176
  @property
140
177
  @pulumi.getter(name="awsProfile")
141
178
  def aws_profile(self) -> Optional[str]:
179
+ """
180
+ The name of the AWS profile.
181
+ """
142
182
  return pulumi.get(self, "aws_profile")
143
183
 
144
184
  @property
145
185
  @pulumi.getter(name="awsRegion")
146
186
  def aws_region(self) -> Optional[str]:
187
+ """
188
+ The AWS region.
189
+ """
147
190
  return pulumi.get(self, "aws_region")
148
191
 
149
192
  @property
150
193
  @pulumi.getter(name="awsRoleArn")
151
194
  def aws_role_arn(self) -> Optional[str]:
195
+ """
196
+ The ARN of the AWS Role to assume.Used during STS AssumeRole
197
+ """
152
198
  return pulumi.get(self, "aws_role_arn")
153
199
 
154
200
  @property
155
201
  @pulumi.getter(name="awsRoleSessionName")
156
202
  def aws_role_session_name(self) -> Optional[str]:
203
+ """
204
+ Specifies the name to attach to the AWS role session. Used during STS AssumeRole
205
+ """
157
206
  return pulumi.get(self, "aws_role_session_name")
158
207
 
159
208
  @property
160
209
  @pulumi.getter(name="awsSecretAccessKey")
161
210
  def aws_secret_access_key(self) -> Optional[str]:
211
+ """
212
+ The AWS secret access key.
213
+ """
162
214
  return pulumi.get(self, "aws_secret_access_key")
163
215
 
164
216
  @property
165
217
  @pulumi.getter(name="awsSessionToken")
166
218
  def aws_session_token(self) -> Optional[str]:
219
+ """
220
+ The AWS session token.
221
+ """
167
222
  return pulumi.get(self, "aws_session_token")
168
223
 
169
224
  @property
170
225
  @pulumi.getter(name="awsSharedCredentialsFile")
171
226
  def aws_shared_credentials_file(self) -> Optional[str]:
227
+ """
228
+ Path to the AWS shared credentials file.
229
+ """
172
230
  return pulumi.get(self, "aws_shared_credentials_file")
173
231
 
174
232
  @property
175
233
  @pulumi.getter(name="awsStsEndpoint")
176
234
  def aws_sts_endpoint(self) -> Optional[str]:
235
+ """
236
+ The STS endpoint URL.
237
+ """
177
238
  return pulumi.get(self, "aws_sts_endpoint")
178
239
 
179
240
  @property
180
241
  @pulumi.getter(name="awsWebIdentityTokenFile")
181
242
  def aws_web_identity_token_file(self) -> Optional[str]:
243
+ """
244
+ Path to the file containing an OAuth 2.0 access token or OpenID Connect ID token.
245
+ """
182
246
  return pulumi.get(self, "aws_web_identity_token_file")
183
247
 
184
248
  @property
185
249
  @pulumi.getter(name="headerValue")
186
250
  def header_value(self) -> Optional[str]:
251
+ """
252
+ The Vault header value to include in the STS signing request.
253
+ """
187
254
  return pulumi.get(self, "header_value")
188
255
 
189
256
  @property
190
257
  @pulumi.getter
191
258
  def mount(self) -> Optional[str]:
259
+ """
260
+ The path where the authentication engine is mounted.
261
+ """
192
262
  return pulumi.get(self, "mount")
193
263
 
194
264
  @property
195
265
  @pulumi.getter
196
266
  def namespace(self) -> Optional[str]:
267
+ """
268
+ The authentication engine's namespace. Conflicts with use_root_namespace
269
+ """
197
270
  return pulumi.get(self, "namespace")
198
271
 
199
272
  @property
200
273
  @pulumi.getter(name="useRootNamespace")
201
274
  def use_root_namespace(self) -> Optional[bool]:
275
+ """
276
+ Authenticate to the root Vault namespace. Conflicts with namespace
277
+ """
202
278
  return pulumi.get(self, "use_root_namespace")
203
279
 
204
280
 
@@ -217,6 +293,20 @@ class AuthLoginAzure(dict):
217
293
  use_root_namespace: Optional[bool] = None,
218
294
  vm_name: Optional[str] = None,
219
295
  vmss_name: Optional[str] = None):
296
+ """
297
+ :param str resource_group_name: The resource group for the machine that generated the MSI token. This information can be obtained through instance metadata.
298
+ :param str role: Name of the login role.
299
+ :param str subscription_id: The subscription ID for the machine that generated the MSI token. This information can be obtained through instance metadata.
300
+ :param str client_id: The identity's client ID.
301
+ :param str jwt: A signed JSON Web Token. If not specified on will be created automatically
302
+ :param str mount: The path where the authentication engine is mounted.
303
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
304
+ :param str scope: The scopes to include in the token request.
305
+ :param str tenant_id: Provides the tenant ID to use in a multi-tenant authentication scenario.
306
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
307
+ :param str vm_name: The virtual machine name for the machine that generated the MSI token. This information can be obtained through instance metadata.
308
+ :param str vmss_name: The virtual machine scale set name for the machine that generated the MSI token. This information can be obtained through instance metadata.
309
+ """
220
310
  pulumi.set(__self__, "resource_group_name", resource_group_name)
221
311
  pulumi.set(__self__, "role", role)
222
312
  pulumi.set(__self__, "subscription_id", subscription_id)
@@ -242,61 +332,97 @@ class AuthLoginAzure(dict):
242
332
  @property
243
333
  @pulumi.getter(name="resourceGroupName")
244
334
  def resource_group_name(self) -> str:
335
+ """
336
+ The resource group for the machine that generated the MSI token. This information can be obtained through instance metadata.
337
+ """
245
338
  return pulumi.get(self, "resource_group_name")
246
339
 
247
340
  @property
248
341
  @pulumi.getter
249
342
  def role(self) -> str:
343
+ """
344
+ Name of the login role.
345
+ """
250
346
  return pulumi.get(self, "role")
251
347
 
252
348
  @property
253
349
  @pulumi.getter(name="subscriptionId")
254
350
  def subscription_id(self) -> str:
351
+ """
352
+ The subscription ID for the machine that generated the MSI token. This information can be obtained through instance metadata.
353
+ """
255
354
  return pulumi.get(self, "subscription_id")
256
355
 
257
356
  @property
258
357
  @pulumi.getter(name="clientId")
259
358
  def client_id(self) -> Optional[str]:
359
+ """
360
+ The identity's client ID.
361
+ """
260
362
  return pulumi.get(self, "client_id")
261
363
 
262
364
  @property
263
365
  @pulumi.getter
264
366
  def jwt(self) -> Optional[str]:
367
+ """
368
+ A signed JSON Web Token. If not specified on will be created automatically
369
+ """
265
370
  return pulumi.get(self, "jwt")
266
371
 
267
372
  @property
268
373
  @pulumi.getter
269
374
  def mount(self) -> Optional[str]:
375
+ """
376
+ The path where the authentication engine is mounted.
377
+ """
270
378
  return pulumi.get(self, "mount")
271
379
 
272
380
  @property
273
381
  @pulumi.getter
274
382
  def namespace(self) -> Optional[str]:
383
+ """
384
+ The authentication engine's namespace. Conflicts with use_root_namespace
385
+ """
275
386
  return pulumi.get(self, "namespace")
276
387
 
277
388
  @property
278
389
  @pulumi.getter
279
390
  def scope(self) -> Optional[str]:
391
+ """
392
+ The scopes to include in the token request.
393
+ """
280
394
  return pulumi.get(self, "scope")
281
395
 
282
396
  @property
283
397
  @pulumi.getter(name="tenantId")
284
398
  def tenant_id(self) -> Optional[str]:
399
+ """
400
+ Provides the tenant ID to use in a multi-tenant authentication scenario.
401
+ """
285
402
  return pulumi.get(self, "tenant_id")
286
403
 
287
404
  @property
288
405
  @pulumi.getter(name="useRootNamespace")
289
406
  def use_root_namespace(self) -> Optional[bool]:
407
+ """
408
+ Authenticate to the root Vault namespace. Conflicts with namespace
409
+ """
290
410
  return pulumi.get(self, "use_root_namespace")
291
411
 
292
412
  @property
293
413
  @pulumi.getter(name="vmName")
294
414
  def vm_name(self) -> Optional[str]:
415
+ """
416
+ The virtual machine name for the machine that generated the MSI token. This information can be obtained through instance metadata.
417
+ """
295
418
  return pulumi.get(self, "vm_name")
296
419
 
297
420
  @property
298
421
  @pulumi.getter(name="vmssName")
299
422
  def vmss_name(self) -> Optional[str]:
423
+ """
424
+ The virtual machine scale set name for the machine that generated the MSI token. This information can be obtained through instance metadata.
425
+ """
300
426
  return pulumi.get(self, "vmss_name")
301
427
 
302
428
 
@@ -309,6 +435,14 @@ class AuthLoginCert(dict):
309
435
  name: Optional[str] = None,
310
436
  namespace: Optional[str] = None,
311
437
  use_root_namespace: Optional[bool] = None):
438
+ """
439
+ :param str cert_file: Path to a file containing the client certificate.
440
+ :param str key_file: Path to a file containing the private key that the certificate was issued for.
441
+ :param str mount: The path where the authentication engine is mounted.
442
+ :param str name: Name of the certificate's role
443
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
444
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
445
+ """
312
446
  pulumi.set(__self__, "cert_file", cert_file)
313
447
  pulumi.set(__self__, "key_file", key_file)
314
448
  if mount is not None:
@@ -323,31 +457,49 @@ class AuthLoginCert(dict):
323
457
  @property
324
458
  @pulumi.getter(name="certFile")
325
459
  def cert_file(self) -> str:
460
+ """
461
+ Path to a file containing the client certificate.
462
+ """
326
463
  return pulumi.get(self, "cert_file")
327
464
 
328
465
  @property
329
466
  @pulumi.getter(name="keyFile")
330
467
  def key_file(self) -> str:
468
+ """
469
+ Path to a file containing the private key that the certificate was issued for.
470
+ """
331
471
  return pulumi.get(self, "key_file")
332
472
 
333
473
  @property
334
474
  @pulumi.getter
335
475
  def mount(self) -> Optional[str]:
476
+ """
477
+ The path where the authentication engine is mounted.
478
+ """
336
479
  return pulumi.get(self, "mount")
337
480
 
338
481
  @property
339
482
  @pulumi.getter
340
483
  def name(self) -> Optional[str]:
484
+ """
485
+ Name of the certificate's role
486
+ """
341
487
  return pulumi.get(self, "name")
342
488
 
343
489
  @property
344
490
  @pulumi.getter
345
491
  def namespace(self) -> Optional[str]:
492
+ """
493
+ The authentication engine's namespace. Conflicts with use_root_namespace
494
+ """
346
495
  return pulumi.get(self, "namespace")
347
496
 
348
497
  @property
349
498
  @pulumi.getter(name="useRootNamespace")
350
499
  def use_root_namespace(self) -> Optional[bool]:
500
+ """
501
+ Authenticate to the root Vault namespace. Conflicts with namespace
502
+ """
351
503
  return pulumi.get(self, "use_root_namespace")
352
504
 
353
505
 
@@ -361,6 +513,15 @@ class AuthLoginGcp(dict):
361
513
  namespace: Optional[str] = None,
362
514
  service_account: Optional[str] = None,
363
515
  use_root_namespace: Optional[bool] = None):
516
+ """
517
+ :param str role: Name of the login role.
518
+ :param str credentials: Path to the Google Cloud credentials file.
519
+ :param str jwt: A signed JSON Web Token.
520
+ :param str mount: The path where the authentication engine is mounted.
521
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
522
+ :param str service_account: IAM service account.
523
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
524
+ """
364
525
  pulumi.set(__self__, "role", role)
365
526
  if credentials is not None:
366
527
  pulumi.set(__self__, "credentials", credentials)
@@ -378,36 +539,57 @@ class AuthLoginGcp(dict):
378
539
  @property
379
540
  @pulumi.getter
380
541
  def role(self) -> str:
542
+ """
543
+ Name of the login role.
544
+ """
381
545
  return pulumi.get(self, "role")
382
546
 
383
547
  @property
384
548
  @pulumi.getter
385
549
  def credentials(self) -> Optional[str]:
550
+ """
551
+ Path to the Google Cloud credentials file.
552
+ """
386
553
  return pulumi.get(self, "credentials")
387
554
 
388
555
  @property
389
556
  @pulumi.getter
390
557
  def jwt(self) -> Optional[str]:
558
+ """
559
+ A signed JSON Web Token.
560
+ """
391
561
  return pulumi.get(self, "jwt")
392
562
 
393
563
  @property
394
564
  @pulumi.getter
395
565
  def mount(self) -> Optional[str]:
566
+ """
567
+ The path where the authentication engine is mounted.
568
+ """
396
569
  return pulumi.get(self, "mount")
397
570
 
398
571
  @property
399
572
  @pulumi.getter
400
573
  def namespace(self) -> Optional[str]:
574
+ """
575
+ The authentication engine's namespace. Conflicts with use_root_namespace
576
+ """
401
577
  return pulumi.get(self, "namespace")
402
578
 
403
579
  @property
404
580
  @pulumi.getter(name="serviceAccount")
405
581
  def service_account(self) -> Optional[str]:
582
+ """
583
+ IAM service account.
584
+ """
406
585
  return pulumi.get(self, "service_account")
407
586
 
408
587
  @property
409
588
  @pulumi.getter(name="useRootNamespace")
410
589
  def use_root_namespace(self) -> Optional[bool]:
590
+ """
591
+ Authenticate to the root Vault namespace. Conflicts with namespace
592
+ """
411
593
  return pulumi.get(self, "use_root_namespace")
412
594
 
413
595
 
@@ -419,6 +601,13 @@ class AuthLoginJwt(dict):
419
601
  mount: Optional[str] = None,
420
602
  namespace: Optional[str] = None,
421
603
  use_root_namespace: Optional[bool] = None):
604
+ """
605
+ :param str jwt: A signed JSON Web Token.
606
+ :param str role: Name of the login role.
607
+ :param str mount: The path where the authentication engine is mounted.
608
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
609
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
610
+ """
422
611
  pulumi.set(__self__, "jwt", jwt)
423
612
  pulumi.set(__self__, "role", role)
424
613
  if mount is not None:
@@ -431,26 +620,41 @@ class AuthLoginJwt(dict):
431
620
  @property
432
621
  @pulumi.getter
433
622
  def jwt(self) -> str:
623
+ """
624
+ A signed JSON Web Token.
625
+ """
434
626
  return pulumi.get(self, "jwt")
435
627
 
436
628
  @property
437
629
  @pulumi.getter
438
630
  def role(self) -> str:
631
+ """
632
+ Name of the login role.
633
+ """
439
634
  return pulumi.get(self, "role")
440
635
 
441
636
  @property
442
637
  @pulumi.getter
443
638
  def mount(self) -> Optional[str]:
639
+ """
640
+ The path where the authentication engine is mounted.
641
+ """
444
642
  return pulumi.get(self, "mount")
445
643
 
446
644
  @property
447
645
  @pulumi.getter
448
646
  def namespace(self) -> Optional[str]:
647
+ """
648
+ The authentication engine's namespace. Conflicts with use_root_namespace
649
+ """
449
650
  return pulumi.get(self, "namespace")
450
651
 
451
652
  @property
452
653
  @pulumi.getter(name="useRootNamespace")
453
654
  def use_root_namespace(self) -> Optional[bool]:
655
+ """
656
+ Authenticate to the root Vault namespace. Conflicts with namespace
657
+ """
454
658
  return pulumi.get(self, "use_root_namespace")
455
659
 
456
660
 
@@ -468,6 +672,19 @@ class AuthLoginKerberos(dict):
468
672
  token: Optional[str] = None,
469
673
  use_root_namespace: Optional[bool] = None,
470
674
  username: Optional[str] = None):
675
+ """
676
+ :param bool disable_fast_negotiation: Disable the Kerberos FAST negotiation.
677
+ :param str keytab_path: The Kerberos keytab file containing the entry of the login entity.
678
+ :param str krb5conf_path: A valid Kerberos configuration file e.g. /etc/krb5.conf.
679
+ :param str mount: The path where the authentication engine is mounted.
680
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
681
+ :param str realm: The Kerberos server's authoritative authentication domain
682
+ :param bool remove_instance_name: Strip the host from the username found in the keytab.
683
+ :param str service: The service principle name.
684
+ :param str token: Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO) token
685
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
686
+ :param str username: The username to login into Kerberos with.
687
+ """
471
688
  if disable_fast_negotiation is not None:
472
689
  pulumi.set(__self__, "disable_fast_negotiation", disable_fast_negotiation)
473
690
  if keytab_path is not None:
@@ -494,56 +711,89 @@ class AuthLoginKerberos(dict):
494
711
  @property
495
712
  @pulumi.getter(name="disableFastNegotiation")
496
713
  def disable_fast_negotiation(self) -> Optional[bool]:
714
+ """
715
+ Disable the Kerberos FAST negotiation.
716
+ """
497
717
  return pulumi.get(self, "disable_fast_negotiation")
498
718
 
499
719
  @property
500
720
  @pulumi.getter(name="keytabPath")
501
721
  def keytab_path(self) -> Optional[str]:
722
+ """
723
+ The Kerberos keytab file containing the entry of the login entity.
724
+ """
502
725
  return pulumi.get(self, "keytab_path")
503
726
 
504
727
  @property
505
728
  @pulumi.getter(name="krb5confPath")
506
729
  def krb5conf_path(self) -> Optional[str]:
730
+ """
731
+ A valid Kerberos configuration file e.g. /etc/krb5.conf.
732
+ """
507
733
  return pulumi.get(self, "krb5conf_path")
508
734
 
509
735
  @property
510
736
  @pulumi.getter
511
737
  def mount(self) -> Optional[str]:
738
+ """
739
+ The path where the authentication engine is mounted.
740
+ """
512
741
  return pulumi.get(self, "mount")
513
742
 
514
743
  @property
515
744
  @pulumi.getter
516
745
  def namespace(self) -> Optional[str]:
746
+ """
747
+ The authentication engine's namespace. Conflicts with use_root_namespace
748
+ """
517
749
  return pulumi.get(self, "namespace")
518
750
 
519
751
  @property
520
752
  @pulumi.getter
521
753
  def realm(self) -> Optional[str]:
754
+ """
755
+ The Kerberos server's authoritative authentication domain
756
+ """
522
757
  return pulumi.get(self, "realm")
523
758
 
524
759
  @property
525
760
  @pulumi.getter(name="removeInstanceName")
526
761
  def remove_instance_name(self) -> Optional[bool]:
762
+ """
763
+ Strip the host from the username found in the keytab.
764
+ """
527
765
  return pulumi.get(self, "remove_instance_name")
528
766
 
529
767
  @property
530
768
  @pulumi.getter
531
769
  def service(self) -> Optional[str]:
770
+ """
771
+ The service principle name.
772
+ """
532
773
  return pulumi.get(self, "service")
533
774
 
534
775
  @property
535
776
  @pulumi.getter
536
777
  def token(self) -> Optional[str]:
778
+ """
779
+ Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO) token
780
+ """
537
781
  return pulumi.get(self, "token")
538
782
 
539
783
  @property
540
784
  @pulumi.getter(name="useRootNamespace")
541
785
  def use_root_namespace(self) -> Optional[bool]:
786
+ """
787
+ Authenticate to the root Vault namespace. Conflicts with namespace
788
+ """
542
789
  return pulumi.get(self, "use_root_namespace")
543
790
 
544
791
  @property
545
792
  @pulumi.getter
546
793
  def username(self) -> Optional[str]:
794
+ """
795
+ The username to login into Kerberos with.
796
+ """
547
797
  return pulumi.get(self, "username")
548
798
 
549
799
 
@@ -555,6 +805,13 @@ class AuthLoginOci(dict):
555
805
  mount: Optional[str] = None,
556
806
  namespace: Optional[str] = None,
557
807
  use_root_namespace: Optional[bool] = None):
808
+ """
809
+ :param str auth_type: Authentication type to use when getting OCI credentials.
810
+ :param str role: Name of the login role.
811
+ :param str mount: The path where the authentication engine is mounted.
812
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
813
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
814
+ """
558
815
  pulumi.set(__self__, "auth_type", auth_type)
559
816
  pulumi.set(__self__, "role", role)
560
817
  if mount is not None:
@@ -567,26 +824,41 @@ class AuthLoginOci(dict):
567
824
  @property
568
825
  @pulumi.getter(name="authType")
569
826
  def auth_type(self) -> str:
827
+ """
828
+ Authentication type to use when getting OCI credentials.
829
+ """
570
830
  return pulumi.get(self, "auth_type")
571
831
 
572
832
  @property
573
833
  @pulumi.getter
574
834
  def role(self) -> str:
835
+ """
836
+ Name of the login role.
837
+ """
575
838
  return pulumi.get(self, "role")
576
839
 
577
840
  @property
578
841
  @pulumi.getter
579
842
  def mount(self) -> Optional[str]:
843
+ """
844
+ The path where the authentication engine is mounted.
845
+ """
580
846
  return pulumi.get(self, "mount")
581
847
 
582
848
  @property
583
849
  @pulumi.getter
584
850
  def namespace(self) -> Optional[str]:
851
+ """
852
+ The authentication engine's namespace. Conflicts with use_root_namespace
853
+ """
585
854
  return pulumi.get(self, "namespace")
586
855
 
587
856
  @property
588
857
  @pulumi.getter(name="useRootNamespace")
589
858
  def use_root_namespace(self) -> Optional[bool]:
859
+ """
860
+ Authenticate to the root Vault namespace. Conflicts with namespace
861
+ """
590
862
  return pulumi.get(self, "use_root_namespace")
591
863
 
592
864
 
@@ -599,6 +871,14 @@ class AuthLoginOidc(dict):
599
871
  mount: Optional[str] = None,
600
872
  namespace: Optional[str] = None,
601
873
  use_root_namespace: Optional[bool] = None):
874
+ """
875
+ :param str role: Name of the login role.
876
+ :param str callback_address: The callback address. Must be a valid URI without the path.
877
+ :param str callback_listener_address: The callback listener's address. Must be a valid URI without the path.
878
+ :param str mount: The path where the authentication engine is mounted.
879
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
880
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
881
+ """
602
882
  pulumi.set(__self__, "role", role)
603
883
  if callback_address is not None:
604
884
  pulumi.set(__self__, "callback_address", callback_address)
@@ -614,31 +894,49 @@ class AuthLoginOidc(dict):
614
894
  @property
615
895
  @pulumi.getter
616
896
  def role(self) -> str:
897
+ """
898
+ Name of the login role.
899
+ """
617
900
  return pulumi.get(self, "role")
618
901
 
619
902
  @property
620
903
  @pulumi.getter(name="callbackAddress")
621
904
  def callback_address(self) -> Optional[str]:
905
+ """
906
+ The callback address. Must be a valid URI without the path.
907
+ """
622
908
  return pulumi.get(self, "callback_address")
623
909
 
624
910
  @property
625
911
  @pulumi.getter(name="callbackListenerAddress")
626
912
  def callback_listener_address(self) -> Optional[str]:
913
+ """
914
+ The callback listener's address. Must be a valid URI without the path.
915
+ """
627
916
  return pulumi.get(self, "callback_listener_address")
628
917
 
629
918
  @property
630
919
  @pulumi.getter
631
920
  def mount(self) -> Optional[str]:
921
+ """
922
+ The path where the authentication engine is mounted.
923
+ """
632
924
  return pulumi.get(self, "mount")
633
925
 
634
926
  @property
635
927
  @pulumi.getter
636
928
  def namespace(self) -> Optional[str]:
929
+ """
930
+ The authentication engine's namespace. Conflicts with use_root_namespace
931
+ """
637
932
  return pulumi.get(self, "namespace")
638
933
 
639
934
  @property
640
935
  @pulumi.getter(name="useRootNamespace")
641
936
  def use_root_namespace(self) -> Optional[bool]:
937
+ """
938
+ Authenticate to the root Vault namespace. Conflicts with namespace
939
+ """
642
940
  return pulumi.get(self, "use_root_namespace")
643
941
 
644
942
 
@@ -650,6 +948,13 @@ class AuthLoginRadius(dict):
650
948
  mount: Optional[str] = None,
651
949
  namespace: Optional[str] = None,
652
950
  use_root_namespace: Optional[bool] = None):
951
+ """
952
+ :param str password: The Radius password for username.
953
+ :param str username: The Radius username.
954
+ :param str mount: The path where the authentication engine is mounted.
955
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
956
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
957
+ """
653
958
  pulumi.set(__self__, "password", password)
654
959
  pulumi.set(__self__, "username", username)
655
960
  if mount is not None:
@@ -662,26 +967,41 @@ class AuthLoginRadius(dict):
662
967
  @property
663
968
  @pulumi.getter
664
969
  def password(self) -> str:
970
+ """
971
+ The Radius password for username.
972
+ """
665
973
  return pulumi.get(self, "password")
666
974
 
667
975
  @property
668
976
  @pulumi.getter
669
977
  def username(self) -> str:
978
+ """
979
+ The Radius username.
980
+ """
670
981
  return pulumi.get(self, "username")
671
982
 
672
983
  @property
673
984
  @pulumi.getter
674
985
  def mount(self) -> Optional[str]:
986
+ """
987
+ The path where the authentication engine is mounted.
988
+ """
675
989
  return pulumi.get(self, "mount")
676
990
 
677
991
  @property
678
992
  @pulumi.getter
679
993
  def namespace(self) -> Optional[str]:
994
+ """
995
+ The authentication engine's namespace. Conflicts with use_root_namespace
996
+ """
680
997
  return pulumi.get(self, "namespace")
681
998
 
682
999
  @property
683
1000
  @pulumi.getter(name="useRootNamespace")
684
1001
  def use_root_namespace(self) -> Optional[bool]:
1002
+ """
1003
+ Authenticate to the root Vault namespace. Conflicts with namespace
1004
+ """
685
1005
  return pulumi.get(self, "use_root_namespace")
686
1006
 
687
1007
 
@@ -691,6 +1011,11 @@ class AuthLoginTokenFile(dict):
691
1011
  filename: str,
692
1012
  namespace: Optional[str] = None,
693
1013
  use_root_namespace: Optional[bool] = None):
1014
+ """
1015
+ :param str filename: The name of a file containing a single line that is a valid Vault token
1016
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
1017
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
1018
+ """
694
1019
  pulumi.set(__self__, "filename", filename)
695
1020
  if namespace is not None:
696
1021
  pulumi.set(__self__, "namespace", namespace)
@@ -700,16 +1025,25 @@ class AuthLoginTokenFile(dict):
700
1025
  @property
701
1026
  @pulumi.getter
702
1027
  def filename(self) -> str:
1028
+ """
1029
+ The name of a file containing a single line that is a valid Vault token
1030
+ """
703
1031
  return pulumi.get(self, "filename")
704
1032
 
705
1033
  @property
706
1034
  @pulumi.getter
707
1035
  def namespace(self) -> Optional[str]:
1036
+ """
1037
+ The authentication engine's namespace. Conflicts with use_root_namespace
1038
+ """
708
1039
  return pulumi.get(self, "namespace")
709
1040
 
710
1041
  @property
711
1042
  @pulumi.getter(name="useRootNamespace")
712
1043
  def use_root_namespace(self) -> Optional[bool]:
1044
+ """
1045
+ Authenticate to the root Vault namespace. Conflicts with namespace
1046
+ """
713
1047
  return pulumi.get(self, "use_root_namespace")
714
1048
 
715
1049
 
@@ -722,6 +1056,14 @@ class AuthLoginUserpass(dict):
722
1056
  password: Optional[str] = None,
723
1057
  password_file: Optional[str] = None,
724
1058
  use_root_namespace: Optional[bool] = None):
1059
+ """
1060
+ :param str username: Login with username
1061
+ :param str mount: The path where the authentication engine is mounted.
1062
+ :param str namespace: The authentication engine's namespace. Conflicts with use_root_namespace
1063
+ :param str password: Login with password
1064
+ :param str password_file: Login with password from a file
1065
+ :param bool use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
1066
+ """
725
1067
  pulumi.set(__self__, "username", username)
726
1068
  if mount is not None:
727
1069
  pulumi.set(__self__, "mount", mount)
@@ -737,31 +1079,49 @@ class AuthLoginUserpass(dict):
737
1079
  @property
738
1080
  @pulumi.getter
739
1081
  def username(self) -> str:
1082
+ """
1083
+ Login with username
1084
+ """
740
1085
  return pulumi.get(self, "username")
741
1086
 
742
1087
  @property
743
1088
  @pulumi.getter
744
1089
  def mount(self) -> Optional[str]:
1090
+ """
1091
+ The path where the authentication engine is mounted.
1092
+ """
745
1093
  return pulumi.get(self, "mount")
746
1094
 
747
1095
  @property
748
1096
  @pulumi.getter
749
1097
  def namespace(self) -> Optional[str]:
1098
+ """
1099
+ The authentication engine's namespace. Conflicts with use_root_namespace
1100
+ """
750
1101
  return pulumi.get(self, "namespace")
751
1102
 
752
1103
  @property
753
1104
  @pulumi.getter
754
1105
  def password(self) -> Optional[str]:
1106
+ """
1107
+ Login with password
1108
+ """
755
1109
  return pulumi.get(self, "password")
756
1110
 
757
1111
  @property
758
1112
  @pulumi.getter(name="passwordFile")
759
1113
  def password_file(self) -> Optional[str]:
1114
+ """
1115
+ Login with password from a file
1116
+ """
760
1117
  return pulumi.get(self, "password_file")
761
1118
 
762
1119
  @property
763
1120
  @pulumi.getter(name="useRootNamespace")
764
1121
  def use_root_namespace(self) -> Optional[bool]:
1122
+ """
1123
+ Authenticate to the root Vault namespace. Conflicts with namespace
1124
+ """
765
1125
  return pulumi.get(self, "use_root_namespace")
766
1126
 
767
1127
 
@@ -770,17 +1130,27 @@ class ClientAuth(dict):
770
1130
  def __init__(__self__, *,
771
1131
  cert_file: str,
772
1132
  key_file: str):
1133
+ """
1134
+ :param str cert_file: Path to a file containing the client certificate.
1135
+ :param str key_file: Path to a file containing the private key that the certificate was issued for.
1136
+ """
773
1137
  pulumi.set(__self__, "cert_file", cert_file)
774
1138
  pulumi.set(__self__, "key_file", key_file)
775
1139
 
776
1140
  @property
777
1141
  @pulumi.getter(name="certFile")
778
1142
  def cert_file(self) -> str:
1143
+ """
1144
+ Path to a file containing the client certificate.
1145
+ """
779
1146
  return pulumi.get(self, "cert_file")
780
1147
 
781
1148
  @property
782
1149
  @pulumi.getter(name="keyFile")
783
1150
  def key_file(self) -> str:
1151
+ """
1152
+ Path to a file containing the private key that the certificate was issued for.
1153
+ """
784
1154
  return pulumi.get(self, "key_file")
785
1155
 
786
1156
 
@@ -789,17 +1159,27 @@ class Headers(dict):
789
1159
  def __init__(__self__, *,
790
1160
  name: str,
791
1161
  value: str):
1162
+ """
1163
+ :param str name: The header name
1164
+ :param str value: The header value
1165
+ """
792
1166
  pulumi.set(__self__, "name", name)
793
1167
  pulumi.set(__self__, "value", value)
794
1168
 
795
1169
  @property
796
1170
  @pulumi.getter
797
1171
  def name(self) -> str:
1172
+ """
1173
+ The header name
1174
+ """
798
1175
  return pulumi.get(self, "name")
799
1176
 
800
1177
  @property
801
1178
  @pulumi.getter
802
1179
  def value(self) -> str:
1180
+ """
1181
+ The header value
1182
+ """
803
1183
  return pulumi.get(self, "value")
804
1184
 
805
1185