PyPI - pulumi-vault - Versions diffs - 5.21.0a1711033014__py3-none-any.whl → 6.0.0__py3-none-any.whl - Mend

pulumi-vault 5.21.0a1711033014py3-none-any.whl → 6.0.0py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (163) hide show

pulumi_vault/__init__.py +24 -0
pulumi_vault/ad/get_access_credentials.py +2 -2
pulumi_vault/ad/secret_backend.py +7 -138
pulumi_vault/ad/secret_library.py +7 -7
pulumi_vault/ad/secret_role.py +7 -7
pulumi_vault/approle/auth_backend_login.py +7 -7
pulumi_vault/approle/auth_backend_role.py +7 -7
pulumi_vault/approle/auth_backend_role_secret_id.py +7 -7
pulumi_vault/audit.py +7 -7
pulumi_vault/auth_backend.py +7 -7
pulumi_vault/aws/auth_backend_cert.py +7 -7
pulumi_vault/aws/auth_backend_client.py +7 -7
pulumi_vault/aws/auth_backend_config_identity.py +7 -7
pulumi_vault/aws/auth_backend_identity_whitelist.py +7 -7
pulumi_vault/aws/auth_backend_login.py +7 -7
pulumi_vault/aws/auth_backend_role.py +7 -7
pulumi_vault/aws/auth_backend_role_tag.py +7 -7
pulumi_vault/aws/auth_backend_roletag_blacklist.py +7 -7
pulumi_vault/aws/auth_backend_sts_role.py +7 -7
pulumi_vault/aws/get_access_credentials.py +2 -2
pulumi_vault/aws/secret_backend.py +7 -7
pulumi_vault/aws/secret_backend_role.py +7 -7
pulumi_vault/aws/secret_backend_static_role.py +7 -7
pulumi_vault/azure/auth_backend_config.py +7 -7
pulumi_vault/azure/auth_backend_role.py +7 -7
pulumi_vault/azure/backend.py +7 -7
pulumi_vault/azure/backend_role.py +7 -7
pulumi_vault/azure/get_access_credentials.py +2 -2
pulumi_vault/cert_auth_backend_role.py +7 -63
pulumi_vault/config/_inputs.py +52 -0
pulumi_vault/config/outputs.py +30 -0
pulumi_vault/config/ui_custom_message.py +524 -0
pulumi_vault/consul/secret_backend.py +7 -7
pulumi_vault/consul/secret_backend_role.py +7 -76
pulumi_vault/egp_policy.py +7 -7
pulumi_vault/gcp/auth_backend.py +7 -7
pulumi_vault/gcp/auth_backend_role.py +7 -7
pulumi_vault/gcp/secret_backend.py +7 -7
pulumi_vault/gcp/secret_roleset.py +7 -7
pulumi_vault/gcp/secret_static_account.py +7 -7
pulumi_vault/generic/endpoint.py +7 -7
pulumi_vault/generic/get_secret.py +2 -2
pulumi_vault/generic/secret.py +7 -7
pulumi_vault/get_auth_backend.py +2 -2
pulumi_vault/get_auth_backends.py +20 -2
pulumi_vault/get_nomad_access_token.py +2 -2
pulumi_vault/get_raft_autopilot_state.py +2 -2
pulumi_vault/github/auth_backend.py +7 -7
pulumi_vault/github/team.py +7 -7
pulumi_vault/github/user.py +7 -7
pulumi_vault/identity/entity.py +7 -7
pulumi_vault/identity/entity_alias.py +7 -7
pulumi_vault/identity/entity_policies.py +7 -7
pulumi_vault/identity/get_entity.py +2 -2
pulumi_vault/identity/get_group.py +2 -2
pulumi_vault/identity/get_oidc_client_creds.py +2 -2
pulumi_vault/identity/get_oidc_openid_config.py +2 -2
pulumi_vault/identity/get_oidc_public_keys.py +2 -2
pulumi_vault/identity/group.py +7 -7
pulumi_vault/identity/group_alias.py +7 -7
pulumi_vault/identity/group_member_entity_ids.py +7 -58
pulumi_vault/identity/group_member_group_ids.py +7 -7
pulumi_vault/identity/group_policies.py +7 -7
pulumi_vault/identity/oidc.py +7 -7
pulumi_vault/identity/oidc_assignment.py +7 -7
pulumi_vault/identity/oidc_client.py +19 -15
pulumi_vault/identity/oidc_key.py +7 -7
pulumi_vault/identity/oidc_key_allowed_client_id.py +7 -7
pulumi_vault/identity/oidc_provider.py +7 -7
pulumi_vault/identity/oidc_role.py +7 -7
pulumi_vault/identity/oidc_scope.py +7 -7
pulumi_vault/jwt/auth_backend.py +7 -7
pulumi_vault/jwt/auth_backend_role.py +7 -7
pulumi_vault/kmip/secret_backend.py +7 -7
pulumi_vault/kmip/secret_role.py +7 -7
pulumi_vault/kmip/secret_scope.py +7 -7
pulumi_vault/kubernetes/auth_backend_role.py +7 -7
pulumi_vault/kubernetes/get_service_account_token.py +2 -2
pulumi_vault/kubernetes/secret_backend.py +7 -7
pulumi_vault/kubernetes/secret_backend_role.py +7 -7
pulumi_vault/kv/get_secret.py +2 -2
pulumi_vault/kv/get_secret_subkeys_v2.py +2 -2
pulumi_vault/kv/get_secret_v2.py +5 -2
pulumi_vault/kv/get_secrets_list.py +2 -2
pulumi_vault/kv/get_secrets_list_v2.py +2 -2
pulumi_vault/kv/secret.py +7 -7
pulumi_vault/kv/secret_backend_v2.py +7 -7
pulumi_vault/kv/secret_v2.py +7 -7
pulumi_vault/ldap/auth_backend.py +7 -7
pulumi_vault/ldap/auth_backend_group.py +7 -7
pulumi_vault/ldap/auth_backend_user.py +7 -7
pulumi_vault/ldap/secret_backend.py +61 -76
pulumi_vault/ldap/secret_backend_dynamic_role.py +7 -7
pulumi_vault/ldap/secret_backend_library_set.py +7 -7
pulumi_vault/ldap/secret_backend_static_role.py +62 -8
pulumi_vault/mfa_duo.py +7 -7
pulumi_vault/mfa_okta.py +7 -7
pulumi_vault/mfa_pingid.py +7 -7
pulumi_vault/mfa_totp.py +7 -7
pulumi_vault/mongodbatlas/secret_backend.py +7 -7
pulumi_vault/mongodbatlas/secret_role.py +7 -7
pulumi_vault/mount.py +11 -7
pulumi_vault/namespace.py +7 -7
pulumi_vault/nomad_secret_backend.py +7 -7
pulumi_vault/nomad_secret_role.py +7 -7
pulumi_vault/okta/auth_backend.py +7 -7
pulumi_vault/okta/auth_backend_group.py +7 -7
pulumi_vault/okta/auth_backend_user.py +7 -7
pulumi_vault/password_policy.py +7 -7
pulumi_vault/pkisecret/__init__.py +1 -0
pulumi_vault/pkisecret/backend_config_cluster.py +368 -0
pulumi_vault/pkisecret/get_backend_issuer.py +2 -2
pulumi_vault/pkisecret/get_backend_issuers.py +2 -2
pulumi_vault/pkisecret/get_backend_key.py +2 -2
pulumi_vault/pkisecret/get_backend_keys.py +2 -2
pulumi_vault/pkisecret/secret_backend_cert.py +7 -7
pulumi_vault/pkisecret/secret_backend_config_ca.py +7 -7
pulumi_vault/pkisecret/secret_backend_config_issuers.py +7 -7
pulumi_vault/pkisecret/secret_backend_config_urls.py +54 -7
pulumi_vault/pkisecret/secret_backend_crl_config.py +7 -7
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +7 -7
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +7 -7
pulumi_vault/pkisecret/secret_backend_issuer.py +7 -7
pulumi_vault/pkisecret/secret_backend_key.py +7 -7
pulumi_vault/pkisecret/secret_backend_role.py +7 -7
pulumi_vault/pkisecret/secret_backend_root_cert.py +7 -44
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +7 -52
pulumi_vault/pkisecret/secret_backend_sign.py +7 -52
pulumi_vault/policy.py +7 -7
pulumi_vault/rabbitmq/secret_backend.py +7 -7
pulumi_vault/rabbitmq/secret_backend_role.py +7 -7
pulumi_vault/raft_autopilot.py +7 -7
pulumi_vault/raft_snapshot_agent_config.py +7 -7
pulumi_vault/rgp_policy.py +7 -7
pulumi_vault/saml/auth_backend.py +7 -7
pulumi_vault/saml/auth_backend_role.py +7 -7
pulumi_vault/secrets/__init__.py +1 -0
pulumi_vault/secrets/sync_association.py +7 -7
pulumi_vault/secrets/sync_aws_destination.py +161 -7
pulumi_vault/secrets/sync_azure_destination.py +7 -7
pulumi_vault/secrets/sync_gcp_destination.py +77 -7
pulumi_vault/secrets/sync_gh_destination.py +122 -7
pulumi_vault/secrets/sync_github_apps.py +370 -0
pulumi_vault/secrets/sync_vercel_destination.py +7 -7
pulumi_vault/ssh/secret_backend_ca.py +7 -7
pulumi_vault/ssh/secret_backend_role.py +7 -83
pulumi_vault/terraformcloud/secret_creds.py +7 -7
pulumi_vault/terraformcloud/secret_role.py +7 -7
pulumi_vault/token.py +7 -7
pulumi_vault/tokenauth/auth_backend_role.py +7 -7
pulumi_vault/transform/alphabet.py +7 -7
pulumi_vault/transform/get_decode.py +2 -2
pulumi_vault/transform/get_encode.py +2 -2
pulumi_vault/transform/role.py +7 -7
pulumi_vault/transform/template.py +7 -7
pulumi_vault/transform/transformation.py +7 -7
pulumi_vault/transit/secret_backend_key.py +7 -84
pulumi_vault/transit/secret_cache_config.py +7 -7
{pulumi_vault-5.21.0a1711033014.dist-info → pulumi_vault-6.0.0.dist-info}/METADATA +2 -2
pulumi_vault-6.0.0.dist-info/RECORD +248 -0
pulumi_vault-5.21.0a1711033014.dist-info/RECORD +0 -244
{pulumi_vault-5.21.0a1711033014.dist-info → pulumi_vault-6.0.0.dist-info}/WHEEL +0 -0
{pulumi_vault-5.21.0a1711033014.dist-info → pulumi_vault-6.0.0.dist-info}/top_level.txt +0 -0

pulumi_vault/ldap/secret_backend.py CHANGED Viewed

@@ -28,7 +28,6 @@ class SecretBackendArgs:
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  external_entropy_access: Optional[pulumi.Input[bool]] = None,
                  insecure_tls: Optional[pulumi.Input[bool]] = None,
-                 length: Optional[pulumi.Input[int]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
@@ -38,6 +37,7 @@ class SecretBackendArgs:
                  request_timeout: Optional[pulumi.Input[int]] = None,
                  schema: Optional[pulumi.Input[str]] = None,
                  seal_wrap: Optional[pulumi.Input[bool]] = None,
+                 skip_static_role_import_rotation: Optional[pulumi.Input[bool]] = None,
                  starttls: Optional[pulumi.Input[bool]] = None,
                  upndomain: Optional[pulumi.Input[str]] = None,
                  url: Optional[pulumi.Input[str]] = None,
@@ -62,14 +62,12 @@ class SecretBackendArgs:
         :param pulumi.Input[bool] external_entropy_access: Enable the secrets engine to access Vault's external entropy source
         :param pulumi.Input[bool] insecure_tls: Skip LDAP server SSL Certificate verification. This is not recommended for production.
                Defaults to `false`.
-        :param pulumi.Input[int] length: **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-               *Mutually exclusive with `password_policy` on vault-1.11+*
         :param pulumi.Input[bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
                replication.Tolerance duration to use when checking the last rotation time.
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
         :param pulumi.Input[str] password_policy: Name of the password policy to use to generate passwords.
@@ -79,6 +77,8 @@ class SecretBackendArgs:
                before returning back an error.
         :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         :param pulumi.Input[bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        :param pulumi.Input[bool] skip_static_role_import_rotation: If set to true, static roles will not be rotated during import.
+               Defaults to false. Requires Vault 1.16 or above.
         :param pulumi.Input[bool] starttls: Issue a StartTLS command after establishing unencrypted connection.
         :param pulumi.Input[str] upndomain: Enables userPrincipalDomain login with [username]@UPNDomain.
         :param pulumi.Input[str] url: LDAP URL to connect to. Multiple URLs can be specified by concatenating
@@ -112,11 +112,6 @@ class SecretBackendArgs:
             pulumi.set(__self__, "external_entropy_access", external_entropy_access)
         if insecure_tls is not None:
             pulumi.set(__self__, "insecure_tls", insecure_tls)
-        if length is not None:
-            warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-            pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        if length is not None:
-            pulumi.set(__self__, "length", length)
         if local is not None:
             pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
@@ -135,6 +130,8 @@ class SecretBackendArgs:
             pulumi.set(__self__, "schema", schema)
         if seal_wrap is not None:
             pulumi.set(__self__, "seal_wrap", seal_wrap)
+        if skip_static_role_import_rotation is not None:
+            pulumi.set(__self__, "skip_static_role_import_rotation", skip_static_role_import_rotation)
         if starttls is not None:
             pulumi.set(__self__, "starttls", starttls)
         if upndomain is not None:
@@ -317,22 +314,6 @@ class SecretBackendArgs:
     def insecure_tls(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "insecure_tls", value)
-    @property
-    @pulumi.getter
-    def length(self) -> Optional[pulumi.Input[int]]:
-        """
-        **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-        *Mutually exclusive with `password_policy` on vault-1.11+*
-        """
-        warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-        pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        return pulumi.get(self, "length")
-    @length.setter
-    def length(self, value: Optional[pulumi.Input[int]]):
-        pulumi.set(self, "length", value)
     @property
     @pulumi.getter
     def local(self) -> Optional[pulumi.Input[bool]]:
@@ -364,7 +345,7 @@ class SecretBackendArgs:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -447,6 +428,19 @@ class SecretBackendArgs:
     def seal_wrap(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "seal_wrap", value)
+    @property
+    @pulumi.getter(name="skipStaticRoleImportRotation")
+    def skip_static_role_import_rotation(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If set to true, static roles will not be rotated during import.
+        Defaults to false. Requires Vault 1.16 or above.
+        """
+        return pulumi.get(self, "skip_static_role_import_rotation")
+    @skip_static_role_import_rotation.setter
+    def skip_static_role_import_rotation(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "skip_static_role_import_rotation", value)
     @property
     @pulumi.getter
     def starttls(self) -> Optional[pulumi.Input[bool]]:
@@ -527,7 +521,6 @@ class _SecretBackendState:
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  external_entropy_access: Optional[pulumi.Input[bool]] = None,
                  insecure_tls: Optional[pulumi.Input[bool]] = None,
-                 length: Optional[pulumi.Input[int]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
@@ -537,6 +530,7 @@ class _SecretBackendState:
                  request_timeout: Optional[pulumi.Input[int]] = None,
                  schema: Optional[pulumi.Input[str]] = None,
                  seal_wrap: Optional[pulumi.Input[bool]] = None,
+                 skip_static_role_import_rotation: Optional[pulumi.Input[bool]] = None,
                  starttls: Optional[pulumi.Input[bool]] = None,
                  upndomain: Optional[pulumi.Input[str]] = None,
                  url: Optional[pulumi.Input[str]] = None,
@@ -562,14 +556,12 @@ class _SecretBackendState:
         :param pulumi.Input[bool] external_entropy_access: Enable the secrets engine to access Vault's external entropy source
         :param pulumi.Input[bool] insecure_tls: Skip LDAP server SSL Certificate verification. This is not recommended for production.
                Defaults to `false`.
-        :param pulumi.Input[int] length: **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-               *Mutually exclusive with `password_policy` on vault-1.11+*
         :param pulumi.Input[bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
                replication.Tolerance duration to use when checking the last rotation time.
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
         :param pulumi.Input[str] password_policy: Name of the password policy to use to generate passwords.
@@ -579,6 +571,8 @@ class _SecretBackendState:
                before returning back an error.
         :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         :param pulumi.Input[bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        :param pulumi.Input[bool] skip_static_role_import_rotation: If set to true, static roles will not be rotated during import.
+               Defaults to false. Requires Vault 1.16 or above.
         :param pulumi.Input[bool] starttls: Issue a StartTLS command after establishing unencrypted connection.
         :param pulumi.Input[str] upndomain: Enables userPrincipalDomain login with [username]@UPNDomain.
         :param pulumi.Input[str] url: LDAP URL to connect to. Multiple URLs can be specified by concatenating
@@ -616,11 +610,6 @@ class _SecretBackendState:
             pulumi.set(__self__, "external_entropy_access", external_entropy_access)
         if insecure_tls is not None:
             pulumi.set(__self__, "insecure_tls", insecure_tls)
-        if length is not None:
-            warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-            pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        if length is not None:
-            pulumi.set(__self__, "length", length)
         if local is not None:
             pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
@@ -639,6 +628,8 @@ class _SecretBackendState:
             pulumi.set(__self__, "schema", schema)
         if seal_wrap is not None:
             pulumi.set(__self__, "seal_wrap", seal_wrap)
+        if skip_static_role_import_rotation is not None:
+            pulumi.set(__self__, "skip_static_role_import_rotation", skip_static_role_import_rotation)
         if starttls is not None:
             pulumi.set(__self__, "starttls", starttls)
         if upndomain is not None:
@@ -833,22 +824,6 @@ class _SecretBackendState:
     def insecure_tls(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "insecure_tls", value)
-    @property
-    @pulumi.getter
-    def length(self) -> Optional[pulumi.Input[int]]:
-        """
-        **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-        *Mutually exclusive with `password_policy` on vault-1.11+*
-        """
-        warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-        pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        return pulumi.get(self, "length")
-    @length.setter
-    def length(self, value: Optional[pulumi.Input[int]]):
-        pulumi.set(self, "length", value)
     @property
     @pulumi.getter
     def local(self) -> Optional[pulumi.Input[bool]]:
@@ -880,7 +855,7 @@ class _SecretBackendState:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -963,6 +938,19 @@ class _SecretBackendState:
     def seal_wrap(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "seal_wrap", value)
+    @property
+    @pulumi.getter(name="skipStaticRoleImportRotation")
+    def skip_static_role_import_rotation(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If set to true, static roles will not be rotated during import.
+        Defaults to false. Requires Vault 1.16 or above.
+        """
+        return pulumi.get(self, "skip_static_role_import_rotation")
+    @skip_static_role_import_rotation.setter
+    def skip_static_role_import_rotation(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "skip_static_role_import_rotation", value)
     @property
     @pulumi.getter
     def starttls(self) -> Optional[pulumi.Input[bool]]:
@@ -1044,7 +1032,6 @@ class SecretBackend(pulumi.CustomResource):
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  external_entropy_access: Optional[pulumi.Input[bool]] = None,
                  insecure_tls: Optional[pulumi.Input[bool]] = None,
-                 length: Optional[pulumi.Input[int]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
@@ -1054,6 +1041,7 @@ class SecretBackend(pulumi.CustomResource):
                  request_timeout: Optional[pulumi.Input[int]] = None,
                  schema: Optional[pulumi.Input[str]] = None,
                  seal_wrap: Optional[pulumi.Input[bool]] = None,
+                 skip_static_role_import_rotation: Optional[pulumi.Input[bool]] = None,
                  starttls: Optional[pulumi.Input[bool]] = None,
                  upndomain: Optional[pulumi.Input[str]] = None,
                  url: Optional[pulumi.Input[str]] = None,
@@ -1105,14 +1093,12 @@ class SecretBackend(pulumi.CustomResource):
         :param pulumi.Input[bool] external_entropy_access: Enable the secrets engine to access Vault's external entropy source
         :param pulumi.Input[bool] insecure_tls: Skip LDAP server SSL Certificate verification. This is not recommended for production.
                Defaults to `false`.
-        :param pulumi.Input[int] length: **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-               *Mutually exclusive with `password_policy` on vault-1.11+*
         :param pulumi.Input[bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
                replication.Tolerance duration to use when checking the last rotation time.
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
         :param pulumi.Input[str] password_policy: Name of the password policy to use to generate passwords.
@@ -1122,6 +1108,8 @@ class SecretBackend(pulumi.CustomResource):
                before returning back an error.
         :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         :param pulumi.Input[bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        :param pulumi.Input[bool] skip_static_role_import_rotation: If set to true, static roles will not be rotated during import.
+               Defaults to false. Requires Vault 1.16 or above.
         :param pulumi.Input[bool] starttls: Issue a StartTLS command after establishing unencrypted connection.
         :param pulumi.Input[str] upndomain: Enables userPrincipalDomain login with [username]@UPNDomain.
         :param pulumi.Input[str] url: LDAP URL to connect to. Multiple URLs can be specified by concatenating
@@ -1190,7 +1178,6 @@ class SecretBackend(pulumi.CustomResource):
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  external_entropy_access: Optional[pulumi.Input[bool]] = None,
                  insecure_tls: Optional[pulumi.Input[bool]] = None,
-                 length: Optional[pulumi.Input[int]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
@@ -1200,6 +1187,7 @@ class SecretBackend(pulumi.CustomResource):
                  request_timeout: Optional[pulumi.Input[int]] = None,
                  schema: Optional[pulumi.Input[str]] = None,
                  seal_wrap: Optional[pulumi.Input[bool]] = None,
+                 skip_static_role_import_rotation: Optional[pulumi.Input[bool]] = None,
                  starttls: Optional[pulumi.Input[bool]] = None,
                  upndomain: Optional[pulumi.Input[str]] = None,
                  url: Optional[pulumi.Input[str]] = None,
@@ -1232,7 +1220,6 @@ class SecretBackend(pulumi.CustomResource):
             __props__.__dict__["disable_remount"] = disable_remount
             __props__.__dict__["external_entropy_access"] = external_entropy_access
             __props__.__dict__["insecure_tls"] = insecure_tls
-            __props__.__dict__["length"] = length
             __props__.__dict__["local"] = local
             __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
             __props__.__dict__["namespace"] = namespace
@@ -1242,6 +1229,7 @@ class SecretBackend(pulumi.CustomResource):
             __props__.__dict__["request_timeout"] = request_timeout
             __props__.__dict__["schema"] = schema
             __props__.__dict__["seal_wrap"] = seal_wrap
+            __props__.__dict__["skip_static_role_import_rotation"] = skip_static_role_import_rotation
             __props__.__dict__["starttls"] = starttls
             __props__.__dict__["upndomain"] = upndomain
             __props__.__dict__["url"] = url
@@ -1275,7 +1263,6 @@ class SecretBackend(pulumi.CustomResource):
             disable_remount: Optional[pulumi.Input[bool]] = None,
             external_entropy_access: Optional[pulumi.Input[bool]] = None,
             insecure_tls: Optional[pulumi.Input[bool]] = None,
-            length: Optional[pulumi.Input[int]] = None,
             local: Optional[pulumi.Input[bool]] = None,
             max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
             namespace: Optional[pulumi.Input[str]] = None,
@@ -1285,6 +1272,7 @@ class SecretBackend(pulumi.CustomResource):
             request_timeout: Optional[pulumi.Input[int]] = None,
             schema: Optional[pulumi.Input[str]] = None,
             seal_wrap: Optional[pulumi.Input[bool]] = None,
+            skip_static_role_import_rotation: Optional[pulumi.Input[bool]] = None,
             starttls: Optional[pulumi.Input[bool]] = None,
             upndomain: Optional[pulumi.Input[str]] = None,
             url: Optional[pulumi.Input[str]] = None,
@@ -1315,14 +1303,12 @@ class SecretBackend(pulumi.CustomResource):
         :param pulumi.Input[bool] external_entropy_access: Enable the secrets engine to access Vault's external entropy source
         :param pulumi.Input[bool] insecure_tls: Skip LDAP server SSL Certificate verification. This is not recommended for production.
                Defaults to `false`.
-        :param pulumi.Input[int] length: **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-               *Mutually exclusive with `password_policy` on vault-1.11+*
         :param pulumi.Input[bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
                replication.Tolerance duration to use when checking the last rotation time.
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
         :param pulumi.Input[str] password_policy: Name of the password policy to use to generate passwords.
@@ -1332,6 +1318,8 @@ class SecretBackend(pulumi.CustomResource):
                before returning back an error.
         :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         :param pulumi.Input[bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        :param pulumi.Input[bool] skip_static_role_import_rotation: If set to true, static roles will not be rotated during import.
+               Defaults to false. Requires Vault 1.16 or above.
         :param pulumi.Input[bool] starttls: Issue a StartTLS command after establishing unencrypted connection.
         :param pulumi.Input[str] upndomain: Enables userPrincipalDomain login with [username]@UPNDomain.
         :param pulumi.Input[str] url: LDAP URL to connect to. Multiple URLs can be specified by concatenating
@@ -1358,7 +1346,6 @@ class SecretBackend(pulumi.CustomResource):
         __props__.__dict__["disable_remount"] = disable_remount
         __props__.__dict__["external_entropy_access"] = external_entropy_access
         __props__.__dict__["insecure_tls"] = insecure_tls
-        __props__.__dict__["length"] = length
         __props__.__dict__["local"] = local
         __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
         __props__.__dict__["namespace"] = namespace
@@ -1368,6 +1355,7 @@ class SecretBackend(pulumi.CustomResource):
         __props__.__dict__["request_timeout"] = request_timeout
         __props__.__dict__["schema"] = schema
         __props__.__dict__["seal_wrap"] = seal_wrap
+        __props__.__dict__["skip_static_role_import_rotation"] = skip_static_role_import_rotation
         __props__.__dict__["starttls"] = starttls
         __props__.__dict__["upndomain"] = upndomain
         __props__.__dict__["url"] = url
@@ -1498,18 +1486,6 @@ class SecretBackend(pulumi.CustomResource):
         """
         return pulumi.get(self, "insecure_tls")
-    @property
-    @pulumi.getter
-    def length(self) -> pulumi.Output[int]:
-        """
-        **Deprecated** use `password_policy`. The desired length of passwords that Vault generates.
-        *Mutually exclusive with `password_policy` on vault-1.11+*
-        """
-        warnings.warn("""Length is deprecated and password_policy should be used with Vault >= 1.5.""", DeprecationWarning)
-        pulumi.log.warn("""length is deprecated: Length is deprecated and password_policy should be used with Vault >= 1.5.""")
-        return pulumi.get(self, "length")
     @property
     @pulumi.getter
     def local(self) -> pulumi.Output[Optional[bool]]:
@@ -1533,7 +1509,7 @@ class SecretBackend(pulumi.CustomResource):
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -1588,6 +1564,15 @@ class SecretBackend(pulumi.CustomResource):
         """
         return pulumi.get(self, "seal_wrap")
+    @property
+    @pulumi.getter(name="skipStaticRoleImportRotation")
+    def skip_static_role_import_rotation(self) -> pulumi.Output[Optional[bool]]:
+        """
+        If set to true, static roles will not be rotated during import.
+        Defaults to false. Requires Vault 1.16 or above.
+        """
+        return pulumi.get(self, "skip_static_role_import_rotation")
     @property
     @pulumi.getter
     def starttls(self) -> pulumi.Output[bool]:

pulumi_vault/ldap/secret_backend_dynamic_role.py CHANGED Viewed

@@ -46,7 +46,7 @@ class SecretBackendDynamicRoleArgs:
                not begin or end with a `/`. Defaults to `ldap`.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] rollback_ldif: A templatized LDIF string used to attempt to
                rollback any changes in the event that execution of the `creation_ldif` results
@@ -165,7 +165,7 @@ class SecretBackendDynamicRoleArgs:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -240,7 +240,7 @@ class _SecretBackendDynamicRoleState:
                not begin or end with a `/`. Defaults to `ldap`.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] role_name: Name of the role.
         :param pulumi.Input[str] rollback_ldif: A templatized LDIF string used to attempt to
@@ -351,7 +351,7 @@ class _SecretBackendDynamicRoleState:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -484,7 +484,7 @@ class SecretBackendDynamicRole(pulumi.CustomResource):
                not begin or end with a `/`. Defaults to `ldap`.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] role_name: Name of the role.
         :param pulumi.Input[str] rollback_ldif: A templatized LDIF string used to attempt to
@@ -640,7 +640,7 @@ class SecretBackendDynamicRole(pulumi.CustomResource):
                not begin or end with a `/`. Defaults to `ldap`.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[str] role_name: Name of the role.
         :param pulumi.Input[str] rollback_ldif: A templatized LDIF string used to attempt to
@@ -727,7 +727,7 @@ class SecretBackendDynamicRole(pulumi.CustomResource):
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")

pulumi_vault/ldap/secret_backend_library_set.py CHANGED Viewed

@@ -34,7 +34,7 @@ class SecretBackendLibrarySetArgs:
                Must be unique within the backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[int] ttl: The password time-to-live in seconds. Defaults to the configuration
                ttl if not provided.
@@ -123,7 +123,7 @@ class SecretBackendLibrarySetArgs:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -168,7 +168,7 @@ class _SecretBackendLibrarySetState:
                Must be unique within the backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] service_account_names: Specifies the slice of service accounts mapped to this set.
         :param pulumi.Input[int] ttl: The password time-to-live in seconds. Defaults to the configuration
@@ -247,7 +247,7 @@ class _SecretBackendLibrarySetState:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")
@@ -342,7 +342,7 @@ class SecretBackendLibrarySet(pulumi.CustomResource):
                Must be unique within the backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] service_account_names: Specifies the slice of service accounts mapped to this set.
         :param pulumi.Input[int] ttl: The password time-to-live in seconds. Defaults to the configuration
@@ -463,7 +463,7 @@ class SecretBackendLibrarySet(pulumi.CustomResource):
                Must be unique within the backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
-               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+               The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] service_account_names: Specifies the slice of service accounts mapped to this set.
         :param pulumi.Input[int] ttl: The password time-to-live in seconds. Defaults to the configuration
@@ -524,7 +524,7 @@ class SecretBackendLibrarySet(pulumi.CustomResource):
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
-        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
+        The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
         *Available only for Vault Enterprise*.
         """
         return pulumi.get(self, "namespace")

pulumi-vault 5.21.0a1711033014__py3-none-any.whl → 6.0.0__py3-none-any.whl

pulumi-vault 5.21.0a1711033014py3-none-any.whl → 6.0.0py3-none-any.whl