pulumi-vault 5.21.0a1709368526__py3-none-any.whl → 5.21.0a1710888431__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/ad/get_access_credentials.py +4 -2
- pulumi_vault/ad/secret_backend.py +6 -2
- pulumi_vault/ad/secret_library.py +6 -2
- pulumi_vault/ad/secret_role.py +6 -2
- pulumi_vault/alicloud/auth_backend_role.py +6 -2
- pulumi_vault/approle/auth_backend_login.py +4 -0
- pulumi_vault/approle/auth_backend_role.py +6 -2
- pulumi_vault/approle/auth_backend_role_secret_id.py +4 -0
- pulumi_vault/approle/get_auth_backend_role_id.py +4 -0
- pulumi_vault/audit.py +14 -2
- pulumi_vault/audit_request_header.py +4 -0
- pulumi_vault/auth_backend.py +2 -2
- pulumi_vault/aws/auth_backend_cert.py +6 -2
- pulumi_vault/aws/auth_backend_client.py +6 -2
- pulumi_vault/aws/auth_backend_config_identity.py +6 -2
- pulumi_vault/aws/auth_backend_identity_whitelist.py +6 -2
- pulumi_vault/aws/auth_backend_role.py +6 -2
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +4 -0
- pulumi_vault/aws/auth_backend_sts_role.py +6 -2
- pulumi_vault/aws/get_access_credentials.py +4 -2
- pulumi_vault/aws/secret_backend.py +2 -2
- pulumi_vault/aws/secret_backend_role.py +6 -2
- pulumi_vault/aws/secret_backend_static_role.py +10 -4
- pulumi_vault/azure/auth_backend_config.py +6 -2
- pulumi_vault/azure/auth_backend_role.py +6 -2
- pulumi_vault/azure/backend.py +12 -0
- pulumi_vault/azure/backend_role.py +4 -0
- pulumi_vault/azure/get_access_credentials.py +6 -0
- pulumi_vault/cert_auth_backend_role.py +4 -0
- pulumi_vault/consul/secret_backend.py +14 -2
- pulumi_vault/consul/secret_backend_role.py +8 -2
- pulumi_vault/database/secret_backend_connection.py +6 -2
- pulumi_vault/database/secret_backend_role.py +6 -2
- pulumi_vault/database/secret_backend_static_role.py +6 -2
- pulumi_vault/database/secrets_mount.py +6 -2
- pulumi_vault/egp_policy.py +4 -0
- pulumi_vault/gcp/auth_backend.py +6 -2
- pulumi_vault/gcp/auth_backend_role.py +6 -2
- pulumi_vault/gcp/get_auth_backend_role.py +4 -0
- pulumi_vault/gcp/secret_backend.py +4 -0
- pulumi_vault/gcp/secret_impersonated_account.py +6 -2
- pulumi_vault/gcp/secret_roleset.py +6 -2
- pulumi_vault/gcp/secret_static_account.py +6 -2
- pulumi_vault/generic/endpoint.py +6 -0
- pulumi_vault/generic/get_secret.py +6 -6
- pulumi_vault/generic/secret.py +2 -2
- pulumi_vault/get_auth_backend.py +4 -0
- pulumi_vault/get_auth_backends.py +22 -2
- pulumi_vault/get_nomad_access_token.py +4 -0
- pulumi_vault/get_policy_document.py +4 -0
- pulumi_vault/get_raft_autopilot_state.py +4 -0
- pulumi_vault/github/auth_backend.py +6 -2
- pulumi_vault/github/team.py +6 -2
- pulumi_vault/github/user.py +6 -2
- pulumi_vault/identity/entity.py +6 -2
- pulumi_vault/identity/entity_alias.py +6 -2
- pulumi_vault/identity/entity_policies.py +12 -0
- pulumi_vault/identity/get_entity.py +6 -0
- pulumi_vault/identity/get_group.py +6 -0
- pulumi_vault/identity/get_oidc_client_creds.py +4 -0
- pulumi_vault/identity/get_oidc_openid_config.py +4 -0
- pulumi_vault/identity/get_oidc_public_keys.py +4 -0
- pulumi_vault/identity/group.py +20 -2
- pulumi_vault/identity/group_alias.py +6 -2
- pulumi_vault/identity/group_member_entity_ids.py +12 -0
- pulumi_vault/identity/group_member_group_ids.py +12 -0
- pulumi_vault/identity/group_policies.py +12 -0
- pulumi_vault/identity/mfa_duo.py +6 -2
- pulumi_vault/identity/mfa_login_enforcement.py +6 -2
- pulumi_vault/identity/mfa_okta.py +6 -2
- pulumi_vault/identity/mfa_pingid.py +6 -2
- pulumi_vault/identity/mfa_totp.py +6 -2
- pulumi_vault/identity/oidc.py +4 -0
- pulumi_vault/identity/oidc_assignment.py +6 -2
- pulumi_vault/identity/oidc_client.py +6 -2
- pulumi_vault/identity/oidc_key.py +6 -2
- pulumi_vault/identity/oidc_key_allowed_client_id.py +4 -0
- pulumi_vault/identity/oidc_provider.py +6 -2
- pulumi_vault/identity/oidc_role.py +10 -2
- pulumi_vault/identity/oidc_scope.py +6 -2
- pulumi_vault/jwt/auth_backend.py +18 -6
- pulumi_vault/jwt/auth_backend_role.py +10 -2
- pulumi_vault/kmip/secret_backend.py +6 -2
- pulumi_vault/kmip/secret_role.py +6 -2
- pulumi_vault/kmip/secret_scope.py +6 -2
- pulumi_vault/kubernetes/auth_backend_config.py +6 -2
- pulumi_vault/kubernetes/auth_backend_role.py +6 -2
- pulumi_vault/kubernetes/get_service_account_token.py +4 -0
- pulumi_vault/kubernetes/secret_backend.py +6 -2
- pulumi_vault/kubernetes/secret_backend_role.py +14 -2
- pulumi_vault/kv/get_secret.py +6 -0
- pulumi_vault/kv/get_secret_subkeys_v2.py +6 -0
- pulumi_vault/kv/get_secret_v2.py +2 -6
- pulumi_vault/kv/get_secrets_list.py +6 -0
- pulumi_vault/kv/get_secrets_list_v2.py +6 -0
- pulumi_vault/kv/secret.py +8 -2
- pulumi_vault/kv/secret_backend_v2.py +12 -4
- pulumi_vault/kv/secret_v2.py +8 -2
- pulumi_vault/ldap/auth_backend.py +6 -2
- pulumi_vault/ldap/auth_backend_group.py +6 -2
- pulumi_vault/ldap/auth_backend_user.py +6 -2
- pulumi_vault/ldap/secret_backend.py +6 -2
- pulumi_vault/ldap/secret_backend_dynamic_role.py +10 -4
- pulumi_vault/ldap/secret_backend_library_set.py +6 -2
- pulumi_vault/ldap/secret_backend_static_role.py +10 -4
- pulumi_vault/managed/keys.py +2 -14
- pulumi_vault/mfa_duo.py +6 -2
- pulumi_vault/mfa_okta.py +6 -2
- pulumi_vault/mfa_pingid.py +6 -2
- pulumi_vault/mfa_totp.py +6 -2
- pulumi_vault/mongodbatlas/secret_backend.py +6 -2
- pulumi_vault/mongodbatlas/secret_role.py +10 -4
- pulumi_vault/mount.py +18 -2
- pulumi_vault/namespace.py +42 -62
- pulumi_vault/nomad_secret_backend.py +6 -2
- pulumi_vault/nomad_secret_role.py +6 -2
- pulumi_vault/okta/auth_backend.py +6 -2
- pulumi_vault/okta/auth_backend_group.py +6 -2
- pulumi_vault/okta/auth_backend_user.py +6 -2
- pulumi_vault/password_policy.py +6 -2
- pulumi_vault/pkisecret/get_backend_issuer.py +4 -2
- pulumi_vault/pkisecret/get_backend_issuers.py +4 -0
- pulumi_vault/pkisecret/get_backend_key.py +4 -0
- pulumi_vault/pkisecret/get_backend_keys.py +4 -0
- pulumi_vault/pkisecret/secret_backend_cert.py +4 -0
- pulumi_vault/pkisecret/secret_backend_config_ca.py +4 -0
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +6 -2
- pulumi_vault/pkisecret/secret_backend_config_urls.py +12 -4
- pulumi_vault/pkisecret/secret_backend_crl_config.py +4 -0
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +4 -0
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +4 -0
- pulumi_vault/pkisecret/secret_backend_issuer.py +6 -2
- pulumi_vault/pkisecret/secret_backend_key.py +2 -2
- pulumi_vault/pkisecret/secret_backend_role.py +6 -2
- pulumi_vault/pkisecret/secret_backend_root_cert.py +4 -0
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +6 -0
- pulumi_vault/pkisecret/secret_backend_sign.py +6 -0
- pulumi_vault/policy.py +2 -2
- pulumi_vault/quota_lease_count.py +6 -2
- pulumi_vault/quota_rate_limit.py +6 -2
- pulumi_vault/rabbitmq/secret_backend.py +6 -2
- pulumi_vault/rabbitmq/secret_backend_role.py +6 -2
- pulumi_vault/raft_autopilot.py +6 -2
- pulumi_vault/raft_snapshot_agent_config.py +111 -16
- pulumi_vault/rgp_policy.py +4 -0
- pulumi_vault/saml/auth_backend.py +6 -2
- pulumi_vault/saml/auth_backend_role.py +6 -2
- pulumi_vault/secrets/sync_association.py +4 -0
- pulumi_vault/secrets/sync_aws_destination.py +6 -2
- pulumi_vault/secrets/sync_azure_destination.py +6 -2
- pulumi_vault/secrets/sync_config.py +6 -2
- pulumi_vault/secrets/sync_gcp_destination.py +6 -2
- pulumi_vault/secrets/sync_gh_destination.py +6 -2
- pulumi_vault/secrets/sync_vercel_destination.py +6 -2
- pulumi_vault/ssh/_inputs.py +4 -0
- pulumi_vault/ssh/outputs.py +4 -0
- pulumi_vault/ssh/secret_backend_ca.py +6 -2
- pulumi_vault/ssh/secret_backend_role.py +6 -2
- pulumi_vault/terraformcloud/secret_backend.py +6 -2
- pulumi_vault/terraformcloud/secret_creds.py +4 -0
- pulumi_vault/terraformcloud/secret_role.py +6 -2
- pulumi_vault/token.py +6 -2
- pulumi_vault/tokenauth/auth_backend_role.py +6 -2
- pulumi_vault/transform/alphabet.py +4 -0
- pulumi_vault/transform/get_decode.py +4 -0
- pulumi_vault/transform/get_encode.py +4 -0
- pulumi_vault/transform/role.py +4 -0
- pulumi_vault/transform/template.py +4 -0
- pulumi_vault/transit/get_decrypt.py +4 -0
- pulumi_vault/transit/secret_backend_key.py +8 -2
- pulumi_vault/transit/secret_cache_config.py +4 -0
- {pulumi_vault-5.21.0a1709368526.dist-info → pulumi_vault-5.21.0a1710888431.dist-info}/METADATA +1 -1
- pulumi_vault-5.21.0a1710888431.dist-info/RECORD +244 -0
- {pulumi_vault-5.21.0a1709368526.dist-info → pulumi_vault-5.21.0a1710888431.dist-info}/WHEEL +1 -1
- pulumi_vault-5.21.0a1709368526.dist-info/RECORD +0 -244
- {pulumi_vault-5.21.0a1709368526.dist-info → pulumi_vault-5.21.0a1710888431.dist-info}/top_level.txt +0 -0
@@ -86,8 +86,19 @@ class RaftSnapshotAgentConfigArgs:
|
|
86
86
|
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
87
87
|
The raw value looks like this:
|
88
88
|
|
89
|
-
```
|
90
|
-
|
89
|
+
```json
|
90
|
+
{
|
91
|
+
"type": "service_account",
|
92
|
+
"project_id": "project-id",
|
93
|
+
"private_key_id": "key-id",
|
94
|
+
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
95
|
+
"client_email": "service-account-email",
|
96
|
+
"client_id": "client-id",
|
97
|
+
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
98
|
+
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
99
|
+
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
100
|
+
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
101
|
+
}
|
91
102
|
```
|
92
103
|
:param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
|
93
104
|
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
@@ -454,8 +465,19 @@ class RaftSnapshotAgentConfigArgs:
|
|
454
465
|
Google service account key in JSON format.
|
455
466
|
The raw value looks like this:
|
456
467
|
|
457
|
-
```
|
458
|
-
|
468
|
+
```json
|
469
|
+
{
|
470
|
+
"type": "service_account",
|
471
|
+
"project_id": "project-id",
|
472
|
+
"private_key_id": "key-id",
|
473
|
+
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
474
|
+
"client_email": "service-account-email",
|
475
|
+
"client_id": "client-id",
|
476
|
+
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
477
|
+
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
478
|
+
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
479
|
+
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
480
|
+
}
|
459
481
|
```
|
460
482
|
"""
|
461
483
|
return pulumi.get(self, "google_service_account_key")
|
@@ -587,8 +609,19 @@ class _RaftSnapshotAgentConfigState:
|
|
587
609
|
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
588
610
|
The raw value looks like this:
|
589
611
|
|
590
|
-
```
|
591
|
-
|
612
|
+
```json
|
613
|
+
{
|
614
|
+
"type": "service_account",
|
615
|
+
"project_id": "project-id",
|
616
|
+
"private_key_id": "key-id",
|
617
|
+
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
618
|
+
"client_email": "service-account-email",
|
619
|
+
"client_id": "client-id",
|
620
|
+
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
621
|
+
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
622
|
+
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
623
|
+
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
624
|
+
}
|
592
625
|
```
|
593
626
|
:param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
|
594
627
|
:param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
|
@@ -925,8 +958,19 @@ class _RaftSnapshotAgentConfigState:
|
|
925
958
|
Google service account key in JSON format.
|
926
959
|
The raw value looks like this:
|
927
960
|
|
928
|
-
```
|
929
|
-
|
961
|
+
```json
|
962
|
+
{
|
963
|
+
"type": "service_account",
|
964
|
+
"project_id": "project-id",
|
965
|
+
"private_key_id": "key-id",
|
966
|
+
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
967
|
+
"client_email": "service-account-email",
|
968
|
+
"client_id": "client-id",
|
969
|
+
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
970
|
+
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
971
|
+
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
972
|
+
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
973
|
+
}
|
930
974
|
```
|
931
975
|
"""
|
932
976
|
return pulumi.get(self, "google_service_account_key")
|
@@ -1068,7 +1112,9 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1068
1112
|
__props__=None):
|
1069
1113
|
"""
|
1070
1114
|
## Example Usage
|
1115
|
+
|
1071
1116
|
### Local Storage
|
1117
|
+
<!--Start PulumiCodeChooser -->
|
1072
1118
|
```python
|
1073
1119
|
import pulumi
|
1074
1120
|
import pulumi_vault as vault
|
@@ -1080,7 +1126,10 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1080
1126
|
retain=7,
|
1081
1127
|
storage_type="local")
|
1082
1128
|
```
|
1129
|
+
<!--End PulumiCodeChooser -->
|
1130
|
+
|
1083
1131
|
### AWS S3
|
1132
|
+
<!--Start PulumiCodeChooser -->
|
1084
1133
|
```python
|
1085
1134
|
import pulumi
|
1086
1135
|
import pulumi_aws as aws
|
@@ -1101,8 +1150,11 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1101
1150
|
aws_secret_access_key=aws_secret_access_key,
|
1102
1151
|
aws_s3_enable_kms=True)
|
1103
1152
|
```
|
1153
|
+
<!--End PulumiCodeChooser -->
|
1154
|
+
|
1104
1155
|
### Azure BLOB
|
1105
1156
|
|
1157
|
+
<!--Start PulumiCodeChooser -->
|
1106
1158
|
```python
|
1107
1159
|
import pulumi
|
1108
1160
|
import pulumi_vault as vault
|
@@ -1119,13 +1171,14 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1119
1171
|
azure_account_name=azure_account_name,
|
1120
1172
|
azure_account_key=azure_account_key)
|
1121
1173
|
```
|
1174
|
+
<!--End PulumiCodeChooser -->
|
1122
1175
|
|
1123
1176
|
## Import
|
1124
1177
|
|
1125
1178
|
Raft Snapshot Agent Configurations can be imported using the `name`, e.g.
|
1126
1179
|
|
1127
1180
|
```sh
|
1128
|
-
|
1181
|
+
$ pulumi import vault:index/raftSnapshotAgentConfig:RaftSnapshotAgentConfig local local
|
1129
1182
|
```
|
1130
1183
|
|
1131
1184
|
:param str resource_name: The name of the resource.
|
@@ -1164,8 +1217,19 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1164
1217
|
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1165
1218
|
The raw value looks like this:
|
1166
1219
|
|
1167
|
-
```
|
1168
|
-
|
1220
|
+
```json
|
1221
|
+
{
|
1222
|
+
"type": "service_account",
|
1223
|
+
"project_id": "project-id",
|
1224
|
+
"private_key_id": "key-id",
|
1225
|
+
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
1226
|
+
"client_email": "service-account-email",
|
1227
|
+
"client_id": "client-id",
|
1228
|
+
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
1229
|
+
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
1230
|
+
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
1231
|
+
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
1232
|
+
}
|
1169
1233
|
```
|
1170
1234
|
:param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
|
1171
1235
|
:param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
|
@@ -1195,7 +1259,9 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1195
1259
|
opts: Optional[pulumi.ResourceOptions] = None):
|
1196
1260
|
"""
|
1197
1261
|
## Example Usage
|
1262
|
+
|
1198
1263
|
### Local Storage
|
1264
|
+
<!--Start PulumiCodeChooser -->
|
1199
1265
|
```python
|
1200
1266
|
import pulumi
|
1201
1267
|
import pulumi_vault as vault
|
@@ -1207,7 +1273,10 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1207
1273
|
retain=7,
|
1208
1274
|
storage_type="local")
|
1209
1275
|
```
|
1276
|
+
<!--End PulumiCodeChooser -->
|
1277
|
+
|
1210
1278
|
### AWS S3
|
1279
|
+
<!--Start PulumiCodeChooser -->
|
1211
1280
|
```python
|
1212
1281
|
import pulumi
|
1213
1282
|
import pulumi_aws as aws
|
@@ -1228,8 +1297,11 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1228
1297
|
aws_secret_access_key=aws_secret_access_key,
|
1229
1298
|
aws_s3_enable_kms=True)
|
1230
1299
|
```
|
1300
|
+
<!--End PulumiCodeChooser -->
|
1301
|
+
|
1231
1302
|
### Azure BLOB
|
1232
1303
|
|
1304
|
+
<!--Start PulumiCodeChooser -->
|
1233
1305
|
```python
|
1234
1306
|
import pulumi
|
1235
1307
|
import pulumi_vault as vault
|
@@ -1246,13 +1318,14 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1246
1318
|
azure_account_name=azure_account_name,
|
1247
1319
|
azure_account_key=azure_account_key)
|
1248
1320
|
```
|
1321
|
+
<!--End PulumiCodeChooser -->
|
1249
1322
|
|
1250
1323
|
## Import
|
1251
1324
|
|
1252
1325
|
Raft Snapshot Agent Configurations can be imported using the `name`, e.g.
|
1253
1326
|
|
1254
1327
|
```sh
|
1255
|
-
|
1328
|
+
$ pulumi import vault:index/raftSnapshotAgentConfig:RaftSnapshotAgentConfig local local
|
1256
1329
|
```
|
1257
1330
|
|
1258
1331
|
:param str resource_name: The name of the resource.
|
@@ -1420,8 +1493,19 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1420
1493
|
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1421
1494
|
The raw value looks like this:
|
1422
1495
|
|
1423
|
-
```
|
1424
|
-
|
1496
|
+
```json
|
1497
|
+
{
|
1498
|
+
"type": "service_account",
|
1499
|
+
"project_id": "project-id",
|
1500
|
+
"private_key_id": "key-id",
|
1501
|
+
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
1502
|
+
"client_email": "service-account-email",
|
1503
|
+
"client_id": "client-id",
|
1504
|
+
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
1505
|
+
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
1506
|
+
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
1507
|
+
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
1508
|
+
}
|
1425
1509
|
```
|
1426
1510
|
:param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
|
1427
1511
|
:param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
|
@@ -1655,8 +1739,19 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1655
1739
|
Google service account key in JSON format.
|
1656
1740
|
The raw value looks like this:
|
1657
1741
|
|
1658
|
-
```
|
1659
|
-
|
1742
|
+
```json
|
1743
|
+
{
|
1744
|
+
"type": "service_account",
|
1745
|
+
"project_id": "project-id",
|
1746
|
+
"private_key_id": "key-id",
|
1747
|
+
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
1748
|
+
"client_email": "service-account-email",
|
1749
|
+
"client_id": "client-id",
|
1750
|
+
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
1751
|
+
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
1752
|
+
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
1753
|
+
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
1754
|
+
}
|
1660
1755
|
```
|
1661
1756
|
"""
|
1662
1757
|
return pulumi.get(self, "google_service_account_key")
|
pulumi_vault/rgp_policy.py
CHANGED
@@ -182,6 +182,7 @@ class RgpPolicy(pulumi.CustomResource):
|
|
182
182
|
|
183
183
|
## Example Usage
|
184
184
|
|
185
|
+
<!--Start PulumiCodeChooser -->
|
185
186
|
```python
|
186
187
|
import pulumi
|
187
188
|
import pulumi_vault as vault
|
@@ -194,6 +195,7 @@ class RgpPolicy(pulumi.CustomResource):
|
|
194
195
|
|
195
196
|
\"\"\")
|
196
197
|
```
|
198
|
+
<!--End PulumiCodeChooser -->
|
197
199
|
|
198
200
|
:param str resource_name: The name of the resource.
|
199
201
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
@@ -218,6 +220,7 @@ class RgpPolicy(pulumi.CustomResource):
|
|
218
220
|
|
219
221
|
## Example Usage
|
220
222
|
|
223
|
+
<!--Start PulumiCodeChooser -->
|
221
224
|
```python
|
222
225
|
import pulumi
|
223
226
|
import pulumi_vault as vault
|
@@ -230,6 +233,7 @@ class RgpPolicy(pulumi.CustomResource):
|
|
230
233
|
|
231
234
|
\"\"\")
|
232
235
|
```
|
236
|
+
<!--End PulumiCodeChooser -->
|
233
237
|
|
234
238
|
:param str resource_name: The name of the resource.
|
235
239
|
:param RgpPolicyArgs args: The arguments to use to populate this resource's properties.
|
@@ -445,6 +445,7 @@ class AuthBackend(pulumi.CustomResource):
|
|
445
445
|
|
446
446
|
## Example Usage
|
447
447
|
|
448
|
+
<!--Start PulumiCodeChooser -->
|
448
449
|
```python
|
449
450
|
import pulumi
|
450
451
|
import pulumi_vault as vault
|
@@ -456,13 +457,14 @@ class AuthBackend(pulumi.CustomResource):
|
|
456
457
|
idp_metadata_url="https://company.okta.com/app/abc123eb9xnIfzlaf697/sso/saml/metadata",
|
457
458
|
path="saml")
|
458
459
|
```
|
460
|
+
<!--End PulumiCodeChooser -->
|
459
461
|
|
460
462
|
## Import
|
461
463
|
|
462
464
|
SAML authentication mounts can be imported using the `path`, e.g.
|
463
465
|
|
464
466
|
```sh
|
465
|
-
|
467
|
+
$ pulumi import vault:saml/authBackend:AuthBackend example saml
|
466
468
|
```
|
467
469
|
|
468
470
|
:param str resource_name: The name of the resource.
|
@@ -503,6 +505,7 @@ class AuthBackend(pulumi.CustomResource):
|
|
503
505
|
|
504
506
|
## Example Usage
|
505
507
|
|
508
|
+
<!--Start PulumiCodeChooser -->
|
506
509
|
```python
|
507
510
|
import pulumi
|
508
511
|
import pulumi_vault as vault
|
@@ -514,13 +517,14 @@ class AuthBackend(pulumi.CustomResource):
|
|
514
517
|
idp_metadata_url="https://company.okta.com/app/abc123eb9xnIfzlaf697/sso/saml/metadata",
|
515
518
|
path="saml")
|
516
519
|
```
|
520
|
+
<!--End PulumiCodeChooser -->
|
517
521
|
|
518
522
|
## Import
|
519
523
|
|
520
524
|
SAML authentication mounts can be imported using the `path`, e.g.
|
521
525
|
|
522
526
|
```sh
|
523
|
-
|
527
|
+
$ pulumi import vault:saml/authBackend:AuthBackend example saml
|
524
528
|
```
|
525
529
|
|
526
530
|
:param str resource_name: The name of the resource.
|
@@ -688,6 +688,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
688
688
|
|
689
689
|
## Example Usage
|
690
690
|
|
691
|
+
<!--Start PulumiCodeChooser -->
|
691
692
|
```python
|
692
693
|
import pulumi
|
693
694
|
import pulumi_vault as vault
|
@@ -708,13 +709,14 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
708
709
|
token_policies=["writer"],
|
709
710
|
token_ttl=86400)
|
710
711
|
```
|
712
|
+
<!--End PulumiCodeChooser -->
|
711
713
|
|
712
714
|
## Import
|
713
715
|
|
714
716
|
SAML authentication backend roles can be imported using the `path`, e.g.
|
715
717
|
|
716
718
|
```sh
|
717
|
-
|
719
|
+
$ pulumi import vault:saml/authBackendRole:AuthBackendRole example auth/saml/role/my-role
|
718
720
|
```
|
719
721
|
|
720
722
|
:param str resource_name: The name of the resource.
|
@@ -772,6 +774,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
772
774
|
|
773
775
|
## Example Usage
|
774
776
|
|
777
|
+
<!--Start PulumiCodeChooser -->
|
775
778
|
```python
|
776
779
|
import pulumi
|
777
780
|
import pulumi_vault as vault
|
@@ -792,13 +795,14 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
792
795
|
token_policies=["writer"],
|
793
796
|
token_ttl=86400)
|
794
797
|
```
|
798
|
+
<!--End PulumiCodeChooser -->
|
795
799
|
|
796
800
|
## Import
|
797
801
|
|
798
802
|
SAML authentication backend roles can be imported using the `path`, e.g.
|
799
803
|
|
800
804
|
```sh
|
801
|
-
|
805
|
+
$ pulumi import vault:saml/authBackendRole:AuthBackendRole example auth/saml/role/my-role
|
802
806
|
```
|
803
807
|
|
804
808
|
:param str resource_name: The name of the resource.
|
@@ -238,6 +238,7 @@ class SyncAssociation(pulumi.CustomResource):
|
|
238
238
|
"""
|
239
239
|
## Example Usage
|
240
240
|
|
241
|
+
<!--Start PulumiCodeChooser -->
|
241
242
|
```python
|
242
243
|
import pulumi
|
243
244
|
import json
|
@@ -266,6 +267,7 @@ class SyncAssociation(pulumi.CustomResource):
|
|
266
267
|
mount=kvv2.path,
|
267
268
|
secret_name=token.name)
|
268
269
|
```
|
270
|
+
<!--End PulumiCodeChooser -->
|
269
271
|
|
270
272
|
:param str resource_name: The name of the resource.
|
271
273
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
@@ -286,6 +288,7 @@ class SyncAssociation(pulumi.CustomResource):
|
|
286
288
|
"""
|
287
289
|
## Example Usage
|
288
290
|
|
291
|
+
<!--Start PulumiCodeChooser -->
|
289
292
|
```python
|
290
293
|
import pulumi
|
291
294
|
import json
|
@@ -314,6 +317,7 @@ class SyncAssociation(pulumi.CustomResource):
|
|
314
317
|
mount=kvv2.path,
|
315
318
|
secret_name=token.name)
|
316
319
|
```
|
320
|
+
<!--End PulumiCodeChooser -->
|
317
321
|
|
318
322
|
:param str resource_name: The name of the resource.
|
319
323
|
:param SyncAssociationArgs args: The arguments to use to populate this resource's properties.
|
@@ -319,6 +319,7 @@ class SyncAwsDestination(pulumi.CustomResource):
|
|
319
319
|
"""
|
320
320
|
## Example Usage
|
321
321
|
|
322
|
+
<!--Start PulumiCodeChooser -->
|
322
323
|
```python
|
323
324
|
import pulumi
|
324
325
|
import pulumi_vault as vault
|
@@ -332,13 +333,14 @@ class SyncAwsDestination(pulumi.CustomResource):
|
|
332
333
|
"foo": "bar",
|
333
334
|
})
|
334
335
|
```
|
336
|
+
<!--End PulumiCodeChooser -->
|
335
337
|
|
336
338
|
## Import
|
337
339
|
|
338
340
|
AWS Secrets sync destinations can be imported using the `name`, e.g.
|
339
341
|
|
340
342
|
```sh
|
341
|
-
|
343
|
+
$ pulumi import vault:secrets/syncAwsDestination:SyncAwsDestination aws aws-dest
|
342
344
|
```
|
343
345
|
|
344
346
|
:param str resource_name: The name of the resource.
|
@@ -369,6 +371,7 @@ class SyncAwsDestination(pulumi.CustomResource):
|
|
369
371
|
"""
|
370
372
|
## Example Usage
|
371
373
|
|
374
|
+
<!--Start PulumiCodeChooser -->
|
372
375
|
```python
|
373
376
|
import pulumi
|
374
377
|
import pulumi_vault as vault
|
@@ -382,13 +385,14 @@ class SyncAwsDestination(pulumi.CustomResource):
|
|
382
385
|
"foo": "bar",
|
383
386
|
})
|
384
387
|
```
|
388
|
+
<!--End PulumiCodeChooser -->
|
385
389
|
|
386
390
|
## Import
|
387
391
|
|
388
392
|
AWS Secrets sync destinations can be imported using the `name`, e.g.
|
389
393
|
|
390
394
|
```sh
|
391
|
-
|
395
|
+
$ pulumi import vault:secrets/syncAwsDestination:SyncAwsDestination aws aws-dest
|
392
396
|
```
|
393
397
|
|
394
398
|
:param str resource_name: The name of the resource.
|
@@ -393,6 +393,7 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
393
393
|
"""
|
394
394
|
## Example Usage
|
395
395
|
|
396
|
+
<!--Start PulumiCodeChooser -->
|
396
397
|
```python
|
397
398
|
import pulumi
|
398
399
|
import pulumi_vault as vault
|
@@ -407,13 +408,14 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
407
408
|
"foo": "bar",
|
408
409
|
})
|
409
410
|
```
|
411
|
+
<!--End PulumiCodeChooser -->
|
410
412
|
|
411
413
|
## Import
|
412
414
|
|
413
415
|
Azure Secrets sync destinations can be imported using the `name`, e.g.
|
414
416
|
|
415
417
|
```sh
|
416
|
-
|
418
|
+
$ pulumi import vault:secrets/syncAzureDestination:SyncAzureDestination az az-dest
|
417
419
|
```
|
418
420
|
|
419
421
|
:param str resource_name: The name of the resource.
|
@@ -448,6 +450,7 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
448
450
|
"""
|
449
451
|
## Example Usage
|
450
452
|
|
453
|
+
<!--Start PulumiCodeChooser -->
|
451
454
|
```python
|
452
455
|
import pulumi
|
453
456
|
import pulumi_vault as vault
|
@@ -462,13 +465,14 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
462
465
|
"foo": "bar",
|
463
466
|
})
|
464
467
|
```
|
468
|
+
<!--End PulumiCodeChooser -->
|
465
469
|
|
466
470
|
## Import
|
467
471
|
|
468
472
|
Azure Secrets sync destinations can be imported using the `name`, e.g.
|
469
473
|
|
470
474
|
```sh
|
471
|
-
|
475
|
+
$ pulumi import vault:secrets/syncAzureDestination:SyncAzureDestination az az-dest
|
472
476
|
```
|
473
477
|
|
474
478
|
:param str resource_name: The name of the resource.
|
@@ -150,6 +150,7 @@ class SyncConfig(pulumi.CustomResource):
|
|
150
150
|
|
151
151
|
## Example Usage
|
152
152
|
|
153
|
+
<!--Start PulumiCodeChooser -->
|
153
154
|
```python
|
154
155
|
import pulumi
|
155
156
|
import pulumi_vault as vault
|
@@ -158,11 +159,12 @@ class SyncConfig(pulumi.CustomResource):
|
|
158
159
|
disabled=True,
|
159
160
|
queue_capacity=500000)
|
160
161
|
```
|
162
|
+
<!--End PulumiCodeChooser -->
|
161
163
|
|
162
164
|
## Import
|
163
165
|
|
164
166
|
```sh
|
165
|
-
|
167
|
+
$ pulumi import vault:secrets/syncConfig:SyncConfig config global_config
|
166
168
|
```
|
167
169
|
|
168
170
|
:param str resource_name: The name of the resource.
|
@@ -189,6 +191,7 @@ class SyncConfig(pulumi.CustomResource):
|
|
189
191
|
|
190
192
|
## Example Usage
|
191
193
|
|
194
|
+
<!--Start PulumiCodeChooser -->
|
192
195
|
```python
|
193
196
|
import pulumi
|
194
197
|
import pulumi_vault as vault
|
@@ -197,11 +200,12 @@ class SyncConfig(pulumi.CustomResource):
|
|
197
200
|
disabled=True,
|
198
201
|
queue_capacity=500000)
|
199
202
|
```
|
203
|
+
<!--End PulumiCodeChooser -->
|
200
204
|
|
201
205
|
## Import
|
202
206
|
|
203
207
|
```sh
|
204
|
-
|
208
|
+
$ pulumi import vault:secrets/syncConfig:SyncConfig config global_config
|
205
209
|
```
|
206
210
|
|
207
211
|
:param str resource_name: The name of the resource.
|
@@ -237,6 +237,7 @@ class SyncGcpDestination(pulumi.CustomResource):
|
|
237
237
|
"""
|
238
238
|
## Example Usage
|
239
239
|
|
240
|
+
<!--Start PulumiCodeChooser -->
|
240
241
|
```python
|
241
242
|
import pulumi
|
242
243
|
import pulumi_vault as vault
|
@@ -248,13 +249,14 @@ class SyncGcpDestination(pulumi.CustomResource):
|
|
248
249
|
"foo": "bar",
|
249
250
|
})
|
250
251
|
```
|
252
|
+
<!--End PulumiCodeChooser -->
|
251
253
|
|
252
254
|
## Import
|
253
255
|
|
254
256
|
GCP Secrets sync destinations can be imported using the `name`, e.g.
|
255
257
|
|
256
258
|
```sh
|
257
|
-
|
259
|
+
$ pulumi import vault:secrets/syncGcpDestination:SyncGcpDestination gcp gcp-dest
|
258
260
|
```
|
259
261
|
|
260
262
|
:param str resource_name: The name of the resource.
|
@@ -279,6 +281,7 @@ class SyncGcpDestination(pulumi.CustomResource):
|
|
279
281
|
"""
|
280
282
|
## Example Usage
|
281
283
|
|
284
|
+
<!--Start PulumiCodeChooser -->
|
282
285
|
```python
|
283
286
|
import pulumi
|
284
287
|
import pulumi_vault as vault
|
@@ -290,13 +293,14 @@ class SyncGcpDestination(pulumi.CustomResource):
|
|
290
293
|
"foo": "bar",
|
291
294
|
})
|
292
295
|
```
|
296
|
+
<!--End PulumiCodeChooser -->
|
293
297
|
|
294
298
|
## Import
|
295
299
|
|
296
300
|
GCP Secrets sync destinations can be imported using the `name`, e.g.
|
297
301
|
|
298
302
|
```sh
|
299
|
-
|
303
|
+
$ pulumi import vault:secrets/syncGcpDestination:SyncGcpDestination gcp gcp-dest
|
300
304
|
```
|
301
305
|
|
302
306
|
:param str resource_name: The name of the resource.
|
@@ -286,6 +286,7 @@ class SyncGhDestination(pulumi.CustomResource):
|
|
286
286
|
"""
|
287
287
|
## Example Usage
|
288
288
|
|
289
|
+
<!--Start PulumiCodeChooser -->
|
289
290
|
```python
|
290
291
|
import pulumi
|
291
292
|
import pulumi_vault as vault
|
@@ -296,13 +297,14 @@ class SyncGhDestination(pulumi.CustomResource):
|
|
296
297
|
repository_name="repo-name-example",
|
297
298
|
secret_name_template="vault_{{ .MountAccessor | lowercase }}_{{ .SecretPath | lowercase }}")
|
298
299
|
```
|
300
|
+
<!--End PulumiCodeChooser -->
|
299
301
|
|
300
302
|
## Import
|
301
303
|
|
302
304
|
GitHub Secrets sync destinations can be imported using the `name`, e.g.
|
303
305
|
|
304
306
|
```sh
|
305
|
-
|
307
|
+
$ pulumi import vault:secrets/syncGhDestination:SyncGhDestination gh gh-dest
|
306
308
|
```
|
307
309
|
|
308
310
|
:param str resource_name: The name of the resource.
|
@@ -332,6 +334,7 @@ class SyncGhDestination(pulumi.CustomResource):
|
|
332
334
|
"""
|
333
335
|
## Example Usage
|
334
336
|
|
337
|
+
<!--Start PulumiCodeChooser -->
|
335
338
|
```python
|
336
339
|
import pulumi
|
337
340
|
import pulumi_vault as vault
|
@@ -342,13 +345,14 @@ class SyncGhDestination(pulumi.CustomResource):
|
|
342
345
|
repository_name="repo-name-example",
|
343
346
|
secret_name_template="vault_{{ .MountAccessor | lowercase }}_{{ .SecretPath | lowercase }}")
|
344
347
|
```
|
348
|
+
<!--End PulumiCodeChooser -->
|
345
349
|
|
346
350
|
## Import
|
347
351
|
|
348
352
|
GitHub Secrets sync destinations can be imported using the `name`, e.g.
|
349
353
|
|
350
354
|
```sh
|
351
|
-
|
355
|
+
$ pulumi import vault:secrets/syncGhDestination:SyncGhDestination gh gh-dest
|
352
356
|
```
|
353
357
|
|
354
358
|
:param str resource_name: The name of the resource.
|