pulumi-vault 6.1.0a1712222735__py3-none-any.whl → 6.1.1__py3-none-any.whl

pulumi_vault/kubernetes/secret_backend_role.py

@@ -591,20 +591,21 @@ class SecretBackendRole(pulumi.CustomResource):
 
         Example using `service_account_name` mode:
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         sa_example = vault.kubernetes.SecretBackendRole("sa-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -618,24 +619,24 @@ class SecretBackendRole(pulumi.CustomResource):
                 "location": "earth",
             })
         ```
-        <!--End PulumiCodeChooser -->
 
         Example using `kubernetes_role_name` mode:
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         name_example = vault.kubernetes.SecretBackendRole("name-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -649,24 +650,24 @@ class SecretBackendRole(pulumi.CustomResource):
                 "location": "earth",
             })
         ```
-        <!--End PulumiCodeChooser -->
 
         Example using `generated_role_rules` mode:
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         rules_example = vault.kubernetes.SecretBackendRole("rules-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -685,7 +686,6 @@ class SecretBackendRole(pulumi.CustomResource):
                 "location": "earth",
             })
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Import
 
@@ -748,20 +748,21 @@ class SecretBackendRole(pulumi.CustomResource):
 
         Example using `service_account_name` mode:
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         sa_example = vault.kubernetes.SecretBackendRole("sa-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -775,24 +776,24 @@ class SecretBackendRole(pulumi.CustomResource):
                 "location": "earth",
             })
         ```
-        <!--End PulumiCodeChooser -->
 
         Example using `kubernetes_role_name` mode:
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         name_example = vault.kubernetes.SecretBackendRole("name-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -806,24 +807,24 @@ class SecretBackendRole(pulumi.CustomResource):
                 "location": "earth",
             })
         ```
-        <!--End PulumiCodeChooser -->
 
         Example using `generated_role_rules` mode:
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         rules_example = vault.kubernetes.SecretBackendRole("rules-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -842,7 +843,6 @@ class SecretBackendRole(pulumi.CustomResource):
                 "location": "earth",
             })
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Import
 

pulumi_vault/kv/get_secret.py

@@ -134,7 +134,6 @@ def get_secret(namespace: Optional[str] = None,
     """
     ## Example Usage
 
-    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -155,7 +154,6 @@ def get_secret(namespace: Optional[str] = None,
         }))
     secret_data = vault.kv.get_secret_output(path=secret.path)
     ```
-    <!--End PulumiCodeChooser -->
 
     ## Required Vault Capabilities
 
@@ -192,7 +190,6 @@ def get_secret_output(namespace: Optional[pulumi.Input[Optional[str]]] = None,
     """
     ## Example Usage
 
-    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -213,7 +210,6 @@ def get_secret_output(namespace: Optional[pulumi.Input[Optional[str]]] = None,
         }))
     secret_data = vault.kv.get_secret_output(path=secret.path)
     ```
-    <!--End PulumiCodeChooser -->
 
     ## Required Vault Capabilities
 

pulumi_vault/kv/get_secret_subkeys_v2.py

@@ -134,7 +134,6 @@ def get_secret_subkeys_v2(depth: Optional[int] = None,
     """
     ## Example Usage
 
-    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -147,8 +146,9 @@ def get_secret_subkeys_v2(depth: Optional[int] = None,
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
             "foo": "bar",
@@ -156,7 +156,6 @@ def get_secret_subkeys_v2(depth: Optional[int] = None,
     test = vault.kv.get_secret_subkeys_v2_output(mount=kvv2.path,
         name=aws_secret.name)
     ```
-    <!--End PulumiCodeChooser -->
 
     ## Required Vault Capabilities
 
@@ -210,7 +209,6 @@ def get_secret_subkeys_v2_output(depth: Optional[pulumi.Input[Optional[int]]] =
     """
     ## Example Usage
 
-    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -223,8 +221,9 @@ def get_secret_subkeys_v2_output(depth: Optional[pulumi.Input[Optional[int]]] =
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
             "foo": "bar",
@@ -232,7 +231,6 @@ def get_secret_subkeys_v2_output(depth: Optional[pulumi.Input[Optional[int]]] =
     test = vault.kv.get_secret_subkeys_v2_output(mount=kvv2.path,
         name=aws_secret.name)
     ```
-    <!--End PulumiCodeChooser -->
 
     ## Required Vault Capabilities
 

pulumi_vault/kv/get_secret_v2.py

@@ -179,6 +179,35 @@ def get_secret_v2(mount: Optional[str] = None,
     """
     ## Example Usage
 
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv2 = vault.Mount("kvv2",
+        path="kvv2",
+        type="kv",
+        options={
+            "version": "2",
+        },
+        description="KV Version 2 secret engine mount")
+    example_secret_v2 = vault.kv.SecretV2("example",
+        mount=kvv2.path,
+        name="secret",
+        cas=1,
+        delete_all_versions=True,
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    example = vault.kv.get_secret_v2_output(mount=kvv2.path,
+        name=example_secret_v2.name)
+    ```
+
+    ## Required Vault Capabilities
+
+    Use of this resource requires the `read` capability on the given path.
+
 
     :param str mount: Path where KV-V2 engine is mounted.
     :param str name: Full name of the secret. For a nested secret
@@ -223,6 +252,35 @@ def get_secret_v2_output(mount: Optional[pulumi.Input[str]] = None,
     """
     ## Example Usage
 
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv2 = vault.Mount("kvv2",
+        path="kvv2",
+        type="kv",
+        options={
+            "version": "2",
+        },
+        description="KV Version 2 secret engine mount")
+    example_secret_v2 = vault.kv.SecretV2("example",
+        mount=kvv2.path,
+        name="secret",
+        cas=1,
+        delete_all_versions=True,
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    example = vault.kv.get_secret_v2_output(mount=kvv2.path,
+        name=example_secret_v2.name)
+    ```
+
+    ## Required Vault Capabilities
+
+    Use of this resource requires the `read` capability on the given path.
+
 
     :param str mount: Path where KV-V2 engine is mounted.
     :param str name: Full name of the secret. For a nested secret

pulumi_vault/kv/get_secrets_list.py

@@ -80,7 +80,6 @@ def get_secrets_list(namespace: Optional[str] = None,
     """
     ## Example Usage
 
-    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -93,19 +92,18 @@ def get_secrets_list(namespace: Optional[str] = None,
             "version": "1",
         },
         description="KV Version 1 secret engine mount")
-    aws_secret = vault.kv.Secret("awsSecret",
+    aws_secret = vault.kv.Secret("aws_secret",
         path=kvv1.path.apply(lambda path: f"{path}/aws-secret"),
         data_json=json.dumps({
             "zip": "zap",
         }))
-    azure_secret = vault.kv.Secret("azureSecret",
+    azure_secret = vault.kv.Secret("azure_secret",
         path=kvv1.path.apply(lambda path: f"{path}/azure-secret"),
         data_json=json.dumps({
             "foo": "bar",
         }))
     secrets = vault.kv.get_secrets_list_output(path=kvv1.path)
     ```
-    <!--End PulumiCodeChooser -->
 
     ## Required Vault Capabilities
 
@@ -138,7 +136,6 @@ def get_secrets_list_output(namespace: Optional[pulumi.Input[Optional[str]]] = N
     """
     ## Example Usage
 
-    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -151,19 +148,18 @@ def get_secrets_list_output(namespace: Optional[pulumi.Input[Optional[str]]] = N
             "version": "1",
         },
         description="KV Version 1 secret engine mount")
-    aws_secret = vault.kv.Secret("awsSecret",
+    aws_secret = vault.kv.Secret("aws_secret",
         path=kvv1.path.apply(lambda path: f"{path}/aws-secret"),
         data_json=json.dumps({
             "zip": "zap",
         }))
-    azure_secret = vault.kv.Secret("azureSecret",
+    azure_secret = vault.kv.Secret("azure_secret",
         path=kvv1.path.apply(lambda path: f"{path}/azure-secret"),
         data_json=json.dumps({
             "foo": "bar",
         }))
     secrets = vault.kv.get_secrets_list_output(path=kvv1.path)
     ```
-    <!--End PulumiCodeChooser -->
 
     ## Required Vault Capabilities
 

pulumi_vault/kv/get_secrets_list_v2.py

@@ -102,7 +102,6 @@ def get_secrets_list_v2(mount: Optional[str] = None,
     """
     ## Example Usage
 
-    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -115,26 +114,28 @@ def get_secrets_list_v2(mount: Optional[str] = None,
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
         }))
-    azure_secret = vault.kv.SecretV2("azureSecret",
+    azure_secret = vault.kv.SecretV2("azure_secret",
         mount=kvv2.path,
+        name="azure_secret",
         data_json=json.dumps({
             "foo": "bar",
         }))
-    nested_secret = vault.kv.SecretV2("nestedSecret",
+    nested_secret = vault.kv.SecretV2("nested_secret",
         mount=kvv2.path,
+        name=azure_secret.name.apply(lambda name: f"{name}/dev"),
         data_json=json.dumps({
             "password": "test",
         }))
     secrets = vault.kv.get_secrets_list_v2_output(mount=kvv2.path)
     nested_secrets = kvv2.path.apply(lambda path: vault.kv.get_secrets_list_v2_output(mount=path,
-        name=vault_kv_secret_v2["test_2"]["name"]))
+        name=test2["name"]))
     ```
-    <!--End PulumiCodeChooser -->
 
     ## Required Vault Capabilities
 
@@ -175,7 +176,6 @@ def get_secrets_list_v2_output(mount: Optional[pulumi.Input[str]] = None,
     """
     ## Example Usage
 
-    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import json
@@ -188,26 +188,28 @@ def get_secrets_list_v2_output(mount: Optional[pulumi.Input[str]] = None,
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
         }))
-    azure_secret = vault.kv.SecretV2("azureSecret",
+    azure_secret = vault.kv.SecretV2("azure_secret",
         mount=kvv2.path,
+        name="azure_secret",
         data_json=json.dumps({
             "foo": "bar",
         }))
-    nested_secret = vault.kv.SecretV2("nestedSecret",
+    nested_secret = vault.kv.SecretV2("nested_secret",
         mount=kvv2.path,
+        name=azure_secret.name.apply(lambda name: f"{name}/dev"),
         data_json=json.dumps({
             "password": "test",
         }))
     secrets = vault.kv.get_secrets_list_v2_output(mount=kvv2.path)
     nested_secrets = kvv2.path.apply(lambda path: vault.kv.get_secrets_list_v2_output(mount=path,
-        name=vault_kv_secret_v2["test_2"]["name"]))
+        name=test2["name"]))
     ```
-    <!--End PulumiCodeChooser -->
 
     ## Required Vault Capabilities
 

pulumi_vault/kv/secret.py

@@ -176,7 +176,6 @@ class Secret(pulumi.CustomResource):
 
         ## Example Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import json
@@ -196,7 +195,6 @@ class Secret(pulumi.CustomResource):
                 "foo": "bar",
             }))
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Required Vault Capabilities
 
@@ -237,7 +235,6 @@ class Secret(pulumi.CustomResource):
 
         ## Example Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import json
@@ -257,7 +254,6 @@ class Secret(pulumi.CustomResource):
                 "foo": "bar",
             }))
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Required Vault Capabilities
 

pulumi_vault/kv/secret_backend_v2.py

@@ -226,7 +226,6 @@ class SecretBackendV2(pulumi.CustomResource):
 
         ## Example Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -244,7 +243,6 @@ class SecretBackendV2(pulumi.CustomResource):
             delete_version_after=12600,
             cas_required=True)
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Required Vault Capabilities
 
@@ -290,7 +288,6 @@ class SecretBackendV2(pulumi.CustomResource):
 
         ## Example Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -308,7 +305,6 @@ class SecretBackendV2(pulumi.CustomResource):
             delete_version_after=12600,
             cas_required=True)
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Required Vault Capabilities
 

pulumi_vault/kv/secret_v2.py

@@ -448,7 +448,6 @@ class SecretV2(pulumi.CustomResource):
 
         ## Example Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import json
@@ -463,6 +462,7 @@ class SecretV2(pulumi.CustomResource):
             description="KV Version 2 secret engine mount")
         example = vault.kv.SecretV2("example",
             mount=kvv2.path,
+            name="secret",
             cas=1,
             delete_all_versions=True,
             data_json=json.dumps({
@@ -477,7 +477,6 @@ class SecretV2(pulumi.CustomResource):
                 },
             ))
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Required Vault Capabilities
 
@@ -546,7 +545,6 @@ class SecretV2(pulumi.CustomResource):
 
         ## Example Usage
 
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import json
@@ -561,6 +559,7 @@ class SecretV2(pulumi.CustomResource):
             description="KV Version 2 secret engine mount")
         example = vault.kv.SecretV2("example",
             mount=kvv2.path,
+            name="secret",
             cas=1,
             delete_all_versions=True,
             data_json=json.dumps({
@@ -575,7 +574,6 @@ class SecretV2(pulumi.CustomResource):
                 },
             ))
         ```
-        <!--End PulumiCodeChooser -->
 
         ## Required Vault Capabilities