PyPI - pulumi-vault - Versions diffs - 6.1.0a1712233015__py3-none-any.whl → 6.1.1__py3-none-any.whl - Mend

pulumi-vault 6.1.0a1712233015py3-none-any.whl → 6.1.1py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (184) hide show

pulumi_vault/_inputs.py +0 -20
pulumi_vault/ad/secret_backend.py +2 -6
pulumi_vault/ad/secret_library.py +2 -4
pulumi_vault/ad/secret_role.py +0 -4
pulumi_vault/alicloud/auth_backend_role.py +69 -192
pulumi_vault/approle/auth_backend_login.py +0 -4
pulumi_vault/approle/auth_backend_role.py +63 -186
pulumi_vault/approle/auth_backend_role_secret_id.py +0 -4
pulumi_vault/approle/get_auth_backend_role_id.py +0 -4
pulumi_vault/audit.py +12 -20
pulumi_vault/audit_request_header.py +6 -6
pulumi_vault/aws/auth_backend_client.py +6 -10
pulumi_vault/aws/auth_backend_config_identity.py +0 -4
pulumi_vault/aws/auth_backend_identity_whitelist.py +6 -10
pulumi_vault/aws/auth_backend_login.py +0 -8
pulumi_vault/aws/auth_backend_role.py +63 -186
pulumi_vault/aws/auth_backend_roletag_blacklist.py +6 -10
pulumi_vault/aws/auth_backend_sts_role.py +0 -4
pulumi_vault/aws/secret_backend.py +63 -0
pulumi_vault/aws/secret_backend_role.py +2 -4
pulumi_vault/aws/secret_backend_static_role.py +2 -4
pulumi_vault/azure/auth_backend_config.py +6 -10
pulumi_vault/azure/auth_backend_role.py +63 -186
pulumi_vault/azure/backend.py +16 -24
pulumi_vault/azure/backend_role.py +14 -18
pulumi_vault/azure/get_access_credentials.py +0 -4
pulumi_vault/cert_auth_backend_role.py +75 -208
pulumi_vault/consul/secret_backend.py +10 -18
pulumi_vault/consul/secret_backend_role.py +2 -4
pulumi_vault/database/_inputs.py +522 -784
pulumi_vault/database/outputs.py +522 -784
pulumi_vault/database/secret_backend_connection.py +2 -4
pulumi_vault/database/secret_backend_role.py +4 -4
pulumi_vault/database/secret_backend_static_role.py +10 -8
pulumi_vault/database/secrets_mount.py +4 -4
pulumi_vault/egp_policy.py +4 -8
pulumi_vault/gcp/auth_backend.py +0 -36
pulumi_vault/gcp/auth_backend_role.py +63 -264
pulumi_vault/gcp/get_auth_backend_role.py +0 -4
pulumi_vault/gcp/secret_backend.py +4 -6
pulumi_vault/gcp/secret_impersonated_account.py +12 -14
pulumi_vault/gcp/secret_roleset.py +4 -6
pulumi_vault/gcp/secret_static_account.py +14 -16
pulumi_vault/generic/endpoint.py +4 -8
pulumi_vault/generic/get_secret.py +40 -4
pulumi_vault/get_auth_backend.py +0 -4
pulumi_vault/get_auth_backends.py +0 -8
pulumi_vault/get_namespace.py +0 -12
pulumi_vault/get_namespaces.py +4 -12
pulumi_vault/get_nomad_access_token.py +0 -4
pulumi_vault/get_policy_document.py +8 -8
pulumi_vault/get_raft_autopilot_state.py +0 -4
pulumi_vault/github/auth_backend.py +0 -4
pulumi_vault/github/team.py +2 -6
pulumi_vault/github/user.py +2 -6
pulumi_vault/identity/entity.py +6 -8
pulumi_vault/identity/entity_alias.py +6 -8
pulumi_vault/identity/entity_policies.py +12 -12
pulumi_vault/identity/get_entity.py +0 -4
pulumi_vault/identity/get_group.py +0 -4
pulumi_vault/identity/get_oidc_client_creds.py +2 -4
pulumi_vault/identity/get_oidc_openid_config.py +10 -6
pulumi_vault/identity/get_oidc_public_keys.py +10 -6
pulumi_vault/identity/group.py +38 -42
pulumi_vault/identity/group_alias.py +2 -4
pulumi_vault/identity/group_member_entity_ids.py +12 -16
pulumi_vault/identity/group_member_group_ids.py +24 -20
pulumi_vault/identity/group_policies.py +4 -8
pulumi_vault/identity/mfa_duo.py +4 -8
pulumi_vault/identity/mfa_login_enforcement.py +8 -8
pulumi_vault/identity/mfa_okta.py +4 -8
pulumi_vault/identity/mfa_pingid.py +0 -4
pulumi_vault/identity/mfa_totp.py +0 -4
pulumi_vault/identity/oidc.py +0 -4
pulumi_vault/identity/oidc_assignment.py +10 -6
pulumi_vault/identity/oidc_client.py +10 -10
pulumi_vault/identity/oidc_key.py +16 -12
pulumi_vault/identity/oidc_key_allowed_client_id.py +16 -12
pulumi_vault/identity/oidc_provider.py +22 -16
pulumi_vault/identity/oidc_role.py +28 -20
pulumi_vault/identity/oidc_scope.py +6 -8
pulumi_vault/jwt/auth_backend.py +20 -32
pulumi_vault/jwt/auth_backend_role.py +63 -190
pulumi_vault/kmip/secret_backend.py +10 -14
pulumi_vault/kmip/secret_role.py +0 -4
pulumi_vault/kmip/secret_scope.py +0 -4
pulumi_vault/kubernetes/auth_backend_config.py +0 -4
pulumi_vault/kubernetes/auth_backend_role.py +56 -172
pulumi_vault/kubernetes/get_service_account_token.py +8 -8
pulumi_vault/kubernetes/secret_backend.py +6 -8
pulumi_vault/kubernetes/secret_backend_role.py +24 -24
pulumi_vault/kv/get_secret.py +0 -4
pulumi_vault/kv/get_secret_subkeys_v2.py +4 -6
pulumi_vault/kv/get_secret_v2.py +58 -0
pulumi_vault/kv/get_secrets_list.py +4 -8
pulumi_vault/kv/get_secrets_list_v2.py +14 -12
pulumi_vault/kv/secret.py +0 -4
pulumi_vault/kv/secret_backend_v2.py +0 -4
pulumi_vault/kv/secret_v2.py +2 -4
pulumi_vault/ldap/auth_backend.py +66 -161
pulumi_vault/ldap/auth_backend_group.py +0 -4
pulumi_vault/ldap/auth_backend_user.py +0 -4
pulumi_vault/ldap/secret_backend.py +4 -8
pulumi_vault/ldap/secret_backend_dynamic_role.py +0 -4
pulumi_vault/ldap/secret_backend_library_set.py +2 -4
pulumi_vault/ldap/secret_backend_static_role.py +0 -4
pulumi_vault/managed/_inputs.py +84 -132
pulumi_vault/managed/keys.py +7 -28
pulumi_vault/managed/outputs.py +84 -132
pulumi_vault/mfa_duo.py +4 -6
pulumi_vault/mfa_okta.py +4 -6
pulumi_vault/mfa_pingid.py +4 -6
pulumi_vault/mfa_totp.py +10 -12
pulumi_vault/mongodbatlas/secret_backend.py +0 -4
pulumi_vault/mongodbatlas/secret_role.py +2 -4
pulumi_vault/mount.py +26 -42
pulumi_vault/nomad_secret_backend.py +4 -8
pulumi_vault/nomad_secret_role.py +0 -4
pulumi_vault/okta/_inputs.py +8 -8
pulumi_vault/okta/auth_backend.py +6 -10
pulumi_vault/okta/auth_backend_group.py +0 -4
pulumi_vault/okta/auth_backend_user.py +0 -4
pulumi_vault/okta/outputs.py +8 -8
pulumi_vault/outputs.py +0 -20
pulumi_vault/password_policy.py +6 -8
pulumi_vault/pkisecret/backend_config_cluster.py +0 -4
pulumi_vault/pkisecret/get_backend_issuer.py +36 -0
pulumi_vault/pkisecret/get_backend_issuers.py +0 -4
pulumi_vault/pkisecret/get_backend_key.py +2 -6
pulumi_vault/pkisecret/get_backend_keys.py +0 -4
pulumi_vault/pkisecret/secret_backend_cert.py +6 -8
pulumi_vault/pkisecret/secret_backend_config_ca.py +4 -8
pulumi_vault/pkisecret/secret_backend_config_issuers.py +0 -4
pulumi_vault/pkisecret/secret_backend_config_urls.py +0 -4
pulumi_vault/pkisecret/secret_backend_crl_config.py +2 -6
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +4 -8
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +10 -14
pulumi_vault/pkisecret/secret_backend_issuer.py +0 -4
pulumi_vault/pkisecret/secret_backend_role.py +2 -4
pulumi_vault/pkisecret/secret_backend_root_cert.py +4 -8
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +6 -10
pulumi_vault/pkisecret/secret_backend_sign.py +6 -8
pulumi_vault/provider.py +0 -8
pulumi_vault/pulumi-plugin.json +2 -1
pulumi_vault/quota_lease_count.py +6 -8
pulumi_vault/quota_rate_limit.py +2 -4
pulumi_vault/rabbitmq/secret_backend.py +4 -8
pulumi_vault/rabbitmq/secret_backend_role.py +2 -4
pulumi_vault/raft_autopilot.py +0 -4
pulumi_vault/raft_snapshot_agent_config.py +109 -304
pulumi_vault/rgp_policy.py +2 -6
pulumi_vault/saml/auth_backend.py +8 -12
pulumi_vault/saml/auth_backend_role.py +64 -178
pulumi_vault/secrets/sync_association.py +12 -10
pulumi_vault/secrets/sync_aws_destination.py +6 -8
pulumi_vault/secrets/sync_azure_destination.py +10 -12
pulumi_vault/secrets/sync_config.py +2 -6
pulumi_vault/secrets/sync_gcp_destination.py +6 -6
pulumi_vault/secrets/sync_gh_destination.py +6 -8
pulumi_vault/secrets/sync_github_apps.py +8 -8
pulumi_vault/secrets/sync_vercel_destination.py +6 -8
pulumi_vault/ssh/_inputs.py +6 -32
pulumi_vault/ssh/outputs.py +6 -32
pulumi_vault/ssh/secret_backend_ca.py +0 -4
pulumi_vault/ssh/secret_backend_role.py +4 -4
pulumi_vault/terraformcloud/secret_backend.py +0 -56
pulumi_vault/terraformcloud/secret_creds.py +2 -17
pulumi_vault/terraformcloud/secret_role.py +2 -69
pulumi_vault/token.py +14 -18
pulumi_vault/tokenauth/auth_backend_role.py +64 -180
pulumi_vault/transform/alphabet.py +4 -6
pulumi_vault/transform/get_decode.py +4 -4
pulumi_vault/transform/get_encode.py +4 -4
pulumi_vault/transform/role.py +4 -6
pulumi_vault/transform/template.py +4 -4
pulumi_vault/transit/get_decrypt.py +4 -20
pulumi_vault/transit/get_encrypt.py +0 -14
pulumi_vault/transit/secret_backend_key.py +6 -6
pulumi_vault/transit/secret_cache_config.py +0 -4
{pulumi_vault-6.1.0a1712233015.dist-info → pulumi_vault-6.1.1.dist-info}/METADATA +1 -1
pulumi_vault-6.1.1.dist-info/RECORD +252 -0
pulumi_vault-6.1.0a1712233015.dist-info/RECORD +0 -252
{pulumi_vault-6.1.0a1712233015.dist-info → pulumi_vault-6.1.1.dist-info}/WHEEL +0 -0
{pulumi_vault-6.1.0a1712233015.dist-info → pulumi_vault-6.1.1.dist-info}/top_level.txt +0 -0

pulumi_vault/jwt/auth_backend_role.py CHANGED Viewed

@@ -89,32 +89,15 @@ class AuthBackendRoleArgs:
         :param pulumi.Input[Sequence[pulumi.Input[str]]] oidc_scopes: If set, a list of OIDC scopes to be used with an OIDC role.
                The standard scope "openid" is automatically included and need not be specified.
         :param pulumi.Input[str] role_type: Type of role, either "oidc" (default) or "jwt".
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
-               addresses which can authenticate successfully, and ties the resulting token to these blocks
-               as well.
-        :param pulumi.Input[int] token_explicit_max_ttl: If set, will encode an
-               [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
-               onto the token in number of seconds. This is a hard cap even if `token_ttl` and
-               `token_max_ttl` would otherwise allow a renewal.
-        :param pulumi.Input[int] token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
-               Its current value will be referenced at renewal time.
-        :param pulumi.Input[bool] token_no_default_policy: If set, the default policy will not be set on
-               generated tokens; otherwise it will be added to the policies set in token_policies.
-        :param pulumi.Input[int] token_num_uses: The [maximum number](https://www.vaultproject.io/api-docs/jwt#token_num_uses)
-               of times a generated token may be used (within its lifetime); 0 means unlimited.
-        :param pulumi.Input[int] token_period: If set, indicates that the
-               token generated using this role should never expire. The token should be renewed within the
-               duration specified by this value. At each renewal, the token's TTL will be set to the
-               value of this field. Specified in seconds.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: List of policies to encode onto generated tokens. Depending
-               on the auth method, this list may be supplemented by user/group/other values.
-        :param pulumi.Input[int] token_ttl: The incremental lifetime for generated tokens in number of seconds.
-               Its current value will be referenced at renewal time.
-        :param pulumi.Input[str] token_type: The type of token that should be generated. Can be `service`,
-               `batch`, or `default` to use the mount's tuned default (which unless changed will be
-               `service` tokens). For token store roles, there are two additional possibilities:
-               `default-service` and `default-batch` which specify the type to return unless the client
-               requests a different type at generation time.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
+        :param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
+        :param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
+        :param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
+        :param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
+        :param pulumi.Input[int] token_period: Generated Token's Period
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
+        :param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
+        :param pulumi.Input[str] token_type: The type of token to generate, service or batch
         :param pulumi.Input[bool] user_claim_json_pointer: Specifies if the `user_claim` value uses
                [JSON pointer](https://www.vaultproject.io/docs/auth/jwt#claim-specifications-and-json-pointer)
                syntax for referencing claims. By default, the `user_claim` value will not use JSON pointer.
@@ -426,9 +409,7 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenBoundCidrs")
     def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        List of CIDR blocks; if set, specifies blocks of IP
-        addresses which can authenticate successfully, and ties the resulting token to these blocks
-        as well.
+        Specifies the blocks of IP addresses which are allowed to use the generated token
         """
         return pulumi.get(self, "token_bound_cidrs")
@@ -440,10 +421,7 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenExplicitMaxTtl")
     def token_explicit_max_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        If set, will encode an
-        [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
-        onto the token in number of seconds. This is a hard cap even if `token_ttl` and
-        `token_max_ttl` would otherwise allow a renewal.
+        Generated Token's Explicit Maximum TTL in seconds
         """
         return pulumi.get(self, "token_explicit_max_ttl")
@@ -455,8 +433,7 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenMaxTtl")
     def token_max_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum lifetime for generated tokens in number of seconds.
-        Its current value will be referenced at renewal time.
+        The maximum lifetime of the generated token
         """
         return pulumi.get(self, "token_max_ttl")
@@ -468,8 +445,7 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenNoDefaultPolicy")
     def token_no_default_policy(self) -> Optional[pulumi.Input[bool]]:
         """
-        If set, the default policy will not be set on
-        generated tokens; otherwise it will be added to the policies set in token_policies.
+        If true, the 'default' policy will not automatically be added to generated tokens
         """
         return pulumi.get(self, "token_no_default_policy")
@@ -481,8 +457,7 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenNumUses")
     def token_num_uses(self) -> Optional[pulumi.Input[int]]:
         """
-        The [maximum number](https://www.vaultproject.io/api-docs/jwt#token_num_uses)
-        of times a generated token may be used (within its lifetime); 0 means unlimited.
+        The maximum number of times a token may be used, a value of zero means unlimited
         """
         return pulumi.get(self, "token_num_uses")
@@ -494,10 +469,7 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenPeriod")
     def token_period(self) -> Optional[pulumi.Input[int]]:
         """
-        If set, indicates that the
-        token generated using this role should never expire. The token should be renewed within the
-        duration specified by this value. At each renewal, the token's TTL will be set to the
-        value of this field. Specified in seconds.
+        Generated Token's Period
         """
         return pulumi.get(self, "token_period")
@@ -509,8 +481,7 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenPolicies")
     def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        List of policies to encode onto generated tokens. Depending
-        on the auth method, this list may be supplemented by user/group/other values.
+        Generated Token's Policies
         """
         return pulumi.get(self, "token_policies")
@@ -522,8 +493,7 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenTtl")
     def token_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        The incremental lifetime for generated tokens in number of seconds.
-        Its current value will be referenced at renewal time.
+        The initial ttl of the token to generate in seconds
         """
         return pulumi.get(self, "token_ttl")
@@ -535,11 +505,7 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenType")
     def token_type(self) -> Optional[pulumi.Input[str]]:
         """
-        The type of token that should be generated. Can be `service`,
-        `batch`, or `default` to use the mount's tuned default (which unless changed will be
-        `service` tokens). For token store roles, there are two additional possibilities:
-        `default-service` and `default-batch` which specify the type to return unless the client
-        requests a different type at generation time.
+        The type of token to generate, service or batch
         """
         return pulumi.get(self, "token_type")
@@ -652,32 +618,15 @@ class _AuthBackendRoleState:
                The standard scope "openid" is automatically included and need not be specified.
         :param pulumi.Input[str] role_name: The name of the role.
         :param pulumi.Input[str] role_type: Type of role, either "oidc" (default) or "jwt".
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
-               addresses which can authenticate successfully, and ties the resulting token to these blocks
-               as well.
-        :param pulumi.Input[int] token_explicit_max_ttl: If set, will encode an
-               [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
-               onto the token in number of seconds. This is a hard cap even if `token_ttl` and
-               `token_max_ttl` would otherwise allow a renewal.
-        :param pulumi.Input[int] token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
-               Its current value will be referenced at renewal time.
-        :param pulumi.Input[bool] token_no_default_policy: If set, the default policy will not be set on
-               generated tokens; otherwise it will be added to the policies set in token_policies.
-        :param pulumi.Input[int] token_num_uses: The [maximum number](https://www.vaultproject.io/api-docs/jwt#token_num_uses)
-               of times a generated token may be used (within its lifetime); 0 means unlimited.
-        :param pulumi.Input[int] token_period: If set, indicates that the
-               token generated using this role should never expire. The token should be renewed within the
-               duration specified by this value. At each renewal, the token's TTL will be set to the
-               value of this field. Specified in seconds.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: List of policies to encode onto generated tokens. Depending
-               on the auth method, this list may be supplemented by user/group/other values.
-        :param pulumi.Input[int] token_ttl: The incremental lifetime for generated tokens in number of seconds.
-               Its current value will be referenced at renewal time.
-        :param pulumi.Input[str] token_type: The type of token that should be generated. Can be `service`,
-               `batch`, or `default` to use the mount's tuned default (which unless changed will be
-               `service` tokens). For token store roles, there are two additional possibilities:
-               `default-service` and `default-batch` which specify the type to return unless the client
-               requests a different type at generation time.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
+        :param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
+        :param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
+        :param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
+        :param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
+        :param pulumi.Input[int] token_period: Generated Token's Period
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
+        :param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
+        :param pulumi.Input[str] token_type: The type of token to generate, service or batch
         :param pulumi.Input[str] user_claim: The claim to use to uniquely identify
                the user; this will be used as the name for the Identity entity alias created
                due to a successful login.
@@ -980,9 +929,7 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenBoundCidrs")
     def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        List of CIDR blocks; if set, specifies blocks of IP
-        addresses which can authenticate successfully, and ties the resulting token to these blocks
-        as well.
+        Specifies the blocks of IP addresses which are allowed to use the generated token
         """
         return pulumi.get(self, "token_bound_cidrs")
@@ -994,10 +941,7 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenExplicitMaxTtl")
     def token_explicit_max_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        If set, will encode an
-        [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
-        onto the token in number of seconds. This is a hard cap even if `token_ttl` and
-        `token_max_ttl` would otherwise allow a renewal.
+        Generated Token's Explicit Maximum TTL in seconds
         """
         return pulumi.get(self, "token_explicit_max_ttl")
@@ -1009,8 +953,7 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenMaxTtl")
     def token_max_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum lifetime for generated tokens in number of seconds.
-        Its current value will be referenced at renewal time.
+        The maximum lifetime of the generated token
         """
         return pulumi.get(self, "token_max_ttl")
@@ -1022,8 +965,7 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenNoDefaultPolicy")
     def token_no_default_policy(self) -> Optional[pulumi.Input[bool]]:
         """
-        If set, the default policy will not be set on
-        generated tokens; otherwise it will be added to the policies set in token_policies.
+        If true, the 'default' policy will not automatically be added to generated tokens
         """
         return pulumi.get(self, "token_no_default_policy")
@@ -1035,8 +977,7 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenNumUses")
     def token_num_uses(self) -> Optional[pulumi.Input[int]]:
         """
-        The [maximum number](https://www.vaultproject.io/api-docs/jwt#token_num_uses)
-        of times a generated token may be used (within its lifetime); 0 means unlimited.
+        The maximum number of times a token may be used, a value of zero means unlimited
         """
         return pulumi.get(self, "token_num_uses")
@@ -1048,10 +989,7 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenPeriod")
     def token_period(self) -> Optional[pulumi.Input[int]]:
         """
-        If set, indicates that the
-        token generated using this role should never expire. The token should be renewed within the
-        duration specified by this value. At each renewal, the token's TTL will be set to the
-        value of this field. Specified in seconds.
+        Generated Token's Period
         """
         return pulumi.get(self, "token_period")
@@ -1063,8 +1001,7 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenPolicies")
     def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        List of policies to encode onto generated tokens. Depending
-        on the auth method, this list may be supplemented by user/group/other values.
+        Generated Token's Policies
         """
         return pulumi.get(self, "token_policies")
@@ -1076,8 +1013,7 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenTtl")
     def token_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        The incremental lifetime for generated tokens in number of seconds.
-        Its current value will be referenced at renewal time.
+        The initial ttl of the token to generate in seconds
         """
         return pulumi.get(self, "token_ttl")
@@ -1089,11 +1025,7 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenType")
     def token_type(self) -> Optional[pulumi.Input[str]]:
         """
-        The type of token that should be generated. Can be `service`,
-        `batch`, or `default` to use the mount's tuned default (which unless changed will be
-        `service` tokens). For token store roles, there are two additional possibilities:
-        `default-service` and `default-batch` which specify the type to return unless the client
-        requests a different type at generation time.
+        The type of token to generate, service or batch
         """
         return pulumi.get(self, "token_type")
@@ -1189,7 +1121,6 @@ class AuthBackendRole(pulumi.CustomResource):
         Role for JWT backend:
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -1210,11 +1141,9 @@ class AuthBackendRole(pulumi.CustomResource):
             user_claim="https://vault/user",
             role_type="jwt")
         ```
-        <!--End PulumiCodeChooser -->
         Role for OIDC backend:
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -1234,7 +1163,6 @@ class AuthBackendRole(pulumi.CustomResource):
             role_type="oidc",
             allowed_redirect_uris=["http://localhost:8200/ui/vault/auth/oidc/oidc/callback"])
         ```
-        <!--End PulumiCodeChooser -->
         ## Import
@@ -1287,32 +1215,15 @@ class AuthBackendRole(pulumi.CustomResource):
                The standard scope "openid" is automatically included and need not be specified.
         :param pulumi.Input[str] role_name: The name of the role.
         :param pulumi.Input[str] role_type: Type of role, either "oidc" (default) or "jwt".
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
-               addresses which can authenticate successfully, and ties the resulting token to these blocks
-               as well.
-        :param pulumi.Input[int] token_explicit_max_ttl: If set, will encode an
-               [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
-               onto the token in number of seconds. This is a hard cap even if `token_ttl` and
-               `token_max_ttl` would otherwise allow a renewal.
-        :param pulumi.Input[int] token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
-               Its current value will be referenced at renewal time.
-        :param pulumi.Input[bool] token_no_default_policy: If set, the default policy will not be set on
-               generated tokens; otherwise it will be added to the policies set in token_policies.
-        :param pulumi.Input[int] token_num_uses: The [maximum number](https://www.vaultproject.io/api-docs/jwt#token_num_uses)
-               of times a generated token may be used (within its lifetime); 0 means unlimited.
-        :param pulumi.Input[int] token_period: If set, indicates that the
-               token generated using this role should never expire. The token should be renewed within the
-               duration specified by this value. At each renewal, the token's TTL will be set to the
-               value of this field. Specified in seconds.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: List of policies to encode onto generated tokens. Depending
-               on the auth method, this list may be supplemented by user/group/other values.
-        :param pulumi.Input[int] token_ttl: The incremental lifetime for generated tokens in number of seconds.
-               Its current value will be referenced at renewal time.
-        :param pulumi.Input[str] token_type: The type of token that should be generated. Can be `service`,
-               `batch`, or `default` to use the mount's tuned default (which unless changed will be
-               `service` tokens). For token store roles, there are two additional possibilities:
-               `default-service` and `default-batch` which specify the type to return unless the client
-               requests a different type at generation time.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
+        :param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
+        :param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
+        :param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
+        :param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
+        :param pulumi.Input[int] token_period: Generated Token's Period
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
+        :param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
+        :param pulumi.Input[str] token_type: The type of token to generate, service or batch
         :param pulumi.Input[str] user_claim: The claim to use to uniquely identify
                the user; this will be used as the name for the Identity entity alias created
                due to a successful login.
@@ -1339,7 +1250,6 @@ class AuthBackendRole(pulumi.CustomResource):
         Role for JWT backend:
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -1360,11 +1270,9 @@ class AuthBackendRole(pulumi.CustomResource):
             user_claim="https://vault/user",
             role_type="jwt")
         ```
-        <!--End PulumiCodeChooser -->
         Role for OIDC backend:
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -1384,7 +1292,6 @@ class AuthBackendRole(pulumi.CustomResource):
             role_type="oidc",
             allowed_redirect_uris=["http://localhost:8200/ui/vault/auth/oidc/oidc/callback"])
         ```
-        <!--End PulumiCodeChooser -->
         ## Import
@@ -1567,32 +1474,15 @@ class AuthBackendRole(pulumi.CustomResource):
                The standard scope "openid" is automatically included and need not be specified.
         :param pulumi.Input[str] role_name: The name of the role.
         :param pulumi.Input[str] role_type: Type of role, either "oidc" (default) or "jwt".
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
-               addresses which can authenticate successfully, and ties the resulting token to these blocks
-               as well.
-        :param pulumi.Input[int] token_explicit_max_ttl: If set, will encode an
-               [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
-               onto the token in number of seconds. This is a hard cap even if `token_ttl` and
-               `token_max_ttl` would otherwise allow a renewal.
-        :param pulumi.Input[int] token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
-               Its current value will be referenced at renewal time.
-        :param pulumi.Input[bool] token_no_default_policy: If set, the default policy will not be set on
-               generated tokens; otherwise it will be added to the policies set in token_policies.
-        :param pulumi.Input[int] token_num_uses: The [maximum number](https://www.vaultproject.io/api-docs/jwt#token_num_uses)
-               of times a generated token may be used (within its lifetime); 0 means unlimited.
-        :param pulumi.Input[int] token_period: If set, indicates that the
-               token generated using this role should never expire. The token should be renewed within the
-               duration specified by this value. At each renewal, the token's TTL will be set to the
-               value of this field. Specified in seconds.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: List of policies to encode onto generated tokens. Depending
-               on the auth method, this list may be supplemented by user/group/other values.
-        :param pulumi.Input[int] token_ttl: The incremental lifetime for generated tokens in number of seconds.
-               Its current value will be referenced at renewal time.
-        :param pulumi.Input[str] token_type: The type of token that should be generated. Can be `service`,
-               `batch`, or `default` to use the mount's tuned default (which unless changed will be
-               `service` tokens). For token store roles, there are two additional possibilities:
-               `default-service` and `default-batch` which specify the type to return unless the client
-               requests a different type at generation time.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
+        :param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
+        :param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
+        :param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
+        :param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
+        :param pulumi.Input[int] token_period: Generated Token's Period
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
+        :param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
+        :param pulumi.Input[str] token_type: The type of token to generate, service or batch
         :param pulumi.Input[str] user_claim: The claim to use to uniquely identify
                the user; this will be used as the name for the Identity entity alias created
                due to a successful login.
@@ -1803,9 +1693,7 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenBoundCidrs")
     def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        List of CIDR blocks; if set, specifies blocks of IP
-        addresses which can authenticate successfully, and ties the resulting token to these blocks
-        as well.
+        Specifies the blocks of IP addresses which are allowed to use the generated token
         """
         return pulumi.get(self, "token_bound_cidrs")
@@ -1813,10 +1701,7 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenExplicitMaxTtl")
     def token_explicit_max_ttl(self) -> pulumi.Output[Optional[int]]:
         """
-        If set, will encode an
-        [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
-        onto the token in number of seconds. This is a hard cap even if `token_ttl` and
-        `token_max_ttl` would otherwise allow a renewal.
+        Generated Token's Explicit Maximum TTL in seconds
         """
         return pulumi.get(self, "token_explicit_max_ttl")
@@ -1824,8 +1709,7 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenMaxTtl")
     def token_max_ttl(self) -> pulumi.Output[Optional[int]]:
         """
-        The maximum lifetime for generated tokens in number of seconds.
-        Its current value will be referenced at renewal time.
+        The maximum lifetime of the generated token
         """
         return pulumi.get(self, "token_max_ttl")
@@ -1833,8 +1717,7 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenNoDefaultPolicy")
     def token_no_default_policy(self) -> pulumi.Output[Optional[bool]]:
         """
-        If set, the default policy will not be set on
-        generated tokens; otherwise it will be added to the policies set in token_policies.
+        If true, the 'default' policy will not automatically be added to generated tokens
         """
         return pulumi.get(self, "token_no_default_policy")
@@ -1842,8 +1725,7 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenNumUses")
     def token_num_uses(self) -> pulumi.Output[Optional[int]]:
         """
-        The [maximum number](https://www.vaultproject.io/api-docs/jwt#token_num_uses)
-        of times a generated token may be used (within its lifetime); 0 means unlimited.
+        The maximum number of times a token may be used, a value of zero means unlimited
         """
         return pulumi.get(self, "token_num_uses")
@@ -1851,10 +1733,7 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenPeriod")
     def token_period(self) -> pulumi.Output[Optional[int]]:
         """
-        If set, indicates that the
-        token generated using this role should never expire. The token should be renewed within the
-        duration specified by this value. At each renewal, the token's TTL will be set to the
-        value of this field. Specified in seconds.
+        Generated Token's Period
         """
         return pulumi.get(self, "token_period")
@@ -1862,8 +1741,7 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenPolicies")
     def token_policies(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        List of policies to encode onto generated tokens. Depending
-        on the auth method, this list may be supplemented by user/group/other values.
+        Generated Token's Policies
         """
         return pulumi.get(self, "token_policies")
@@ -1871,8 +1749,7 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenTtl")
     def token_ttl(self) -> pulumi.Output[Optional[int]]:
         """
-        The incremental lifetime for generated tokens in number of seconds.
-        Its current value will be referenced at renewal time.
+        The initial ttl of the token to generate in seconds
         """
         return pulumi.get(self, "token_ttl")
@@ -1880,11 +1757,7 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenType")
     def token_type(self) -> pulumi.Output[Optional[str]]:
         """
-        The type of token that should be generated. Can be `service`,
-        `batch`, or `default` to use the mount's tuned default (which unless changed will be
-        `service` tokens). For token store roles, there are two additional possibilities:
-        `default-service` and `default-batch` which specify the type to return unless the client
-        requests a different type at generation time.
+        The type of token to generate, service or batch
         """
         return pulumi.get(self, "token_type")

pulumi_vault/kmip/secret_backend.py CHANGED Viewed

@@ -488,25 +488,23 @@ class SecretBackend(pulumi.CustomResource):
         ## Example Usage
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         default = vault.kmip.SecretBackend("default",
-            default_tls_client_key_bits=4096,
-            default_tls_client_key_type="rsa",
-            default_tls_client_ttl=86400,
+            path="kmip",
             description="Vault KMIP backend",
             listen_addrs=[
                 "127.0.0.1:5696",
                 "127.0.0.1:8080",
             ],
-            path="kmip",
+            tls_ca_key_type="rsa",
             tls_ca_key_bits=4096,
-            tls_ca_key_type="rsa")
+            default_tls_client_key_type="rsa",
+            default_tls_client_key_bits=4096,
+            default_tls_client_ttl=86400)
         ```
-        <!--End PulumiCodeChooser -->
         ## Import
@@ -550,25 +548,23 @@ class SecretBackend(pulumi.CustomResource):
         ## Example Usage
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         default = vault.kmip.SecretBackend("default",
-            default_tls_client_key_bits=4096,
-            default_tls_client_key_type="rsa",
-            default_tls_client_ttl=86400,
+            path="kmip",
             description="Vault KMIP backend",
             listen_addrs=[
                 "127.0.0.1:5696",
                 "127.0.0.1:8080",
             ],
-            path="kmip",
+            tls_ca_key_type="rsa",
             tls_ca_key_bits=4096,
-            tls_ca_key_type="rsa")
+            default_tls_client_key_type="rsa",
+            default_tls_client_key_bits=4096,
+            default_tls_client_ttl=86400)
         ```
-        <!--End PulumiCodeChooser -->
         ## Import

pulumi_vault/kmip/secret_role.py CHANGED Viewed

@@ -746,7 +746,6 @@ class SecretRole(pulumi.CustomResource):
         ## Example Usage
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -770,7 +769,6 @@ class SecretRole(pulumi.CustomResource):
             operation_create=True,
             operation_destroy=True)
         ```
-        <!--End PulumiCodeChooser -->
         ## Import
@@ -821,7 +819,6 @@ class SecretRole(pulumi.CustomResource):
         ## Example Usage
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -845,7 +842,6 @@ class SecretRole(pulumi.CustomResource):
             operation_create=True,
             operation_destroy=True)
         ```
-        <!--End PulumiCodeChooser -->
         ## Import

pulumi_vault/kmip/secret_scope.py CHANGED Viewed

@@ -186,7 +186,6 @@ class SecretScope(pulumi.CustomResource):
         ## Example Usage
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -199,7 +198,6 @@ class SecretScope(pulumi.CustomResource):
             scope="dev",
             force=True)
         ```
-        <!--End PulumiCodeChooser -->
         ## Import
@@ -233,7 +231,6 @@ class SecretScope(pulumi.CustomResource):
         ## Example Usage
-        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
@@ -246,7 +243,6 @@ class SecretScope(pulumi.CustomResource):
             scope="dev",
             force=True)
         ```
-        <!--End PulumiCodeChooser -->
         ## Import

pulumi-vault 6.1.0a1712233015__py3-none-any.whl → 6.1.1__py3-none-any.whl

pulumi-vault 6.1.0a1712233015py3-none-any.whl → 6.1.1py3-none-any.whl