pulumi-vault 6.1.1a1717550614__py3-none-any.whl → 6.2.0a1712470779__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (183) hide show
  1. pulumi_vault/_inputs.py +20 -0
  2. pulumi_vault/ad/secret_backend.py +6 -2
  3. pulumi_vault/ad/secret_library.py +4 -2
  4. pulumi_vault/ad/secret_role.py +4 -0
  5. pulumi_vault/alicloud/auth_backend_role.py +192 -69
  6. pulumi_vault/approle/auth_backend_login.py +4 -0
  7. pulumi_vault/approle/auth_backend_role.py +186 -63
  8. pulumi_vault/approle/auth_backend_role_secret_id.py +4 -0
  9. pulumi_vault/approle/get_auth_backend_role_id.py +4 -0
  10. pulumi_vault/audit.py +20 -12
  11. pulumi_vault/audit_request_header.py +6 -6
  12. pulumi_vault/aws/auth_backend_client.py +10 -6
  13. pulumi_vault/aws/auth_backend_config_identity.py +4 -0
  14. pulumi_vault/aws/auth_backend_identity_whitelist.py +10 -6
  15. pulumi_vault/aws/auth_backend_login.py +8 -0
  16. pulumi_vault/aws/auth_backend_role.py +186 -63
  17. pulumi_vault/aws/auth_backend_roletag_blacklist.py +10 -6
  18. pulumi_vault/aws/auth_backend_sts_role.py +4 -0
  19. pulumi_vault/aws/secret_backend_role.py +4 -2
  20. pulumi_vault/aws/secret_backend_static_role.py +4 -2
  21. pulumi_vault/azure/auth_backend_config.py +10 -6
  22. pulumi_vault/azure/auth_backend_role.py +186 -63
  23. pulumi_vault/azure/backend.py +24 -16
  24. pulumi_vault/azure/backend_role.py +18 -14
  25. pulumi_vault/azure/get_access_credentials.py +4 -0
  26. pulumi_vault/cert_auth_backend_role.py +208 -75
  27. pulumi_vault/consul/secret_backend.py +18 -10
  28. pulumi_vault/consul/secret_backend_role.py +4 -2
  29. pulumi_vault/database/_inputs.py +784 -522
  30. pulumi_vault/database/outputs.py +784 -522
  31. pulumi_vault/database/secret_backend_connection.py +4 -2
  32. pulumi_vault/database/secret_backend_role.py +4 -4
  33. pulumi_vault/database/secret_backend_static_role.py +8 -10
  34. pulumi_vault/database/secrets_mount.py +4 -4
  35. pulumi_vault/egp_policy.py +8 -4
  36. pulumi_vault/gcp/auth_backend.py +36 -0
  37. pulumi_vault/gcp/auth_backend_role.py +264 -63
  38. pulumi_vault/gcp/get_auth_backend_role.py +4 -0
  39. pulumi_vault/gcp/secret_backend.py +6 -4
  40. pulumi_vault/gcp/secret_impersonated_account.py +14 -12
  41. pulumi_vault/gcp/secret_roleset.py +6 -4
  42. pulumi_vault/gcp/secret_static_account.py +16 -14
  43. pulumi_vault/generic/endpoint.py +8 -4
  44. pulumi_vault/generic/get_secret.py +4 -40
  45. pulumi_vault/get_auth_backend.py +4 -0
  46. pulumi_vault/get_auth_backends.py +8 -0
  47. pulumi_vault/get_namespace.py +12 -0
  48. pulumi_vault/get_namespaces.py +12 -4
  49. pulumi_vault/get_nomad_access_token.py +4 -0
  50. pulumi_vault/get_policy_document.py +8 -8
  51. pulumi_vault/get_raft_autopilot_state.py +4 -0
  52. pulumi_vault/github/auth_backend.py +4 -0
  53. pulumi_vault/github/team.py +6 -2
  54. pulumi_vault/github/user.py +6 -2
  55. pulumi_vault/identity/entity.py +8 -6
  56. pulumi_vault/identity/entity_alias.py +8 -6
  57. pulumi_vault/identity/entity_policies.py +12 -12
  58. pulumi_vault/identity/get_entity.py +4 -0
  59. pulumi_vault/identity/get_group.py +4 -0
  60. pulumi_vault/identity/get_oidc_client_creds.py +4 -2
  61. pulumi_vault/identity/get_oidc_openid_config.py +6 -10
  62. pulumi_vault/identity/get_oidc_public_keys.py +6 -10
  63. pulumi_vault/identity/group.py +42 -38
  64. pulumi_vault/identity/group_alias.py +4 -2
  65. pulumi_vault/identity/group_member_entity_ids.py +16 -12
  66. pulumi_vault/identity/group_member_group_ids.py +20 -24
  67. pulumi_vault/identity/group_policies.py +8 -4
  68. pulumi_vault/identity/mfa_duo.py +8 -4
  69. pulumi_vault/identity/mfa_login_enforcement.py +8 -8
  70. pulumi_vault/identity/mfa_okta.py +8 -4
  71. pulumi_vault/identity/mfa_pingid.py +4 -0
  72. pulumi_vault/identity/mfa_totp.py +4 -0
  73. pulumi_vault/identity/oidc.py +4 -0
  74. pulumi_vault/identity/oidc_assignment.py +6 -10
  75. pulumi_vault/identity/oidc_client.py +10 -10
  76. pulumi_vault/identity/oidc_key.py +12 -16
  77. pulumi_vault/identity/oidc_key_allowed_client_id.py +12 -16
  78. pulumi_vault/identity/oidc_provider.py +16 -22
  79. pulumi_vault/identity/oidc_role.py +20 -28
  80. pulumi_vault/identity/oidc_scope.py +8 -6
  81. pulumi_vault/jwt/auth_backend.py +32 -20
  82. pulumi_vault/jwt/auth_backend_role.py +190 -63
  83. pulumi_vault/kmip/secret_backend.py +14 -10
  84. pulumi_vault/kmip/secret_role.py +4 -0
  85. pulumi_vault/kmip/secret_scope.py +4 -0
  86. pulumi_vault/kubernetes/auth_backend_config.py +4 -0
  87. pulumi_vault/kubernetes/auth_backend_role.py +172 -56
  88. pulumi_vault/kubernetes/get_service_account_token.py +8 -8
  89. pulumi_vault/kubernetes/secret_backend.py +8 -6
  90. pulumi_vault/kubernetes/secret_backend_role.py +24 -24
  91. pulumi_vault/kv/get_secret.py +4 -0
  92. pulumi_vault/kv/get_secret_subkeys_v2.py +6 -4
  93. pulumi_vault/kv/get_secret_v2.py +0 -58
  94. pulumi_vault/kv/get_secrets_list.py +8 -4
  95. pulumi_vault/kv/get_secrets_list_v2.py +12 -14
  96. pulumi_vault/kv/secret.py +4 -0
  97. pulumi_vault/kv/secret_backend_v2.py +4 -0
  98. pulumi_vault/kv/secret_v2.py +4 -2
  99. pulumi_vault/ldap/auth_backend.py +161 -66
  100. pulumi_vault/ldap/auth_backend_group.py +4 -0
  101. pulumi_vault/ldap/auth_backend_user.py +4 -0
  102. pulumi_vault/ldap/secret_backend.py +8 -4
  103. pulumi_vault/ldap/secret_backend_dynamic_role.py +4 -0
  104. pulumi_vault/ldap/secret_backend_library_set.py +4 -2
  105. pulumi_vault/ldap/secret_backend_static_role.py +4 -0
  106. pulumi_vault/managed/_inputs.py +132 -84
  107. pulumi_vault/managed/keys.py +28 -7
  108. pulumi_vault/managed/outputs.py +132 -84
  109. pulumi_vault/mfa_duo.py +6 -4
  110. pulumi_vault/mfa_okta.py +6 -4
  111. pulumi_vault/mfa_pingid.py +6 -4
  112. pulumi_vault/mfa_totp.py +12 -10
  113. pulumi_vault/mongodbatlas/secret_backend.py +4 -0
  114. pulumi_vault/mongodbatlas/secret_role.py +4 -2
  115. pulumi_vault/mount.py +42 -26
  116. pulumi_vault/nomad_secret_backend.py +8 -4
  117. pulumi_vault/nomad_secret_role.py +4 -0
  118. pulumi_vault/okta/_inputs.py +8 -8
  119. pulumi_vault/okta/auth_backend.py +10 -6
  120. pulumi_vault/okta/auth_backend_group.py +4 -0
  121. pulumi_vault/okta/auth_backend_user.py +4 -0
  122. pulumi_vault/okta/outputs.py +8 -8
  123. pulumi_vault/outputs.py +20 -0
  124. pulumi_vault/password_policy.py +8 -6
  125. pulumi_vault/pkisecret/backend_config_cluster.py +4 -0
  126. pulumi_vault/pkisecret/get_backend_issuer.py +0 -36
  127. pulumi_vault/pkisecret/get_backend_issuers.py +4 -0
  128. pulumi_vault/pkisecret/get_backend_key.py +6 -2
  129. pulumi_vault/pkisecret/get_backend_keys.py +4 -0
  130. pulumi_vault/pkisecret/secret_backend_cert.py +8 -6
  131. pulumi_vault/pkisecret/secret_backend_config_ca.py +8 -4
  132. pulumi_vault/pkisecret/secret_backend_config_issuers.py +4 -0
  133. pulumi_vault/pkisecret/secret_backend_config_urls.py +4 -0
  134. pulumi_vault/pkisecret/secret_backend_crl_config.py +6 -2
  135. pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +8 -4
  136. pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +14 -10
  137. pulumi_vault/pkisecret/secret_backend_issuer.py +4 -0
  138. pulumi_vault/pkisecret/secret_backend_role.py +4 -2
  139. pulumi_vault/pkisecret/secret_backend_root_cert.py +8 -4
  140. pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +10 -6
  141. pulumi_vault/pkisecret/secret_backend_sign.py +8 -6
  142. pulumi_vault/provider.py +8 -0
  143. pulumi_vault/pulumi-plugin.json +1 -2
  144. pulumi_vault/quota_lease_count.py +8 -6
  145. pulumi_vault/quota_rate_limit.py +4 -2
  146. pulumi_vault/rabbitmq/secret_backend.py +8 -4
  147. pulumi_vault/rabbitmq/secret_backend_role.py +4 -2
  148. pulumi_vault/raft_autopilot.py +4 -0
  149. pulumi_vault/raft_snapshot_agent_config.py +304 -109
  150. pulumi_vault/rgp_policy.py +6 -2
  151. pulumi_vault/saml/auth_backend.py +12 -8
  152. pulumi_vault/saml/auth_backend_role.py +178 -64
  153. pulumi_vault/secrets/sync_association.py +10 -12
  154. pulumi_vault/secrets/sync_aws_destination.py +8 -6
  155. pulumi_vault/secrets/sync_azure_destination.py +12 -10
  156. pulumi_vault/secrets/sync_config.py +6 -2
  157. pulumi_vault/secrets/sync_gcp_destination.py +6 -6
  158. pulumi_vault/secrets/sync_gh_destination.py +8 -6
  159. pulumi_vault/secrets/sync_github_apps.py +8 -8
  160. pulumi_vault/secrets/sync_vercel_destination.py +8 -6
  161. pulumi_vault/ssh/_inputs.py +32 -6
  162. pulumi_vault/ssh/outputs.py +32 -6
  163. pulumi_vault/ssh/secret_backend_ca.py +4 -0
  164. pulumi_vault/ssh/secret_backend_role.py +4 -4
  165. pulumi_vault/terraformcloud/secret_backend.py +56 -0
  166. pulumi_vault/terraformcloud/secret_creds.py +17 -2
  167. pulumi_vault/terraformcloud/secret_role.py +69 -2
  168. pulumi_vault/token.py +18 -14
  169. pulumi_vault/tokenauth/auth_backend_role.py +180 -64
  170. pulumi_vault/transform/alphabet.py +6 -4
  171. pulumi_vault/transform/get_decode.py +4 -4
  172. pulumi_vault/transform/get_encode.py +4 -4
  173. pulumi_vault/transform/role.py +6 -4
  174. pulumi_vault/transform/template.py +4 -4
  175. pulumi_vault/transit/get_decrypt.py +20 -4
  176. pulumi_vault/transit/get_encrypt.py +14 -0
  177. pulumi_vault/transit/secret_backend_key.py +6 -6
  178. pulumi_vault/transit/secret_cache_config.py +4 -0
  179. {pulumi_vault-6.1.1a1717550614.dist-info → pulumi_vault-6.2.0a1712470779.dist-info}/METADATA +1 -1
  180. pulumi_vault-6.2.0a1712470779.dist-info/RECORD +252 -0
  181. pulumi_vault-6.1.1a1717550614.dist-info/RECORD +0 -252
  182. {pulumi_vault-6.1.1a1717550614.dist-info → pulumi_vault-6.2.0a1712470779.dist-info}/WHEEL +0 -0
  183. {pulumi_vault-6.1.1a1717550614.dist-info → pulumi_vault-6.2.0a1712470779.dist-info}/top_level.txt +0 -0
pulumi_vault/azure/backend.py CHANGED
@@ -382,33 +382,37 @@ class Backend(pulumi.CustomResource):
382
382
 
383
383
  ### *Vault-1.9 And Above*
384
384
 
385
+ <!--Start PulumiCodeChooser -->
385
386
  ```python
386
387
  import pulumi
387
388
  import pulumi_vault as vault
388
389
 
389
390
  azure = vault.azure.Backend("azure",
390
- use_microsoft_graph_api=True,
391
- subscription_id="11111111-2222-3333-4444-111111111111",
392
- tenant_id="11111111-2222-3333-4444-222222222222",
393
391
  client_id="11111111-2222-3333-4444-333333333333",
394
392
  client_secret="12345678901234567890",
395
- environment="AzurePublicCloud")
393
+ environment="AzurePublicCloud",
394
+ subscription_id="11111111-2222-3333-4444-111111111111",
395
+ tenant_id="11111111-2222-3333-4444-222222222222",
396
+ use_microsoft_graph_api=True)
396
397
  ```
398
+ <!--End PulumiCodeChooser -->
397
399
 
398
400
  ### *Vault-1.8 And Below*
399
401
 
402
+ <!--Start PulumiCodeChooser -->
400
403
  ```python
401
404
  import pulumi
402
405
  import pulumi_vault as vault
403
406
 
404
407
  azure = vault.azure.Backend("azure",
405
- use_microsoft_graph_api=False,
406
- subscription_id="11111111-2222-3333-4444-111111111111",
407
- tenant_id="11111111-2222-3333-4444-222222222222",
408
408
  client_id="11111111-2222-3333-4444-333333333333",
409
409
  client_secret="12345678901234567890",
410
- environment="AzurePublicCloud")
410
+ environment="AzurePublicCloud",
411
+ subscription_id="11111111-2222-3333-4444-111111111111",
412
+ tenant_id="11111111-2222-3333-4444-222222222222",
413
+ use_microsoft_graph_api=False)
411
414
  ```
415
+ <!--End PulumiCodeChooser -->
412
416
 
413
417
  :param str resource_name: The name of the resource.
414
418
  :param pulumi.ResourceOptions opts: Options for the resource.
@@ -438,33 +442,37 @@ class Backend(pulumi.CustomResource):
438
442
 
439
443
  ### *Vault-1.9 And Above*
440
444
 
445
+ <!--Start PulumiCodeChooser -->
441
446
  ```python
442
447
  import pulumi
443
448
  import pulumi_vault as vault
444
449
 
445
450
  azure = vault.azure.Backend("azure",
446
- use_microsoft_graph_api=True,
447
- subscription_id="11111111-2222-3333-4444-111111111111",
448
- tenant_id="11111111-2222-3333-4444-222222222222",
449
451
  client_id="11111111-2222-3333-4444-333333333333",
450
452
  client_secret="12345678901234567890",
451
- environment="AzurePublicCloud")
453
+ environment="AzurePublicCloud",
454
+ subscription_id="11111111-2222-3333-4444-111111111111",
455
+ tenant_id="11111111-2222-3333-4444-222222222222",
456
+ use_microsoft_graph_api=True)
452
457
  ```
458
+ <!--End PulumiCodeChooser -->
453
459
 
454
460
  ### *Vault-1.8 And Below*
455
461
 
462
+ <!--Start PulumiCodeChooser -->
456
463
  ```python
457
464
  import pulumi
458
465
  import pulumi_vault as vault
459
466
 
460
467
  azure = vault.azure.Backend("azure",
461
- use_microsoft_graph_api=False,
462
- subscription_id="11111111-2222-3333-4444-111111111111",
463
- tenant_id="11111111-2222-3333-4444-222222222222",
464
468
  client_id="11111111-2222-3333-4444-333333333333",
465
469
  client_secret="12345678901234567890",
466
- environment="AzurePublicCloud")
470
+ environment="AzurePublicCloud",
471
+ subscription_id="11111111-2222-3333-4444-111111111111",
472
+ tenant_id="11111111-2222-3333-4444-222222222222",
473
+ use_microsoft_graph_api=False)
467
474
  ```
475
+ <!--End PulumiCodeChooser -->
468
476
 
469
477
  :param str resource_name: The name of the resource.
470
478
  :param BackendArgs args: The arguments to use to populate this resource's properties.
pulumi_vault/azure/backend_role.py CHANGED
@@ -465,16 +465,17 @@ class BackendRole(pulumi.CustomResource):
465
465
  """
466
466
  ## Example Usage
467
467
 
468
+ <!--Start PulumiCodeChooser -->
468
469
  ```python
469
470
  import pulumi
470
471
  import pulumi_vault as vault
471
472
 
472
473
  azure = vault.azure.Backend("azure",
473
- subscription_id=subscription_id,
474
- tenant_id=tenant_id,
475
- client_secret=client_secret,
476
- client_id=client_id)
477
- generated_role = vault.azure.BackendRole("generated_role",
474
+ subscription_id=var["subscription_id"],
475
+ tenant_id=var["tenant_id"],
476
+ client_secret=var["client_secret"],
477
+ client_id=var["client_id"])
478
+ generated_role = vault.azure.BackendRole("generatedRole",
478
479
  backend=azure.path,
479
480
  role="generated_role",
480
481
  sign_in_audience="AzureADMyOrg",
@@ -486,15 +487,16 @@ class BackendRole(pulumi.CustomResource):
486
487
  max_ttl="600",
487
488
  azure_roles=[vault.azure.BackendRoleAzureRoleArgs(
488
489
  role_name="Reader",
489
- scope=f"/subscriptions/{subscription_id}/resourceGroups/azure-vault-group",
490
+ scope=f"/subscriptions/{var['subscription_id']}/resourceGroups/azure-vault-group",
490
491
  )])
491
- existing_object_id = vault.azure.BackendRole("existing_object_id",
492
+ existing_object_id = vault.azure.BackendRole("existingObjectId",
492
493
  backend=azure.path,
493
494
  role="existing_object_id",
494
495
  application_object_id="11111111-2222-3333-4444-44444444444",
495
496
  ttl="300",
496
497
  max_ttl="600")
497
498
  ```
499
+ <!--End PulumiCodeChooser -->
498
500
 
499
501
  :param str resource_name: The name of the resource.
500
502
  :param pulumi.ResourceOptions opts: Options for the resource.
@@ -528,16 +530,17 @@ class BackendRole(pulumi.CustomResource):
528
530
  """
529
531
  ## Example Usage
530
532
 
533
+ <!--Start PulumiCodeChooser -->
531
534
  ```python
532
535
  import pulumi
533
536
  import pulumi_vault as vault
534
537
 
535
538
  azure = vault.azure.Backend("azure",
536
- subscription_id=subscription_id,
537
- tenant_id=tenant_id,
538
- client_secret=client_secret,
539
- client_id=client_id)
540
- generated_role = vault.azure.BackendRole("generated_role",
539
+ subscription_id=var["subscription_id"],
540
+ tenant_id=var["tenant_id"],
541
+ client_secret=var["client_secret"],
542
+ client_id=var["client_id"])
543
+ generated_role = vault.azure.BackendRole("generatedRole",
541
544
  backend=azure.path,
542
545
  role="generated_role",
543
546
  sign_in_audience="AzureADMyOrg",
@@ -549,15 +552,16 @@ class BackendRole(pulumi.CustomResource):
549
552
  max_ttl="600",
550
553
  azure_roles=[vault.azure.BackendRoleAzureRoleArgs(
551
554
  role_name="Reader",
552
- scope=f"/subscriptions/{subscription_id}/resourceGroups/azure-vault-group",
555
+ scope=f"/subscriptions/{var['subscription_id']}/resourceGroups/azure-vault-group",
553
556
  )])
554
- existing_object_id = vault.azure.BackendRole("existing_object_id",
557
+ existing_object_id = vault.azure.BackendRole("existingObjectId",
555
558
  backend=azure.path,
556
559
  role="existing_object_id",
557
560
  application_object_id="11111111-2222-3333-4444-44444444444",
558
561
  ttl="300",
559
562
  max_ttl="600")
560
563
  ```
564
+ <!--End PulumiCodeChooser -->
561
565
 
562
566
  :param str resource_name: The name of the resource.
563
567
  :param BackendRoleArgs args: The arguments to use to populate this resource's properties.
pulumi_vault/azure/get_access_credentials.py CHANGED
@@ -216,6 +216,7 @@ def get_access_credentials(backend: Optional[str] = None,
216
216
  """
217
217
  ## Example Usage
218
218
 
219
+ <!--Start PulumiCodeChooser -->
219
220
  ```python
220
221
  import pulumi
221
222
  import pulumi_vault as vault
@@ -226,6 +227,7 @@ def get_access_credentials(backend: Optional[str] = None,
226
227
  num_seconds_between_tests=1,
227
228
  max_cred_validation_seconds=300)
228
229
  ```
230
+ <!--End PulumiCodeChooser -->
229
231
 
230
232
  ## Caveats
231
233
 
@@ -315,6 +317,7 @@ def get_access_credentials_output(backend: Optional[pulumi.Input[str]] = None,
315
317
  """
316
318
  ## Example Usage
317
319
 
320
+ <!--Start PulumiCodeChooser -->
318
321
  ```python
319
322
  import pulumi
320
323
  import pulumi_vault as vault
@@ -325,6 +328,7 @@ def get_access_credentials_output(backend: Optional[pulumi.Input[str]] = None,
325
328
  num_seconds_between_tests=1,
326
329
  max_cred_validation_seconds=300)
327
330
  ```
331
+ <!--End PulumiCodeChooser -->
328
332
 
329
333
  ## Caveats
330
334