pulumi-vault 5.21.0a1709368526__py3-none-any.whl → 6.5.0a1736836139__py3-none-any.whl

pulumi_vault/kv/get_secret_subkeys_v2.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
@@ -52,7 +57,7 @@ class GetSecretSubkeysV2Result:
 
     @property
     @pulumi.getter
-    def data(self) -> Mapping[str, Any]:
+    def data(self) -> Mapping[str, str]:
         """
         Subkeys for the KV-V2 secret stored as a serialized map of strings.
         """
@@ -146,8 +151,9 @@ def get_secret_subkeys_v2(depth: Optional[int] = None,
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
             "foo": "bar",
@@ -155,6 +161,7 @@ def get_secret_subkeys_v2(depth: Optional[int] = None,
     test = vault.kv.get_secret_subkeys_v2_output(mount=kvv2.path,
         name=aws_secret.name)
     ```
+
     ## Required Vault Capabilities
 
     Use of this resource requires the `read` capability on the given path.
@@ -171,7 +178,7 @@ def get_secret_subkeys_v2(depth: Optional[int] = None,
            the name is `foo/bar/baz`.
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     :param int version: Specifies the version to return. If not 
            set the latest version is returned.
@@ -195,15 +202,12 @@ def get_secret_subkeys_v2(depth: Optional[int] = None,
         namespace=pulumi.get(__ret__, 'namespace'),
         path=pulumi.get(__ret__, 'path'),
         version=pulumi.get(__ret__, 'version'))
-
-
-@_utilities.lift_output_func(get_secret_subkeys_v2)
 def get_secret_subkeys_v2_output(depth: Optional[pulumi.Input[Optional[int]]] = None,
                                  mount: Optional[pulumi.Input[str]] = None,
                                  name: Optional[pulumi.Input[str]] = None,
                                  namespace: Optional[pulumi.Input[Optional[str]]] = None,
                                  version: Optional[pulumi.Input[Optional[int]]] = None,
-                                 opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetSecretSubkeysV2Result]:
+                                 opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetSecretSubkeysV2Result]:
     """
     ## Example Usage
 
@@ -219,8 +223,9 @@ def get_secret_subkeys_v2_output(depth: Optional[pulumi.Input[Optional[int]]] =
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
             "foo": "bar",
@@ -228,6 +233,7 @@ def get_secret_subkeys_v2_output(depth: Optional[pulumi.Input[Optional[int]]] =
     test = vault.kv.get_secret_subkeys_v2_output(mount=kvv2.path,
         name=aws_secret.name)
     ```
+
     ## Required Vault Capabilities
 
     Use of this resource requires the `read` capability on the given path.
@@ -244,9 +250,26 @@ def get_secret_subkeys_v2_output(depth: Optional[pulumi.Input[Optional[int]]] =
            the name is `foo/bar/baz`.
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     :param int version: Specifies the version to return. If not 
            set the latest version is returned.
     """
-    ...
+    __args__ = dict()
+    __args__['depth'] = depth
+    __args__['mount'] = mount
+    __args__['name'] = name
+    __args__['namespace'] = namespace
+    __args__['version'] = version
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('vault:kv/getSecretSubkeysV2:getSecretSubkeysV2', __args__, opts=opts, typ=GetSecretSubkeysV2Result)
+    return __ret__.apply(lambda __response__: GetSecretSubkeysV2Result(
+        data=pulumi.get(__response__, 'data'),
+        data_json=pulumi.get(__response__, 'data_json'),
+        depth=pulumi.get(__response__, 'depth'),
+        id=pulumi.get(__response__, 'id'),
+        mount=pulumi.get(__response__, 'mount'),
+        name=pulumi.get(__response__, 'name'),
+        namespace=pulumi.get(__response__, 'namespace'),
+        path=pulumi.get(__response__, 'path'),
+        version=pulumi.get(__response__, 'version')))

pulumi_vault/kv/get_secret_v2.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
@@ -69,7 +74,7 @@ class GetSecretV2Result:
 
     @property
     @pulumi.getter(name="customMetadata")
-    def custom_metadata(self) -> Mapping[str, Any]:
+    def custom_metadata(self) -> Mapping[str, str]:
         """
         Custom metadata for the secret.
         """
@@ -77,7 +82,7 @@ class GetSecretV2Result:
 
     @property
     @pulumi.getter
-    def data(self) -> Mapping[str, Any]:
+    def data(self) -> Mapping[str, str]:
         """
         A mapping whose keys are the top-level data keys returned from
         Vault and whose values are the corresponding values. This map can only
@@ -145,6 +150,9 @@ class GetSecretV2Result:
     @property
     @pulumi.getter
     def version(self) -> Optional[int]:
+        """
+        Version of the secret.
+        """
         return pulumi.get(self, "version")
 
 
@@ -174,6 +182,32 @@ def get_secret_v2(mount: Optional[str] = None,
                   version: Optional[int] = None,
                   opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetSecretV2Result:
     """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv2 = vault.Mount("kvv2",
+        path="kvv2",
+        type="kv",
+        options={
+            "version": "2",
+        },
+        description="KV Version 2 secret engine mount")
+    example_secret_v2 = vault.kv.SecretV2("example",
+        mount=kvv2.path,
+        name="secret",
+        delete_all_versions=True,
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    example = vault.kv.get_secret_v2_output(mount=kvv2.path,
+        name=example_secret_v2.name)
+    ```
+
     ## Required Vault Capabilities
 
     Use of this resource requires the `read` capability on the given path.
@@ -186,7 +220,7 @@ def get_secret_v2(mount: Optional[str] = None,
            the name is `foo/bar/baz`.
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     :param int version: Version of the secret to retrieve.
     """
@@ -211,15 +245,38 @@ def get_secret_v2(mount: Optional[str] = None,
         namespace=pulumi.get(__ret__, 'namespace'),
         path=pulumi.get(__ret__, 'path'),
         version=pulumi.get(__ret__, 'version'))
-
-
-@_utilities.lift_output_func(get_secret_v2)
 def get_secret_v2_output(mount: Optional[pulumi.Input[str]] = None,
                          name: Optional[pulumi.Input[str]] = None,
                          namespace: Optional[pulumi.Input[Optional[str]]] = None,
                          version: Optional[pulumi.Input[Optional[int]]] = None,
-                         opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetSecretV2Result]:
+                         opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetSecretV2Result]:
     """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv2 = vault.Mount("kvv2",
+        path="kvv2",
+        type="kv",
+        options={
+            "version": "2",
+        },
+        description="KV Version 2 secret engine mount")
+    example_secret_v2 = vault.kv.SecretV2("example",
+        mount=kvv2.path,
+        name="secret",
+        delete_all_versions=True,
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    example = vault.kv.get_secret_v2_output(mount=kvv2.path,
+        name=example_secret_v2.name)
+    ```
+
     ## Required Vault Capabilities
 
     Use of this resource requires the `read` capability on the given path.
@@ -232,8 +289,27 @@ def get_secret_v2_output(mount: Optional[pulumi.Input[str]] = None,
            the name is `foo/bar/baz`.
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     :param int version: Version of the secret to retrieve.
     """
-    ...
+    __args__ = dict()
+    __args__['mount'] = mount
+    __args__['name'] = name
+    __args__['namespace'] = namespace
+    __args__['version'] = version
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('vault:kv/getSecretV2:getSecretV2', __args__, opts=opts, typ=GetSecretV2Result)
+    return __ret__.apply(lambda __response__: GetSecretV2Result(
+        created_time=pulumi.get(__response__, 'created_time'),
+        custom_metadata=pulumi.get(__response__, 'custom_metadata'),
+        data=pulumi.get(__response__, 'data'),
+        data_json=pulumi.get(__response__, 'data_json'),
+        deletion_time=pulumi.get(__response__, 'deletion_time'),
+        destroyed=pulumi.get(__response__, 'destroyed'),
+        id=pulumi.get(__response__, 'id'),
+        mount=pulumi.get(__response__, 'mount'),
+        name=pulumi.get(__response__, 'name'),
+        namespace=pulumi.get(__response__, 'namespace'),
+        path=pulumi.get(__response__, 'path'),
+        version=pulumi.get(__response__, 'version')))

pulumi_vault/kv/get_secrets_list.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
@@ -92,18 +97,19 @@ def get_secrets_list(namespace: Optional[str] = None,
             "version": "1",
         },
         description="KV Version 1 secret engine mount")
-    aws_secret = vault.kv.Secret("awsSecret",
+    aws_secret = vault.kv.Secret("aws_secret",
         path=kvv1.path.apply(lambda path: f"{path}/aws-secret"),
         data_json=json.dumps({
             "zip": "zap",
         }))
-    azure_secret = vault.kv.Secret("azureSecret",
+    azure_secret = vault.kv.Secret("azure_secret",
         path=kvv1.path.apply(lambda path: f"{path}/azure-secret"),
         data_json=json.dumps({
             "foo": "bar",
         }))
     secrets = vault.kv.get_secrets_list_output(path=kvv1.path)
     ```
+
     ## Required Vault Capabilities
 
     Use of this resource requires the `read` capability on the given path.
@@ -111,7 +117,7 @@ def get_secrets_list(namespace: Optional[str] = None,
 
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     :param str path: Full KV-V1 path where secrets will be listed.
     """
@@ -126,12 +132,9 @@ def get_secrets_list(namespace: Optional[str] = None,
         names=pulumi.get(__ret__, 'names'),
         namespace=pulumi.get(__ret__, 'namespace'),
         path=pulumi.get(__ret__, 'path'))
-
-
-@_utilities.lift_output_func(get_secrets_list)
 def get_secrets_list_output(namespace: Optional[pulumi.Input[Optional[str]]] = None,
                             path: Optional[pulumi.Input[str]] = None,
-                            opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetSecretsListResult]:
+                            opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetSecretsListResult]:
     """
     ## Example Usage
 
@@ -147,18 +150,19 @@ def get_secrets_list_output(namespace: Optional[pulumi.Input[Optional[str]]] = N
             "version": "1",
         },
         description="KV Version 1 secret engine mount")
-    aws_secret = vault.kv.Secret("awsSecret",
+    aws_secret = vault.kv.Secret("aws_secret",
         path=kvv1.path.apply(lambda path: f"{path}/aws-secret"),
         data_json=json.dumps({
             "zip": "zap",
         }))
-    azure_secret = vault.kv.Secret("azureSecret",
+    azure_secret = vault.kv.Secret("azure_secret",
         path=kvv1.path.apply(lambda path: f"{path}/azure-secret"),
         data_json=json.dumps({
             "foo": "bar",
         }))
     secrets = vault.kv.get_secrets_list_output(path=kvv1.path)
     ```
+
     ## Required Vault Capabilities
 
     Use of this resource requires the `read` capability on the given path.
@@ -166,8 +170,17 @@ def get_secrets_list_output(namespace: Optional[pulumi.Input[Optional[str]]] = N
 
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     :param str path: Full KV-V1 path where secrets will be listed.
     """
-    ...
+    __args__ = dict()
+    __args__['namespace'] = namespace
+    __args__['path'] = path
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('vault:kv/getSecretsList:getSecretsList', __args__, opts=opts, typ=GetSecretsListResult)
+    return __ret__.apply(lambda __response__: GetSecretsListResult(
+        id=pulumi.get(__response__, 'id'),
+        names=pulumi.get(__response__, 'names'),
+        namespace=pulumi.get(__response__, 'namespace'),
+        path=pulumi.get(__response__, 'path')))

pulumi_vault/kv/get_secrets_list_v2.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
@@ -114,25 +119,29 @@ def get_secrets_list_v2(mount: Optional[str] = None,
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
         }))
-    azure_secret = vault.kv.SecretV2("azureSecret",
+    azure_secret = vault.kv.SecretV2("azure_secret",
         mount=kvv2.path,
+        name="azure_secret",
         data_json=json.dumps({
             "foo": "bar",
         }))
-    nested_secret = vault.kv.SecretV2("nestedSecret",
+    nested_secret = vault.kv.SecretV2("nested_secret",
         mount=kvv2.path,
+        name=azure_secret.name.apply(lambda name: f"{name}/dev"),
         data_json=json.dumps({
             "password": "test",
         }))
     secrets = vault.kv.get_secrets_list_v2_output(mount=kvv2.path)
     nested_secrets = kvv2.path.apply(lambda path: vault.kv.get_secrets_list_v2_output(mount=path,
-        name=vault_kv_secret_v2["test_2"]["name"]))
+        name=test2["name"]))
     ```
+
     ## Required Vault Capabilities
 
     Use of this resource requires the `read` capability on the given path.
@@ -145,7 +154,7 @@ def get_secrets_list_v2(mount: Optional[str] = None,
            the name is `foo/bar/baz`.
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     """
     __args__ = dict()
@@ -162,13 +171,10 @@ def get_secrets_list_v2(mount: Optional[str] = None,
         names=pulumi.get(__ret__, 'names'),
         namespace=pulumi.get(__ret__, 'namespace'),
         path=pulumi.get(__ret__, 'path'))
-
-
-@_utilities.lift_output_func(get_secrets_list_v2)
 def get_secrets_list_v2_output(mount: Optional[pulumi.Input[str]] = None,
                                name: Optional[pulumi.Input[Optional[str]]] = None,
                                namespace: Optional[pulumi.Input[Optional[str]]] = None,
-                               opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetSecretsListV2Result]:
+                               opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetSecretsListV2Result]:
     """
     ## Example Usage
 
@@ -184,25 +190,29 @@ def get_secrets_list_v2_output(mount: Optional[pulumi.Input[str]] = None,
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
         }))
-    azure_secret = vault.kv.SecretV2("azureSecret",
+    azure_secret = vault.kv.SecretV2("azure_secret",
         mount=kvv2.path,
+        name="azure_secret",
         data_json=json.dumps({
             "foo": "bar",
         }))
-    nested_secret = vault.kv.SecretV2("nestedSecret",
+    nested_secret = vault.kv.SecretV2("nested_secret",
         mount=kvv2.path,
+        name=azure_secret.name.apply(lambda name: f"{name}/dev"),
         data_json=json.dumps({
             "password": "test",
         }))
     secrets = vault.kv.get_secrets_list_v2_output(mount=kvv2.path)
     nested_secrets = kvv2.path.apply(lambda path: vault.kv.get_secrets_list_v2_output(mount=path,
-        name=vault_kv_secret_v2["test_2"]["name"]))
+        name=test2["name"]))
     ```
+
     ## Required Vault Capabilities
 
     Use of this resource requires the `read` capability on the given path.
@@ -215,7 +225,19 @@ def get_secrets_list_v2_output(mount: Optional[pulumi.Input[str]] = None,
            the name is `foo/bar/baz`.
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     """
-    ...
+    __args__ = dict()
+    __args__['mount'] = mount
+    __args__['name'] = name
+    __args__['namespace'] = namespace
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('vault:kv/getSecretsListV2:getSecretsListV2', __args__, opts=opts, typ=GetSecretsListV2Result)
+    return __ret__.apply(lambda __response__: GetSecretsListV2Result(
+        id=pulumi.get(__response__, 'id'),
+        mount=pulumi.get(__response__, 'mount'),
+        name=pulumi.get(__response__, 'name'),
+        names=pulumi.get(__response__, 'names'),
+        namespace=pulumi.get(__response__, 'namespace'),
+        path=pulumi.get(__response__, 'path')))

pulumi_vault/kv/outputs.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
@@ -38,12 +43,12 @@ class SecretV2CustomMetadata(dict):
 
     def __init__(__self__, *,
                  cas_required: Optional[bool] = None,
-                 data: Optional[Mapping[str, Any]] = None,
+                 data: Optional[Mapping[str, str]] = None,
                  delete_version_after: Optional[int] = None,
                  max_versions: Optional[int] = None):
         """
         :param bool cas_required: If true, all keys will require the cas parameter to be set on all write requests.
-        :param Mapping[str, Any] data: A mapping whose keys are the top-level data keys returned from
+        :param Mapping[str, str] data: A mapping whose keys are the top-level data keys returned from
                Vault and whose values are the corresponding values. This map can only
                represent string data, so any non-string values returned from Vault are
                serialized as JSON.
@@ -69,7 +74,7 @@ class SecretV2CustomMetadata(dict):
 
     @property
     @pulumi.getter
-    def data(self) -> Optional[Mapping[str, Any]]:
+    def data(self) -> Optional[Mapping[str, str]]:
         """
         A mapping whose keys are the top-level data keys returned from
         Vault and whose values are the corresponding values. This map can only