pulumi-vault 5.19.0a1705621752__py3-none-any.whl → 5.20.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +59 -0
- pulumi_vault/_inputs.py +380 -0
- pulumi_vault/_utilities.py +2 -2
- pulumi_vault/aws/secret_backend.py +188 -0
- pulumi_vault/aws/secret_backend_static_role.py +2 -2
- pulumi_vault/azure/backend.py +7 -21
- pulumi_vault/config/__init__.pyi +0 -3
- pulumi_vault/config/outputs.py +380 -0
- pulumi_vault/config/vars.py +0 -3
- pulumi_vault/consul/secret_backend.py +7 -35
- pulumi_vault/database/_inputs.py +176 -0
- pulumi_vault/database/outputs.py +168 -0
- pulumi_vault/get_raft_autopilot_state.py +0 -12
- pulumi_vault/identity/group_alias.py +6 -6
- pulumi_vault/kubernetes/secret_backend_role.py +8 -4
- pulumi_vault/kv/_inputs.py +12 -0
- pulumi_vault/kv/outputs.py +12 -0
- pulumi_vault/ldap/secret_backend_dynamic_role.py +2 -2
- pulumi_vault/ldap/secret_backend_static_role.py +2 -2
- pulumi_vault/managed/_inputs.py +12 -0
- pulumi_vault/managed/keys.py +20 -0
- pulumi_vault/managed/outputs.py +12 -0
- pulumi_vault/mongodbatlas/secret_role.py +2 -2
- pulumi_vault/namespace.py +46 -14
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +0 -6
- pulumi_vault/pkisecret/secret_backend_issuer.py +0 -10
- pulumi_vault/pkisecret/secret_backend_role.py +7 -7
- pulumi_vault/rabbitmq/_inputs.py +36 -0
- pulumi_vault/rabbitmq/outputs.py +36 -0
- pulumi_vault/saml/auth_backend_role.py +7 -14
- pulumi_vault/secrets/__init__.py +14 -0
- pulumi_vault/secrets/sync_association.py +464 -0
- pulumi_vault/secrets/sync_aws_destination.py +564 -0
- pulumi_vault/secrets/sync_azure_destination.py +674 -0
- pulumi_vault/secrets/sync_config.py +297 -0
- pulumi_vault/secrets/sync_gcp_destination.py +438 -0
- pulumi_vault/secrets/sync_gh_destination.py +511 -0
- pulumi_vault/secrets/sync_vercel_destination.py +541 -0
- pulumi_vault/ssh/secret_backend_role.py +7 -14
- {pulumi_vault-5.19.0a1705621752.dist-info → pulumi_vault-5.20.0.dist-info}/METADATA +2 -2
- {pulumi_vault-5.19.0a1705621752.dist-info → pulumi_vault-5.20.0.dist-info}/RECORD +43 -35
- {pulumi_vault-5.19.0a1705621752.dist-info → pulumi_vault-5.20.0.dist-info}/WHEEL +0 -0
- {pulumi_vault-5.19.0a1705621752.dist-info → pulumi_vault-5.20.0.dist-info}/top_level.txt +0 -0
pulumi_vault/database/outputs.py
CHANGED
@@ -1865,12 +1865,16 @@ class SecretBackendConnectionOracle(dict):
|
|
1865
1865
|
suggest = None
|
1866
1866
|
if key == "connectionUrl":
|
1867
1867
|
suggest = "connection_url"
|
1868
|
+
elif key == "disconnectSessions":
|
1869
|
+
suggest = "disconnect_sessions"
|
1868
1870
|
elif key == "maxConnectionLifetime":
|
1869
1871
|
suggest = "max_connection_lifetime"
|
1870
1872
|
elif key == "maxIdleConnections":
|
1871
1873
|
suggest = "max_idle_connections"
|
1872
1874
|
elif key == "maxOpenConnections":
|
1873
1875
|
suggest = "max_open_connections"
|
1876
|
+
elif key == "splitStatements":
|
1877
|
+
suggest = "split_statements"
|
1874
1878
|
elif key == "usernameTemplate":
|
1875
1879
|
suggest = "username_template"
|
1876
1880
|
|
@@ -1887,10 +1891,12 @@ class SecretBackendConnectionOracle(dict):
|
|
1887
1891
|
|
1888
1892
|
def __init__(__self__, *,
|
1889
1893
|
connection_url: Optional[str] = None,
|
1894
|
+
disconnect_sessions: Optional[bool] = None,
|
1890
1895
|
max_connection_lifetime: Optional[int] = None,
|
1891
1896
|
max_idle_connections: Optional[int] = None,
|
1892
1897
|
max_open_connections: Optional[int] = None,
|
1893
1898
|
password: Optional[str] = None,
|
1899
|
+
split_statements: Optional[bool] = None,
|
1894
1900
|
username: Optional[str] = None,
|
1895
1901
|
username_template: Optional[str] = None):
|
1896
1902
|
"""
|
@@ -1898,6 +1904,7 @@ class SecretBackendConnectionOracle(dict):
|
|
1898
1904
|
the [Vault
|
1899
1905
|
docs](https://www.vaultproject.io/api-docs/secret/databases/mongodb.html#sample-payload)
|
1900
1906
|
for an example.
|
1907
|
+
:param bool disconnect_sessions: Enable the built-in session disconnect mechanism.
|
1901
1908
|
:param int max_connection_lifetime: The maximum number of seconds to keep
|
1902
1909
|
a connection alive for.
|
1903
1910
|
:param int max_idle_connections: The maximum number of idle connections to
|
@@ -1905,11 +1912,14 @@ class SecretBackendConnectionOracle(dict):
|
|
1905
1912
|
:param int max_open_connections: The maximum number of open connections to
|
1906
1913
|
use.
|
1907
1914
|
:param str password: The password to authenticate with.
|
1915
|
+
:param bool split_statements: Enable spliting statements after semi-colons.
|
1908
1916
|
:param str username: The username to authenticate with.
|
1909
1917
|
:param str username_template: Template describing how dynamic usernames are generated.
|
1910
1918
|
"""
|
1911
1919
|
if connection_url is not None:
|
1912
1920
|
pulumi.set(__self__, "connection_url", connection_url)
|
1921
|
+
if disconnect_sessions is not None:
|
1922
|
+
pulumi.set(__self__, "disconnect_sessions", disconnect_sessions)
|
1913
1923
|
if max_connection_lifetime is not None:
|
1914
1924
|
pulumi.set(__self__, "max_connection_lifetime", max_connection_lifetime)
|
1915
1925
|
if max_idle_connections is not None:
|
@@ -1918,6 +1928,8 @@ class SecretBackendConnectionOracle(dict):
|
|
1918
1928
|
pulumi.set(__self__, "max_open_connections", max_open_connections)
|
1919
1929
|
if password is not None:
|
1920
1930
|
pulumi.set(__self__, "password", password)
|
1931
|
+
if split_statements is not None:
|
1932
|
+
pulumi.set(__self__, "split_statements", split_statements)
|
1921
1933
|
if username is not None:
|
1922
1934
|
pulumi.set(__self__, "username", username)
|
1923
1935
|
if username_template is not None:
|
@@ -1934,6 +1946,14 @@ class SecretBackendConnectionOracle(dict):
|
|
1934
1946
|
"""
|
1935
1947
|
return pulumi.get(self, "connection_url")
|
1936
1948
|
|
1949
|
+
@property
|
1950
|
+
@pulumi.getter(name="disconnectSessions")
|
1951
|
+
def disconnect_sessions(self) -> Optional[bool]:
|
1952
|
+
"""
|
1953
|
+
Enable the built-in session disconnect mechanism.
|
1954
|
+
"""
|
1955
|
+
return pulumi.get(self, "disconnect_sessions")
|
1956
|
+
|
1937
1957
|
@property
|
1938
1958
|
@pulumi.getter(name="maxConnectionLifetime")
|
1939
1959
|
def max_connection_lifetime(self) -> Optional[int]:
|
@@ -1969,6 +1989,14 @@ class SecretBackendConnectionOracle(dict):
|
|
1969
1989
|
"""
|
1970
1990
|
return pulumi.get(self, "password")
|
1971
1991
|
|
1992
|
+
@property
|
1993
|
+
@pulumi.getter(name="splitStatements")
|
1994
|
+
def split_statements(self) -> Optional[bool]:
|
1995
|
+
"""
|
1996
|
+
Enable spliting statements after semi-colons.
|
1997
|
+
"""
|
1998
|
+
return pulumi.get(self, "split_statements")
|
1999
|
+
|
1972
2000
|
@property
|
1973
2001
|
@pulumi.getter
|
1974
2002
|
def username(self) -> Optional[str]:
|
@@ -2646,6 +2674,7 @@ class SecretsMountCassandra(dict):
|
|
2646
2674
|
username: Optional[str] = None,
|
2647
2675
|
verify_connection: Optional[bool] = None):
|
2648
2676
|
"""
|
2677
|
+
:param str name: Name of the database connection.
|
2649
2678
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
2650
2679
|
connection.
|
2651
2680
|
:param int connect_timeout: The number of seconds to use as a connection
|
@@ -2705,6 +2734,9 @@ class SecretsMountCassandra(dict):
|
|
2705
2734
|
@property
|
2706
2735
|
@pulumi.getter
|
2707
2736
|
def name(self) -> str:
|
2737
|
+
"""
|
2738
|
+
Name of the database connection.
|
2739
|
+
"""
|
2708
2740
|
return pulumi.get(self, "name")
|
2709
2741
|
|
2710
2742
|
@property
|
@@ -2886,6 +2918,7 @@ class SecretsMountCouchbase(dict):
|
|
2886
2918
|
verify_connection: Optional[bool] = None):
|
2887
2919
|
"""
|
2888
2920
|
:param Sequence[str] hosts: The hosts to connect to.
|
2921
|
+
:param str name: Name of the database connection.
|
2889
2922
|
:param str password: The root credential password used in the connection URL.
|
2890
2923
|
:param str username: The root credential username used in the connection URL.
|
2891
2924
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
@@ -2940,6 +2973,9 @@ class SecretsMountCouchbase(dict):
|
|
2940
2973
|
@property
|
2941
2974
|
@pulumi.getter
|
2942
2975
|
def name(self) -> str:
|
2976
|
+
"""
|
2977
|
+
Name of the database connection.
|
2978
|
+
"""
|
2943
2979
|
return pulumi.get(self, "name")
|
2944
2980
|
|
2945
2981
|
@property
|
@@ -3099,6 +3135,7 @@ class SecretsMountElasticsearch(dict):
|
|
3099
3135
|
username_template: Optional[str] = None,
|
3100
3136
|
verify_connection: Optional[bool] = None):
|
3101
3137
|
"""
|
3138
|
+
:param str name: Name of the database connection.
|
3102
3139
|
:param str password: The root credential password used in the connection URL.
|
3103
3140
|
:param str url: The URL for Elasticsearch's API. https requires certificate
|
3104
3141
|
by trusted CA if used.
|
@@ -3152,6 +3189,9 @@ class SecretsMountElasticsearch(dict):
|
|
3152
3189
|
@property
|
3153
3190
|
@pulumi.getter
|
3154
3191
|
def name(self) -> str:
|
3192
|
+
"""
|
3193
|
+
Name of the database connection.
|
3194
|
+
"""
|
3155
3195
|
return pulumi.get(self, "name")
|
3156
3196
|
|
3157
3197
|
@property
|
@@ -3330,6 +3370,7 @@ class SecretsMountHana(dict):
|
|
3330
3370
|
username: Optional[str] = None,
|
3331
3371
|
verify_connection: Optional[bool] = None):
|
3332
3372
|
"""
|
3373
|
+
:param str name: Name of the database connection.
|
3333
3374
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
3334
3375
|
connection.
|
3335
3376
|
:param str connection_url: Specifies the Redshift DSN.
|
@@ -3379,6 +3420,9 @@ class SecretsMountHana(dict):
|
|
3379
3420
|
@property
|
3380
3421
|
@pulumi.getter
|
3381
3422
|
def name(self) -> str:
|
3423
|
+
"""
|
3424
|
+
Name of the database connection.
|
3425
|
+
"""
|
3382
3426
|
return pulumi.get(self, "name")
|
3383
3427
|
|
3384
3428
|
@property
|
@@ -3539,6 +3583,7 @@ class SecretsMountInfluxdb(dict):
|
|
3539
3583
|
verify_connection: Optional[bool] = None):
|
3540
3584
|
"""
|
3541
3585
|
:param str host: The host to connect to.
|
3586
|
+
:param str name: Name of the database connection.
|
3542
3587
|
:param str password: The root credential password used in the connection URL.
|
3543
3588
|
:param str username: The root credential username used in the connection URL.
|
3544
3589
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
@@ -3602,6 +3647,9 @@ class SecretsMountInfluxdb(dict):
|
|
3602
3647
|
@property
|
3603
3648
|
@pulumi.getter
|
3604
3649
|
def name(self) -> str:
|
3650
|
+
"""
|
3651
|
+
Name of the database connection.
|
3652
|
+
"""
|
3605
3653
|
return pulumi.get(self, "name")
|
3606
3654
|
|
3607
3655
|
@property
|
@@ -3775,6 +3823,7 @@ class SecretsMountMongodb(dict):
|
|
3775
3823
|
username_template: Optional[str] = None,
|
3776
3824
|
verify_connection: Optional[bool] = None):
|
3777
3825
|
"""
|
3826
|
+
:param str name: Name of the database connection.
|
3778
3827
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
3779
3828
|
connection.
|
3780
3829
|
:param str connection_url: Specifies the Redshift DSN.
|
@@ -3824,6 +3873,9 @@ class SecretsMountMongodb(dict):
|
|
3824
3873
|
@property
|
3825
3874
|
@pulumi.getter
|
3826
3875
|
def name(self) -> str:
|
3876
|
+
"""
|
3877
|
+
Name of the database connection.
|
3878
|
+
"""
|
3827
3879
|
return pulumi.get(self, "name")
|
3828
3880
|
|
3829
3881
|
@property
|
@@ -3972,6 +4024,7 @@ class SecretsMountMongodbatla(dict):
|
|
3972
4024
|
root_rotation_statements: Optional[Sequence[str]] = None,
|
3973
4025
|
verify_connection: Optional[bool] = None):
|
3974
4026
|
"""
|
4027
|
+
:param str name: Name of the database connection.
|
3975
4028
|
:param str private_key: The Private Programmatic API Key used to connect with MongoDB Atlas API.
|
3976
4029
|
:param str project_id: The Project ID the Database User should be created within.
|
3977
4030
|
:param str public_key: The Public Programmatic API Key used to authenticate with the MongoDB Atlas API.
|
@@ -4003,6 +4056,9 @@ class SecretsMountMongodbatla(dict):
|
|
4003
4056
|
@property
|
4004
4057
|
@pulumi.getter
|
4005
4058
|
def name(self) -> str:
|
4059
|
+
"""
|
4060
|
+
Name of the database connection.
|
4061
|
+
"""
|
4006
4062
|
return pulumi.get(self, "name")
|
4007
4063
|
|
4008
4064
|
@property
|
@@ -4130,6 +4186,7 @@ class SecretsMountMssql(dict):
|
|
4130
4186
|
username_template: Optional[str] = None,
|
4131
4187
|
verify_connection: Optional[bool] = None):
|
4132
4188
|
"""
|
4189
|
+
:param str name: Name of the database connection.
|
4133
4190
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
4134
4191
|
connection.
|
4135
4192
|
:param str connection_url: Specifies the Redshift DSN.
|
@@ -4187,6 +4244,9 @@ class SecretsMountMssql(dict):
|
|
4187
4244
|
@property
|
4188
4245
|
@pulumi.getter
|
4189
4246
|
def name(self) -> str:
|
4247
|
+
"""
|
4248
|
+
Name of the database connection.
|
4249
|
+
"""
|
4190
4250
|
return pulumi.get(self, "name")
|
4191
4251
|
|
4192
4252
|
@property
|
@@ -4373,8 +4433,10 @@ class SecretsMountMysql(dict):
|
|
4373
4433
|
username_template: Optional[str] = None,
|
4374
4434
|
verify_connection: Optional[bool] = None):
|
4375
4435
|
"""
|
4436
|
+
:param str name: Name of the database connection.
|
4376
4437
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
4377
4438
|
connection.
|
4439
|
+
:param str auth_type: Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
4378
4440
|
:param str connection_url: Specifies the Redshift DSN.
|
4379
4441
|
See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
|
4380
4442
|
:param Mapping[str, Any] data: A map of sensitive data to pass to the endpoint. Useful for templated connection strings.
|
@@ -4388,6 +4450,7 @@ class SecretsMountMysql(dict):
|
|
4388
4450
|
:param str password: The root credential password used in the connection URL.
|
4389
4451
|
:param str plugin_name: Specifies the name of the plugin to use.
|
4390
4452
|
:param Sequence[str] root_rotation_statements: A list of database statements to be executed to rotate the root user's credentials.
|
4453
|
+
:param str service_account_json: A JSON encoded credential for use with IAM authorization
|
4391
4454
|
:param str tls_ca: x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.
|
4392
4455
|
:param str tls_certificate_key: x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.
|
4393
4456
|
:param str username: The root credential username used in the connection URL.
|
@@ -4432,6 +4495,9 @@ class SecretsMountMysql(dict):
|
|
4432
4495
|
@property
|
4433
4496
|
@pulumi.getter
|
4434
4497
|
def name(self) -> str:
|
4498
|
+
"""
|
4499
|
+
Name of the database connection.
|
4500
|
+
"""
|
4435
4501
|
return pulumi.get(self, "name")
|
4436
4502
|
|
4437
4503
|
@property
|
@@ -4446,6 +4512,9 @@ class SecretsMountMysql(dict):
|
|
4446
4512
|
@property
|
4447
4513
|
@pulumi.getter(name="authType")
|
4448
4514
|
def auth_type(self) -> Optional[str]:
|
4515
|
+
"""
|
4516
|
+
Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
4517
|
+
"""
|
4449
4518
|
return pulumi.get(self, "auth_type")
|
4450
4519
|
|
4451
4520
|
@property
|
@@ -4520,6 +4589,9 @@ class SecretsMountMysql(dict):
|
|
4520
4589
|
@property
|
4521
4590
|
@pulumi.getter(name="serviceAccountJson")
|
4522
4591
|
def service_account_json(self) -> Optional[str]:
|
4592
|
+
"""
|
4593
|
+
A JSON encoded credential for use with IAM authorization
|
4594
|
+
"""
|
4523
4595
|
return pulumi.get(self, "service_account_json")
|
4524
4596
|
|
4525
4597
|
@property
|
@@ -4626,8 +4698,10 @@ class SecretsMountMysqlAurora(dict):
|
|
4626
4698
|
username_template: Optional[str] = None,
|
4627
4699
|
verify_connection: Optional[bool] = None):
|
4628
4700
|
"""
|
4701
|
+
:param str name: Name of the database connection.
|
4629
4702
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
4630
4703
|
connection.
|
4704
|
+
:param str auth_type: Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
4631
4705
|
:param str connection_url: Specifies the Redshift DSN.
|
4632
4706
|
See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
|
4633
4707
|
:param Mapping[str, Any] data: A map of sensitive data to pass to the endpoint. Useful for templated connection strings.
|
@@ -4641,6 +4715,7 @@ class SecretsMountMysqlAurora(dict):
|
|
4641
4715
|
:param str password: The root credential password used in the connection URL.
|
4642
4716
|
:param str plugin_name: Specifies the name of the plugin to use.
|
4643
4717
|
:param Sequence[str] root_rotation_statements: A list of database statements to be executed to rotate the root user's credentials.
|
4718
|
+
:param str service_account_json: A JSON encoded credential for use with IAM authorization
|
4644
4719
|
:param str tls_ca: x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.
|
4645
4720
|
:param str tls_certificate_key: x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.
|
4646
4721
|
:param str username: The root credential username used in the connection URL.
|
@@ -4685,6 +4760,9 @@ class SecretsMountMysqlAurora(dict):
|
|
4685
4760
|
@property
|
4686
4761
|
@pulumi.getter
|
4687
4762
|
def name(self) -> str:
|
4763
|
+
"""
|
4764
|
+
Name of the database connection.
|
4765
|
+
"""
|
4688
4766
|
return pulumi.get(self, "name")
|
4689
4767
|
|
4690
4768
|
@property
|
@@ -4699,6 +4777,9 @@ class SecretsMountMysqlAurora(dict):
|
|
4699
4777
|
@property
|
4700
4778
|
@pulumi.getter(name="authType")
|
4701
4779
|
def auth_type(self) -> Optional[str]:
|
4780
|
+
"""
|
4781
|
+
Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
4782
|
+
"""
|
4702
4783
|
return pulumi.get(self, "auth_type")
|
4703
4784
|
|
4704
4785
|
@property
|
@@ -4773,6 +4854,9 @@ class SecretsMountMysqlAurora(dict):
|
|
4773
4854
|
@property
|
4774
4855
|
@pulumi.getter(name="serviceAccountJson")
|
4775
4856
|
def service_account_json(self) -> Optional[str]:
|
4857
|
+
"""
|
4858
|
+
A JSON encoded credential for use with IAM authorization
|
4859
|
+
"""
|
4776
4860
|
return pulumi.get(self, "service_account_json")
|
4777
4861
|
|
4778
4862
|
@property
|
@@ -4879,8 +4963,10 @@ class SecretsMountMysqlLegacy(dict):
|
|
4879
4963
|
username_template: Optional[str] = None,
|
4880
4964
|
verify_connection: Optional[bool] = None):
|
4881
4965
|
"""
|
4966
|
+
:param str name: Name of the database connection.
|
4882
4967
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
4883
4968
|
connection.
|
4969
|
+
:param str auth_type: Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
4884
4970
|
:param str connection_url: Specifies the Redshift DSN.
|
4885
4971
|
See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
|
4886
4972
|
:param Mapping[str, Any] data: A map of sensitive data to pass to the endpoint. Useful for templated connection strings.
|
@@ -4894,6 +4980,7 @@ class SecretsMountMysqlLegacy(dict):
|
|
4894
4980
|
:param str password: The root credential password used in the connection URL.
|
4895
4981
|
:param str plugin_name: Specifies the name of the plugin to use.
|
4896
4982
|
:param Sequence[str] root_rotation_statements: A list of database statements to be executed to rotate the root user's credentials.
|
4983
|
+
:param str service_account_json: A JSON encoded credential for use with IAM authorization
|
4897
4984
|
:param str tls_ca: x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.
|
4898
4985
|
:param str tls_certificate_key: x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.
|
4899
4986
|
:param str username: The root credential username used in the connection URL.
|
@@ -4938,6 +5025,9 @@ class SecretsMountMysqlLegacy(dict):
|
|
4938
5025
|
@property
|
4939
5026
|
@pulumi.getter
|
4940
5027
|
def name(self) -> str:
|
5028
|
+
"""
|
5029
|
+
Name of the database connection.
|
5030
|
+
"""
|
4941
5031
|
return pulumi.get(self, "name")
|
4942
5032
|
|
4943
5033
|
@property
|
@@ -4952,6 +5042,9 @@ class SecretsMountMysqlLegacy(dict):
|
|
4952
5042
|
@property
|
4953
5043
|
@pulumi.getter(name="authType")
|
4954
5044
|
def auth_type(self) -> Optional[str]:
|
5045
|
+
"""
|
5046
|
+
Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
5047
|
+
"""
|
4955
5048
|
return pulumi.get(self, "auth_type")
|
4956
5049
|
|
4957
5050
|
@property
|
@@ -5026,6 +5119,9 @@ class SecretsMountMysqlLegacy(dict):
|
|
5026
5119
|
@property
|
5027
5120
|
@pulumi.getter(name="serviceAccountJson")
|
5028
5121
|
def service_account_json(self) -> Optional[str]:
|
5122
|
+
"""
|
5123
|
+
A JSON encoded credential for use with IAM authorization
|
5124
|
+
"""
|
5029
5125
|
return pulumi.get(self, "service_account_json")
|
5030
5126
|
|
5031
5127
|
@property
|
@@ -5132,8 +5228,10 @@ class SecretsMountMysqlRd(dict):
|
|
5132
5228
|
username_template: Optional[str] = None,
|
5133
5229
|
verify_connection: Optional[bool] = None):
|
5134
5230
|
"""
|
5231
|
+
:param str name: Name of the database connection.
|
5135
5232
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
5136
5233
|
connection.
|
5234
|
+
:param str auth_type: Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
5137
5235
|
:param str connection_url: Specifies the Redshift DSN.
|
5138
5236
|
See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
|
5139
5237
|
:param Mapping[str, Any] data: A map of sensitive data to pass to the endpoint. Useful for templated connection strings.
|
@@ -5147,6 +5245,7 @@ class SecretsMountMysqlRd(dict):
|
|
5147
5245
|
:param str password: The root credential password used in the connection URL.
|
5148
5246
|
:param str plugin_name: Specifies the name of the plugin to use.
|
5149
5247
|
:param Sequence[str] root_rotation_statements: A list of database statements to be executed to rotate the root user's credentials.
|
5248
|
+
:param str service_account_json: A JSON encoded credential for use with IAM authorization
|
5150
5249
|
:param str tls_ca: x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.
|
5151
5250
|
:param str tls_certificate_key: x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.
|
5152
5251
|
:param str username: The root credential username used in the connection URL.
|
@@ -5191,6 +5290,9 @@ class SecretsMountMysqlRd(dict):
|
|
5191
5290
|
@property
|
5192
5291
|
@pulumi.getter
|
5193
5292
|
def name(self) -> str:
|
5293
|
+
"""
|
5294
|
+
Name of the database connection.
|
5295
|
+
"""
|
5194
5296
|
return pulumi.get(self, "name")
|
5195
5297
|
|
5196
5298
|
@property
|
@@ -5205,6 +5307,9 @@ class SecretsMountMysqlRd(dict):
|
|
5205
5307
|
@property
|
5206
5308
|
@pulumi.getter(name="authType")
|
5207
5309
|
def auth_type(self) -> Optional[str]:
|
5310
|
+
"""
|
5311
|
+
Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
5312
|
+
"""
|
5208
5313
|
return pulumi.get(self, "auth_type")
|
5209
5314
|
|
5210
5315
|
@property
|
@@ -5279,6 +5384,9 @@ class SecretsMountMysqlRd(dict):
|
|
5279
5384
|
@property
|
5280
5385
|
@pulumi.getter(name="serviceAccountJson")
|
5281
5386
|
def service_account_json(self) -> Optional[str]:
|
5387
|
+
"""
|
5388
|
+
A JSON encoded credential for use with IAM authorization
|
5389
|
+
"""
|
5282
5390
|
return pulumi.get(self, "service_account_json")
|
5283
5391
|
|
5284
5392
|
@property
|
@@ -5332,6 +5440,8 @@ class SecretsMountOracle(dict):
|
|
5332
5440
|
suggest = "allowed_roles"
|
5333
5441
|
elif key == "connectionUrl":
|
5334
5442
|
suggest = "connection_url"
|
5443
|
+
elif key == "disconnectSessions":
|
5444
|
+
suggest = "disconnect_sessions"
|
5335
5445
|
elif key == "maxConnectionLifetime":
|
5336
5446
|
suggest = "max_connection_lifetime"
|
5337
5447
|
elif key == "maxIdleConnections":
|
@@ -5342,6 +5452,8 @@ class SecretsMountOracle(dict):
|
|
5342
5452
|
suggest = "plugin_name"
|
5343
5453
|
elif key == "rootRotationStatements":
|
5344
5454
|
suggest = "root_rotation_statements"
|
5455
|
+
elif key == "splitStatements":
|
5456
|
+
suggest = "split_statements"
|
5345
5457
|
elif key == "usernameTemplate":
|
5346
5458
|
suggest = "username_template"
|
5347
5459
|
elif key == "verifyConnection":
|
@@ -5363,16 +5475,19 @@ class SecretsMountOracle(dict):
|
|
5363
5475
|
allowed_roles: Optional[Sequence[str]] = None,
|
5364
5476
|
connection_url: Optional[str] = None,
|
5365
5477
|
data: Optional[Mapping[str, Any]] = None,
|
5478
|
+
disconnect_sessions: Optional[bool] = None,
|
5366
5479
|
max_connection_lifetime: Optional[int] = None,
|
5367
5480
|
max_idle_connections: Optional[int] = None,
|
5368
5481
|
max_open_connections: Optional[int] = None,
|
5369
5482
|
password: Optional[str] = None,
|
5370
5483
|
plugin_name: Optional[str] = None,
|
5371
5484
|
root_rotation_statements: Optional[Sequence[str]] = None,
|
5485
|
+
split_statements: Optional[bool] = None,
|
5372
5486
|
username: Optional[str] = None,
|
5373
5487
|
username_template: Optional[str] = None,
|
5374
5488
|
verify_connection: Optional[bool] = None):
|
5375
5489
|
"""
|
5490
|
+
:param str name: Name of the database connection.
|
5376
5491
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
5377
5492
|
connection.
|
5378
5493
|
:param str connection_url: Specifies the Redshift DSN.
|
@@ -5380,6 +5495,7 @@ class SecretsMountOracle(dict):
|
|
5380
5495
|
:param Mapping[str, Any] data: A map of sensitive data to pass to the endpoint. Useful for templated connection strings.
|
5381
5496
|
|
5382
5497
|
Supported list of database secrets engines that can be configured:
|
5498
|
+
:param bool disconnect_sessions: Set to true to disconnect any open sessions prior to running the revocation statements.
|
5383
5499
|
:param int max_connection_lifetime: The maximum amount of time a connection may be reused.
|
5384
5500
|
:param int max_idle_connections: The maximum number of idle connections to
|
5385
5501
|
the database.
|
@@ -5388,6 +5504,7 @@ class SecretsMountOracle(dict):
|
|
5388
5504
|
:param str password: The root credential password used in the connection URL.
|
5389
5505
|
:param str plugin_name: Specifies the name of the plugin to use.
|
5390
5506
|
:param Sequence[str] root_rotation_statements: A list of database statements to be executed to rotate the root user's credentials.
|
5507
|
+
:param bool split_statements: Set to true in order to split statements after semi-colons.
|
5391
5508
|
:param str username: The root credential username used in the connection URL.
|
5392
5509
|
:param str username_template: [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
|
5393
5510
|
:param bool verify_connection: Whether the connection should be verified on
|
@@ -5400,6 +5517,8 @@ class SecretsMountOracle(dict):
|
|
5400
5517
|
pulumi.set(__self__, "connection_url", connection_url)
|
5401
5518
|
if data is not None:
|
5402
5519
|
pulumi.set(__self__, "data", data)
|
5520
|
+
if disconnect_sessions is not None:
|
5521
|
+
pulumi.set(__self__, "disconnect_sessions", disconnect_sessions)
|
5403
5522
|
if max_connection_lifetime is not None:
|
5404
5523
|
pulumi.set(__self__, "max_connection_lifetime", max_connection_lifetime)
|
5405
5524
|
if max_idle_connections is not None:
|
@@ -5412,6 +5531,8 @@ class SecretsMountOracle(dict):
|
|
5412
5531
|
pulumi.set(__self__, "plugin_name", plugin_name)
|
5413
5532
|
if root_rotation_statements is not None:
|
5414
5533
|
pulumi.set(__self__, "root_rotation_statements", root_rotation_statements)
|
5534
|
+
if split_statements is not None:
|
5535
|
+
pulumi.set(__self__, "split_statements", split_statements)
|
5415
5536
|
if username is not None:
|
5416
5537
|
pulumi.set(__self__, "username", username)
|
5417
5538
|
if username_template is not None:
|
@@ -5422,6 +5543,9 @@ class SecretsMountOracle(dict):
|
|
5422
5543
|
@property
|
5423
5544
|
@pulumi.getter
|
5424
5545
|
def name(self) -> str:
|
5546
|
+
"""
|
5547
|
+
Name of the database connection.
|
5548
|
+
"""
|
5425
5549
|
return pulumi.get(self, "name")
|
5426
5550
|
|
5427
5551
|
@property
|
@@ -5452,6 +5576,14 @@ class SecretsMountOracle(dict):
|
|
5452
5576
|
"""
|
5453
5577
|
return pulumi.get(self, "data")
|
5454
5578
|
|
5579
|
+
@property
|
5580
|
+
@pulumi.getter(name="disconnectSessions")
|
5581
|
+
def disconnect_sessions(self) -> Optional[bool]:
|
5582
|
+
"""
|
5583
|
+
Set to true to disconnect any open sessions prior to running the revocation statements.
|
5584
|
+
"""
|
5585
|
+
return pulumi.get(self, "disconnect_sessions")
|
5586
|
+
|
5455
5587
|
@property
|
5456
5588
|
@pulumi.getter(name="maxConnectionLifetime")
|
5457
5589
|
def max_connection_lifetime(self) -> Optional[int]:
|
@@ -5502,6 +5634,14 @@ class SecretsMountOracle(dict):
|
|
5502
5634
|
"""
|
5503
5635
|
return pulumi.get(self, "root_rotation_statements")
|
5504
5636
|
|
5637
|
+
@property
|
5638
|
+
@pulumi.getter(name="splitStatements")
|
5639
|
+
def split_statements(self) -> Optional[bool]:
|
5640
|
+
"""
|
5641
|
+
Set to true in order to split statements after semi-colons.
|
5642
|
+
"""
|
5643
|
+
return pulumi.get(self, "split_statements")
|
5644
|
+
|
5505
5645
|
@property
|
5506
5646
|
@pulumi.getter
|
5507
5647
|
def username(self) -> Optional[str]:
|
@@ -5587,8 +5727,10 @@ class SecretsMountPostgresql(dict):
|
|
5587
5727
|
username_template: Optional[str] = None,
|
5588
5728
|
verify_connection: Optional[bool] = None):
|
5589
5729
|
"""
|
5730
|
+
:param str name: Name of the database connection.
|
5590
5731
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
5591
5732
|
connection.
|
5733
|
+
:param str auth_type: Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
5592
5734
|
:param str connection_url: Specifies the Redshift DSN.
|
5593
5735
|
See [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
|
5594
5736
|
:param Mapping[str, Any] data: A map of sensitive data to pass to the endpoint. Useful for templated connection strings.
|
@@ -5603,6 +5745,7 @@ class SecretsMountPostgresql(dict):
|
|
5603
5745
|
:param str password: The root credential password used in the connection URL.
|
5604
5746
|
:param str plugin_name: Specifies the name of the plugin to use.
|
5605
5747
|
:param Sequence[str] root_rotation_statements: A list of database statements to be executed to rotate the root user's credentials.
|
5748
|
+
:param str service_account_json: A JSON encoded credential for use with IAM authorization
|
5606
5749
|
:param str username: The root credential username used in the connection URL.
|
5607
5750
|
:param str username_template: [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
|
5608
5751
|
:param bool verify_connection: Whether the connection should be verified on
|
@@ -5643,6 +5786,9 @@ class SecretsMountPostgresql(dict):
|
|
5643
5786
|
@property
|
5644
5787
|
@pulumi.getter
|
5645
5788
|
def name(self) -> str:
|
5789
|
+
"""
|
5790
|
+
Name of the database connection.
|
5791
|
+
"""
|
5646
5792
|
return pulumi.get(self, "name")
|
5647
5793
|
|
5648
5794
|
@property
|
@@ -5657,6 +5803,9 @@ class SecretsMountPostgresql(dict):
|
|
5657
5803
|
@property
|
5658
5804
|
@pulumi.getter(name="authType")
|
5659
5805
|
def auth_type(self) -> Optional[str]:
|
5806
|
+
"""
|
5807
|
+
Specify alternative authorization type. (Only 'gcp_iam' is valid currently)
|
5808
|
+
"""
|
5660
5809
|
return pulumi.get(self, "auth_type")
|
5661
5810
|
|
5662
5811
|
@property
|
@@ -5739,6 +5888,9 @@ class SecretsMountPostgresql(dict):
|
|
5739
5888
|
@property
|
5740
5889
|
@pulumi.getter(name="serviceAccountJson")
|
5741
5890
|
def service_account_json(self) -> Optional[str]:
|
5891
|
+
"""
|
5892
|
+
A JSON encoded credential for use with IAM authorization
|
5893
|
+
"""
|
5742
5894
|
return pulumi.get(self, "service_account_json")
|
5743
5895
|
|
5744
5896
|
@property
|
@@ -5812,6 +5964,7 @@ class SecretsMountRedi(dict):
|
|
5812
5964
|
verify_connection: Optional[bool] = None):
|
5813
5965
|
"""
|
5814
5966
|
:param str host: The host to connect to.
|
5967
|
+
:param str name: Name of the database connection.
|
5815
5968
|
:param str password: The root credential password used in the connection URL.
|
5816
5969
|
:param str username: The root credential username used in the connection URL.
|
5817
5970
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
@@ -5864,6 +6017,9 @@ class SecretsMountRedi(dict):
|
|
5864
6017
|
@property
|
5865
6018
|
@pulumi.getter
|
5866
6019
|
def name(self) -> str:
|
6020
|
+
"""
|
6021
|
+
Name of the database connection.
|
6022
|
+
"""
|
5867
6023
|
return pulumi.get(self, "name")
|
5868
6024
|
|
5869
6025
|
@property
|
@@ -5998,6 +6154,7 @@ class SecretsMountRedisElasticach(dict):
|
|
5998
6154
|
username: Optional[str] = None,
|
5999
6155
|
verify_connection: Optional[bool] = None):
|
6000
6156
|
"""
|
6157
|
+
:param str name: Name of the database connection.
|
6001
6158
|
:param str url: The URL for Elasticsearch's API. https requires certificate
|
6002
6159
|
by trusted CA if used.
|
6003
6160
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
@@ -6036,6 +6193,9 @@ class SecretsMountRedisElasticach(dict):
|
|
6036
6193
|
@property
|
6037
6194
|
@pulumi.getter
|
6038
6195
|
def name(self) -> str:
|
6196
|
+
"""
|
6197
|
+
Name of the database connection.
|
6198
|
+
"""
|
6039
6199
|
return pulumi.get(self, "name")
|
6040
6200
|
|
6041
6201
|
@property
|
@@ -6170,6 +6330,7 @@ class SecretsMountRedshift(dict):
|
|
6170
6330
|
username_template: Optional[str] = None,
|
6171
6331
|
verify_connection: Optional[bool] = None):
|
6172
6332
|
"""
|
6333
|
+
:param str name: Name of the database connection.
|
6173
6334
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
6174
6335
|
connection.
|
6175
6336
|
:param str connection_url: Specifies the Redshift DSN.
|
@@ -6222,6 +6383,9 @@ class SecretsMountRedshift(dict):
|
|
6222
6383
|
@property
|
6223
6384
|
@pulumi.getter
|
6224
6385
|
def name(self) -> str:
|
6386
|
+
"""
|
6387
|
+
Name of the database connection.
|
6388
|
+
"""
|
6225
6389
|
return pulumi.get(self, "name")
|
6226
6390
|
|
6227
6391
|
@property
|
@@ -6386,6 +6550,7 @@ class SecretsMountSnowflake(dict):
|
|
6386
6550
|
username_template: Optional[str] = None,
|
6387
6551
|
verify_connection: Optional[bool] = None):
|
6388
6552
|
"""
|
6553
|
+
:param str name: Name of the database connection.
|
6389
6554
|
:param Sequence[str] allowed_roles: A list of roles that are allowed to use this
|
6390
6555
|
connection.
|
6391
6556
|
:param str connection_url: Specifies the Redshift DSN.
|
@@ -6435,6 +6600,9 @@ class SecretsMountSnowflake(dict):
|
|
6435
6600
|
@property
|
6436
6601
|
@pulumi.getter
|
6437
6602
|
def name(self) -> str:
|
6603
|
+
"""
|
6604
|
+
Name of the database connection.
|
6605
|
+
"""
|
6438
6606
|
return pulumi.get(self, "name")
|
6439
6607
|
|
6440
6608
|
@property
|
@@ -188,12 +188,6 @@ class AwaitableGetRaftAutopilotStateResult(GetRaftAutopilotStateResult):
|
|
188
188
|
def get_raft_autopilot_state(namespace: Optional[str] = None,
|
189
189
|
opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetRaftAutopilotStateResult:
|
190
190
|
"""
|
191
|
-
Displays the state of the raft cluster under integrated storage as seen by
|
192
|
-
autopilot. It shows whether autopilot thinks the cluster is healthy or not, and
|
193
|
-
how many nodes could fail before the cluster becomes unhealthy ("Failure
|
194
|
-
Tolerance"). For more information, please refer to the
|
195
|
-
[Vault documentation](https://developer.hashicorp.com/vault/api-docs/system/storage/raftautopilot#get-cluster-state).
|
196
|
-
|
197
191
|
## Example Usage
|
198
192
|
|
199
193
|
```python
|
@@ -235,12 +229,6 @@ def get_raft_autopilot_state(namespace: Optional[str] = None,
|
|
235
229
|
def get_raft_autopilot_state_output(namespace: Optional[pulumi.Input[Optional[str]]] = None,
|
236
230
|
opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetRaftAutopilotStateResult]:
|
237
231
|
"""
|
238
|
-
Displays the state of the raft cluster under integrated storage as seen by
|
239
|
-
autopilot. It shows whether autopilot thinks the cluster is healthy or not, and
|
240
|
-
how many nodes could fail before the cluster becomes unhealthy ("Failure
|
241
|
-
Tolerance"). For more information, please refer to the
|
242
|
-
[Vault documentation](https://developer.hashicorp.com/vault/api-docs/system/storage/raftautopilot#get-cluster-state).
|
243
|
-
|
244
232
|
## Example Usage
|
245
233
|
|
246
234
|
```python
|