pulumi-vault 6.1.0a1712222735__py3-none-any.whl → 6.1.1__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/_inputs.py +0 -20
- pulumi_vault/ad/secret_backend.py +2 -6
- pulumi_vault/ad/secret_library.py +2 -4
- pulumi_vault/ad/secret_role.py +0 -4
- pulumi_vault/alicloud/auth_backend_role.py +69 -192
- pulumi_vault/approle/auth_backend_login.py +0 -4
- pulumi_vault/approle/auth_backend_role.py +63 -186
- pulumi_vault/approle/auth_backend_role_secret_id.py +0 -4
- pulumi_vault/approle/get_auth_backend_role_id.py +0 -4
- pulumi_vault/audit.py +12 -20
- pulumi_vault/audit_request_header.py +6 -6
- pulumi_vault/aws/auth_backend_client.py +6 -10
- pulumi_vault/aws/auth_backend_config_identity.py +0 -4
- pulumi_vault/aws/auth_backend_identity_whitelist.py +6 -10
- pulumi_vault/aws/auth_backend_login.py +0 -8
- pulumi_vault/aws/auth_backend_role.py +63 -186
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +6 -10
- pulumi_vault/aws/auth_backend_sts_role.py +0 -4
- pulumi_vault/aws/secret_backend.py +63 -0
- pulumi_vault/aws/secret_backend_role.py +2 -4
- pulumi_vault/aws/secret_backend_static_role.py +2 -4
- pulumi_vault/azure/auth_backend_config.py +6 -10
- pulumi_vault/azure/auth_backend_role.py +63 -186
- pulumi_vault/azure/backend.py +16 -24
- pulumi_vault/azure/backend_role.py +14 -18
- pulumi_vault/azure/get_access_credentials.py +0 -4
- pulumi_vault/cert_auth_backend_role.py +75 -208
- pulumi_vault/consul/secret_backend.py +10 -18
- pulumi_vault/consul/secret_backend_role.py +2 -4
- pulumi_vault/database/_inputs.py +522 -784
- pulumi_vault/database/outputs.py +522 -784
- pulumi_vault/database/secret_backend_connection.py +2 -4
- pulumi_vault/database/secret_backend_role.py +4 -4
- pulumi_vault/database/secret_backend_static_role.py +10 -8
- pulumi_vault/database/secrets_mount.py +4 -4
- pulumi_vault/egp_policy.py +4 -8
- pulumi_vault/gcp/auth_backend.py +0 -36
- pulumi_vault/gcp/auth_backend_role.py +63 -264
- pulumi_vault/gcp/get_auth_backend_role.py +0 -4
- pulumi_vault/gcp/secret_backend.py +4 -6
- pulumi_vault/gcp/secret_impersonated_account.py +12 -14
- pulumi_vault/gcp/secret_roleset.py +4 -6
- pulumi_vault/gcp/secret_static_account.py +14 -16
- pulumi_vault/generic/endpoint.py +4 -8
- pulumi_vault/generic/get_secret.py +40 -4
- pulumi_vault/get_auth_backend.py +0 -4
- pulumi_vault/get_auth_backends.py +0 -8
- pulumi_vault/get_namespace.py +0 -12
- pulumi_vault/get_namespaces.py +4 -12
- pulumi_vault/get_nomad_access_token.py +0 -4
- pulumi_vault/get_policy_document.py +8 -8
- pulumi_vault/get_raft_autopilot_state.py +0 -4
- pulumi_vault/github/auth_backend.py +0 -4
- pulumi_vault/github/team.py +2 -6
- pulumi_vault/github/user.py +2 -6
- pulumi_vault/identity/entity.py +6 -8
- pulumi_vault/identity/entity_alias.py +6 -8
- pulumi_vault/identity/entity_policies.py +12 -12
- pulumi_vault/identity/get_entity.py +0 -4
- pulumi_vault/identity/get_group.py +0 -4
- pulumi_vault/identity/get_oidc_client_creds.py +2 -4
- pulumi_vault/identity/get_oidc_openid_config.py +10 -6
- pulumi_vault/identity/get_oidc_public_keys.py +10 -6
- pulumi_vault/identity/group.py +38 -42
- pulumi_vault/identity/group_alias.py +2 -4
- pulumi_vault/identity/group_member_entity_ids.py +12 -16
- pulumi_vault/identity/group_member_group_ids.py +24 -20
- pulumi_vault/identity/group_policies.py +4 -8
- pulumi_vault/identity/mfa_duo.py +4 -8
- pulumi_vault/identity/mfa_login_enforcement.py +8 -8
- pulumi_vault/identity/mfa_okta.py +4 -8
- pulumi_vault/identity/mfa_pingid.py +0 -4
- pulumi_vault/identity/mfa_totp.py +0 -4
- pulumi_vault/identity/oidc.py +0 -4
- pulumi_vault/identity/oidc_assignment.py +10 -6
- pulumi_vault/identity/oidc_client.py +10 -10
- pulumi_vault/identity/oidc_key.py +16 -12
- pulumi_vault/identity/oidc_key_allowed_client_id.py +16 -12
- pulumi_vault/identity/oidc_provider.py +22 -16
- pulumi_vault/identity/oidc_role.py +28 -20
- pulumi_vault/identity/oidc_scope.py +6 -8
- pulumi_vault/jwt/auth_backend.py +20 -32
- pulumi_vault/jwt/auth_backend_role.py +63 -190
- pulumi_vault/kmip/secret_backend.py +10 -14
- pulumi_vault/kmip/secret_role.py +0 -4
- pulumi_vault/kmip/secret_scope.py +0 -4
- pulumi_vault/kubernetes/auth_backend_config.py +0 -4
- pulumi_vault/kubernetes/auth_backend_role.py +56 -172
- pulumi_vault/kubernetes/get_service_account_token.py +8 -8
- pulumi_vault/kubernetes/secret_backend.py +6 -8
- pulumi_vault/kubernetes/secret_backend_role.py +24 -24
- pulumi_vault/kv/get_secret.py +0 -4
- pulumi_vault/kv/get_secret_subkeys_v2.py +4 -6
- pulumi_vault/kv/get_secret_v2.py +58 -0
- pulumi_vault/kv/get_secrets_list.py +4 -8
- pulumi_vault/kv/get_secrets_list_v2.py +14 -12
- pulumi_vault/kv/secret.py +0 -4
- pulumi_vault/kv/secret_backend_v2.py +0 -4
- pulumi_vault/kv/secret_v2.py +2 -4
- pulumi_vault/ldap/auth_backend.py +66 -161
- pulumi_vault/ldap/auth_backend_group.py +0 -4
- pulumi_vault/ldap/auth_backend_user.py +0 -4
- pulumi_vault/ldap/secret_backend.py +4 -8
- pulumi_vault/ldap/secret_backend_dynamic_role.py +0 -4
- pulumi_vault/ldap/secret_backend_library_set.py +2 -4
- pulumi_vault/ldap/secret_backend_static_role.py +0 -4
- pulumi_vault/managed/_inputs.py +84 -132
- pulumi_vault/managed/keys.py +7 -28
- pulumi_vault/managed/outputs.py +84 -132
- pulumi_vault/mfa_duo.py +4 -6
- pulumi_vault/mfa_okta.py +4 -6
- pulumi_vault/mfa_pingid.py +4 -6
- pulumi_vault/mfa_totp.py +10 -12
- pulumi_vault/mongodbatlas/secret_backend.py +0 -4
- pulumi_vault/mongodbatlas/secret_role.py +2 -4
- pulumi_vault/mount.py +26 -42
- pulumi_vault/nomad_secret_backend.py +4 -8
- pulumi_vault/nomad_secret_role.py +0 -4
- pulumi_vault/okta/_inputs.py +8 -8
- pulumi_vault/okta/auth_backend.py +6 -10
- pulumi_vault/okta/auth_backend_group.py +0 -4
- pulumi_vault/okta/auth_backend_user.py +0 -4
- pulumi_vault/okta/outputs.py +8 -8
- pulumi_vault/outputs.py +0 -20
- pulumi_vault/password_policy.py +6 -8
- pulumi_vault/pkisecret/backend_config_cluster.py +0 -4
- pulumi_vault/pkisecret/get_backend_issuer.py +36 -0
- pulumi_vault/pkisecret/get_backend_issuers.py +0 -4
- pulumi_vault/pkisecret/get_backend_key.py +2 -6
- pulumi_vault/pkisecret/get_backend_keys.py +0 -4
- pulumi_vault/pkisecret/secret_backend_cert.py +6 -8
- pulumi_vault/pkisecret/secret_backend_config_ca.py +4 -8
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +0 -4
- pulumi_vault/pkisecret/secret_backend_config_urls.py +0 -4
- pulumi_vault/pkisecret/secret_backend_crl_config.py +2 -6
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +4 -8
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +10 -14
- pulumi_vault/pkisecret/secret_backend_issuer.py +0 -4
- pulumi_vault/pkisecret/secret_backend_role.py +2 -4
- pulumi_vault/pkisecret/secret_backend_root_cert.py +4 -8
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +6 -10
- pulumi_vault/pkisecret/secret_backend_sign.py +6 -8
- pulumi_vault/provider.py +0 -8
- pulumi_vault/pulumi-plugin.json +2 -1
- pulumi_vault/quota_lease_count.py +6 -8
- pulumi_vault/quota_rate_limit.py +2 -4
- pulumi_vault/rabbitmq/secret_backend.py +4 -8
- pulumi_vault/rabbitmq/secret_backend_role.py +2 -4
- pulumi_vault/raft_autopilot.py +0 -4
- pulumi_vault/raft_snapshot_agent_config.py +109 -304
- pulumi_vault/rgp_policy.py +2 -6
- pulumi_vault/saml/auth_backend.py +8 -12
- pulumi_vault/saml/auth_backend_role.py +64 -178
- pulumi_vault/secrets/sync_association.py +12 -10
- pulumi_vault/secrets/sync_aws_destination.py +6 -8
- pulumi_vault/secrets/sync_azure_destination.py +10 -12
- pulumi_vault/secrets/sync_config.py +2 -6
- pulumi_vault/secrets/sync_gcp_destination.py +6 -6
- pulumi_vault/secrets/sync_gh_destination.py +6 -8
- pulumi_vault/secrets/sync_github_apps.py +8 -8
- pulumi_vault/secrets/sync_vercel_destination.py +6 -8
- pulumi_vault/ssh/_inputs.py +6 -32
- pulumi_vault/ssh/outputs.py +6 -32
- pulumi_vault/ssh/secret_backend_ca.py +0 -4
- pulumi_vault/ssh/secret_backend_role.py +4 -4
- pulumi_vault/terraformcloud/secret_backend.py +0 -56
- pulumi_vault/terraformcloud/secret_creds.py +2 -17
- pulumi_vault/terraformcloud/secret_role.py +2 -69
- pulumi_vault/token.py +14 -18
- pulumi_vault/tokenauth/auth_backend_role.py +64 -180
- pulumi_vault/transform/alphabet.py +4 -6
- pulumi_vault/transform/get_decode.py +4 -4
- pulumi_vault/transform/get_encode.py +4 -4
- pulumi_vault/transform/role.py +4 -6
- pulumi_vault/transform/template.py +4 -4
- pulumi_vault/transit/get_decrypt.py +4 -20
- pulumi_vault/transit/get_encrypt.py +0 -14
- pulumi_vault/transit/secret_backend_key.py +6 -6
- pulumi_vault/transit/secret_cache_config.py +0 -4
- {pulumi_vault-6.1.0a1712222735.dist-info → pulumi_vault-6.1.1.dist-info}/METADATA +1 -1
- pulumi_vault-6.1.1.dist-info/RECORD +252 -0
- pulumi_vault-6.1.0a1712222735.dist-info/RECORD +0 -252
- {pulumi_vault-6.1.0a1712222735.dist-info → pulumi_vault-6.1.1.dist-info}/WHEEL +0 -0
- {pulumi_vault-6.1.0a1712222735.dist-info → pulumi_vault-6.1.1.dist-info}/top_level.txt +0 -0
@@ -53,56 +53,29 @@ class RaftSnapshotAgentConfigArgs:
|
|
53
53
|
or "google-gcs". The remaining parameters described below are all specific to
|
54
54
|
the selected `storage_type` and prefixed accordingly.
|
55
55
|
:param pulumi.Input[str] aws_access_key_id: AWS access key ID.
|
56
|
-
:param pulumi.Input[str] aws_s3_bucket:
|
57
|
-
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
|
58
|
-
should only be used for testing purposes, typically in conjunction with
|
59
|
-
`aws_s3_endpoint`.
|
56
|
+
:param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
|
57
|
+
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
60
58
|
:param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
|
61
|
-
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
|
62
|
-
|
63
|
-
:param pulumi.Input[
|
64
|
-
|
65
|
-
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
|
66
|
-
:param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
|
59
|
+
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
60
|
+
:param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
|
61
|
+
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
|
62
|
+
:param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
|
67
63
|
:param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
|
68
64
|
:param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
|
69
65
|
:param pulumi.Input[str] aws_session_token: AWS session token.
|
70
66
|
:param pulumi.Input[str] azure_account_key: Azure account key.
|
71
67
|
:param pulumi.Input[str] azure_account_name: Azure account name.
|
72
68
|
:param pulumi.Input[str] azure_blob_environment: Azure blob environment.
|
73
|
-
:param pulumi.Input[str] azure_container_name:
|
74
|
-
|
75
|
-
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
|
76
|
-
only set when using a non-Azure implementation like Azurite.
|
69
|
+
:param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
|
70
|
+
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
77
71
|
:param pulumi.Input[str] file_prefix: Within the directory or bucket
|
78
72
|
prefix given by `path_prefix`, the file or object name of snapshot files
|
79
73
|
will start with this string.
|
80
|
-
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
81
|
-
|
82
|
-
|
83
|
-
:param pulumi.Input[str]
|
84
|
-
|
85
|
-
:param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
|
86
|
-
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
87
|
-
The raw value looks like this:
|
88
|
-
|
89
|
-
```json
|
90
|
-
{
|
91
|
-
"type": "service_account",
|
92
|
-
"project_id": "project-id",
|
93
|
-
"private_key_id": "key-id",
|
94
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
95
|
-
"client_email": "service-account-email",
|
96
|
-
"client_id": "client-id",
|
97
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
98
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
99
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
100
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
101
|
-
}
|
102
|
-
```
|
103
|
-
:param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
|
104
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
105
|
-
space left in this allowance.
|
74
|
+
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
75
|
+
:param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
76
|
+
:param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
|
77
|
+
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
78
|
+
:param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
|
106
79
|
:param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
|
107
80
|
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
108
81
|
The value should not contain leading or trailing forward slashes.
|
@@ -223,7 +196,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
223
196
|
@pulumi.getter(name="awsS3Bucket")
|
224
197
|
def aws_s3_bucket(self) -> Optional[pulumi.Input[str]]:
|
225
198
|
"""
|
226
|
-
|
199
|
+
S3 bucket to write snapshots to.
|
227
200
|
"""
|
228
201
|
return pulumi.get(self, "aws_s3_bucket")
|
229
202
|
|
@@ -235,9 +208,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
235
208
|
@pulumi.getter(name="awsS3DisableTls")
|
236
209
|
def aws_s3_disable_tls(self) -> Optional[pulumi.Input[bool]]:
|
237
210
|
"""
|
238
|
-
Disable TLS for the S3 endpoint. This
|
239
|
-
should only be used for testing purposes, typically in conjunction with
|
240
|
-
`aws_s3_endpoint`.
|
211
|
+
Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
241
212
|
"""
|
242
213
|
return pulumi.get(self, "aws_s3_disable_tls")
|
243
214
|
|
@@ -261,8 +232,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
261
232
|
@pulumi.getter(name="awsS3Endpoint")
|
262
233
|
def aws_s3_endpoint(self) -> Optional[pulumi.Input[str]]:
|
263
234
|
"""
|
264
|
-
AWS endpoint. This is typically only set when
|
265
|
-
using a non-AWS S3 implementation like Minio.
|
235
|
+
AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
266
236
|
"""
|
267
237
|
return pulumi.get(self, "aws_s3_endpoint")
|
268
238
|
|
@@ -274,8 +244,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
274
244
|
@pulumi.getter(name="awsS3ForcePathStyle")
|
275
245
|
def aws_s3_force_path_style(self) -> Optional[pulumi.Input[bool]]:
|
276
246
|
"""
|
277
|
-
Use the endpoint/bucket URL style
|
278
|
-
instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
|
247
|
+
Use the endpoint/bucket URL style instead of bucket.endpoint.
|
279
248
|
"""
|
280
249
|
return pulumi.get(self, "aws_s3_force_path_style")
|
281
250
|
|
@@ -287,7 +256,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
287
256
|
@pulumi.getter(name="awsS3KmsKey")
|
288
257
|
def aws_s3_kms_key(self) -> Optional[pulumi.Input[str]]:
|
289
258
|
"""
|
290
|
-
Use named KMS key, when
|
259
|
+
Use named KMS key, when aws_s3_enable_kms=true
|
291
260
|
"""
|
292
261
|
return pulumi.get(self, "aws_s3_kms_key")
|
293
262
|
|
@@ -299,7 +268,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
299
268
|
@pulumi.getter(name="awsS3Region")
|
300
269
|
def aws_s3_region(self) -> Optional[pulumi.Input[str]]:
|
301
270
|
"""
|
302
|
-
|
271
|
+
AWS region bucket is in.
|
303
272
|
"""
|
304
273
|
return pulumi.get(self, "aws_s3_region")
|
305
274
|
|
@@ -383,8 +352,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
383
352
|
@pulumi.getter(name="azureContainerName")
|
384
353
|
def azure_container_name(self) -> Optional[pulumi.Input[str]]:
|
385
354
|
"""
|
386
|
-
|
387
|
-
snapshots to.
|
355
|
+
Azure container name to write snapshots to.
|
388
356
|
"""
|
389
357
|
return pulumi.get(self, "azure_container_name")
|
390
358
|
|
@@ -396,8 +364,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
396
364
|
@pulumi.getter(name="azureEndpoint")
|
397
365
|
def azure_endpoint(self) -> Optional[pulumi.Input[str]]:
|
398
366
|
"""
|
399
|
-
Azure blob storage endpoint. This is typically
|
400
|
-
only set when using a non-Azure implementation like Azurite.
|
367
|
+
Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
401
368
|
"""
|
402
369
|
return pulumi.get(self, "azure_endpoint")
|
403
370
|
|
@@ -423,9 +390,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
423
390
|
@pulumi.getter(name="googleDisableTls")
|
424
391
|
def google_disable_tls(self) -> Optional[pulumi.Input[bool]]:
|
425
392
|
"""
|
426
|
-
Disable TLS for the GCS endpoint.
|
427
|
-
should only be used for testing purposes, typically in conjunction with
|
428
|
-
`google_endpoint`.
|
393
|
+
Disable TLS for the GCS endpoint.
|
429
394
|
"""
|
430
395
|
return pulumi.get(self, "google_disable_tls")
|
431
396
|
|
@@ -437,8 +402,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
437
402
|
@pulumi.getter(name="googleEndpoint")
|
438
403
|
def google_endpoint(self) -> Optional[pulumi.Input[str]]:
|
439
404
|
"""
|
440
|
-
GCS endpoint. This is typically only set when
|
441
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
405
|
+
GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
442
406
|
"""
|
443
407
|
return pulumi.get(self, "google_endpoint")
|
444
408
|
|
@@ -450,7 +414,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
450
414
|
@pulumi.getter(name="googleGcsBucket")
|
451
415
|
def google_gcs_bucket(self) -> Optional[pulumi.Input[str]]:
|
452
416
|
"""
|
453
|
-
|
417
|
+
GCS bucket to write snapshots to.
|
454
418
|
"""
|
455
419
|
return pulumi.get(self, "google_gcs_bucket")
|
456
420
|
|
@@ -462,23 +426,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
462
426
|
@pulumi.getter(name="googleServiceAccountKey")
|
463
427
|
def google_service_account_key(self) -> Optional[pulumi.Input[str]]:
|
464
428
|
"""
|
465
|
-
Google service account key in JSON format.
|
466
|
-
The raw value looks like this:
|
467
|
-
|
468
|
-
```json
|
469
|
-
{
|
470
|
-
"type": "service_account",
|
471
|
-
"project_id": "project-id",
|
472
|
-
"private_key_id": "key-id",
|
473
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
474
|
-
"client_email": "service-account-email",
|
475
|
-
"client_id": "client-id",
|
476
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
477
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
478
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
479
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
480
|
-
}
|
481
|
-
```
|
429
|
+
Google service account key in JSON format.
|
482
430
|
"""
|
483
431
|
return pulumi.get(self, "google_service_account_key")
|
484
432
|
|
@@ -490,9 +438,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
490
438
|
@pulumi.getter(name="localMaxSpace")
|
491
439
|
def local_max_space(self) -> Optional[pulumi.Input[int]]:
|
492
440
|
"""
|
493
|
-
|
494
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
495
|
-
space left in this allowance.
|
441
|
+
The maximum space, in bytes, to use for snapshots.
|
496
442
|
"""
|
497
443
|
return pulumi.get(self, "local_max_space")
|
498
444
|
|
@@ -576,57 +522,30 @@ class _RaftSnapshotAgentConfigState:
|
|
576
522
|
"""
|
577
523
|
Input properties used for looking up and filtering RaftSnapshotAgentConfig resources.
|
578
524
|
:param pulumi.Input[str] aws_access_key_id: AWS access key ID.
|
579
|
-
:param pulumi.Input[str] aws_s3_bucket:
|
580
|
-
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
|
581
|
-
should only be used for testing purposes, typically in conjunction with
|
582
|
-
`aws_s3_endpoint`.
|
525
|
+
:param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
|
526
|
+
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
583
527
|
:param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
|
584
|
-
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
|
585
|
-
|
586
|
-
:param pulumi.Input[
|
587
|
-
|
588
|
-
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
|
589
|
-
:param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
|
528
|
+
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
529
|
+
:param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
|
530
|
+
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
|
531
|
+
:param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
|
590
532
|
:param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
|
591
533
|
:param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
|
592
534
|
:param pulumi.Input[str] aws_session_token: AWS session token.
|
593
535
|
:param pulumi.Input[str] azure_account_key: Azure account key.
|
594
536
|
:param pulumi.Input[str] azure_account_name: Azure account name.
|
595
537
|
:param pulumi.Input[str] azure_blob_environment: Azure blob environment.
|
596
|
-
:param pulumi.Input[str] azure_container_name:
|
597
|
-
|
598
|
-
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
|
599
|
-
only set when using a non-Azure implementation like Azurite.
|
538
|
+
:param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
|
539
|
+
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
600
540
|
:param pulumi.Input[str] file_prefix: Within the directory or bucket
|
601
541
|
prefix given by `path_prefix`, the file or object name of snapshot files
|
602
542
|
will start with this string.
|
603
|
-
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
604
|
-
|
605
|
-
|
606
|
-
:param pulumi.Input[str]
|
607
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
608
|
-
:param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
|
609
|
-
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
610
|
-
The raw value looks like this:
|
611
|
-
|
612
|
-
```json
|
613
|
-
{
|
614
|
-
"type": "service_account",
|
615
|
-
"project_id": "project-id",
|
616
|
-
"private_key_id": "key-id",
|
617
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
618
|
-
"client_email": "service-account-email",
|
619
|
-
"client_id": "client-id",
|
620
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
621
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
622
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
623
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
624
|
-
}
|
625
|
-
```
|
543
|
+
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
544
|
+
:param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
545
|
+
:param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
|
546
|
+
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
626
547
|
:param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
|
627
|
-
:param pulumi.Input[int] local_max_space:
|
628
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
629
|
-
space left in this allowance.
|
548
|
+
:param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
|
630
549
|
:param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
|
631
550
|
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
632
551
|
The value should not contain leading or trailing forward slashes.
|
@@ -716,7 +635,7 @@ class _RaftSnapshotAgentConfigState:
|
|
716
635
|
@pulumi.getter(name="awsS3Bucket")
|
717
636
|
def aws_s3_bucket(self) -> Optional[pulumi.Input[str]]:
|
718
637
|
"""
|
719
|
-
|
638
|
+
S3 bucket to write snapshots to.
|
720
639
|
"""
|
721
640
|
return pulumi.get(self, "aws_s3_bucket")
|
722
641
|
|
@@ -728,9 +647,7 @@ class _RaftSnapshotAgentConfigState:
|
|
728
647
|
@pulumi.getter(name="awsS3DisableTls")
|
729
648
|
def aws_s3_disable_tls(self) -> Optional[pulumi.Input[bool]]:
|
730
649
|
"""
|
731
|
-
Disable TLS for the S3 endpoint. This
|
732
|
-
should only be used for testing purposes, typically in conjunction with
|
733
|
-
`aws_s3_endpoint`.
|
650
|
+
Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
734
651
|
"""
|
735
652
|
return pulumi.get(self, "aws_s3_disable_tls")
|
736
653
|
|
@@ -754,8 +671,7 @@ class _RaftSnapshotAgentConfigState:
|
|
754
671
|
@pulumi.getter(name="awsS3Endpoint")
|
755
672
|
def aws_s3_endpoint(self) -> Optional[pulumi.Input[str]]:
|
756
673
|
"""
|
757
|
-
AWS endpoint. This is typically only set when
|
758
|
-
using a non-AWS S3 implementation like Minio.
|
674
|
+
AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
759
675
|
"""
|
760
676
|
return pulumi.get(self, "aws_s3_endpoint")
|
761
677
|
|
@@ -767,8 +683,7 @@ class _RaftSnapshotAgentConfigState:
|
|
767
683
|
@pulumi.getter(name="awsS3ForcePathStyle")
|
768
684
|
def aws_s3_force_path_style(self) -> Optional[pulumi.Input[bool]]:
|
769
685
|
"""
|
770
|
-
Use the endpoint/bucket URL style
|
771
|
-
instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
|
686
|
+
Use the endpoint/bucket URL style instead of bucket.endpoint.
|
772
687
|
"""
|
773
688
|
return pulumi.get(self, "aws_s3_force_path_style")
|
774
689
|
|
@@ -780,7 +695,7 @@ class _RaftSnapshotAgentConfigState:
|
|
780
695
|
@pulumi.getter(name="awsS3KmsKey")
|
781
696
|
def aws_s3_kms_key(self) -> Optional[pulumi.Input[str]]:
|
782
697
|
"""
|
783
|
-
Use named KMS key, when
|
698
|
+
Use named KMS key, when aws_s3_enable_kms=true
|
784
699
|
"""
|
785
700
|
return pulumi.get(self, "aws_s3_kms_key")
|
786
701
|
|
@@ -792,7 +707,7 @@ class _RaftSnapshotAgentConfigState:
|
|
792
707
|
@pulumi.getter(name="awsS3Region")
|
793
708
|
def aws_s3_region(self) -> Optional[pulumi.Input[str]]:
|
794
709
|
"""
|
795
|
-
|
710
|
+
AWS region bucket is in.
|
796
711
|
"""
|
797
712
|
return pulumi.get(self, "aws_s3_region")
|
798
713
|
|
@@ -876,8 +791,7 @@ class _RaftSnapshotAgentConfigState:
|
|
876
791
|
@pulumi.getter(name="azureContainerName")
|
877
792
|
def azure_container_name(self) -> Optional[pulumi.Input[str]]:
|
878
793
|
"""
|
879
|
-
|
880
|
-
snapshots to.
|
794
|
+
Azure container name to write snapshots to.
|
881
795
|
"""
|
882
796
|
return pulumi.get(self, "azure_container_name")
|
883
797
|
|
@@ -889,8 +803,7 @@ class _RaftSnapshotAgentConfigState:
|
|
889
803
|
@pulumi.getter(name="azureEndpoint")
|
890
804
|
def azure_endpoint(self) -> Optional[pulumi.Input[str]]:
|
891
805
|
"""
|
892
|
-
Azure blob storage endpoint. This is typically
|
893
|
-
only set when using a non-Azure implementation like Azurite.
|
806
|
+
Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
894
807
|
"""
|
895
808
|
return pulumi.get(self, "azure_endpoint")
|
896
809
|
|
@@ -916,9 +829,7 @@ class _RaftSnapshotAgentConfigState:
|
|
916
829
|
@pulumi.getter(name="googleDisableTls")
|
917
830
|
def google_disable_tls(self) -> Optional[pulumi.Input[bool]]:
|
918
831
|
"""
|
919
|
-
Disable TLS for the GCS endpoint.
|
920
|
-
should only be used for testing purposes, typically in conjunction with
|
921
|
-
`google_endpoint`.
|
832
|
+
Disable TLS for the GCS endpoint.
|
922
833
|
"""
|
923
834
|
return pulumi.get(self, "google_disable_tls")
|
924
835
|
|
@@ -930,8 +841,7 @@ class _RaftSnapshotAgentConfigState:
|
|
930
841
|
@pulumi.getter(name="googleEndpoint")
|
931
842
|
def google_endpoint(self) -> Optional[pulumi.Input[str]]:
|
932
843
|
"""
|
933
|
-
GCS endpoint. This is typically only set when
|
934
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
844
|
+
GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
935
845
|
"""
|
936
846
|
return pulumi.get(self, "google_endpoint")
|
937
847
|
|
@@ -943,7 +853,7 @@ class _RaftSnapshotAgentConfigState:
|
|
943
853
|
@pulumi.getter(name="googleGcsBucket")
|
944
854
|
def google_gcs_bucket(self) -> Optional[pulumi.Input[str]]:
|
945
855
|
"""
|
946
|
-
|
856
|
+
GCS bucket to write snapshots to.
|
947
857
|
"""
|
948
858
|
return pulumi.get(self, "google_gcs_bucket")
|
949
859
|
|
@@ -955,23 +865,7 @@ class _RaftSnapshotAgentConfigState:
|
|
955
865
|
@pulumi.getter(name="googleServiceAccountKey")
|
956
866
|
def google_service_account_key(self) -> Optional[pulumi.Input[str]]:
|
957
867
|
"""
|
958
|
-
Google service account key in JSON format.
|
959
|
-
The raw value looks like this:
|
960
|
-
|
961
|
-
```json
|
962
|
-
{
|
963
|
-
"type": "service_account",
|
964
|
-
"project_id": "project-id",
|
965
|
-
"private_key_id": "key-id",
|
966
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
967
|
-
"client_email": "service-account-email",
|
968
|
-
"client_id": "client-id",
|
969
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
970
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
971
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
972
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
973
|
-
}
|
974
|
-
```
|
868
|
+
Google service account key in JSON format.
|
975
869
|
"""
|
976
870
|
return pulumi.get(self, "google_service_account_key")
|
977
871
|
|
@@ -995,9 +889,7 @@ class _RaftSnapshotAgentConfigState:
|
|
995
889
|
@pulumi.getter(name="localMaxSpace")
|
996
890
|
def local_max_space(self) -> Optional[pulumi.Input[int]]:
|
997
891
|
"""
|
998
|
-
|
999
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
1000
|
-
space left in this allowance.
|
892
|
+
The maximum space, in bytes, to use for snapshots.
|
1001
893
|
"""
|
1002
894
|
return pulumi.get(self, "local_max_space")
|
1003
895
|
|
@@ -1114,22 +1006,20 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1114
1006
|
## Example Usage
|
1115
1007
|
|
1116
1008
|
### Local Storage
|
1117
|
-
<!--Start PulumiCodeChooser -->
|
1118
1009
|
```python
|
1119
1010
|
import pulumi
|
1120
1011
|
import pulumi_vault as vault
|
1121
1012
|
|
1122
|
-
local_backups = vault.RaftSnapshotAgentConfig("
|
1013
|
+
local_backups = vault.RaftSnapshotAgentConfig("local_backups",
|
1014
|
+
name="local",
|
1123
1015
|
interval_seconds=86400,
|
1124
|
-
local_max_space=10000000,
|
1125
|
-
path_prefix="/opt/vault/snapshots/",
|
1126
1016
|
retain=7,
|
1127
|
-
|
1017
|
+
path_prefix="/opt/vault/snapshots/",
|
1018
|
+
storage_type="local",
|
1019
|
+
local_max_space=10000000)
|
1128
1020
|
```
|
1129
|
-
<!--End PulumiCodeChooser -->
|
1130
1021
|
|
1131
1022
|
### AWS S3
|
1132
|
-
<!--Start PulumiCodeChooser -->
|
1133
1023
|
```python
|
1134
1024
|
import pulumi
|
1135
1025
|
import pulumi_aws as aws
|
@@ -1139,7 +1029,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1139
1029
|
aws_access_key_id = config.require_object("awsAccessKeyId")
|
1140
1030
|
aws_secret_access_key = config.require_object("awsSecretAccessKey")
|
1141
1031
|
current = aws.get_region()
|
1142
|
-
s3_backups = vault.RaftSnapshotAgentConfig("
|
1032
|
+
s3_backups = vault.RaftSnapshotAgentConfig("s3_backups",
|
1033
|
+
name="s3",
|
1143
1034
|
interval_seconds=86400,
|
1144
1035
|
retain=7,
|
1145
1036
|
path_prefix="/path/in/bucket",
|
@@ -1150,11 +1041,9 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1150
1041
|
aws_secret_access_key=aws_secret_access_key,
|
1151
1042
|
aws_s3_enable_kms=True)
|
1152
1043
|
```
|
1153
|
-
<!--End PulumiCodeChooser -->
|
1154
1044
|
|
1155
1045
|
### Azure BLOB
|
1156
1046
|
|
1157
|
-
<!--Start PulumiCodeChooser -->
|
1158
1047
|
```python
|
1159
1048
|
import pulumi
|
1160
1049
|
import pulumi_vault as vault
|
@@ -1162,7 +1051,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1162
1051
|
config = pulumi.Config()
|
1163
1052
|
azure_account_name = config.require_object("azureAccountName")
|
1164
1053
|
azure_account_key = config.require_object("azureAccountKey")
|
1165
|
-
azure_backups = vault.RaftSnapshotAgentConfig("
|
1054
|
+
azure_backups = vault.RaftSnapshotAgentConfig("azure_backups",
|
1055
|
+
name="azure_backup",
|
1166
1056
|
interval_seconds=86400,
|
1167
1057
|
retain=7,
|
1168
1058
|
path_prefix="/",
|
@@ -1171,7 +1061,6 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1171
1061
|
azure_account_name=azure_account_name,
|
1172
1062
|
azure_account_key=azure_account_key)
|
1173
1063
|
```
|
1174
|
-
<!--End PulumiCodeChooser -->
|
1175
1064
|
|
1176
1065
|
## Import
|
1177
1066
|
|
@@ -1184,57 +1073,30 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1184
1073
|
:param str resource_name: The name of the resource.
|
1185
1074
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
1186
1075
|
:param pulumi.Input[str] aws_access_key_id: AWS access key ID.
|
1187
|
-
:param pulumi.Input[str] aws_s3_bucket:
|
1188
|
-
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
|
1189
|
-
should only be used for testing purposes, typically in conjunction with
|
1190
|
-
`aws_s3_endpoint`.
|
1076
|
+
:param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
|
1077
|
+
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
1191
1078
|
:param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
|
1192
|
-
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
|
1193
|
-
|
1194
|
-
:param pulumi.Input[
|
1195
|
-
|
1196
|
-
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
|
1197
|
-
:param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
|
1079
|
+
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
1080
|
+
:param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
|
1081
|
+
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
|
1082
|
+
:param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
|
1198
1083
|
:param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
|
1199
1084
|
:param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
|
1200
1085
|
:param pulumi.Input[str] aws_session_token: AWS session token.
|
1201
1086
|
:param pulumi.Input[str] azure_account_key: Azure account key.
|
1202
1087
|
:param pulumi.Input[str] azure_account_name: Azure account name.
|
1203
1088
|
:param pulumi.Input[str] azure_blob_environment: Azure blob environment.
|
1204
|
-
:param pulumi.Input[str] azure_container_name:
|
1205
|
-
|
1206
|
-
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
|
1207
|
-
only set when using a non-Azure implementation like Azurite.
|
1089
|
+
:param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
|
1090
|
+
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
1208
1091
|
:param pulumi.Input[str] file_prefix: Within the directory or bucket
|
1209
1092
|
prefix given by `path_prefix`, the file or object name of snapshot files
|
1210
1093
|
will start with this string.
|
1211
|
-
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
1212
|
-
|
1213
|
-
|
1214
|
-
:param pulumi.Input[str]
|
1215
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
1216
|
-
:param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
|
1217
|
-
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1218
|
-
The raw value looks like this:
|
1219
|
-
|
1220
|
-
```json
|
1221
|
-
{
|
1222
|
-
"type": "service_account",
|
1223
|
-
"project_id": "project-id",
|
1224
|
-
"private_key_id": "key-id",
|
1225
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
1226
|
-
"client_email": "service-account-email",
|
1227
|
-
"client_id": "client-id",
|
1228
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
1229
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
1230
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
1231
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
1232
|
-
}
|
1233
|
-
```
|
1094
|
+
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
1095
|
+
:param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
1096
|
+
:param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
|
1097
|
+
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1234
1098
|
:param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
|
1235
|
-
:param pulumi.Input[int] local_max_space:
|
1236
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
1237
|
-
space left in this allowance.
|
1099
|
+
:param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
|
1238
1100
|
:param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
|
1239
1101
|
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
1240
1102
|
The value should not contain leading or trailing forward slashes.
|
@@ -1261,22 +1123,20 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1261
1123
|
## Example Usage
|
1262
1124
|
|
1263
1125
|
### Local Storage
|
1264
|
-
<!--Start PulumiCodeChooser -->
|
1265
1126
|
```python
|
1266
1127
|
import pulumi
|
1267
1128
|
import pulumi_vault as vault
|
1268
1129
|
|
1269
|
-
local_backups = vault.RaftSnapshotAgentConfig("
|
1130
|
+
local_backups = vault.RaftSnapshotAgentConfig("local_backups",
|
1131
|
+
name="local",
|
1270
1132
|
interval_seconds=86400,
|
1271
|
-
local_max_space=10000000,
|
1272
|
-
path_prefix="/opt/vault/snapshots/",
|
1273
1133
|
retain=7,
|
1274
|
-
|
1134
|
+
path_prefix="/opt/vault/snapshots/",
|
1135
|
+
storage_type="local",
|
1136
|
+
local_max_space=10000000)
|
1275
1137
|
```
|
1276
|
-
<!--End PulumiCodeChooser -->
|
1277
1138
|
|
1278
1139
|
### AWS S3
|
1279
|
-
<!--Start PulumiCodeChooser -->
|
1280
1140
|
```python
|
1281
1141
|
import pulumi
|
1282
1142
|
import pulumi_aws as aws
|
@@ -1286,7 +1146,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1286
1146
|
aws_access_key_id = config.require_object("awsAccessKeyId")
|
1287
1147
|
aws_secret_access_key = config.require_object("awsSecretAccessKey")
|
1288
1148
|
current = aws.get_region()
|
1289
|
-
s3_backups = vault.RaftSnapshotAgentConfig("
|
1149
|
+
s3_backups = vault.RaftSnapshotAgentConfig("s3_backups",
|
1150
|
+
name="s3",
|
1290
1151
|
interval_seconds=86400,
|
1291
1152
|
retain=7,
|
1292
1153
|
path_prefix="/path/in/bucket",
|
@@ -1297,11 +1158,9 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1297
1158
|
aws_secret_access_key=aws_secret_access_key,
|
1298
1159
|
aws_s3_enable_kms=True)
|
1299
1160
|
```
|
1300
|
-
<!--End PulumiCodeChooser -->
|
1301
1161
|
|
1302
1162
|
### Azure BLOB
|
1303
1163
|
|
1304
|
-
<!--Start PulumiCodeChooser -->
|
1305
1164
|
```python
|
1306
1165
|
import pulumi
|
1307
1166
|
import pulumi_vault as vault
|
@@ -1309,7 +1168,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1309
1168
|
config = pulumi.Config()
|
1310
1169
|
azure_account_name = config.require_object("azureAccountName")
|
1311
1170
|
azure_account_key = config.require_object("azureAccountKey")
|
1312
|
-
azure_backups = vault.RaftSnapshotAgentConfig("
|
1171
|
+
azure_backups = vault.RaftSnapshotAgentConfig("azure_backups",
|
1172
|
+
name="azure_backup",
|
1313
1173
|
interval_seconds=86400,
|
1314
1174
|
retain=7,
|
1315
1175
|
path_prefix="/",
|
@@ -1318,7 +1178,6 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1318
1178
|
azure_account_name=azure_account_name,
|
1319
1179
|
azure_account_key=azure_account_key)
|
1320
1180
|
```
|
1321
|
-
<!--End PulumiCodeChooser -->
|
1322
1181
|
|
1323
1182
|
## Import
|
1324
1183
|
|
@@ -1460,57 +1319,30 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1460
1319
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
1461
1320
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
1462
1321
|
:param pulumi.Input[str] aws_access_key_id: AWS access key ID.
|
1463
|
-
:param pulumi.Input[str] aws_s3_bucket:
|
1464
|
-
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
|
1465
|
-
should only be used for testing purposes, typically in conjunction with
|
1466
|
-
`aws_s3_endpoint`.
|
1322
|
+
:param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
|
1323
|
+
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
1467
1324
|
:param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
|
1468
|
-
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
|
1469
|
-
|
1470
|
-
:param pulumi.Input[
|
1471
|
-
|
1472
|
-
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
|
1473
|
-
:param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
|
1325
|
+
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
1326
|
+
:param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
|
1327
|
+
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
|
1328
|
+
:param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
|
1474
1329
|
:param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
|
1475
1330
|
:param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
|
1476
1331
|
:param pulumi.Input[str] aws_session_token: AWS session token.
|
1477
1332
|
:param pulumi.Input[str] azure_account_key: Azure account key.
|
1478
1333
|
:param pulumi.Input[str] azure_account_name: Azure account name.
|
1479
1334
|
:param pulumi.Input[str] azure_blob_environment: Azure blob environment.
|
1480
|
-
:param pulumi.Input[str] azure_container_name:
|
1481
|
-
|
1482
|
-
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
|
1483
|
-
only set when using a non-Azure implementation like Azurite.
|
1335
|
+
:param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
|
1336
|
+
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
1484
1337
|
:param pulumi.Input[str] file_prefix: Within the directory or bucket
|
1485
1338
|
prefix given by `path_prefix`, the file or object name of snapshot files
|
1486
1339
|
will start with this string.
|
1487
|
-
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
1488
|
-
|
1489
|
-
|
1490
|
-
:param pulumi.Input[str]
|
1491
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
1492
|
-
:param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
|
1493
|
-
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1494
|
-
The raw value looks like this:
|
1495
|
-
|
1496
|
-
```json
|
1497
|
-
{
|
1498
|
-
"type": "service_account",
|
1499
|
-
"project_id": "project-id",
|
1500
|
-
"private_key_id": "key-id",
|
1501
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
1502
|
-
"client_email": "service-account-email",
|
1503
|
-
"client_id": "client-id",
|
1504
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
1505
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
1506
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
1507
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
1508
|
-
}
|
1509
|
-
```
|
1340
|
+
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
1341
|
+
:param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
1342
|
+
:param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
|
1343
|
+
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1510
1344
|
:param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
|
1511
|
-
:param pulumi.Input[int] local_max_space:
|
1512
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
1513
|
-
space left in this allowance.
|
1345
|
+
:param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
|
1514
1346
|
:param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
|
1515
1347
|
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
1516
1348
|
The value should not contain leading or trailing forward slashes.
|
@@ -1573,7 +1405,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1573
1405
|
@pulumi.getter(name="awsS3Bucket")
|
1574
1406
|
def aws_s3_bucket(self) -> pulumi.Output[Optional[str]]:
|
1575
1407
|
"""
|
1576
|
-
|
1408
|
+
S3 bucket to write snapshots to.
|
1577
1409
|
"""
|
1578
1410
|
return pulumi.get(self, "aws_s3_bucket")
|
1579
1411
|
|
@@ -1581,9 +1413,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1581
1413
|
@pulumi.getter(name="awsS3DisableTls")
|
1582
1414
|
def aws_s3_disable_tls(self) -> pulumi.Output[Optional[bool]]:
|
1583
1415
|
"""
|
1584
|
-
Disable TLS for the S3 endpoint. This
|
1585
|
-
should only be used for testing purposes, typically in conjunction with
|
1586
|
-
`aws_s3_endpoint`.
|
1416
|
+
Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
1587
1417
|
"""
|
1588
1418
|
return pulumi.get(self, "aws_s3_disable_tls")
|
1589
1419
|
|
@@ -1599,8 +1429,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1599
1429
|
@pulumi.getter(name="awsS3Endpoint")
|
1600
1430
|
def aws_s3_endpoint(self) -> pulumi.Output[Optional[str]]:
|
1601
1431
|
"""
|
1602
|
-
AWS endpoint. This is typically only set when
|
1603
|
-
using a non-AWS S3 implementation like Minio.
|
1432
|
+
AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
1604
1433
|
"""
|
1605
1434
|
return pulumi.get(self, "aws_s3_endpoint")
|
1606
1435
|
|
@@ -1608,8 +1437,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1608
1437
|
@pulumi.getter(name="awsS3ForcePathStyle")
|
1609
1438
|
def aws_s3_force_path_style(self) -> pulumi.Output[Optional[bool]]:
|
1610
1439
|
"""
|
1611
|
-
Use the endpoint/bucket URL style
|
1612
|
-
instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
|
1440
|
+
Use the endpoint/bucket URL style instead of bucket.endpoint.
|
1613
1441
|
"""
|
1614
1442
|
return pulumi.get(self, "aws_s3_force_path_style")
|
1615
1443
|
|
@@ -1617,7 +1445,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1617
1445
|
@pulumi.getter(name="awsS3KmsKey")
|
1618
1446
|
def aws_s3_kms_key(self) -> pulumi.Output[Optional[str]]:
|
1619
1447
|
"""
|
1620
|
-
Use named KMS key, when
|
1448
|
+
Use named KMS key, when aws_s3_enable_kms=true
|
1621
1449
|
"""
|
1622
1450
|
return pulumi.get(self, "aws_s3_kms_key")
|
1623
1451
|
|
@@ -1625,7 +1453,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1625
1453
|
@pulumi.getter(name="awsS3Region")
|
1626
1454
|
def aws_s3_region(self) -> pulumi.Output[Optional[str]]:
|
1627
1455
|
"""
|
1628
|
-
|
1456
|
+
AWS region bucket is in.
|
1629
1457
|
"""
|
1630
1458
|
return pulumi.get(self, "aws_s3_region")
|
1631
1459
|
|
@@ -1681,8 +1509,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1681
1509
|
@pulumi.getter(name="azureContainerName")
|
1682
1510
|
def azure_container_name(self) -> pulumi.Output[Optional[str]]:
|
1683
1511
|
"""
|
1684
|
-
|
1685
|
-
snapshots to.
|
1512
|
+
Azure container name to write snapshots to.
|
1686
1513
|
"""
|
1687
1514
|
return pulumi.get(self, "azure_container_name")
|
1688
1515
|
|
@@ -1690,8 +1517,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1690
1517
|
@pulumi.getter(name="azureEndpoint")
|
1691
1518
|
def azure_endpoint(self) -> pulumi.Output[Optional[str]]:
|
1692
1519
|
"""
|
1693
|
-
Azure blob storage endpoint. This is typically
|
1694
|
-
only set when using a non-Azure implementation like Azurite.
|
1520
|
+
Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
1695
1521
|
"""
|
1696
1522
|
return pulumi.get(self, "azure_endpoint")
|
1697
1523
|
|
@@ -1709,9 +1535,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1709
1535
|
@pulumi.getter(name="googleDisableTls")
|
1710
1536
|
def google_disable_tls(self) -> pulumi.Output[Optional[bool]]:
|
1711
1537
|
"""
|
1712
|
-
Disable TLS for the GCS endpoint.
|
1713
|
-
should only be used for testing purposes, typically in conjunction with
|
1714
|
-
`google_endpoint`.
|
1538
|
+
Disable TLS for the GCS endpoint.
|
1715
1539
|
"""
|
1716
1540
|
return pulumi.get(self, "google_disable_tls")
|
1717
1541
|
|
@@ -1719,8 +1543,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1719
1543
|
@pulumi.getter(name="googleEndpoint")
|
1720
1544
|
def google_endpoint(self) -> pulumi.Output[Optional[str]]:
|
1721
1545
|
"""
|
1722
|
-
GCS endpoint. This is typically only set when
|
1723
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
1546
|
+
GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
1724
1547
|
"""
|
1725
1548
|
return pulumi.get(self, "google_endpoint")
|
1726
1549
|
|
@@ -1728,7 +1551,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1728
1551
|
@pulumi.getter(name="googleGcsBucket")
|
1729
1552
|
def google_gcs_bucket(self) -> pulumi.Output[Optional[str]]:
|
1730
1553
|
"""
|
1731
|
-
|
1554
|
+
GCS bucket to write snapshots to.
|
1732
1555
|
"""
|
1733
1556
|
return pulumi.get(self, "google_gcs_bucket")
|
1734
1557
|
|
@@ -1736,23 +1559,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1736
1559
|
@pulumi.getter(name="googleServiceAccountKey")
|
1737
1560
|
def google_service_account_key(self) -> pulumi.Output[Optional[str]]:
|
1738
1561
|
"""
|
1739
|
-
Google service account key in JSON format.
|
1740
|
-
The raw value looks like this:
|
1741
|
-
|
1742
|
-
```json
|
1743
|
-
{
|
1744
|
-
"type": "service_account",
|
1745
|
-
"project_id": "project-id",
|
1746
|
-
"private_key_id": "key-id",
|
1747
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
1748
|
-
"client_email": "service-account-email",
|
1749
|
-
"client_id": "client-id",
|
1750
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
1751
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
1752
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
1753
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
1754
|
-
}
|
1755
|
-
```
|
1562
|
+
Google service account key in JSON format.
|
1756
1563
|
"""
|
1757
1564
|
return pulumi.get(self, "google_service_account_key")
|
1758
1565
|
|
@@ -1768,9 +1575,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1768
1575
|
@pulumi.getter(name="localMaxSpace")
|
1769
1576
|
def local_max_space(self) -> pulumi.Output[Optional[int]]:
|
1770
1577
|
"""
|
1771
|
-
|
1772
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
1773
|
-
space left in this allowance.
|
1578
|
+
The maximum space, in bytes, to use for snapshots.
|
1774
1579
|
"""
|
1775
1580
|
return pulumi.get(self, "local_max_space")
|
1776
1581
|
|