pulumi-vault 6.1.0a1712222735__py3-none-any.whl → 6.1.1__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (184) hide show
  1. pulumi_vault/_inputs.py +0 -20
  2. pulumi_vault/ad/secret_backend.py +2 -6
  3. pulumi_vault/ad/secret_library.py +2 -4
  4. pulumi_vault/ad/secret_role.py +0 -4
  5. pulumi_vault/alicloud/auth_backend_role.py +69 -192
  6. pulumi_vault/approle/auth_backend_login.py +0 -4
  7. pulumi_vault/approle/auth_backend_role.py +63 -186
  8. pulumi_vault/approle/auth_backend_role_secret_id.py +0 -4
  9. pulumi_vault/approle/get_auth_backend_role_id.py +0 -4
  10. pulumi_vault/audit.py +12 -20
  11. pulumi_vault/audit_request_header.py +6 -6
  12. pulumi_vault/aws/auth_backend_client.py +6 -10
  13. pulumi_vault/aws/auth_backend_config_identity.py +0 -4
  14. pulumi_vault/aws/auth_backend_identity_whitelist.py +6 -10
  15. pulumi_vault/aws/auth_backend_login.py +0 -8
  16. pulumi_vault/aws/auth_backend_role.py +63 -186
  17. pulumi_vault/aws/auth_backend_roletag_blacklist.py +6 -10
  18. pulumi_vault/aws/auth_backend_sts_role.py +0 -4
  19. pulumi_vault/aws/secret_backend.py +63 -0
  20. pulumi_vault/aws/secret_backend_role.py +2 -4
  21. pulumi_vault/aws/secret_backend_static_role.py +2 -4
  22. pulumi_vault/azure/auth_backend_config.py +6 -10
  23. pulumi_vault/azure/auth_backend_role.py +63 -186
  24. pulumi_vault/azure/backend.py +16 -24
  25. pulumi_vault/azure/backend_role.py +14 -18
  26. pulumi_vault/azure/get_access_credentials.py +0 -4
  27. pulumi_vault/cert_auth_backend_role.py +75 -208
  28. pulumi_vault/consul/secret_backend.py +10 -18
  29. pulumi_vault/consul/secret_backend_role.py +2 -4
  30. pulumi_vault/database/_inputs.py +522 -784
  31. pulumi_vault/database/outputs.py +522 -784
  32. pulumi_vault/database/secret_backend_connection.py +2 -4
  33. pulumi_vault/database/secret_backend_role.py +4 -4
  34. pulumi_vault/database/secret_backend_static_role.py +10 -8
  35. pulumi_vault/database/secrets_mount.py +4 -4
  36. pulumi_vault/egp_policy.py +4 -8
  37. pulumi_vault/gcp/auth_backend.py +0 -36
  38. pulumi_vault/gcp/auth_backend_role.py +63 -264
  39. pulumi_vault/gcp/get_auth_backend_role.py +0 -4
  40. pulumi_vault/gcp/secret_backend.py +4 -6
  41. pulumi_vault/gcp/secret_impersonated_account.py +12 -14
  42. pulumi_vault/gcp/secret_roleset.py +4 -6
  43. pulumi_vault/gcp/secret_static_account.py +14 -16
  44. pulumi_vault/generic/endpoint.py +4 -8
  45. pulumi_vault/generic/get_secret.py +40 -4
  46. pulumi_vault/get_auth_backend.py +0 -4
  47. pulumi_vault/get_auth_backends.py +0 -8
  48. pulumi_vault/get_namespace.py +0 -12
  49. pulumi_vault/get_namespaces.py +4 -12
  50. pulumi_vault/get_nomad_access_token.py +0 -4
  51. pulumi_vault/get_policy_document.py +8 -8
  52. pulumi_vault/get_raft_autopilot_state.py +0 -4
  53. pulumi_vault/github/auth_backend.py +0 -4
  54. pulumi_vault/github/team.py +2 -6
  55. pulumi_vault/github/user.py +2 -6
  56. pulumi_vault/identity/entity.py +6 -8
  57. pulumi_vault/identity/entity_alias.py +6 -8
  58. pulumi_vault/identity/entity_policies.py +12 -12
  59. pulumi_vault/identity/get_entity.py +0 -4
  60. pulumi_vault/identity/get_group.py +0 -4
  61. pulumi_vault/identity/get_oidc_client_creds.py +2 -4
  62. pulumi_vault/identity/get_oidc_openid_config.py +10 -6
  63. pulumi_vault/identity/get_oidc_public_keys.py +10 -6
  64. pulumi_vault/identity/group.py +38 -42
  65. pulumi_vault/identity/group_alias.py +2 -4
  66. pulumi_vault/identity/group_member_entity_ids.py +12 -16
  67. pulumi_vault/identity/group_member_group_ids.py +24 -20
  68. pulumi_vault/identity/group_policies.py +4 -8
  69. pulumi_vault/identity/mfa_duo.py +4 -8
  70. pulumi_vault/identity/mfa_login_enforcement.py +8 -8
  71. pulumi_vault/identity/mfa_okta.py +4 -8
  72. pulumi_vault/identity/mfa_pingid.py +0 -4
  73. pulumi_vault/identity/mfa_totp.py +0 -4
  74. pulumi_vault/identity/oidc.py +0 -4
  75. pulumi_vault/identity/oidc_assignment.py +10 -6
  76. pulumi_vault/identity/oidc_client.py +10 -10
  77. pulumi_vault/identity/oidc_key.py +16 -12
  78. pulumi_vault/identity/oidc_key_allowed_client_id.py +16 -12
  79. pulumi_vault/identity/oidc_provider.py +22 -16
  80. pulumi_vault/identity/oidc_role.py +28 -20
  81. pulumi_vault/identity/oidc_scope.py +6 -8
  82. pulumi_vault/jwt/auth_backend.py +20 -32
  83. pulumi_vault/jwt/auth_backend_role.py +63 -190
  84. pulumi_vault/kmip/secret_backend.py +10 -14
  85. pulumi_vault/kmip/secret_role.py +0 -4
  86. pulumi_vault/kmip/secret_scope.py +0 -4
  87. pulumi_vault/kubernetes/auth_backend_config.py +0 -4
  88. pulumi_vault/kubernetes/auth_backend_role.py +56 -172
  89. pulumi_vault/kubernetes/get_service_account_token.py +8 -8
  90. pulumi_vault/kubernetes/secret_backend.py +6 -8
  91. pulumi_vault/kubernetes/secret_backend_role.py +24 -24
  92. pulumi_vault/kv/get_secret.py +0 -4
  93. pulumi_vault/kv/get_secret_subkeys_v2.py +4 -6
  94. pulumi_vault/kv/get_secret_v2.py +58 -0
  95. pulumi_vault/kv/get_secrets_list.py +4 -8
  96. pulumi_vault/kv/get_secrets_list_v2.py +14 -12
  97. pulumi_vault/kv/secret.py +0 -4
  98. pulumi_vault/kv/secret_backend_v2.py +0 -4
  99. pulumi_vault/kv/secret_v2.py +2 -4
  100. pulumi_vault/ldap/auth_backend.py +66 -161
  101. pulumi_vault/ldap/auth_backend_group.py +0 -4
  102. pulumi_vault/ldap/auth_backend_user.py +0 -4
  103. pulumi_vault/ldap/secret_backend.py +4 -8
  104. pulumi_vault/ldap/secret_backend_dynamic_role.py +0 -4
  105. pulumi_vault/ldap/secret_backend_library_set.py +2 -4
  106. pulumi_vault/ldap/secret_backend_static_role.py +0 -4
  107. pulumi_vault/managed/_inputs.py +84 -132
  108. pulumi_vault/managed/keys.py +7 -28
  109. pulumi_vault/managed/outputs.py +84 -132
  110. pulumi_vault/mfa_duo.py +4 -6
  111. pulumi_vault/mfa_okta.py +4 -6
  112. pulumi_vault/mfa_pingid.py +4 -6
  113. pulumi_vault/mfa_totp.py +10 -12
  114. pulumi_vault/mongodbatlas/secret_backend.py +0 -4
  115. pulumi_vault/mongodbatlas/secret_role.py +2 -4
  116. pulumi_vault/mount.py +26 -42
  117. pulumi_vault/nomad_secret_backend.py +4 -8
  118. pulumi_vault/nomad_secret_role.py +0 -4
  119. pulumi_vault/okta/_inputs.py +8 -8
  120. pulumi_vault/okta/auth_backend.py +6 -10
  121. pulumi_vault/okta/auth_backend_group.py +0 -4
  122. pulumi_vault/okta/auth_backend_user.py +0 -4
  123. pulumi_vault/okta/outputs.py +8 -8
  124. pulumi_vault/outputs.py +0 -20
  125. pulumi_vault/password_policy.py +6 -8
  126. pulumi_vault/pkisecret/backend_config_cluster.py +0 -4
  127. pulumi_vault/pkisecret/get_backend_issuer.py +36 -0
  128. pulumi_vault/pkisecret/get_backend_issuers.py +0 -4
  129. pulumi_vault/pkisecret/get_backend_key.py +2 -6
  130. pulumi_vault/pkisecret/get_backend_keys.py +0 -4
  131. pulumi_vault/pkisecret/secret_backend_cert.py +6 -8
  132. pulumi_vault/pkisecret/secret_backend_config_ca.py +4 -8
  133. pulumi_vault/pkisecret/secret_backend_config_issuers.py +0 -4
  134. pulumi_vault/pkisecret/secret_backend_config_urls.py +0 -4
  135. pulumi_vault/pkisecret/secret_backend_crl_config.py +2 -6
  136. pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +4 -8
  137. pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +10 -14
  138. pulumi_vault/pkisecret/secret_backend_issuer.py +0 -4
  139. pulumi_vault/pkisecret/secret_backend_role.py +2 -4
  140. pulumi_vault/pkisecret/secret_backend_root_cert.py +4 -8
  141. pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +6 -10
  142. pulumi_vault/pkisecret/secret_backend_sign.py +6 -8
  143. pulumi_vault/provider.py +0 -8
  144. pulumi_vault/pulumi-plugin.json +2 -1
  145. pulumi_vault/quota_lease_count.py +6 -8
  146. pulumi_vault/quota_rate_limit.py +2 -4
  147. pulumi_vault/rabbitmq/secret_backend.py +4 -8
  148. pulumi_vault/rabbitmq/secret_backend_role.py +2 -4
  149. pulumi_vault/raft_autopilot.py +0 -4
  150. pulumi_vault/raft_snapshot_agent_config.py +109 -304
  151. pulumi_vault/rgp_policy.py +2 -6
  152. pulumi_vault/saml/auth_backend.py +8 -12
  153. pulumi_vault/saml/auth_backend_role.py +64 -178
  154. pulumi_vault/secrets/sync_association.py +12 -10
  155. pulumi_vault/secrets/sync_aws_destination.py +6 -8
  156. pulumi_vault/secrets/sync_azure_destination.py +10 -12
  157. pulumi_vault/secrets/sync_config.py +2 -6
  158. pulumi_vault/secrets/sync_gcp_destination.py +6 -6
  159. pulumi_vault/secrets/sync_gh_destination.py +6 -8
  160. pulumi_vault/secrets/sync_github_apps.py +8 -8
  161. pulumi_vault/secrets/sync_vercel_destination.py +6 -8
  162. pulumi_vault/ssh/_inputs.py +6 -32
  163. pulumi_vault/ssh/outputs.py +6 -32
  164. pulumi_vault/ssh/secret_backend_ca.py +0 -4
  165. pulumi_vault/ssh/secret_backend_role.py +4 -4
  166. pulumi_vault/terraformcloud/secret_backend.py +0 -56
  167. pulumi_vault/terraformcloud/secret_creds.py +2 -17
  168. pulumi_vault/terraformcloud/secret_role.py +2 -69
  169. pulumi_vault/token.py +14 -18
  170. pulumi_vault/tokenauth/auth_backend_role.py +64 -180
  171. pulumi_vault/transform/alphabet.py +4 -6
  172. pulumi_vault/transform/get_decode.py +4 -4
  173. pulumi_vault/transform/get_encode.py +4 -4
  174. pulumi_vault/transform/role.py +4 -6
  175. pulumi_vault/transform/template.py +4 -4
  176. pulumi_vault/transit/get_decrypt.py +4 -20
  177. pulumi_vault/transit/get_encrypt.py +0 -14
  178. pulumi_vault/transit/secret_backend_key.py +6 -6
  179. pulumi_vault/transit/secret_cache_config.py +0 -4
  180. {pulumi_vault-6.1.0a1712222735.dist-info → pulumi_vault-6.1.1.dist-info}/METADATA +1 -1
  181. pulumi_vault-6.1.1.dist-info/RECORD +252 -0
  182. pulumi_vault-6.1.0a1712222735.dist-info/RECORD +0 -252
  183. {pulumi_vault-6.1.0a1712222735.dist-info → pulumi_vault-6.1.1.dist-info}/WHEEL +0 -0
  184. {pulumi_vault-6.1.0a1712222735.dist-info → pulumi_vault-6.1.1.dist-info}/top_level.txt +0 -0
@@ -53,56 +53,29 @@ class RaftSnapshotAgentConfigArgs:
53
53
  or "google-gcs". The remaining parameters described below are all specific to
54
54
  the selected `storage_type` and prefixed accordingly.
55
55
  :param pulumi.Input[str] aws_access_key_id: AWS access key ID.
56
- :param pulumi.Input[str] aws_s3_bucket: `<required>` - S3 bucket to write snapshots to.
57
- :param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
58
- should only be used for testing purposes, typically in conjunction with
59
- `aws_s3_endpoint`.
56
+ :param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
57
+ :param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
60
58
  :param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
61
- :param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
62
- using a non-AWS S3 implementation like Minio.
63
- :param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style
64
- instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
65
- :param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
66
- :param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
59
+ :param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
60
+ :param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
61
+ :param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
62
+ :param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
67
63
  :param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
68
64
  :param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
69
65
  :param pulumi.Input[str] aws_session_token: AWS session token.
70
66
  :param pulumi.Input[str] azure_account_key: Azure account key.
71
67
  :param pulumi.Input[str] azure_account_name: Azure account name.
72
68
  :param pulumi.Input[str] azure_blob_environment: Azure blob environment.
73
- :param pulumi.Input[str] azure_container_name: `<required>` - Azure container name to write
74
- snapshots to.
75
- :param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
76
- only set when using a non-Azure implementation like Azurite.
69
+ :param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
70
+ :param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
77
71
  :param pulumi.Input[str] file_prefix: Within the directory or bucket
78
72
  prefix given by `path_prefix`, the file or object name of snapshot files
79
73
  will start with this string.
80
- :param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint. This
81
- should only be used for testing purposes, typically in conjunction with
82
- `google_endpoint`.
83
- :param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when
84
- using a non-Google GCS implementation like fake-gcs-server.
85
- :param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
86
- :param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
87
- The raw value looks like this:
88
-
89
- ```json
90
- {
91
- "type": "service_account",
92
- "project_id": "project-id",
93
- "private_key_id": "key-id",
94
- "private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
95
- "client_email": "service-account-email",
96
- "client_id": "client-id",
97
- "auth_uri": "https://accounts.google.com/o/oauth2/auth",
98
- "token_uri": "https://accounts.google.com/o/oauth2/token",
99
- "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
100
- "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
101
- }
102
- ```
103
- :param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
104
- space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
105
- space left in this allowance.
74
+ :param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
75
+ :param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
76
+ :param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
77
+ :param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
78
+ :param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
106
79
  :param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
107
80
  :param pulumi.Input[str] namespace: The namespace to provision the resource in.
108
81
  The value should not contain leading or trailing forward slashes.
@@ -223,7 +196,7 @@ class RaftSnapshotAgentConfigArgs:
223
196
  @pulumi.getter(name="awsS3Bucket")
224
197
  def aws_s3_bucket(self) -> Optional[pulumi.Input[str]]:
225
198
  """
226
- `<required>` - S3 bucket to write snapshots to.
199
+ S3 bucket to write snapshots to.
227
200
  """
228
201
  return pulumi.get(self, "aws_s3_bucket")
229
202
 
@@ -235,9 +208,7 @@ class RaftSnapshotAgentConfigArgs:
235
208
  @pulumi.getter(name="awsS3DisableTls")
236
209
  def aws_s3_disable_tls(self) -> Optional[pulumi.Input[bool]]:
237
210
  """
238
- Disable TLS for the S3 endpoint. This
239
- should only be used for testing purposes, typically in conjunction with
240
- `aws_s3_endpoint`.
211
+ Disable TLS for the S3 endpoint. This should only be used for testing purposes.
241
212
  """
242
213
  return pulumi.get(self, "aws_s3_disable_tls")
243
214
 
@@ -261,8 +232,7 @@ class RaftSnapshotAgentConfigArgs:
261
232
  @pulumi.getter(name="awsS3Endpoint")
262
233
  def aws_s3_endpoint(self) -> Optional[pulumi.Input[str]]:
263
234
  """
264
- AWS endpoint. This is typically only set when
265
- using a non-AWS S3 implementation like Minio.
235
+ AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
266
236
  """
267
237
  return pulumi.get(self, "aws_s3_endpoint")
268
238
 
@@ -274,8 +244,7 @@ class RaftSnapshotAgentConfigArgs:
274
244
  @pulumi.getter(name="awsS3ForcePathStyle")
275
245
  def aws_s3_force_path_style(self) -> Optional[pulumi.Input[bool]]:
276
246
  """
277
- Use the endpoint/bucket URL style
278
- instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
247
+ Use the endpoint/bucket URL style instead of bucket.endpoint.
279
248
  """
280
249
  return pulumi.get(self, "aws_s3_force_path_style")
281
250
 
@@ -287,7 +256,7 @@ class RaftSnapshotAgentConfigArgs:
287
256
  @pulumi.getter(name="awsS3KmsKey")
288
257
  def aws_s3_kms_key(self) -> Optional[pulumi.Input[str]]:
289
258
  """
290
- Use named KMS key, when `aws_s3_enable_kms = true`
259
+ Use named KMS key, when aws_s3_enable_kms=true
291
260
  """
292
261
  return pulumi.get(self, "aws_s3_kms_key")
293
262
 
@@ -299,7 +268,7 @@ class RaftSnapshotAgentConfigArgs:
299
268
  @pulumi.getter(name="awsS3Region")
300
269
  def aws_s3_region(self) -> Optional[pulumi.Input[str]]:
301
270
  """
302
- `<required>` - AWS region bucket is in.
271
+ AWS region bucket is in.
303
272
  """
304
273
  return pulumi.get(self, "aws_s3_region")
305
274
 
@@ -383,8 +352,7 @@ class RaftSnapshotAgentConfigArgs:
383
352
  @pulumi.getter(name="azureContainerName")
384
353
  def azure_container_name(self) -> Optional[pulumi.Input[str]]:
385
354
  """
386
- `<required>` - Azure container name to write
387
- snapshots to.
355
+ Azure container name to write snapshots to.
388
356
  """
389
357
  return pulumi.get(self, "azure_container_name")
390
358
 
@@ -396,8 +364,7 @@ class RaftSnapshotAgentConfigArgs:
396
364
  @pulumi.getter(name="azureEndpoint")
397
365
  def azure_endpoint(self) -> Optional[pulumi.Input[str]]:
398
366
  """
399
- Azure blob storage endpoint. This is typically
400
- only set when using a non-Azure implementation like Azurite.
367
+ Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
401
368
  """
402
369
  return pulumi.get(self, "azure_endpoint")
403
370
 
@@ -423,9 +390,7 @@ class RaftSnapshotAgentConfigArgs:
423
390
  @pulumi.getter(name="googleDisableTls")
424
391
  def google_disable_tls(self) -> Optional[pulumi.Input[bool]]:
425
392
  """
426
- Disable TLS for the GCS endpoint. This
427
- should only be used for testing purposes, typically in conjunction with
428
- `google_endpoint`.
393
+ Disable TLS for the GCS endpoint.
429
394
  """
430
395
  return pulumi.get(self, "google_disable_tls")
431
396
 
@@ -437,8 +402,7 @@ class RaftSnapshotAgentConfigArgs:
437
402
  @pulumi.getter(name="googleEndpoint")
438
403
  def google_endpoint(self) -> Optional[pulumi.Input[str]]:
439
404
  """
440
- GCS endpoint. This is typically only set when
441
- using a non-Google GCS implementation like fake-gcs-server.
405
+ GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
442
406
  """
443
407
  return pulumi.get(self, "google_endpoint")
444
408
 
@@ -450,7 +414,7 @@ class RaftSnapshotAgentConfigArgs:
450
414
  @pulumi.getter(name="googleGcsBucket")
451
415
  def google_gcs_bucket(self) -> Optional[pulumi.Input[str]]:
452
416
  """
453
- `<required>` - GCS bucket to write snapshots to.
417
+ GCS bucket to write snapshots to.
454
418
  """
455
419
  return pulumi.get(self, "google_gcs_bucket")
456
420
 
@@ -462,23 +426,7 @@ class RaftSnapshotAgentConfigArgs:
462
426
  @pulumi.getter(name="googleServiceAccountKey")
463
427
  def google_service_account_key(self) -> Optional[pulumi.Input[str]]:
464
428
  """
465
- Google service account key in JSON format.
466
- The raw value looks like this:
467
-
468
- ```json
469
- {
470
- "type": "service_account",
471
- "project_id": "project-id",
472
- "private_key_id": "key-id",
473
- "private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
474
- "client_email": "service-account-email",
475
- "client_id": "client-id",
476
- "auth_uri": "https://accounts.google.com/o/oauth2/auth",
477
- "token_uri": "https://accounts.google.com/o/oauth2/token",
478
- "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
479
- "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
480
- }
481
- ```
429
+ Google service account key in JSON format.
482
430
  """
483
431
  return pulumi.get(self, "google_service_account_key")
484
432
 
@@ -490,9 +438,7 @@ class RaftSnapshotAgentConfigArgs:
490
438
  @pulumi.getter(name="localMaxSpace")
491
439
  def local_max_space(self) -> Optional[pulumi.Input[int]]:
492
440
  """
493
- For `storage_type = local`, the maximum
494
- space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
495
- space left in this allowance.
441
+ The maximum space, in bytes, to use for snapshots.
496
442
  """
497
443
  return pulumi.get(self, "local_max_space")
498
444
 
@@ -576,57 +522,30 @@ class _RaftSnapshotAgentConfigState:
576
522
  """
577
523
  Input properties used for looking up and filtering RaftSnapshotAgentConfig resources.
578
524
  :param pulumi.Input[str] aws_access_key_id: AWS access key ID.
579
- :param pulumi.Input[str] aws_s3_bucket: `<required>` - S3 bucket to write snapshots to.
580
- :param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
581
- should only be used for testing purposes, typically in conjunction with
582
- `aws_s3_endpoint`.
525
+ :param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
526
+ :param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
583
527
  :param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
584
- :param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
585
- using a non-AWS S3 implementation like Minio.
586
- :param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style
587
- instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
588
- :param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
589
- :param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
528
+ :param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
529
+ :param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
530
+ :param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
531
+ :param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
590
532
  :param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
591
533
  :param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
592
534
  :param pulumi.Input[str] aws_session_token: AWS session token.
593
535
  :param pulumi.Input[str] azure_account_key: Azure account key.
594
536
  :param pulumi.Input[str] azure_account_name: Azure account name.
595
537
  :param pulumi.Input[str] azure_blob_environment: Azure blob environment.
596
- :param pulumi.Input[str] azure_container_name: `<required>` - Azure container name to write
597
- snapshots to.
598
- :param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
599
- only set when using a non-Azure implementation like Azurite.
538
+ :param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
539
+ :param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
600
540
  :param pulumi.Input[str] file_prefix: Within the directory or bucket
601
541
  prefix given by `path_prefix`, the file or object name of snapshot files
602
542
  will start with this string.
603
- :param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint. This
604
- should only be used for testing purposes, typically in conjunction with
605
- `google_endpoint`.
606
- :param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when
607
- using a non-Google GCS implementation like fake-gcs-server.
608
- :param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
609
- :param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
610
- The raw value looks like this:
611
-
612
- ```json
613
- {
614
- "type": "service_account",
615
- "project_id": "project-id",
616
- "private_key_id": "key-id",
617
- "private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
618
- "client_email": "service-account-email",
619
- "client_id": "client-id",
620
- "auth_uri": "https://accounts.google.com/o/oauth2/auth",
621
- "token_uri": "https://accounts.google.com/o/oauth2/token",
622
- "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
623
- "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
624
- }
625
- ```
543
+ :param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
544
+ :param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
545
+ :param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
546
+ :param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
626
547
  :param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
627
- :param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
628
- space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
629
- space left in this allowance.
548
+ :param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
630
549
  :param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
631
550
  :param pulumi.Input[str] namespace: The namespace to provision the resource in.
632
551
  The value should not contain leading or trailing forward slashes.
@@ -716,7 +635,7 @@ class _RaftSnapshotAgentConfigState:
716
635
  @pulumi.getter(name="awsS3Bucket")
717
636
  def aws_s3_bucket(self) -> Optional[pulumi.Input[str]]:
718
637
  """
719
- `<required>` - S3 bucket to write snapshots to.
638
+ S3 bucket to write snapshots to.
720
639
  """
721
640
  return pulumi.get(self, "aws_s3_bucket")
722
641
 
@@ -728,9 +647,7 @@ class _RaftSnapshotAgentConfigState:
728
647
  @pulumi.getter(name="awsS3DisableTls")
729
648
  def aws_s3_disable_tls(self) -> Optional[pulumi.Input[bool]]:
730
649
  """
731
- Disable TLS for the S3 endpoint. This
732
- should only be used for testing purposes, typically in conjunction with
733
- `aws_s3_endpoint`.
650
+ Disable TLS for the S3 endpoint. This should only be used for testing purposes.
734
651
  """
735
652
  return pulumi.get(self, "aws_s3_disable_tls")
736
653
 
@@ -754,8 +671,7 @@ class _RaftSnapshotAgentConfigState:
754
671
  @pulumi.getter(name="awsS3Endpoint")
755
672
  def aws_s3_endpoint(self) -> Optional[pulumi.Input[str]]:
756
673
  """
757
- AWS endpoint. This is typically only set when
758
- using a non-AWS S3 implementation like Minio.
674
+ AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
759
675
  """
760
676
  return pulumi.get(self, "aws_s3_endpoint")
761
677
 
@@ -767,8 +683,7 @@ class _RaftSnapshotAgentConfigState:
767
683
  @pulumi.getter(name="awsS3ForcePathStyle")
768
684
  def aws_s3_force_path_style(self) -> Optional[pulumi.Input[bool]]:
769
685
  """
770
- Use the endpoint/bucket URL style
771
- instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
686
+ Use the endpoint/bucket URL style instead of bucket.endpoint.
772
687
  """
773
688
  return pulumi.get(self, "aws_s3_force_path_style")
774
689
 
@@ -780,7 +695,7 @@ class _RaftSnapshotAgentConfigState:
780
695
  @pulumi.getter(name="awsS3KmsKey")
781
696
  def aws_s3_kms_key(self) -> Optional[pulumi.Input[str]]:
782
697
  """
783
- Use named KMS key, when `aws_s3_enable_kms = true`
698
+ Use named KMS key, when aws_s3_enable_kms=true
784
699
  """
785
700
  return pulumi.get(self, "aws_s3_kms_key")
786
701
 
@@ -792,7 +707,7 @@ class _RaftSnapshotAgentConfigState:
792
707
  @pulumi.getter(name="awsS3Region")
793
708
  def aws_s3_region(self) -> Optional[pulumi.Input[str]]:
794
709
  """
795
- `<required>` - AWS region bucket is in.
710
+ AWS region bucket is in.
796
711
  """
797
712
  return pulumi.get(self, "aws_s3_region")
798
713
 
@@ -876,8 +791,7 @@ class _RaftSnapshotAgentConfigState:
876
791
  @pulumi.getter(name="azureContainerName")
877
792
  def azure_container_name(self) -> Optional[pulumi.Input[str]]:
878
793
  """
879
- `<required>` - Azure container name to write
880
- snapshots to.
794
+ Azure container name to write snapshots to.
881
795
  """
882
796
  return pulumi.get(self, "azure_container_name")
883
797
 
@@ -889,8 +803,7 @@ class _RaftSnapshotAgentConfigState:
889
803
  @pulumi.getter(name="azureEndpoint")
890
804
  def azure_endpoint(self) -> Optional[pulumi.Input[str]]:
891
805
  """
892
- Azure blob storage endpoint. This is typically
893
- only set when using a non-Azure implementation like Azurite.
806
+ Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
894
807
  """
895
808
  return pulumi.get(self, "azure_endpoint")
896
809
 
@@ -916,9 +829,7 @@ class _RaftSnapshotAgentConfigState:
916
829
  @pulumi.getter(name="googleDisableTls")
917
830
  def google_disable_tls(self) -> Optional[pulumi.Input[bool]]:
918
831
  """
919
- Disable TLS for the GCS endpoint. This
920
- should only be used for testing purposes, typically in conjunction with
921
- `google_endpoint`.
832
+ Disable TLS for the GCS endpoint.
922
833
  """
923
834
  return pulumi.get(self, "google_disable_tls")
924
835
 
@@ -930,8 +841,7 @@ class _RaftSnapshotAgentConfigState:
930
841
  @pulumi.getter(name="googleEndpoint")
931
842
  def google_endpoint(self) -> Optional[pulumi.Input[str]]:
932
843
  """
933
- GCS endpoint. This is typically only set when
934
- using a non-Google GCS implementation like fake-gcs-server.
844
+ GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
935
845
  """
936
846
  return pulumi.get(self, "google_endpoint")
937
847
 
@@ -943,7 +853,7 @@ class _RaftSnapshotAgentConfigState:
943
853
  @pulumi.getter(name="googleGcsBucket")
944
854
  def google_gcs_bucket(self) -> Optional[pulumi.Input[str]]:
945
855
  """
946
- `<required>` - GCS bucket to write snapshots to.
856
+ GCS bucket to write snapshots to.
947
857
  """
948
858
  return pulumi.get(self, "google_gcs_bucket")
949
859
 
@@ -955,23 +865,7 @@ class _RaftSnapshotAgentConfigState:
955
865
  @pulumi.getter(name="googleServiceAccountKey")
956
866
  def google_service_account_key(self) -> Optional[pulumi.Input[str]]:
957
867
  """
958
- Google service account key in JSON format.
959
- The raw value looks like this:
960
-
961
- ```json
962
- {
963
- "type": "service_account",
964
- "project_id": "project-id",
965
- "private_key_id": "key-id",
966
- "private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
967
- "client_email": "service-account-email",
968
- "client_id": "client-id",
969
- "auth_uri": "https://accounts.google.com/o/oauth2/auth",
970
- "token_uri": "https://accounts.google.com/o/oauth2/token",
971
- "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
972
- "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
973
- }
974
- ```
868
+ Google service account key in JSON format.
975
869
  """
976
870
  return pulumi.get(self, "google_service_account_key")
977
871
 
@@ -995,9 +889,7 @@ class _RaftSnapshotAgentConfigState:
995
889
  @pulumi.getter(name="localMaxSpace")
996
890
  def local_max_space(self) -> Optional[pulumi.Input[int]]:
997
891
  """
998
- For `storage_type = local`, the maximum
999
- space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
1000
- space left in this allowance.
892
+ The maximum space, in bytes, to use for snapshots.
1001
893
  """
1002
894
  return pulumi.get(self, "local_max_space")
1003
895
 
@@ -1114,22 +1006,20 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1114
1006
  ## Example Usage
1115
1007
 
1116
1008
  ### Local Storage
1117
- <!--Start PulumiCodeChooser -->
1118
1009
  ```python
1119
1010
  import pulumi
1120
1011
  import pulumi_vault as vault
1121
1012
 
1122
- local_backups = vault.RaftSnapshotAgentConfig("localBackups",
1013
+ local_backups = vault.RaftSnapshotAgentConfig("local_backups",
1014
+ name="local",
1123
1015
  interval_seconds=86400,
1124
- local_max_space=10000000,
1125
- path_prefix="/opt/vault/snapshots/",
1126
1016
  retain=7,
1127
- storage_type="local")
1017
+ path_prefix="/opt/vault/snapshots/",
1018
+ storage_type="local",
1019
+ local_max_space=10000000)
1128
1020
  ```
1129
- <!--End PulumiCodeChooser -->
1130
1021
 
1131
1022
  ### AWS S3
1132
- <!--Start PulumiCodeChooser -->
1133
1023
  ```python
1134
1024
  import pulumi
1135
1025
  import pulumi_aws as aws
@@ -1139,7 +1029,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1139
1029
  aws_access_key_id = config.require_object("awsAccessKeyId")
1140
1030
  aws_secret_access_key = config.require_object("awsSecretAccessKey")
1141
1031
  current = aws.get_region()
1142
- s3_backups = vault.RaftSnapshotAgentConfig("s3Backups",
1032
+ s3_backups = vault.RaftSnapshotAgentConfig("s3_backups",
1033
+ name="s3",
1143
1034
  interval_seconds=86400,
1144
1035
  retain=7,
1145
1036
  path_prefix="/path/in/bucket",
@@ -1150,11 +1041,9 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1150
1041
  aws_secret_access_key=aws_secret_access_key,
1151
1042
  aws_s3_enable_kms=True)
1152
1043
  ```
1153
- <!--End PulumiCodeChooser -->
1154
1044
 
1155
1045
  ### Azure BLOB
1156
1046
 
1157
- <!--Start PulumiCodeChooser -->
1158
1047
  ```python
1159
1048
  import pulumi
1160
1049
  import pulumi_vault as vault
@@ -1162,7 +1051,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1162
1051
  config = pulumi.Config()
1163
1052
  azure_account_name = config.require_object("azureAccountName")
1164
1053
  azure_account_key = config.require_object("azureAccountKey")
1165
- azure_backups = vault.RaftSnapshotAgentConfig("azureBackups",
1054
+ azure_backups = vault.RaftSnapshotAgentConfig("azure_backups",
1055
+ name="azure_backup",
1166
1056
  interval_seconds=86400,
1167
1057
  retain=7,
1168
1058
  path_prefix="/",
@@ -1171,7 +1061,6 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1171
1061
  azure_account_name=azure_account_name,
1172
1062
  azure_account_key=azure_account_key)
1173
1063
  ```
1174
- <!--End PulumiCodeChooser -->
1175
1064
 
1176
1065
  ## Import
1177
1066
 
@@ -1184,57 +1073,30 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1184
1073
  :param str resource_name: The name of the resource.
1185
1074
  :param pulumi.ResourceOptions opts: Options for the resource.
1186
1075
  :param pulumi.Input[str] aws_access_key_id: AWS access key ID.
1187
- :param pulumi.Input[str] aws_s3_bucket: `<required>` - S3 bucket to write snapshots to.
1188
- :param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
1189
- should only be used for testing purposes, typically in conjunction with
1190
- `aws_s3_endpoint`.
1076
+ :param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
1077
+ :param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
1191
1078
  :param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
1192
- :param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
1193
- using a non-AWS S3 implementation like Minio.
1194
- :param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style
1195
- instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
1196
- :param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
1197
- :param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
1079
+ :param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
1080
+ :param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
1081
+ :param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
1082
+ :param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
1198
1083
  :param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
1199
1084
  :param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
1200
1085
  :param pulumi.Input[str] aws_session_token: AWS session token.
1201
1086
  :param pulumi.Input[str] azure_account_key: Azure account key.
1202
1087
  :param pulumi.Input[str] azure_account_name: Azure account name.
1203
1088
  :param pulumi.Input[str] azure_blob_environment: Azure blob environment.
1204
- :param pulumi.Input[str] azure_container_name: `<required>` - Azure container name to write
1205
- snapshots to.
1206
- :param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
1207
- only set when using a non-Azure implementation like Azurite.
1089
+ :param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
1090
+ :param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
1208
1091
  :param pulumi.Input[str] file_prefix: Within the directory or bucket
1209
1092
  prefix given by `path_prefix`, the file or object name of snapshot files
1210
1093
  will start with this string.
1211
- :param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint. This
1212
- should only be used for testing purposes, typically in conjunction with
1213
- `google_endpoint`.
1214
- :param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when
1215
- using a non-Google GCS implementation like fake-gcs-server.
1216
- :param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
1217
- :param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
1218
- The raw value looks like this:
1219
-
1220
- ```json
1221
- {
1222
- "type": "service_account",
1223
- "project_id": "project-id",
1224
- "private_key_id": "key-id",
1225
- "private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
1226
- "client_email": "service-account-email",
1227
- "client_id": "client-id",
1228
- "auth_uri": "https://accounts.google.com/o/oauth2/auth",
1229
- "token_uri": "https://accounts.google.com/o/oauth2/token",
1230
- "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
1231
- "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
1232
- }
1233
- ```
1094
+ :param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
1095
+ :param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
1096
+ :param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
1097
+ :param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
1234
1098
  :param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
1235
- :param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
1236
- space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
1237
- space left in this allowance.
1099
+ :param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
1238
1100
  :param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
1239
1101
  :param pulumi.Input[str] namespace: The namespace to provision the resource in.
1240
1102
  The value should not contain leading or trailing forward slashes.
@@ -1261,22 +1123,20 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1261
1123
  ## Example Usage
1262
1124
 
1263
1125
  ### Local Storage
1264
- <!--Start PulumiCodeChooser -->
1265
1126
  ```python
1266
1127
  import pulumi
1267
1128
  import pulumi_vault as vault
1268
1129
 
1269
- local_backups = vault.RaftSnapshotAgentConfig("localBackups",
1130
+ local_backups = vault.RaftSnapshotAgentConfig("local_backups",
1131
+ name="local",
1270
1132
  interval_seconds=86400,
1271
- local_max_space=10000000,
1272
- path_prefix="/opt/vault/snapshots/",
1273
1133
  retain=7,
1274
- storage_type="local")
1134
+ path_prefix="/opt/vault/snapshots/",
1135
+ storage_type="local",
1136
+ local_max_space=10000000)
1275
1137
  ```
1276
- <!--End PulumiCodeChooser -->
1277
1138
 
1278
1139
  ### AWS S3
1279
- <!--Start PulumiCodeChooser -->
1280
1140
  ```python
1281
1141
  import pulumi
1282
1142
  import pulumi_aws as aws
@@ -1286,7 +1146,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1286
1146
  aws_access_key_id = config.require_object("awsAccessKeyId")
1287
1147
  aws_secret_access_key = config.require_object("awsSecretAccessKey")
1288
1148
  current = aws.get_region()
1289
- s3_backups = vault.RaftSnapshotAgentConfig("s3Backups",
1149
+ s3_backups = vault.RaftSnapshotAgentConfig("s3_backups",
1150
+ name="s3",
1290
1151
  interval_seconds=86400,
1291
1152
  retain=7,
1292
1153
  path_prefix="/path/in/bucket",
@@ -1297,11 +1158,9 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1297
1158
  aws_secret_access_key=aws_secret_access_key,
1298
1159
  aws_s3_enable_kms=True)
1299
1160
  ```
1300
- <!--End PulumiCodeChooser -->
1301
1161
 
1302
1162
  ### Azure BLOB
1303
1163
 
1304
- <!--Start PulumiCodeChooser -->
1305
1164
  ```python
1306
1165
  import pulumi
1307
1166
  import pulumi_vault as vault
@@ -1309,7 +1168,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1309
1168
  config = pulumi.Config()
1310
1169
  azure_account_name = config.require_object("azureAccountName")
1311
1170
  azure_account_key = config.require_object("azureAccountKey")
1312
- azure_backups = vault.RaftSnapshotAgentConfig("azureBackups",
1171
+ azure_backups = vault.RaftSnapshotAgentConfig("azure_backups",
1172
+ name="azure_backup",
1313
1173
  interval_seconds=86400,
1314
1174
  retain=7,
1315
1175
  path_prefix="/",
@@ -1318,7 +1178,6 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1318
1178
  azure_account_name=azure_account_name,
1319
1179
  azure_account_key=azure_account_key)
1320
1180
  ```
1321
- <!--End PulumiCodeChooser -->
1322
1181
 
1323
1182
  ## Import
1324
1183
 
@@ -1460,57 +1319,30 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1460
1319
  :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
1461
1320
  :param pulumi.ResourceOptions opts: Options for the resource.
1462
1321
  :param pulumi.Input[str] aws_access_key_id: AWS access key ID.
1463
- :param pulumi.Input[str] aws_s3_bucket: `<required>` - S3 bucket to write snapshots to.
1464
- :param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
1465
- should only be used for testing purposes, typically in conjunction with
1466
- `aws_s3_endpoint`.
1322
+ :param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
1323
+ :param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
1467
1324
  :param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
1468
- :param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
1469
- using a non-AWS S3 implementation like Minio.
1470
- :param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style
1471
- instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
1472
- :param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
1473
- :param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
1325
+ :param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
1326
+ :param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
1327
+ :param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
1328
+ :param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
1474
1329
  :param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
1475
1330
  :param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
1476
1331
  :param pulumi.Input[str] aws_session_token: AWS session token.
1477
1332
  :param pulumi.Input[str] azure_account_key: Azure account key.
1478
1333
  :param pulumi.Input[str] azure_account_name: Azure account name.
1479
1334
  :param pulumi.Input[str] azure_blob_environment: Azure blob environment.
1480
- :param pulumi.Input[str] azure_container_name: `<required>` - Azure container name to write
1481
- snapshots to.
1482
- :param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
1483
- only set when using a non-Azure implementation like Azurite.
1335
+ :param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
1336
+ :param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
1484
1337
  :param pulumi.Input[str] file_prefix: Within the directory or bucket
1485
1338
  prefix given by `path_prefix`, the file or object name of snapshot files
1486
1339
  will start with this string.
1487
- :param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint. This
1488
- should only be used for testing purposes, typically in conjunction with
1489
- `google_endpoint`.
1490
- :param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when
1491
- using a non-Google GCS implementation like fake-gcs-server.
1492
- :param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
1493
- :param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
1494
- The raw value looks like this:
1495
-
1496
- ```json
1497
- {
1498
- "type": "service_account",
1499
- "project_id": "project-id",
1500
- "private_key_id": "key-id",
1501
- "private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
1502
- "client_email": "service-account-email",
1503
- "client_id": "client-id",
1504
- "auth_uri": "https://accounts.google.com/o/oauth2/auth",
1505
- "token_uri": "https://accounts.google.com/o/oauth2/token",
1506
- "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
1507
- "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
1508
- }
1509
- ```
1340
+ :param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
1341
+ :param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
1342
+ :param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
1343
+ :param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
1510
1344
  :param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
1511
- :param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
1512
- space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
1513
- space left in this allowance.
1345
+ :param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
1514
1346
  :param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
1515
1347
  :param pulumi.Input[str] namespace: The namespace to provision the resource in.
1516
1348
  The value should not contain leading or trailing forward slashes.
@@ -1573,7 +1405,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1573
1405
  @pulumi.getter(name="awsS3Bucket")
1574
1406
  def aws_s3_bucket(self) -> pulumi.Output[Optional[str]]:
1575
1407
  """
1576
- `<required>` - S3 bucket to write snapshots to.
1408
+ S3 bucket to write snapshots to.
1577
1409
  """
1578
1410
  return pulumi.get(self, "aws_s3_bucket")
1579
1411
 
@@ -1581,9 +1413,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1581
1413
  @pulumi.getter(name="awsS3DisableTls")
1582
1414
  def aws_s3_disable_tls(self) -> pulumi.Output[Optional[bool]]:
1583
1415
  """
1584
- Disable TLS for the S3 endpoint. This
1585
- should only be used for testing purposes, typically in conjunction with
1586
- `aws_s3_endpoint`.
1416
+ Disable TLS for the S3 endpoint. This should only be used for testing purposes.
1587
1417
  """
1588
1418
  return pulumi.get(self, "aws_s3_disable_tls")
1589
1419
 
@@ -1599,8 +1429,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1599
1429
  @pulumi.getter(name="awsS3Endpoint")
1600
1430
  def aws_s3_endpoint(self) -> pulumi.Output[Optional[str]]:
1601
1431
  """
1602
- AWS endpoint. This is typically only set when
1603
- using a non-AWS S3 implementation like Minio.
1432
+ AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
1604
1433
  """
1605
1434
  return pulumi.get(self, "aws_s3_endpoint")
1606
1435
 
@@ -1608,8 +1437,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1608
1437
  @pulumi.getter(name="awsS3ForcePathStyle")
1609
1438
  def aws_s3_force_path_style(self) -> pulumi.Output[Optional[bool]]:
1610
1439
  """
1611
- Use the endpoint/bucket URL style
1612
- instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
1440
+ Use the endpoint/bucket URL style instead of bucket.endpoint.
1613
1441
  """
1614
1442
  return pulumi.get(self, "aws_s3_force_path_style")
1615
1443
 
@@ -1617,7 +1445,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1617
1445
  @pulumi.getter(name="awsS3KmsKey")
1618
1446
  def aws_s3_kms_key(self) -> pulumi.Output[Optional[str]]:
1619
1447
  """
1620
- Use named KMS key, when `aws_s3_enable_kms = true`
1448
+ Use named KMS key, when aws_s3_enable_kms=true
1621
1449
  """
1622
1450
  return pulumi.get(self, "aws_s3_kms_key")
1623
1451
 
@@ -1625,7 +1453,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1625
1453
  @pulumi.getter(name="awsS3Region")
1626
1454
  def aws_s3_region(self) -> pulumi.Output[Optional[str]]:
1627
1455
  """
1628
- `<required>` - AWS region bucket is in.
1456
+ AWS region bucket is in.
1629
1457
  """
1630
1458
  return pulumi.get(self, "aws_s3_region")
1631
1459
 
@@ -1681,8 +1509,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1681
1509
  @pulumi.getter(name="azureContainerName")
1682
1510
  def azure_container_name(self) -> pulumi.Output[Optional[str]]:
1683
1511
  """
1684
- `<required>` - Azure container name to write
1685
- snapshots to.
1512
+ Azure container name to write snapshots to.
1686
1513
  """
1687
1514
  return pulumi.get(self, "azure_container_name")
1688
1515
 
@@ -1690,8 +1517,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1690
1517
  @pulumi.getter(name="azureEndpoint")
1691
1518
  def azure_endpoint(self) -> pulumi.Output[Optional[str]]:
1692
1519
  """
1693
- Azure blob storage endpoint. This is typically
1694
- only set when using a non-Azure implementation like Azurite.
1520
+ Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
1695
1521
  """
1696
1522
  return pulumi.get(self, "azure_endpoint")
1697
1523
 
@@ -1709,9 +1535,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1709
1535
  @pulumi.getter(name="googleDisableTls")
1710
1536
  def google_disable_tls(self) -> pulumi.Output[Optional[bool]]:
1711
1537
  """
1712
- Disable TLS for the GCS endpoint. This
1713
- should only be used for testing purposes, typically in conjunction with
1714
- `google_endpoint`.
1538
+ Disable TLS for the GCS endpoint.
1715
1539
  """
1716
1540
  return pulumi.get(self, "google_disable_tls")
1717
1541
 
@@ -1719,8 +1543,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1719
1543
  @pulumi.getter(name="googleEndpoint")
1720
1544
  def google_endpoint(self) -> pulumi.Output[Optional[str]]:
1721
1545
  """
1722
- GCS endpoint. This is typically only set when
1723
- using a non-Google GCS implementation like fake-gcs-server.
1546
+ GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
1724
1547
  """
1725
1548
  return pulumi.get(self, "google_endpoint")
1726
1549
 
@@ -1728,7 +1551,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1728
1551
  @pulumi.getter(name="googleGcsBucket")
1729
1552
  def google_gcs_bucket(self) -> pulumi.Output[Optional[str]]:
1730
1553
  """
1731
- `<required>` - GCS bucket to write snapshots to.
1554
+ GCS bucket to write snapshots to.
1732
1555
  """
1733
1556
  return pulumi.get(self, "google_gcs_bucket")
1734
1557
 
@@ -1736,23 +1559,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1736
1559
  @pulumi.getter(name="googleServiceAccountKey")
1737
1560
  def google_service_account_key(self) -> pulumi.Output[Optional[str]]:
1738
1561
  """
1739
- Google service account key in JSON format.
1740
- The raw value looks like this:
1741
-
1742
- ```json
1743
- {
1744
- "type": "service_account",
1745
- "project_id": "project-id",
1746
- "private_key_id": "key-id",
1747
- "private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
1748
- "client_email": "service-account-email",
1749
- "client_id": "client-id",
1750
- "auth_uri": "https://accounts.google.com/o/oauth2/auth",
1751
- "token_uri": "https://accounts.google.com/o/oauth2/token",
1752
- "auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
1753
- "client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
1754
- }
1755
- ```
1562
+ Google service account key in JSON format.
1756
1563
  """
1757
1564
  return pulumi.get(self, "google_service_account_key")
1758
1565
 
@@ -1768,9 +1575,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
1768
1575
  @pulumi.getter(name="localMaxSpace")
1769
1576
  def local_max_space(self) -> pulumi.Output[Optional[int]]:
1770
1577
  """
1771
- For `storage_type = local`, the maximum
1772
- space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
1773
- space left in this allowance.
1578
+ The maximum space, in bytes, to use for snapshots.
1774
1579
  """
1775
1580
  return pulumi.get(self, "local_max_space")
1776
1581