pulumi-vault 6.1.1__py3-none-any.whl → 6.2.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +26 -0
- pulumi_vault/auth_backend.py +47 -0
- pulumi_vault/aws/auth_backend_client.py +247 -7
- pulumi_vault/aws/secret_backend_role.py +54 -0
- pulumi_vault/azure/auth_backend_config.py +133 -0
- pulumi_vault/azure/backend.py +203 -0
- pulumi_vault/database/secrets_mount.py +282 -0
- pulumi_vault/gcp/auth_backend.py +244 -0
- pulumi_vault/gcp/secret_backend.py +271 -3
- pulumi_vault/jwt/auth_backend_role.py +28 -35
- pulumi_vault/kubernetes/secret_backend.py +282 -0
- pulumi_vault/ldap/secret_backend.py +282 -0
- pulumi_vault/mount.py +324 -0
- pulumi_vault/okta/auth_backend.py +453 -0
- pulumi_vault/pkisecret/__init__.py +2 -0
- pulumi_vault/pkisecret/_inputs.py +30 -0
- pulumi_vault/pkisecret/backend_config_est.py +614 -0
- pulumi_vault/pkisecret/get_backend_config_est.py +233 -0
- pulumi_vault/pkisecret/outputs.py +54 -0
- pulumi_vault/plugin.py +590 -0
- pulumi_vault/plugin_pinned_version.py +293 -0
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +47 -0
- pulumi_vault/quota_rate_limit.py +47 -0
- pulumi_vault/ssh/secret_backend_ca.py +94 -0
- {pulumi_vault-6.1.1.dist-info → pulumi_vault-6.2.0.dist-info}/METADATA +1 -1
- {pulumi_vault-6.1.1.dist-info → pulumi_vault-6.2.0.dist-info}/RECORD +29 -25
- {pulumi_vault-6.1.1.dist-info → pulumi_vault-6.2.0.dist-info}/WHEEL +1 -1
- {pulumi_vault-6.1.1.dist-info → pulumi_vault-6.2.0.dist-info}/top_level.txt +0 -0
|
@@ -18,16 +18,20 @@ class SecretsMountArgs:
|
|
|
18
18
|
def __init__(__self__, *,
|
|
19
19
|
path: pulumi.Input[str],
|
|
20
20
|
allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
21
|
+
allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
21
22
|
audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
22
23
|
audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
23
24
|
cassandras: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountCassandraArgs']]]] = None,
|
|
24
25
|
couchbases: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountCouchbaseArgs']]]] = None,
|
|
25
26
|
default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
27
|
+
delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
26
28
|
description: Optional[pulumi.Input[str]] = None,
|
|
27
29
|
elasticsearches: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountElasticsearchArgs']]]] = None,
|
|
28
30
|
external_entropy_access: Optional[pulumi.Input[bool]] = None,
|
|
29
31
|
hanas: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountHanaArgs']]]] = None,
|
|
32
|
+
identity_token_key: Optional[pulumi.Input[str]] = None,
|
|
30
33
|
influxdbs: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountInfluxdbArgs']]]] = None,
|
|
34
|
+
listing_visibility: Optional[pulumi.Input[str]] = None,
|
|
31
35
|
local: Optional[pulumi.Input[bool]] = None,
|
|
32
36
|
max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
33
37
|
mongodbatlas: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountMongodbatlaArgs']]]] = None,
|
|
@@ -40,6 +44,8 @@ class SecretsMountArgs:
|
|
|
40
44
|
namespace: Optional[pulumi.Input[str]] = None,
|
|
41
45
|
options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
|
|
42
46
|
oracles: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountOracleArgs']]]] = None,
|
|
47
|
+
passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
48
|
+
plugin_version: Optional[pulumi.Input[str]] = None,
|
|
43
49
|
postgresqls: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountPostgresqlArgs']]]] = None,
|
|
44
50
|
redis: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountRediArgs']]]] = None,
|
|
45
51
|
redis_elasticaches: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountRedisElasticachArgs']]]] = None,
|
|
@@ -52,6 +58,7 @@ class SecretsMountArgs:
|
|
|
52
58
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_managed_keys: Set of managed key registry entry names that the mount in question is allowed to access
|
|
53
59
|
|
|
54
60
|
The following arguments are common to all database engines:
|
|
61
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_response_headers: List of headers to allow and pass from the request to the plugin
|
|
55
62
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
56
63
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
|
|
57
64
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountCassandraArgs']]] cassandras: A nested block containing configuration options for Cassandra connections.
|
|
@@ -59,14 +66,17 @@ class SecretsMountArgs:
|
|
|
59
66
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountCouchbaseArgs']]] couchbases: A nested block containing configuration options for Couchbase connections.
|
|
60
67
|
*See Configuration Options for more info*
|
|
61
68
|
:param pulumi.Input[int] default_lease_ttl_seconds: Default lease duration for tokens and secrets in seconds
|
|
69
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] delegated_auth_accessors: List of headers to allow and pass from the request to the plugin
|
|
62
70
|
:param pulumi.Input[str] description: Human-friendly description of the mount
|
|
63
71
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountElasticsearchArgs']]] elasticsearches: A nested block containing configuration options for Elasticsearch connections.
|
|
64
72
|
*See Configuration Options for more info*
|
|
65
73
|
:param pulumi.Input[bool] external_entropy_access: Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
|
|
66
74
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountHanaArgs']]] hanas: A nested block containing configuration options for SAP HanaDB connections.
|
|
67
75
|
*See Configuration Options for more info*
|
|
76
|
+
:param pulumi.Input[str] identity_token_key: The key to use for signing plugin workload identity tokens
|
|
68
77
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountInfluxdbArgs']]] influxdbs: A nested block containing configuration options for InfluxDB connections.
|
|
69
78
|
*See Configuration Options for more info*
|
|
79
|
+
:param pulumi.Input[str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
|
|
70
80
|
:param pulumi.Input[bool] local: Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
71
81
|
:param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for tokens and secrets in seconds
|
|
72
82
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountMongodbatlaArgs']]] mongodbatlas: A nested block containing configuration options for MongoDB Atlas connections.
|
|
@@ -87,6 +97,8 @@ class SecretsMountArgs:
|
|
|
87
97
|
:param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
|
|
88
98
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountOracleArgs']]] oracles: A nested block containing configuration options for Oracle connections.
|
|
89
99
|
*See Configuration Options for more info*
|
|
100
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] passthrough_request_headers: List of headers to allow and pass from the request to the plugin
|
|
101
|
+
:param pulumi.Input[str] plugin_version: Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
90
102
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountPostgresqlArgs']]] postgresqls: A nested block containing configuration options for PostgreSQL connections.
|
|
91
103
|
*See Configuration Options for more info*
|
|
92
104
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountRediArgs']]] redis: A nested block containing configuration options for Redis connections.
|
|
@@ -102,6 +114,8 @@ class SecretsMountArgs:
|
|
|
102
114
|
pulumi.set(__self__, "path", path)
|
|
103
115
|
if allowed_managed_keys is not None:
|
|
104
116
|
pulumi.set(__self__, "allowed_managed_keys", allowed_managed_keys)
|
|
117
|
+
if allowed_response_headers is not None:
|
|
118
|
+
pulumi.set(__self__, "allowed_response_headers", allowed_response_headers)
|
|
105
119
|
if audit_non_hmac_request_keys is not None:
|
|
106
120
|
pulumi.set(__self__, "audit_non_hmac_request_keys", audit_non_hmac_request_keys)
|
|
107
121
|
if audit_non_hmac_response_keys is not None:
|
|
@@ -112,6 +126,8 @@ class SecretsMountArgs:
|
|
|
112
126
|
pulumi.set(__self__, "couchbases", couchbases)
|
|
113
127
|
if default_lease_ttl_seconds is not None:
|
|
114
128
|
pulumi.set(__self__, "default_lease_ttl_seconds", default_lease_ttl_seconds)
|
|
129
|
+
if delegated_auth_accessors is not None:
|
|
130
|
+
pulumi.set(__self__, "delegated_auth_accessors", delegated_auth_accessors)
|
|
115
131
|
if description is not None:
|
|
116
132
|
pulumi.set(__self__, "description", description)
|
|
117
133
|
if elasticsearches is not None:
|
|
@@ -120,8 +136,12 @@ class SecretsMountArgs:
|
|
|
120
136
|
pulumi.set(__self__, "external_entropy_access", external_entropy_access)
|
|
121
137
|
if hanas is not None:
|
|
122
138
|
pulumi.set(__self__, "hanas", hanas)
|
|
139
|
+
if identity_token_key is not None:
|
|
140
|
+
pulumi.set(__self__, "identity_token_key", identity_token_key)
|
|
123
141
|
if influxdbs is not None:
|
|
124
142
|
pulumi.set(__self__, "influxdbs", influxdbs)
|
|
143
|
+
if listing_visibility is not None:
|
|
144
|
+
pulumi.set(__self__, "listing_visibility", listing_visibility)
|
|
125
145
|
if local is not None:
|
|
126
146
|
pulumi.set(__self__, "local", local)
|
|
127
147
|
if max_lease_ttl_seconds is not None:
|
|
@@ -146,6 +166,10 @@ class SecretsMountArgs:
|
|
|
146
166
|
pulumi.set(__self__, "options", options)
|
|
147
167
|
if oracles is not None:
|
|
148
168
|
pulumi.set(__self__, "oracles", oracles)
|
|
169
|
+
if passthrough_request_headers is not None:
|
|
170
|
+
pulumi.set(__self__, "passthrough_request_headers", passthrough_request_headers)
|
|
171
|
+
if plugin_version is not None:
|
|
172
|
+
pulumi.set(__self__, "plugin_version", plugin_version)
|
|
149
173
|
if postgresqls is not None:
|
|
150
174
|
pulumi.set(__self__, "postgresqls", postgresqls)
|
|
151
175
|
if redis is not None:
|
|
@@ -185,6 +209,18 @@ class SecretsMountArgs:
|
|
|
185
209
|
def allowed_managed_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
186
210
|
pulumi.set(self, "allowed_managed_keys", value)
|
|
187
211
|
|
|
212
|
+
@property
|
|
213
|
+
@pulumi.getter(name="allowedResponseHeaders")
|
|
214
|
+
def allowed_response_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
215
|
+
"""
|
|
216
|
+
List of headers to allow and pass from the request to the plugin
|
|
217
|
+
"""
|
|
218
|
+
return pulumi.get(self, "allowed_response_headers")
|
|
219
|
+
|
|
220
|
+
@allowed_response_headers.setter
|
|
221
|
+
def allowed_response_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
222
|
+
pulumi.set(self, "allowed_response_headers", value)
|
|
223
|
+
|
|
188
224
|
@property
|
|
189
225
|
@pulumi.getter(name="auditNonHmacRequestKeys")
|
|
190
226
|
def audit_non_hmac_request_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
@@ -247,6 +283,18 @@ class SecretsMountArgs:
|
|
|
247
283
|
def default_lease_ttl_seconds(self, value: Optional[pulumi.Input[int]]):
|
|
248
284
|
pulumi.set(self, "default_lease_ttl_seconds", value)
|
|
249
285
|
|
|
286
|
+
@property
|
|
287
|
+
@pulumi.getter(name="delegatedAuthAccessors")
|
|
288
|
+
def delegated_auth_accessors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
289
|
+
"""
|
|
290
|
+
List of headers to allow and pass from the request to the plugin
|
|
291
|
+
"""
|
|
292
|
+
return pulumi.get(self, "delegated_auth_accessors")
|
|
293
|
+
|
|
294
|
+
@delegated_auth_accessors.setter
|
|
295
|
+
def delegated_auth_accessors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
296
|
+
pulumi.set(self, "delegated_auth_accessors", value)
|
|
297
|
+
|
|
250
298
|
@property
|
|
251
299
|
@pulumi.getter
|
|
252
300
|
def description(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -297,6 +345,18 @@ class SecretsMountArgs:
|
|
|
297
345
|
def hanas(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountHanaArgs']]]]):
|
|
298
346
|
pulumi.set(self, "hanas", value)
|
|
299
347
|
|
|
348
|
+
@property
|
|
349
|
+
@pulumi.getter(name="identityTokenKey")
|
|
350
|
+
def identity_token_key(self) -> Optional[pulumi.Input[str]]:
|
|
351
|
+
"""
|
|
352
|
+
The key to use for signing plugin workload identity tokens
|
|
353
|
+
"""
|
|
354
|
+
return pulumi.get(self, "identity_token_key")
|
|
355
|
+
|
|
356
|
+
@identity_token_key.setter
|
|
357
|
+
def identity_token_key(self, value: Optional[pulumi.Input[str]]):
|
|
358
|
+
pulumi.set(self, "identity_token_key", value)
|
|
359
|
+
|
|
300
360
|
@property
|
|
301
361
|
@pulumi.getter
|
|
302
362
|
def influxdbs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountInfluxdbArgs']]]]:
|
|
@@ -310,6 +370,18 @@ class SecretsMountArgs:
|
|
|
310
370
|
def influxdbs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountInfluxdbArgs']]]]):
|
|
311
371
|
pulumi.set(self, "influxdbs", value)
|
|
312
372
|
|
|
373
|
+
@property
|
|
374
|
+
@pulumi.getter(name="listingVisibility")
|
|
375
|
+
def listing_visibility(self) -> Optional[pulumi.Input[str]]:
|
|
376
|
+
"""
|
|
377
|
+
Specifies whether to show this mount in the UI-specific listing endpoint
|
|
378
|
+
"""
|
|
379
|
+
return pulumi.get(self, "listing_visibility")
|
|
380
|
+
|
|
381
|
+
@listing_visibility.setter
|
|
382
|
+
def listing_visibility(self, value: Optional[pulumi.Input[str]]):
|
|
383
|
+
pulumi.set(self, "listing_visibility", value)
|
|
384
|
+
|
|
313
385
|
@property
|
|
314
386
|
@pulumi.getter
|
|
315
387
|
def local(self) -> Optional[pulumi.Input[bool]]:
|
|
@@ -462,6 +534,30 @@ class SecretsMountArgs:
|
|
|
462
534
|
def oracles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountOracleArgs']]]]):
|
|
463
535
|
pulumi.set(self, "oracles", value)
|
|
464
536
|
|
|
537
|
+
@property
|
|
538
|
+
@pulumi.getter(name="passthroughRequestHeaders")
|
|
539
|
+
def passthrough_request_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
540
|
+
"""
|
|
541
|
+
List of headers to allow and pass from the request to the plugin
|
|
542
|
+
"""
|
|
543
|
+
return pulumi.get(self, "passthrough_request_headers")
|
|
544
|
+
|
|
545
|
+
@passthrough_request_headers.setter
|
|
546
|
+
def passthrough_request_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
547
|
+
pulumi.set(self, "passthrough_request_headers", value)
|
|
548
|
+
|
|
549
|
+
@property
|
|
550
|
+
@pulumi.getter(name="pluginVersion")
|
|
551
|
+
def plugin_version(self) -> Optional[pulumi.Input[str]]:
|
|
552
|
+
"""
|
|
553
|
+
Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
554
|
+
"""
|
|
555
|
+
return pulumi.get(self, "plugin_version")
|
|
556
|
+
|
|
557
|
+
@plugin_version.setter
|
|
558
|
+
def plugin_version(self, value: Optional[pulumi.Input[str]]):
|
|
559
|
+
pulumi.set(self, "plugin_version", value)
|
|
560
|
+
|
|
465
561
|
@property
|
|
466
562
|
@pulumi.getter
|
|
467
563
|
def postgresqls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountPostgresqlArgs']]]]:
|
|
@@ -545,17 +641,21 @@ class _SecretsMountState:
|
|
|
545
641
|
def __init__(__self__, *,
|
|
546
642
|
accessor: Optional[pulumi.Input[str]] = None,
|
|
547
643
|
allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
644
|
+
allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
548
645
|
audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
549
646
|
audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
550
647
|
cassandras: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountCassandraArgs']]]] = None,
|
|
551
648
|
couchbases: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountCouchbaseArgs']]]] = None,
|
|
552
649
|
default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
650
|
+
delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
553
651
|
description: Optional[pulumi.Input[str]] = None,
|
|
554
652
|
elasticsearches: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountElasticsearchArgs']]]] = None,
|
|
555
653
|
engine_count: Optional[pulumi.Input[int]] = None,
|
|
556
654
|
external_entropy_access: Optional[pulumi.Input[bool]] = None,
|
|
557
655
|
hanas: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountHanaArgs']]]] = None,
|
|
656
|
+
identity_token_key: Optional[pulumi.Input[str]] = None,
|
|
558
657
|
influxdbs: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountInfluxdbArgs']]]] = None,
|
|
658
|
+
listing_visibility: Optional[pulumi.Input[str]] = None,
|
|
559
659
|
local: Optional[pulumi.Input[bool]] = None,
|
|
560
660
|
max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
561
661
|
mongodbatlas: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountMongodbatlaArgs']]]] = None,
|
|
@@ -568,7 +668,9 @@ class _SecretsMountState:
|
|
|
568
668
|
namespace: Optional[pulumi.Input[str]] = None,
|
|
569
669
|
options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
|
|
570
670
|
oracles: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountOracleArgs']]]] = None,
|
|
671
|
+
passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
571
672
|
path: Optional[pulumi.Input[str]] = None,
|
|
673
|
+
plugin_version: Optional[pulumi.Input[str]] = None,
|
|
572
674
|
postgresqls: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountPostgresqlArgs']]]] = None,
|
|
573
675
|
redis: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountRediArgs']]]] = None,
|
|
574
676
|
redis_elasticaches: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountRedisElasticachArgs']]]] = None,
|
|
@@ -581,6 +683,7 @@ class _SecretsMountState:
|
|
|
581
683
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_managed_keys: Set of managed key registry entry names that the mount in question is allowed to access
|
|
582
684
|
|
|
583
685
|
The following arguments are common to all database engines:
|
|
686
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_response_headers: List of headers to allow and pass from the request to the plugin
|
|
584
687
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
585
688
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
|
|
586
689
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountCassandraArgs']]] cassandras: A nested block containing configuration options for Cassandra connections.
|
|
@@ -588,6 +691,7 @@ class _SecretsMountState:
|
|
|
588
691
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountCouchbaseArgs']]] couchbases: A nested block containing configuration options for Couchbase connections.
|
|
589
692
|
*See Configuration Options for more info*
|
|
590
693
|
:param pulumi.Input[int] default_lease_ttl_seconds: Default lease duration for tokens and secrets in seconds
|
|
694
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] delegated_auth_accessors: List of headers to allow and pass from the request to the plugin
|
|
591
695
|
:param pulumi.Input[str] description: Human-friendly description of the mount
|
|
592
696
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountElasticsearchArgs']]] elasticsearches: A nested block containing configuration options for Elasticsearch connections.
|
|
593
697
|
*See Configuration Options for more info*
|
|
@@ -595,8 +699,10 @@ class _SecretsMountState:
|
|
|
595
699
|
:param pulumi.Input[bool] external_entropy_access: Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
|
|
596
700
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountHanaArgs']]] hanas: A nested block containing configuration options for SAP HanaDB connections.
|
|
597
701
|
*See Configuration Options for more info*
|
|
702
|
+
:param pulumi.Input[str] identity_token_key: The key to use for signing plugin workload identity tokens
|
|
598
703
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountInfluxdbArgs']]] influxdbs: A nested block containing configuration options for InfluxDB connections.
|
|
599
704
|
*See Configuration Options for more info*
|
|
705
|
+
:param pulumi.Input[str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
|
|
600
706
|
:param pulumi.Input[bool] local: Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
601
707
|
:param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for tokens and secrets in seconds
|
|
602
708
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountMongodbatlaArgs']]] mongodbatlas: A nested block containing configuration options for MongoDB Atlas connections.
|
|
@@ -617,7 +723,9 @@ class _SecretsMountState:
|
|
|
617
723
|
:param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
|
|
618
724
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountOracleArgs']]] oracles: A nested block containing configuration options for Oracle connections.
|
|
619
725
|
*See Configuration Options for more info*
|
|
726
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] passthrough_request_headers: List of headers to allow and pass from the request to the plugin
|
|
620
727
|
:param pulumi.Input[str] path: Where the secret backend will be mounted
|
|
728
|
+
:param pulumi.Input[str] plugin_version: Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
621
729
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountPostgresqlArgs']]] postgresqls: A nested block containing configuration options for PostgreSQL connections.
|
|
622
730
|
*See Configuration Options for more info*
|
|
623
731
|
:param pulumi.Input[Sequence[pulumi.Input['SecretsMountRediArgs']]] redis: A nested block containing configuration options for Redis connections.
|
|
@@ -634,6 +742,8 @@ class _SecretsMountState:
|
|
|
634
742
|
pulumi.set(__self__, "accessor", accessor)
|
|
635
743
|
if allowed_managed_keys is not None:
|
|
636
744
|
pulumi.set(__self__, "allowed_managed_keys", allowed_managed_keys)
|
|
745
|
+
if allowed_response_headers is not None:
|
|
746
|
+
pulumi.set(__self__, "allowed_response_headers", allowed_response_headers)
|
|
637
747
|
if audit_non_hmac_request_keys is not None:
|
|
638
748
|
pulumi.set(__self__, "audit_non_hmac_request_keys", audit_non_hmac_request_keys)
|
|
639
749
|
if audit_non_hmac_response_keys is not None:
|
|
@@ -644,6 +754,8 @@ class _SecretsMountState:
|
|
|
644
754
|
pulumi.set(__self__, "couchbases", couchbases)
|
|
645
755
|
if default_lease_ttl_seconds is not None:
|
|
646
756
|
pulumi.set(__self__, "default_lease_ttl_seconds", default_lease_ttl_seconds)
|
|
757
|
+
if delegated_auth_accessors is not None:
|
|
758
|
+
pulumi.set(__self__, "delegated_auth_accessors", delegated_auth_accessors)
|
|
647
759
|
if description is not None:
|
|
648
760
|
pulumi.set(__self__, "description", description)
|
|
649
761
|
if elasticsearches is not None:
|
|
@@ -654,8 +766,12 @@ class _SecretsMountState:
|
|
|
654
766
|
pulumi.set(__self__, "external_entropy_access", external_entropy_access)
|
|
655
767
|
if hanas is not None:
|
|
656
768
|
pulumi.set(__self__, "hanas", hanas)
|
|
769
|
+
if identity_token_key is not None:
|
|
770
|
+
pulumi.set(__self__, "identity_token_key", identity_token_key)
|
|
657
771
|
if influxdbs is not None:
|
|
658
772
|
pulumi.set(__self__, "influxdbs", influxdbs)
|
|
773
|
+
if listing_visibility is not None:
|
|
774
|
+
pulumi.set(__self__, "listing_visibility", listing_visibility)
|
|
659
775
|
if local is not None:
|
|
660
776
|
pulumi.set(__self__, "local", local)
|
|
661
777
|
if max_lease_ttl_seconds is not None:
|
|
@@ -680,8 +796,12 @@ class _SecretsMountState:
|
|
|
680
796
|
pulumi.set(__self__, "options", options)
|
|
681
797
|
if oracles is not None:
|
|
682
798
|
pulumi.set(__self__, "oracles", oracles)
|
|
799
|
+
if passthrough_request_headers is not None:
|
|
800
|
+
pulumi.set(__self__, "passthrough_request_headers", passthrough_request_headers)
|
|
683
801
|
if path is not None:
|
|
684
802
|
pulumi.set(__self__, "path", path)
|
|
803
|
+
if plugin_version is not None:
|
|
804
|
+
pulumi.set(__self__, "plugin_version", plugin_version)
|
|
685
805
|
if postgresqls is not None:
|
|
686
806
|
pulumi.set(__self__, "postgresqls", postgresqls)
|
|
687
807
|
if redis is not None:
|
|
@@ -721,6 +841,18 @@ class _SecretsMountState:
|
|
|
721
841
|
def allowed_managed_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
722
842
|
pulumi.set(self, "allowed_managed_keys", value)
|
|
723
843
|
|
|
844
|
+
@property
|
|
845
|
+
@pulumi.getter(name="allowedResponseHeaders")
|
|
846
|
+
def allowed_response_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
847
|
+
"""
|
|
848
|
+
List of headers to allow and pass from the request to the plugin
|
|
849
|
+
"""
|
|
850
|
+
return pulumi.get(self, "allowed_response_headers")
|
|
851
|
+
|
|
852
|
+
@allowed_response_headers.setter
|
|
853
|
+
def allowed_response_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
854
|
+
pulumi.set(self, "allowed_response_headers", value)
|
|
855
|
+
|
|
724
856
|
@property
|
|
725
857
|
@pulumi.getter(name="auditNonHmacRequestKeys")
|
|
726
858
|
def audit_non_hmac_request_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
@@ -783,6 +915,18 @@ class _SecretsMountState:
|
|
|
783
915
|
def default_lease_ttl_seconds(self, value: Optional[pulumi.Input[int]]):
|
|
784
916
|
pulumi.set(self, "default_lease_ttl_seconds", value)
|
|
785
917
|
|
|
918
|
+
@property
|
|
919
|
+
@pulumi.getter(name="delegatedAuthAccessors")
|
|
920
|
+
def delegated_auth_accessors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
921
|
+
"""
|
|
922
|
+
List of headers to allow and pass from the request to the plugin
|
|
923
|
+
"""
|
|
924
|
+
return pulumi.get(self, "delegated_auth_accessors")
|
|
925
|
+
|
|
926
|
+
@delegated_auth_accessors.setter
|
|
927
|
+
def delegated_auth_accessors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
928
|
+
pulumi.set(self, "delegated_auth_accessors", value)
|
|
929
|
+
|
|
786
930
|
@property
|
|
787
931
|
@pulumi.getter
|
|
788
932
|
def description(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -845,6 +989,18 @@ class _SecretsMountState:
|
|
|
845
989
|
def hanas(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountHanaArgs']]]]):
|
|
846
990
|
pulumi.set(self, "hanas", value)
|
|
847
991
|
|
|
992
|
+
@property
|
|
993
|
+
@pulumi.getter(name="identityTokenKey")
|
|
994
|
+
def identity_token_key(self) -> Optional[pulumi.Input[str]]:
|
|
995
|
+
"""
|
|
996
|
+
The key to use for signing plugin workload identity tokens
|
|
997
|
+
"""
|
|
998
|
+
return pulumi.get(self, "identity_token_key")
|
|
999
|
+
|
|
1000
|
+
@identity_token_key.setter
|
|
1001
|
+
def identity_token_key(self, value: Optional[pulumi.Input[str]]):
|
|
1002
|
+
pulumi.set(self, "identity_token_key", value)
|
|
1003
|
+
|
|
848
1004
|
@property
|
|
849
1005
|
@pulumi.getter
|
|
850
1006
|
def influxdbs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountInfluxdbArgs']]]]:
|
|
@@ -858,6 +1014,18 @@ class _SecretsMountState:
|
|
|
858
1014
|
def influxdbs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountInfluxdbArgs']]]]):
|
|
859
1015
|
pulumi.set(self, "influxdbs", value)
|
|
860
1016
|
|
|
1017
|
+
@property
|
|
1018
|
+
@pulumi.getter(name="listingVisibility")
|
|
1019
|
+
def listing_visibility(self) -> Optional[pulumi.Input[str]]:
|
|
1020
|
+
"""
|
|
1021
|
+
Specifies whether to show this mount in the UI-specific listing endpoint
|
|
1022
|
+
"""
|
|
1023
|
+
return pulumi.get(self, "listing_visibility")
|
|
1024
|
+
|
|
1025
|
+
@listing_visibility.setter
|
|
1026
|
+
def listing_visibility(self, value: Optional[pulumi.Input[str]]):
|
|
1027
|
+
pulumi.set(self, "listing_visibility", value)
|
|
1028
|
+
|
|
861
1029
|
@property
|
|
862
1030
|
@pulumi.getter
|
|
863
1031
|
def local(self) -> Optional[pulumi.Input[bool]]:
|
|
@@ -1010,6 +1178,18 @@ class _SecretsMountState:
|
|
|
1010
1178
|
def oracles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountOracleArgs']]]]):
|
|
1011
1179
|
pulumi.set(self, "oracles", value)
|
|
1012
1180
|
|
|
1181
|
+
@property
|
|
1182
|
+
@pulumi.getter(name="passthroughRequestHeaders")
|
|
1183
|
+
def passthrough_request_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
1184
|
+
"""
|
|
1185
|
+
List of headers to allow and pass from the request to the plugin
|
|
1186
|
+
"""
|
|
1187
|
+
return pulumi.get(self, "passthrough_request_headers")
|
|
1188
|
+
|
|
1189
|
+
@passthrough_request_headers.setter
|
|
1190
|
+
def passthrough_request_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
1191
|
+
pulumi.set(self, "passthrough_request_headers", value)
|
|
1192
|
+
|
|
1013
1193
|
@property
|
|
1014
1194
|
@pulumi.getter
|
|
1015
1195
|
def path(self) -> Optional[pulumi.Input[str]]:
|
|
@@ -1022,6 +1202,18 @@ class _SecretsMountState:
|
|
|
1022
1202
|
def path(self, value: Optional[pulumi.Input[str]]):
|
|
1023
1203
|
pulumi.set(self, "path", value)
|
|
1024
1204
|
|
|
1205
|
+
@property
|
|
1206
|
+
@pulumi.getter(name="pluginVersion")
|
|
1207
|
+
def plugin_version(self) -> Optional[pulumi.Input[str]]:
|
|
1208
|
+
"""
|
|
1209
|
+
Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
1210
|
+
"""
|
|
1211
|
+
return pulumi.get(self, "plugin_version")
|
|
1212
|
+
|
|
1213
|
+
@plugin_version.setter
|
|
1214
|
+
def plugin_version(self, value: Optional[pulumi.Input[str]]):
|
|
1215
|
+
pulumi.set(self, "plugin_version", value)
|
|
1216
|
+
|
|
1025
1217
|
@property
|
|
1026
1218
|
@pulumi.getter
|
|
1027
1219
|
def postgresqls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SecretsMountPostgresqlArgs']]]]:
|
|
@@ -1106,16 +1298,20 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1106
1298
|
resource_name: str,
|
|
1107
1299
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1108
1300
|
allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1301
|
+
allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1109
1302
|
audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1110
1303
|
audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1111
1304
|
cassandras: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCassandraArgs']]]]] = None,
|
|
1112
1305
|
couchbases: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCouchbaseArgs']]]]] = None,
|
|
1113
1306
|
default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
1307
|
+
delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1114
1308
|
description: Optional[pulumi.Input[str]] = None,
|
|
1115
1309
|
elasticsearches: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountElasticsearchArgs']]]]] = None,
|
|
1116
1310
|
external_entropy_access: Optional[pulumi.Input[bool]] = None,
|
|
1117
1311
|
hanas: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountHanaArgs']]]]] = None,
|
|
1312
|
+
identity_token_key: Optional[pulumi.Input[str]] = None,
|
|
1118
1313
|
influxdbs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountInfluxdbArgs']]]]] = None,
|
|
1314
|
+
listing_visibility: Optional[pulumi.Input[str]] = None,
|
|
1119
1315
|
local: Optional[pulumi.Input[bool]] = None,
|
|
1120
1316
|
max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
1121
1317
|
mongodbatlas: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountMongodbatlaArgs']]]]] = None,
|
|
@@ -1128,7 +1324,9 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1128
1324
|
namespace: Optional[pulumi.Input[str]] = None,
|
|
1129
1325
|
options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
|
|
1130
1326
|
oracles: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountOracleArgs']]]]] = None,
|
|
1327
|
+
passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1131
1328
|
path: Optional[pulumi.Input[str]] = None,
|
|
1329
|
+
plugin_version: Optional[pulumi.Input[str]] = None,
|
|
1132
1330
|
postgresqls: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountPostgresqlArgs']]]]] = None,
|
|
1133
1331
|
redis: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountRediArgs']]]]] = None,
|
|
1134
1332
|
redis_elasticaches: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountRedisElasticachArgs']]]]] = None,
|
|
@@ -1192,6 +1390,7 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1192
1390
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_managed_keys: Set of managed key registry entry names that the mount in question is allowed to access
|
|
1193
1391
|
|
|
1194
1392
|
The following arguments are common to all database engines:
|
|
1393
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_response_headers: List of headers to allow and pass from the request to the plugin
|
|
1195
1394
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
1196
1395
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
|
|
1197
1396
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCassandraArgs']]]] cassandras: A nested block containing configuration options for Cassandra connections.
|
|
@@ -1199,14 +1398,17 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1199
1398
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCouchbaseArgs']]]] couchbases: A nested block containing configuration options for Couchbase connections.
|
|
1200
1399
|
*See Configuration Options for more info*
|
|
1201
1400
|
:param pulumi.Input[int] default_lease_ttl_seconds: Default lease duration for tokens and secrets in seconds
|
|
1401
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] delegated_auth_accessors: List of headers to allow and pass from the request to the plugin
|
|
1202
1402
|
:param pulumi.Input[str] description: Human-friendly description of the mount
|
|
1203
1403
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountElasticsearchArgs']]]] elasticsearches: A nested block containing configuration options for Elasticsearch connections.
|
|
1204
1404
|
*See Configuration Options for more info*
|
|
1205
1405
|
:param pulumi.Input[bool] external_entropy_access: Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
|
|
1206
1406
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountHanaArgs']]]] hanas: A nested block containing configuration options for SAP HanaDB connections.
|
|
1207
1407
|
*See Configuration Options for more info*
|
|
1408
|
+
:param pulumi.Input[str] identity_token_key: The key to use for signing plugin workload identity tokens
|
|
1208
1409
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountInfluxdbArgs']]]] influxdbs: A nested block containing configuration options for InfluxDB connections.
|
|
1209
1410
|
*See Configuration Options for more info*
|
|
1411
|
+
:param pulumi.Input[str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
|
|
1210
1412
|
:param pulumi.Input[bool] local: Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
1211
1413
|
:param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for tokens and secrets in seconds
|
|
1212
1414
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountMongodbatlaArgs']]]] mongodbatlas: A nested block containing configuration options for MongoDB Atlas connections.
|
|
@@ -1227,7 +1429,9 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1227
1429
|
:param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
|
|
1228
1430
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountOracleArgs']]]] oracles: A nested block containing configuration options for Oracle connections.
|
|
1229
1431
|
*See Configuration Options for more info*
|
|
1432
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] passthrough_request_headers: List of headers to allow and pass from the request to the plugin
|
|
1230
1433
|
:param pulumi.Input[str] path: Where the secret backend will be mounted
|
|
1434
|
+
:param pulumi.Input[str] plugin_version: Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
1231
1435
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountPostgresqlArgs']]]] postgresqls: A nested block containing configuration options for PostgreSQL connections.
|
|
1232
1436
|
*See Configuration Options for more info*
|
|
1233
1437
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountRediArgs']]]] redis: A nested block containing configuration options for Redis connections.
|
|
@@ -1313,16 +1517,20 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1313
1517
|
resource_name: str,
|
|
1314
1518
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1315
1519
|
allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1520
|
+
allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1316
1521
|
audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1317
1522
|
audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1318
1523
|
cassandras: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCassandraArgs']]]]] = None,
|
|
1319
1524
|
couchbases: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCouchbaseArgs']]]]] = None,
|
|
1320
1525
|
default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
1526
|
+
delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1321
1527
|
description: Optional[pulumi.Input[str]] = None,
|
|
1322
1528
|
elasticsearches: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountElasticsearchArgs']]]]] = None,
|
|
1323
1529
|
external_entropy_access: Optional[pulumi.Input[bool]] = None,
|
|
1324
1530
|
hanas: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountHanaArgs']]]]] = None,
|
|
1531
|
+
identity_token_key: Optional[pulumi.Input[str]] = None,
|
|
1325
1532
|
influxdbs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountInfluxdbArgs']]]]] = None,
|
|
1533
|
+
listing_visibility: Optional[pulumi.Input[str]] = None,
|
|
1326
1534
|
local: Optional[pulumi.Input[bool]] = None,
|
|
1327
1535
|
max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
1328
1536
|
mongodbatlas: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountMongodbatlaArgs']]]]] = None,
|
|
@@ -1335,7 +1543,9 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1335
1543
|
namespace: Optional[pulumi.Input[str]] = None,
|
|
1336
1544
|
options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
|
|
1337
1545
|
oracles: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountOracleArgs']]]]] = None,
|
|
1546
|
+
passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1338
1547
|
path: Optional[pulumi.Input[str]] = None,
|
|
1548
|
+
plugin_version: Optional[pulumi.Input[str]] = None,
|
|
1339
1549
|
postgresqls: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountPostgresqlArgs']]]]] = None,
|
|
1340
1550
|
redis: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountRediArgs']]]]] = None,
|
|
1341
1551
|
redis_elasticaches: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountRedisElasticachArgs']]]]] = None,
|
|
@@ -1352,16 +1562,20 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1352
1562
|
__props__ = SecretsMountArgs.__new__(SecretsMountArgs)
|
|
1353
1563
|
|
|
1354
1564
|
__props__.__dict__["allowed_managed_keys"] = allowed_managed_keys
|
|
1565
|
+
__props__.__dict__["allowed_response_headers"] = allowed_response_headers
|
|
1355
1566
|
__props__.__dict__["audit_non_hmac_request_keys"] = audit_non_hmac_request_keys
|
|
1356
1567
|
__props__.__dict__["audit_non_hmac_response_keys"] = audit_non_hmac_response_keys
|
|
1357
1568
|
__props__.__dict__["cassandras"] = cassandras
|
|
1358
1569
|
__props__.__dict__["couchbases"] = couchbases
|
|
1359
1570
|
__props__.__dict__["default_lease_ttl_seconds"] = default_lease_ttl_seconds
|
|
1571
|
+
__props__.__dict__["delegated_auth_accessors"] = delegated_auth_accessors
|
|
1360
1572
|
__props__.__dict__["description"] = description
|
|
1361
1573
|
__props__.__dict__["elasticsearches"] = elasticsearches
|
|
1362
1574
|
__props__.__dict__["external_entropy_access"] = external_entropy_access
|
|
1363
1575
|
__props__.__dict__["hanas"] = hanas
|
|
1576
|
+
__props__.__dict__["identity_token_key"] = identity_token_key
|
|
1364
1577
|
__props__.__dict__["influxdbs"] = influxdbs
|
|
1578
|
+
__props__.__dict__["listing_visibility"] = listing_visibility
|
|
1365
1579
|
__props__.__dict__["local"] = local
|
|
1366
1580
|
__props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
|
|
1367
1581
|
__props__.__dict__["mongodbatlas"] = mongodbatlas
|
|
@@ -1374,9 +1588,11 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1374
1588
|
__props__.__dict__["namespace"] = namespace
|
|
1375
1589
|
__props__.__dict__["options"] = options
|
|
1376
1590
|
__props__.__dict__["oracles"] = oracles
|
|
1591
|
+
__props__.__dict__["passthrough_request_headers"] = passthrough_request_headers
|
|
1377
1592
|
if path is None and not opts.urn:
|
|
1378
1593
|
raise TypeError("Missing required property 'path'")
|
|
1379
1594
|
__props__.__dict__["path"] = path
|
|
1595
|
+
__props__.__dict__["plugin_version"] = plugin_version
|
|
1380
1596
|
__props__.__dict__["postgresqls"] = postgresqls
|
|
1381
1597
|
__props__.__dict__["redis"] = redis
|
|
1382
1598
|
__props__.__dict__["redis_elasticaches"] = redis_elasticaches
|
|
@@ -1397,17 +1613,21 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1397
1613
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1398
1614
|
accessor: Optional[pulumi.Input[str]] = None,
|
|
1399
1615
|
allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1616
|
+
allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1400
1617
|
audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1401
1618
|
audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1402
1619
|
cassandras: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCassandraArgs']]]]] = None,
|
|
1403
1620
|
couchbases: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCouchbaseArgs']]]]] = None,
|
|
1404
1621
|
default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
1622
|
+
delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1405
1623
|
description: Optional[pulumi.Input[str]] = None,
|
|
1406
1624
|
elasticsearches: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountElasticsearchArgs']]]]] = None,
|
|
1407
1625
|
engine_count: Optional[pulumi.Input[int]] = None,
|
|
1408
1626
|
external_entropy_access: Optional[pulumi.Input[bool]] = None,
|
|
1409
1627
|
hanas: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountHanaArgs']]]]] = None,
|
|
1628
|
+
identity_token_key: Optional[pulumi.Input[str]] = None,
|
|
1410
1629
|
influxdbs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountInfluxdbArgs']]]]] = None,
|
|
1630
|
+
listing_visibility: Optional[pulumi.Input[str]] = None,
|
|
1411
1631
|
local: Optional[pulumi.Input[bool]] = None,
|
|
1412
1632
|
max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
|
|
1413
1633
|
mongodbatlas: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountMongodbatlaArgs']]]]] = None,
|
|
@@ -1420,7 +1640,9 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1420
1640
|
namespace: Optional[pulumi.Input[str]] = None,
|
|
1421
1641
|
options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
|
|
1422
1642
|
oracles: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountOracleArgs']]]]] = None,
|
|
1643
|
+
passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1423
1644
|
path: Optional[pulumi.Input[str]] = None,
|
|
1645
|
+
plugin_version: Optional[pulumi.Input[str]] = None,
|
|
1424
1646
|
postgresqls: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountPostgresqlArgs']]]]] = None,
|
|
1425
1647
|
redis: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountRediArgs']]]]] = None,
|
|
1426
1648
|
redis_elasticaches: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountRedisElasticachArgs']]]]] = None,
|
|
@@ -1438,6 +1660,7 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1438
1660
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_managed_keys: Set of managed key registry entry names that the mount in question is allowed to access
|
|
1439
1661
|
|
|
1440
1662
|
The following arguments are common to all database engines:
|
|
1663
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_response_headers: List of headers to allow and pass from the request to the plugin
|
|
1441
1664
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
|
|
1442
1665
|
:param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
|
|
1443
1666
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCassandraArgs']]]] cassandras: A nested block containing configuration options for Cassandra connections.
|
|
@@ -1445,6 +1668,7 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1445
1668
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountCouchbaseArgs']]]] couchbases: A nested block containing configuration options for Couchbase connections.
|
|
1446
1669
|
*See Configuration Options for more info*
|
|
1447
1670
|
:param pulumi.Input[int] default_lease_ttl_seconds: Default lease duration for tokens and secrets in seconds
|
|
1671
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] delegated_auth_accessors: List of headers to allow and pass from the request to the plugin
|
|
1448
1672
|
:param pulumi.Input[str] description: Human-friendly description of the mount
|
|
1449
1673
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountElasticsearchArgs']]]] elasticsearches: A nested block containing configuration options for Elasticsearch connections.
|
|
1450
1674
|
*See Configuration Options for more info*
|
|
@@ -1452,8 +1676,10 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1452
1676
|
:param pulumi.Input[bool] external_entropy_access: Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
|
|
1453
1677
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountHanaArgs']]]] hanas: A nested block containing configuration options for SAP HanaDB connections.
|
|
1454
1678
|
*See Configuration Options for more info*
|
|
1679
|
+
:param pulumi.Input[str] identity_token_key: The key to use for signing plugin workload identity tokens
|
|
1455
1680
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountInfluxdbArgs']]]] influxdbs: A nested block containing configuration options for InfluxDB connections.
|
|
1456
1681
|
*See Configuration Options for more info*
|
|
1682
|
+
:param pulumi.Input[str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
|
|
1457
1683
|
:param pulumi.Input[bool] local: Boolean flag that can be explicitly set to true to enforce local mount in HA environment
|
|
1458
1684
|
:param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for tokens and secrets in seconds
|
|
1459
1685
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountMongodbatlaArgs']]]] mongodbatlas: A nested block containing configuration options for MongoDB Atlas connections.
|
|
@@ -1474,7 +1700,9 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1474
1700
|
:param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
|
|
1475
1701
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountOracleArgs']]]] oracles: A nested block containing configuration options for Oracle connections.
|
|
1476
1702
|
*See Configuration Options for more info*
|
|
1703
|
+
:param pulumi.Input[Sequence[pulumi.Input[str]]] passthrough_request_headers: List of headers to allow and pass from the request to the plugin
|
|
1477
1704
|
:param pulumi.Input[str] path: Where the secret backend will be mounted
|
|
1705
|
+
:param pulumi.Input[str] plugin_version: Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
1478
1706
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountPostgresqlArgs']]]] postgresqls: A nested block containing configuration options for PostgreSQL connections.
|
|
1479
1707
|
*See Configuration Options for more info*
|
|
1480
1708
|
:param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['SecretsMountRediArgs']]]] redis: A nested block containing configuration options for Redis connections.
|
|
@@ -1493,17 +1721,21 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1493
1721
|
|
|
1494
1722
|
__props__.__dict__["accessor"] = accessor
|
|
1495
1723
|
__props__.__dict__["allowed_managed_keys"] = allowed_managed_keys
|
|
1724
|
+
__props__.__dict__["allowed_response_headers"] = allowed_response_headers
|
|
1496
1725
|
__props__.__dict__["audit_non_hmac_request_keys"] = audit_non_hmac_request_keys
|
|
1497
1726
|
__props__.__dict__["audit_non_hmac_response_keys"] = audit_non_hmac_response_keys
|
|
1498
1727
|
__props__.__dict__["cassandras"] = cassandras
|
|
1499
1728
|
__props__.__dict__["couchbases"] = couchbases
|
|
1500
1729
|
__props__.__dict__["default_lease_ttl_seconds"] = default_lease_ttl_seconds
|
|
1730
|
+
__props__.__dict__["delegated_auth_accessors"] = delegated_auth_accessors
|
|
1501
1731
|
__props__.__dict__["description"] = description
|
|
1502
1732
|
__props__.__dict__["elasticsearches"] = elasticsearches
|
|
1503
1733
|
__props__.__dict__["engine_count"] = engine_count
|
|
1504
1734
|
__props__.__dict__["external_entropy_access"] = external_entropy_access
|
|
1505
1735
|
__props__.__dict__["hanas"] = hanas
|
|
1736
|
+
__props__.__dict__["identity_token_key"] = identity_token_key
|
|
1506
1737
|
__props__.__dict__["influxdbs"] = influxdbs
|
|
1738
|
+
__props__.__dict__["listing_visibility"] = listing_visibility
|
|
1507
1739
|
__props__.__dict__["local"] = local
|
|
1508
1740
|
__props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
|
|
1509
1741
|
__props__.__dict__["mongodbatlas"] = mongodbatlas
|
|
@@ -1516,7 +1748,9 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1516
1748
|
__props__.__dict__["namespace"] = namespace
|
|
1517
1749
|
__props__.__dict__["options"] = options
|
|
1518
1750
|
__props__.__dict__["oracles"] = oracles
|
|
1751
|
+
__props__.__dict__["passthrough_request_headers"] = passthrough_request_headers
|
|
1519
1752
|
__props__.__dict__["path"] = path
|
|
1753
|
+
__props__.__dict__["plugin_version"] = plugin_version
|
|
1520
1754
|
__props__.__dict__["postgresqls"] = postgresqls
|
|
1521
1755
|
__props__.__dict__["redis"] = redis
|
|
1522
1756
|
__props__.__dict__["redis_elasticaches"] = redis_elasticaches
|
|
@@ -1543,6 +1777,14 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1543
1777
|
"""
|
|
1544
1778
|
return pulumi.get(self, "allowed_managed_keys")
|
|
1545
1779
|
|
|
1780
|
+
@property
|
|
1781
|
+
@pulumi.getter(name="allowedResponseHeaders")
|
|
1782
|
+
def allowed_response_headers(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
1783
|
+
"""
|
|
1784
|
+
List of headers to allow and pass from the request to the plugin
|
|
1785
|
+
"""
|
|
1786
|
+
return pulumi.get(self, "allowed_response_headers")
|
|
1787
|
+
|
|
1546
1788
|
@property
|
|
1547
1789
|
@pulumi.getter(name="auditNonHmacRequestKeys")
|
|
1548
1790
|
def audit_non_hmac_request_keys(self) -> pulumi.Output[Sequence[str]]:
|
|
@@ -1585,6 +1827,14 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1585
1827
|
"""
|
|
1586
1828
|
return pulumi.get(self, "default_lease_ttl_seconds")
|
|
1587
1829
|
|
|
1830
|
+
@property
|
|
1831
|
+
@pulumi.getter(name="delegatedAuthAccessors")
|
|
1832
|
+
def delegated_auth_accessors(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
1833
|
+
"""
|
|
1834
|
+
List of headers to allow and pass from the request to the plugin
|
|
1835
|
+
"""
|
|
1836
|
+
return pulumi.get(self, "delegated_auth_accessors")
|
|
1837
|
+
|
|
1588
1838
|
@property
|
|
1589
1839
|
@pulumi.getter
|
|
1590
1840
|
def description(self) -> pulumi.Output[Optional[str]]:
|
|
@@ -1627,6 +1877,14 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1627
1877
|
"""
|
|
1628
1878
|
return pulumi.get(self, "hanas")
|
|
1629
1879
|
|
|
1880
|
+
@property
|
|
1881
|
+
@pulumi.getter(name="identityTokenKey")
|
|
1882
|
+
def identity_token_key(self) -> pulumi.Output[Optional[str]]:
|
|
1883
|
+
"""
|
|
1884
|
+
The key to use for signing plugin workload identity tokens
|
|
1885
|
+
"""
|
|
1886
|
+
return pulumi.get(self, "identity_token_key")
|
|
1887
|
+
|
|
1630
1888
|
@property
|
|
1631
1889
|
@pulumi.getter
|
|
1632
1890
|
def influxdbs(self) -> pulumi.Output[Optional[Sequence['outputs.SecretsMountInfluxdb']]]:
|
|
@@ -1636,6 +1894,14 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1636
1894
|
"""
|
|
1637
1895
|
return pulumi.get(self, "influxdbs")
|
|
1638
1896
|
|
|
1897
|
+
@property
|
|
1898
|
+
@pulumi.getter(name="listingVisibility")
|
|
1899
|
+
def listing_visibility(self) -> pulumi.Output[Optional[str]]:
|
|
1900
|
+
"""
|
|
1901
|
+
Specifies whether to show this mount in the UI-specific listing endpoint
|
|
1902
|
+
"""
|
|
1903
|
+
return pulumi.get(self, "listing_visibility")
|
|
1904
|
+
|
|
1639
1905
|
@property
|
|
1640
1906
|
@pulumi.getter
|
|
1641
1907
|
def local(self) -> pulumi.Output[Optional[bool]]:
|
|
@@ -1740,6 +2006,14 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1740
2006
|
"""
|
|
1741
2007
|
return pulumi.get(self, "oracles")
|
|
1742
2008
|
|
|
2009
|
+
@property
|
|
2010
|
+
@pulumi.getter(name="passthroughRequestHeaders")
|
|
2011
|
+
def passthrough_request_headers(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
2012
|
+
"""
|
|
2013
|
+
List of headers to allow and pass from the request to the plugin
|
|
2014
|
+
"""
|
|
2015
|
+
return pulumi.get(self, "passthrough_request_headers")
|
|
2016
|
+
|
|
1743
2017
|
@property
|
|
1744
2018
|
@pulumi.getter
|
|
1745
2019
|
def path(self) -> pulumi.Output[str]:
|
|
@@ -1748,6 +2022,14 @@ class SecretsMount(pulumi.CustomResource):
|
|
|
1748
2022
|
"""
|
|
1749
2023
|
return pulumi.get(self, "path")
|
|
1750
2024
|
|
|
2025
|
+
@property
|
|
2026
|
+
@pulumi.getter(name="pluginVersion")
|
|
2027
|
+
def plugin_version(self) -> pulumi.Output[Optional[str]]:
|
|
2028
|
+
"""
|
|
2029
|
+
Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
|
|
2030
|
+
"""
|
|
2031
|
+
return pulumi.get(self, "plugin_version")
|
|
2032
|
+
|
|
1751
2033
|
@property
|
|
1752
2034
|
@pulumi.getter
|
|
1753
2035
|
def postgresqls(self) -> pulumi.Output[Optional[Sequence['outputs.SecretsMountPostgresql']]]:
|