PyPI - pulumi-vault - Versions diffs - 5.21.0a1710997383__py3-none-any.whl → 6.0.0__py3-none-any.whl - Mend

pulumi-vault 5.21.0a1710997383py3-none-any.whl → 6.0.0py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (163) hide show

pulumi_vault/__init__.py +24 -0
pulumi_vault/ad/get_access_credentials.py +2 -2
pulumi_vault/ad/secret_backend.py +7 -138
pulumi_vault/ad/secret_library.py +7 -7
pulumi_vault/ad/secret_role.py +7 -7
pulumi_vault/approle/auth_backend_login.py +7 -7
pulumi_vault/approle/auth_backend_role.py +7 -7
pulumi_vault/approle/auth_backend_role_secret_id.py +7 -7
pulumi_vault/audit.py +7 -7
pulumi_vault/auth_backend.py +7 -7
pulumi_vault/aws/auth_backend_cert.py +7 -7
pulumi_vault/aws/auth_backend_client.py +7 -7
pulumi_vault/aws/auth_backend_config_identity.py +7 -7
pulumi_vault/aws/auth_backend_identity_whitelist.py +7 -7
pulumi_vault/aws/auth_backend_login.py +7 -7
pulumi_vault/aws/auth_backend_role.py +7 -7
pulumi_vault/aws/auth_backend_role_tag.py +7 -7
pulumi_vault/aws/auth_backend_roletag_blacklist.py +7 -7
pulumi_vault/aws/auth_backend_sts_role.py +7 -7
pulumi_vault/aws/get_access_credentials.py +2 -2
pulumi_vault/aws/secret_backend.py +7 -7
pulumi_vault/aws/secret_backend_role.py +7 -7
pulumi_vault/aws/secret_backend_static_role.py +7 -7
pulumi_vault/azure/auth_backend_config.py +7 -7
pulumi_vault/azure/auth_backend_role.py +7 -7
pulumi_vault/azure/backend.py +7 -7
pulumi_vault/azure/backend_role.py +7 -7
pulumi_vault/azure/get_access_credentials.py +2 -2
pulumi_vault/cert_auth_backend_role.py +7 -63
pulumi_vault/config/_inputs.py +52 -0
pulumi_vault/config/outputs.py +30 -0
pulumi_vault/config/ui_custom_message.py +524 -0
pulumi_vault/consul/secret_backend.py +7 -7
pulumi_vault/consul/secret_backend_role.py +7 -76
pulumi_vault/egp_policy.py +7 -7
pulumi_vault/gcp/auth_backend.py +7 -7
pulumi_vault/gcp/auth_backend_role.py +7 -7
pulumi_vault/gcp/secret_backend.py +7 -7
pulumi_vault/gcp/secret_roleset.py +7 -7
pulumi_vault/gcp/secret_static_account.py +7 -7
pulumi_vault/generic/endpoint.py +7 -7
pulumi_vault/generic/get_secret.py +2 -2
pulumi_vault/generic/secret.py +7 -7
pulumi_vault/get_auth_backend.py +2 -2
pulumi_vault/get_auth_backends.py +20 -2
pulumi_vault/get_nomad_access_token.py +2 -2
pulumi_vault/get_raft_autopilot_state.py +2 -2
pulumi_vault/github/auth_backend.py +7 -7
pulumi_vault/github/team.py +7 -7
pulumi_vault/github/user.py +7 -7
pulumi_vault/identity/entity.py +7 -7
pulumi_vault/identity/entity_alias.py +7 -7
pulumi_vault/identity/entity_policies.py +7 -7
pulumi_vault/identity/get_entity.py +2 -2
pulumi_vault/identity/get_group.py +2 -2
pulumi_vault/identity/get_oidc_client_creds.py +2 -2
pulumi_vault/identity/get_oidc_openid_config.py +2 -2
pulumi_vault/identity/get_oidc_public_keys.py +2 -2
pulumi_vault/identity/group.py +7 -7
pulumi_vault/identity/group_alias.py +7 -7
pulumi_vault/identity/group_member_entity_ids.py +7 -58
pulumi_vault/identity/group_member_group_ids.py +7 -7
pulumi_vault/identity/group_policies.py +7 -7
pulumi_vault/identity/oidc.py +7 -7
pulumi_vault/identity/oidc_assignment.py +7 -7
pulumi_vault/identity/oidc_client.py +19 -15
pulumi_vault/identity/oidc_key.py +7 -7
pulumi_vault/identity/oidc_key_allowed_client_id.py +7 -7
pulumi_vault/identity/oidc_provider.py +7 -7
pulumi_vault/identity/oidc_role.py +7 -7
pulumi_vault/identity/oidc_scope.py +7 -7
pulumi_vault/jwt/auth_backend.py +7 -7
pulumi_vault/jwt/auth_backend_role.py +7 -7
pulumi_vault/kmip/secret_backend.py +7 -7
pulumi_vault/kmip/secret_role.py +7 -7
pulumi_vault/kmip/secret_scope.py +7 -7
pulumi_vault/kubernetes/auth_backend_role.py +7 -7
pulumi_vault/kubernetes/get_service_account_token.py +2 -2
pulumi_vault/kubernetes/secret_backend.py +7 -7
pulumi_vault/kubernetes/secret_backend_role.py +7 -7
pulumi_vault/kv/get_secret.py +2 -2
pulumi_vault/kv/get_secret_subkeys_v2.py +2 -2
pulumi_vault/kv/get_secret_v2.py +5 -2
pulumi_vault/kv/get_secrets_list.py +2 -2
pulumi_vault/kv/get_secrets_list_v2.py +2 -2
pulumi_vault/kv/secret.py +7 -7
pulumi_vault/kv/secret_backend_v2.py +7 -7
pulumi_vault/kv/secret_v2.py +7 -7
pulumi_vault/ldap/auth_backend.py +7 -7
pulumi_vault/ldap/auth_backend_group.py +7 -7
pulumi_vault/ldap/auth_backend_user.py +7 -7
pulumi_vault/ldap/secret_backend.py +61 -76
pulumi_vault/ldap/secret_backend_dynamic_role.py +7 -7
pulumi_vault/ldap/secret_backend_library_set.py +7 -7
pulumi_vault/ldap/secret_backend_static_role.py +62 -8
pulumi_vault/mfa_duo.py +7 -7
pulumi_vault/mfa_okta.py +7 -7
pulumi_vault/mfa_pingid.py +7 -7
pulumi_vault/mfa_totp.py +7 -7
pulumi_vault/mongodbatlas/secret_backend.py +7 -7
pulumi_vault/mongodbatlas/secret_role.py +7 -7
pulumi_vault/mount.py +11 -7
pulumi_vault/namespace.py +7 -7
pulumi_vault/nomad_secret_backend.py +7 -7
pulumi_vault/nomad_secret_role.py +7 -7
pulumi_vault/okta/auth_backend.py +7 -7
pulumi_vault/okta/auth_backend_group.py +7 -7
pulumi_vault/okta/auth_backend_user.py +7 -7
pulumi_vault/password_policy.py +7 -7
pulumi_vault/pkisecret/__init__.py +1 -0
pulumi_vault/pkisecret/backend_config_cluster.py +368 -0
pulumi_vault/pkisecret/get_backend_issuer.py +2 -2
pulumi_vault/pkisecret/get_backend_issuers.py +2 -2
pulumi_vault/pkisecret/get_backend_key.py +2 -2
pulumi_vault/pkisecret/get_backend_keys.py +2 -2
pulumi_vault/pkisecret/secret_backend_cert.py +7 -7
pulumi_vault/pkisecret/secret_backend_config_ca.py +7 -7
pulumi_vault/pkisecret/secret_backend_config_issuers.py +7 -7
pulumi_vault/pkisecret/secret_backend_config_urls.py +54 -7
pulumi_vault/pkisecret/secret_backend_crl_config.py +7 -7
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +7 -7
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +7 -7
pulumi_vault/pkisecret/secret_backend_issuer.py +7 -7
pulumi_vault/pkisecret/secret_backend_key.py +7 -7
pulumi_vault/pkisecret/secret_backend_role.py +7 -7
pulumi_vault/pkisecret/secret_backend_root_cert.py +7 -44
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +7 -52
pulumi_vault/pkisecret/secret_backend_sign.py +7 -52
pulumi_vault/policy.py +7 -7
pulumi_vault/rabbitmq/secret_backend.py +7 -7
pulumi_vault/rabbitmq/secret_backend_role.py +7 -7
pulumi_vault/raft_autopilot.py +7 -7
pulumi_vault/raft_snapshot_agent_config.py +7 -7
pulumi_vault/rgp_policy.py +7 -7
pulumi_vault/saml/auth_backend.py +7 -7
pulumi_vault/saml/auth_backend_role.py +7 -7
pulumi_vault/secrets/__init__.py +1 -0
pulumi_vault/secrets/sync_association.py +7 -7
pulumi_vault/secrets/sync_aws_destination.py +161 -7
pulumi_vault/secrets/sync_azure_destination.py +7 -7
pulumi_vault/secrets/sync_gcp_destination.py +77 -7
pulumi_vault/secrets/sync_gh_destination.py +122 -7
pulumi_vault/secrets/sync_github_apps.py +370 -0
pulumi_vault/secrets/sync_vercel_destination.py +7 -7
pulumi_vault/ssh/secret_backend_ca.py +7 -7
pulumi_vault/ssh/secret_backend_role.py +7 -83
pulumi_vault/terraformcloud/secret_creds.py +7 -7
pulumi_vault/terraformcloud/secret_role.py +7 -7
pulumi_vault/token.py +7 -7
pulumi_vault/tokenauth/auth_backend_role.py +7 -7
pulumi_vault/transform/alphabet.py +7 -7
pulumi_vault/transform/get_decode.py +2 -2
pulumi_vault/transform/get_encode.py +2 -2
pulumi_vault/transform/role.py +7 -7
pulumi_vault/transform/template.py +7 -7
pulumi_vault/transform/transformation.py +7 -7
pulumi_vault/transit/secret_backend_key.py +7 -84
pulumi_vault/transit/secret_cache_config.py +7 -7
{pulumi_vault-5.21.0a1710997383.dist-info → pulumi_vault-6.0.0.dist-info}/METADATA +2 -2
pulumi_vault-6.0.0.dist-info/RECORD +248 -0
pulumi_vault-5.21.0a1710997383.dist-info/RECORD +0 -244
{pulumi_vault-5.21.0a1710997383.dist-info → pulumi_vault-6.0.0.dist-info}/WHEEL +0 -0
{pulumi_vault-5.21.0a1710997383.dist-info → pulumi_vault-6.0.0.dist-info}/top_level.txt +0 -0

pulumi_vault/__init__.py CHANGED Viewed

@@ -313,6 +313,14 @@ _utilities.register(
    "vault:azure/backendRole:BackendRole": "BackendRole"
   }
  },
+ {
+  "pkg": "vault",
+  "mod": "config/uiCustomMessage",
+  "fqn": "pulumi_vault.config",
+  "classes": {
+   "vault:config/uiCustomMessage:UiCustomMessage": "UiCustomMessage"
+  }
+ },
  {
   "pkg": "vault",
   "mod": "consul/secretBackend",
@@ -985,6 +993,14 @@ _utilities.register(
    "vault:okta/authBackendUser:AuthBackendUser": "AuthBackendUser"
   }
  },
+ {
+  "pkg": "vault",
+  "mod": "pkiSecret/backendConfigCluster",
+  "fqn": "pulumi_vault.pkisecret",
+  "classes": {
+   "vault:pkiSecret/backendConfigCluster:BackendConfigCluster": "BackendConfigCluster"
+  }
+ },
  {
   "pkg": "vault",
   "mod": "pkiSecret/secretBackendCert",
@@ -1169,6 +1185,14 @@ _utilities.register(
    "vault:secrets/syncGhDestination:SyncGhDestination": "SyncGhDestination"
   }
  },
+ {
+  "pkg": "vault",
+  "mod": "secrets/syncGithubApps",
+  "fqn": "pulumi_vault.secrets",
+  "classes": {
+   "vault:secrets/syncGithubApps:SyncGithubApps": "SyncGithubApps"
+  }
+ },
  {
   "pkg": "vault",
   "mod": "secrets/syncVercelDestination",

pulumi_vault/ad/get_access_credentials.py CHANGED Viewed

@@ -119,7 +119,7 @@ def get_access_credentials(backend: Optional[str] = None,
            read credentials from, with no leading or trailing `/`s.
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     :param str role: The name of the AD secret backend role to read
            credentials from, with no leading or trailing `/`s.
@@ -154,7 +154,7 @@ def get_access_credentials_output(backend: Optional[pulumi.Input[str]] = None,
            read credentials from, with no leading or trailing `/`s.
     :param str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
-           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
            *Available only for Vault Enterprise*.
     :param str role: The name of the AD secret backend role to read
            credentials from, with no leading or trailing `/`s.

pulumi_vault/ad/secret_backend.py CHANGED Viewed

@@ -27,13 +27,11 @@ class SecretBackendArgs:
                  description: Optional[pulumi.Input[str]] = None,
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  discoverdn: Optional[pulumi.Input[bool]] = None,
-                 formatter: Optional[pulumi.Input[str]] = None,
                  groupattr: Optional[pulumi.Input[str]] = None,
                  groupdn: Optional[pulumi.Input[str]] = None,
                  groupfilter: Optional[pulumi.Input[str]] = None,
                  insecure_tls: Optional[pulumi.Input[bool]] = None,
                  last_rotation_tolerance: Optional[pulumi.Input[int]] = None,
-                 length: Optional[pulumi.Input[int]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  max_ttl: Optional[pulumi.Input[int]] = None,
@@ -71,7 +69,6 @@ class SecretBackendArgs:
         :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
         :param pulumi.Input[bool] discoverdn: Use anonymous bind to discover the bind Distinguished Name of a user.
-        :param pulumi.Input[str] formatter: **Deprecated** use `password_policy`. Text to insert the password into, ex. "customPrefix{{PASSWORD}}customSuffix".
         :param pulumi.Input[str] groupattr: LDAP attribute to follow on objects returned by <groupfilter> in order to enumerate
                user group membership. Examples: `cn` or `memberOf`, etc. Defaults to `cn`.
         :param pulumi.Input[str] groupdn: LDAP search base to use for group membership search (eg: ou=Groups,dc=example,dc=org).
@@ -81,15 +78,13 @@ class SecretBackendArgs:
                Defaults to `false`.
         :param pulumi.Input[int] last_rotation_tolerance: The number of seconds after a Vault rotation where, if Active Directory
                shows a later rotation, it should be considered out-of-band
-        :param pulumi.Input[int] length: **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-               *Mutually exclusive with `password_policy` on vault-1.11+*
         :param pulumi.Input[bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
                replication.Tolerance duration to use when checking the last rotation time.
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
         :param pulumi.Input[int] max_ttl: In seconds, the maximum password time-to-live.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] password_policy: Name of the password policy to use to generate passwords.
         :param pulumi.Input[int] request_timeout: Timeout, in seconds, for the connection when making requests against the server
@@ -138,11 +133,6 @@ class SecretBackendArgs:
             pulumi.set(__self__, "disable_remount", disable_remount)
         if discoverdn is not None:
             pulumi.set(__self__, "discoverdn", discoverdn)
-        if formatter is not None:
-            warnings.warn("""Formatter is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-            pulumi.log.warn("""formatter is deprecated: Formatter is deprecated and password_policy should be used with Vault >= 1.5.""")
-        if formatter is not None:
-            pulumi.set(__self__, "formatter", formatter)
         if groupattr is not None:
             pulumi.set(__self__, "groupattr", groupattr)
         if groupdn is not None:
@@ -153,11 +143,6 @@ class SecretBackendArgs:
             pulumi.set(__self__, "insecure_tls", insecure_tls)
         if last_rotation_tolerance is not None:
             pulumi.set(__self__, "last_rotation_tolerance", last_rotation_tolerance)
-        if length is not None:
-            warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-            pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        if length is not None:
-            pulumi.set(__self__, "length", length)
         if local is not None:
             pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
@@ -353,21 +338,6 @@ class SecretBackendArgs:
     def discoverdn(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "discoverdn", value)
-    @property
-    @pulumi.getter
-    def formatter(self) -> Optional[pulumi.Input[str]]:
-        """
-        **Deprecated** use `password_policy`. Text to insert the password into, ex. "customPrefix{{PASSWORD}}customSuffix".
-        """
-        warnings.warn("""Formatter is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-        pulumi.log.warn("""formatter is deprecated: Formatter is deprecated and password_policy should be used with Vault >= 1.5.""")
-        return pulumi.get(self, "formatter")
-    @formatter.setter
-    def formatter(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "formatter", value)
     @property
     @pulumi.getter
     def groupattr(self) -> Optional[pulumi.Input[str]]:
@@ -432,22 +402,6 @@ class SecretBackendArgs:
     def last_rotation_tolerance(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "last_rotation_tolerance", value)
-    @property
-    @pulumi.getter
-    def length(self) -> Optional[pulumi.Input[int]]:
-        """
-        **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-        *Mutually exclusive with `password_policy` on vault-1.11+*
-        """
-        warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-        pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        return pulumi.get(self, "length")
-    @length.setter
-    def length(self, value: Optional[pulumi.Input[int]]):
-        pulumi.set(self, "length", value)
     @property
     @pulumi.getter
     def local(self) -> Optional[pulumi.Input[bool]]:
@@ -491,7 +445,7 @@ class SecretBackendArgs:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -671,13 +625,11 @@ class _SecretBackendState:
                  description: Optional[pulumi.Input[str]] = None,
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  discoverdn: Optional[pulumi.Input[bool]] = None,
-                 formatter: Optional[pulumi.Input[str]] = None,
                  groupattr: Optional[pulumi.Input[str]] = None,
                  groupdn: Optional[pulumi.Input[str]] = None,
                  groupfilter: Optional[pulumi.Input[str]] = None,
                  insecure_tls: Optional[pulumi.Input[bool]] = None,
                  last_rotation_tolerance: Optional[pulumi.Input[int]] = None,
-                 length: Optional[pulumi.Input[int]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  max_ttl: Optional[pulumi.Input[int]] = None,
@@ -715,7 +667,6 @@ class _SecretBackendState:
         :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
         :param pulumi.Input[bool] discoverdn: Use anonymous bind to discover the bind Distinguished Name of a user.
-        :param pulumi.Input[str] formatter: **Deprecated** use `password_policy`. Text to insert the password into, ex. "customPrefix{{PASSWORD}}customSuffix".
         :param pulumi.Input[str] groupattr: LDAP attribute to follow on objects returned by <groupfilter> in order to enumerate
                user group membership. Examples: `cn` or `memberOf`, etc. Defaults to `cn`.
         :param pulumi.Input[str] groupdn: LDAP search base to use for group membership search (eg: ou=Groups,dc=example,dc=org).
@@ -725,15 +676,13 @@ class _SecretBackendState:
                Defaults to `false`.
         :param pulumi.Input[int] last_rotation_tolerance: The number of seconds after a Vault rotation where, if Active Directory
                shows a later rotation, it should be considered out-of-band
-        :param pulumi.Input[int] length: **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-               *Mutually exclusive with `password_policy` on vault-1.11+*
         :param pulumi.Input[bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
                replication.Tolerance duration to use when checking the last rotation time.
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
         :param pulumi.Input[int] max_ttl: In seconds, the maximum password time-to-live.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] password_policy: Name of the password policy to use to generate passwords.
         :param pulumi.Input[int] request_timeout: Timeout, in seconds, for the connection when making requests against the server
@@ -784,11 +733,6 @@ class _SecretBackendState:
             pulumi.set(__self__, "disable_remount", disable_remount)
         if discoverdn is not None:
             pulumi.set(__self__, "discoverdn", discoverdn)
-        if formatter is not None:
-            warnings.warn("""Formatter is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-            pulumi.log.warn("""formatter is deprecated: Formatter is deprecated and password_policy should be used with Vault >= 1.5.""")
-        if formatter is not None:
-            pulumi.set(__self__, "formatter", formatter)
         if groupattr is not None:
             pulumi.set(__self__, "groupattr", groupattr)
         if groupdn is not None:
@@ -799,11 +743,6 @@ class _SecretBackendState:
             pulumi.set(__self__, "insecure_tls", insecure_tls)
         if last_rotation_tolerance is not None:
             pulumi.set(__self__, "last_rotation_tolerance", last_rotation_tolerance)
-        if length is not None:
-            warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-            pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        if length is not None:
-            pulumi.set(__self__, "length", length)
         if local is not None:
             pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
@@ -999,21 +938,6 @@ class _SecretBackendState:
     def discoverdn(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "discoverdn", value)
-    @property
-    @pulumi.getter
-    def formatter(self) -> Optional[pulumi.Input[str]]:
-        """
-        **Deprecated** use `password_policy`. Text to insert the password into, ex. "customPrefix{{PASSWORD}}customSuffix".
-        """
-        warnings.warn("""Formatter is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-        pulumi.log.warn("""formatter is deprecated: Formatter is deprecated and password_policy should be used with Vault >= 1.5.""")
-        return pulumi.get(self, "formatter")
-    @formatter.setter
-    def formatter(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "formatter", value)
     @property
     @pulumi.getter
     def groupattr(self) -> Optional[pulumi.Input[str]]:
@@ -1078,22 +1002,6 @@ class _SecretBackendState:
     def last_rotation_tolerance(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "last_rotation_tolerance", value)
-    @property
-    @pulumi.getter
-    def length(self) -> Optional[pulumi.Input[int]]:
-        """
-        **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-        *Mutually exclusive with `password_policy` on vault-1.11+*
-        """
-        warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-        pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        return pulumi.get(self, "length")
-    @length.setter
-    def length(self, value: Optional[pulumi.Input[int]]):
-        pulumi.set(self, "length", value)
     @property
     @pulumi.getter
     def local(self) -> Optional[pulumi.Input[bool]]:
@@ -1137,7 +1045,7 @@ class _SecretBackendState:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -1319,13 +1227,11 @@ class SecretBackend(pulumi.CustomResource):
                  description: Optional[pulumi.Input[str]] = None,
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  discoverdn: Optional[pulumi.Input[bool]] = None,
-                 formatter: Optional[pulumi.Input[str]] = None,
                  groupattr: Optional[pulumi.Input[str]] = None,
                  groupdn: Optional[pulumi.Input[str]] = None,
                  groupfilter: Optional[pulumi.Input[str]] = None,
                  insecure_tls: Optional[pulumi.Input[bool]] = None,
                  last_rotation_tolerance: Optional[pulumi.Input[int]] = None,
-                 length: Optional[pulumi.Input[int]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  max_ttl: Optional[pulumi.Input[int]] = None,
@@ -1390,7 +1296,6 @@ class SecretBackend(pulumi.CustomResource):
         :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
         :param pulumi.Input[bool] discoverdn: Use anonymous bind to discover the bind Distinguished Name of a user.
-        :param pulumi.Input[str] formatter: **Deprecated** use `password_policy`. Text to insert the password into, ex. "customPrefix{{PASSWORD}}customSuffix".
         :param pulumi.Input[str] groupattr: LDAP attribute to follow on objects returned by <groupfilter> in order to enumerate
                user group membership. Examples: `cn` or `memberOf`, etc. Defaults to `cn`.
         :param pulumi.Input[str] groupdn: LDAP search base to use for group membership search (eg: ou=Groups,dc=example,dc=org).
@@ -1400,15 +1305,13 @@ class SecretBackend(pulumi.CustomResource):
                Defaults to `false`.
         :param pulumi.Input[int] last_rotation_tolerance: The number of seconds after a Vault rotation where, if Active Directory
                shows a later rotation, it should be considered out-of-band
-        :param pulumi.Input[int] length: **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-               *Mutually exclusive with `password_policy` on vault-1.11+*
         :param pulumi.Input[bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
                replication.Tolerance duration to use when checking the last rotation time.
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
         :param pulumi.Input[int] max_ttl: In seconds, the maximum password time-to-live.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] password_policy: Name of the password policy to use to generate passwords.
         :param pulumi.Input[int] request_timeout: Timeout, in seconds, for the connection when making requests against the server
@@ -1493,13 +1396,11 @@ class SecretBackend(pulumi.CustomResource):
                  description: Optional[pulumi.Input[str]] = None,
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  discoverdn: Optional[pulumi.Input[bool]] = None,
-                 formatter: Optional[pulumi.Input[str]] = None,
                  groupattr: Optional[pulumi.Input[str]] = None,
                  groupdn: Optional[pulumi.Input[str]] = None,
                  groupfilter: Optional[pulumi.Input[str]] = None,
                  insecure_tls: Optional[pulumi.Input[bool]] = None,
                  last_rotation_tolerance: Optional[pulumi.Input[int]] = None,
-                 length: Optional[pulumi.Input[int]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  max_ttl: Optional[pulumi.Input[int]] = None,
@@ -1542,13 +1443,11 @@ class SecretBackend(pulumi.CustomResource):
             __props__.__dict__["description"] = description
             __props__.__dict__["disable_remount"] = disable_remount
             __props__.__dict__["discoverdn"] = discoverdn
-            __props__.__dict__["formatter"] = formatter
             __props__.__dict__["groupattr"] = groupattr
             __props__.__dict__["groupdn"] = groupdn
             __props__.__dict__["groupfilter"] = groupfilter
             __props__.__dict__["insecure_tls"] = insecure_tls
             __props__.__dict__["last_rotation_tolerance"] = last_rotation_tolerance
-            __props__.__dict__["length"] = length
             __props__.__dict__["local"] = local
             __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
             __props__.__dict__["max_ttl"] = max_ttl
@@ -1590,13 +1489,11 @@ class SecretBackend(pulumi.CustomResource):
             description: Optional[pulumi.Input[str]] = None,
             disable_remount: Optional[pulumi.Input[bool]] = None,
             discoverdn: Optional[pulumi.Input[bool]] = None,
-            formatter: Optional[pulumi.Input[str]] = None,
             groupattr: Optional[pulumi.Input[str]] = None,
             groupdn: Optional[pulumi.Input[str]] = None,
             groupfilter: Optional[pulumi.Input[str]] = None,
             insecure_tls: Optional[pulumi.Input[bool]] = None,
             last_rotation_tolerance: Optional[pulumi.Input[int]] = None,
-            length: Optional[pulumi.Input[int]] = None,
             local: Optional[pulumi.Input[bool]] = None,
             max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
             max_ttl: Optional[pulumi.Input[int]] = None,
@@ -1639,7 +1536,6 @@ class SecretBackend(pulumi.CustomResource):
         :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
         :param pulumi.Input[bool] discoverdn: Use anonymous bind to discover the bind Distinguished Name of a user.
-        :param pulumi.Input[str] formatter: **Deprecated** use `password_policy`. Text to insert the password into, ex. "customPrefix{{PASSWORD}}customSuffix".
         :param pulumi.Input[str] groupattr: LDAP attribute to follow on objects returned by <groupfilter> in order to enumerate
                user group membership. Examples: `cn` or `memberOf`, etc. Defaults to `cn`.
         :param pulumi.Input[str] groupdn: LDAP search base to use for group membership search (eg: ou=Groups,dc=example,dc=org).
@@ -1649,15 +1545,13 @@ class SecretBackend(pulumi.CustomResource):
                Defaults to `false`.
         :param pulumi.Input[int] last_rotation_tolerance: The number of seconds after a Vault rotation where, if Active Directory
                shows a later rotation, it should be considered out-of-band
-        :param pulumi.Input[int] length: **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-               *Mutually exclusive with `password_policy` on vault-1.11+*
         :param pulumi.Input[bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
                replication.Tolerance duration to use when checking the last rotation time.
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
         :param pulumi.Input[int] max_ttl: In seconds, the maximum password time-to-live.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] password_policy: Name of the password policy to use to generate passwords.
         :param pulumi.Input[int] request_timeout: Timeout, in seconds, for the connection when making requests against the server
@@ -1699,13 +1593,11 @@ class SecretBackend(pulumi.CustomResource):
         __props__.__dict__["description"] = description
         __props__.__dict__["disable_remount"] = disable_remount
         __props__.__dict__["discoverdn"] = discoverdn
-        __props__.__dict__["formatter"] = formatter
         __props__.__dict__["groupattr"] = groupattr
         __props__.__dict__["groupdn"] = groupdn
         __props__.__dict__["groupfilter"] = groupfilter
         __props__.__dict__["insecure_tls"] = insecure_tls
         __props__.__dict__["last_rotation_tolerance"] = last_rotation_tolerance
-        __props__.__dict__["length"] = length
         __props__.__dict__["local"] = local
         __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
         __props__.__dict__["max_ttl"] = max_ttl
@@ -1834,17 +1726,6 @@ class SecretBackend(pulumi.CustomResource):
         """
         return pulumi.get(self, "discoverdn")
-    @property
-    @pulumi.getter
-    def formatter(self) -> pulumi.Output[str]:
-        """
-        **Deprecated** use `password_policy`. Text to insert the password into, ex. "customPrefix{{PASSWORD}}customSuffix".
-        """
-        warnings.warn("""Formatter is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-        pulumi.log.warn("""formatter is deprecated: Formatter is deprecated and password_policy should be used with Vault >= 1.5.""")
-        return pulumi.get(self, "formatter")
     @property
     @pulumi.getter
     def groupattr(self) -> pulumi.Output[Optional[str]]:
@@ -1889,18 +1770,6 @@ class SecretBackend(pulumi.CustomResource):
         """
         return pulumi.get(self, "last_rotation_tolerance")
-    @property
-    @pulumi.getter
-    def length(self) -> pulumi.Output[int]:
-        """
-        **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-        *Mutually exclusive with `password_policy` on vault-1.11+*
-        """
-        warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-        pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        return pulumi.get(self, "length")
     @property
     @pulumi.getter
     def local(self) -> pulumi.Output[Optional[bool]]:
@@ -1932,7 +1801,7 @@ class SecretBackend(pulumi.CustomResource):
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")

pulumi_vault/ad/secret_library.py CHANGED Viewed

@@ -33,7 +33,7 @@ class SecretLibraryArgs:
                Must be unique within the backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[int] ttl: The password time-to-live in seconds. Defaults to the configuration
                ttl if not provided.
@@ -120,7 +120,7 @@ class SecretLibraryArgs:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -164,7 +164,7 @@ class _SecretLibraryState:
                Must be unique within the backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] service_account_names: Specifies the slice of service accounts mapped to this set.
         :param pulumi.Input[int] ttl: The password time-to-live in seconds. Defaults to the configuration
@@ -242,7 +242,7 @@ class _SecretLibraryState:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -336,7 +336,7 @@ class SecretLibrary(pulumi.CustomResource):
                Must be unique within the backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] service_account_names: Specifies the slice of service accounts mapped to this set.
         :param pulumi.Input[int] ttl: The password time-to-live in seconds. Defaults to the configuration
@@ -458,7 +458,7 @@ class SecretLibrary(pulumi.CustomResource):
                Must be unique within the backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] service_account_names: Specifies the slice of service accounts mapped to this set.
         :param pulumi.Input[int] ttl: The password time-to-live in seconds. Defaults to the configuration
@@ -518,7 +518,7 @@ class SecretLibrary(pulumi.CustomResource):
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")

pulumi_vault/ad/secret_role.py CHANGED Viewed

@@ -29,7 +29,7 @@ class SecretRoleArgs:
                account mapped to this role.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[int] ttl: The password time-to-live in seconds. Defaults to the configuration
                ttl if not provided.
@@ -87,7 +87,7 @@ class SecretRoleArgs:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -127,7 +127,7 @@ class _SecretRoleState:
         :param pulumi.Input[str] last_vault_rotation: Timestamp of the last password rotation by Vault.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] password_last_set: Timestamp of the last password set by Vault.
         :param pulumi.Input[str] role: The name to identify this role within the backend.
@@ -183,7 +183,7 @@ class _SecretRoleState:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -292,7 +292,7 @@ class SecretRole(pulumi.CustomResource):
                with no leading or trailing `/`s.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] role: The name to identify this role within the backend.
                Must be unique within the backend.
@@ -409,7 +409,7 @@ class SecretRole(pulumi.CustomResource):
         :param pulumi.Input[str] last_vault_rotation: Timestamp of the last password rotation by Vault.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] password_last_set: Timestamp of the last password set by Vault.
         :param pulumi.Input[str] role: The name to identify this role within the backend.
@@ -455,7 +455,7 @@ class SecretRole(pulumi.CustomResource):
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")

pulumi-vault 5.21.0a1710997383__py3-none-any.whl → 6.0.0__py3-none-any.whl

pulumi-vault 5.21.0a1710997383py3-none-any.whl → 6.0.0py3-none-any.whl