PyPI - pulumi-vault - Versions diffs - 6.2.0__py3-none-any.whl → 6.2.0a1712470779__py3-none-any.whl - Mend

pulumi-vault 6.2.0py3-none-any.whl → 6.2.0a1712470779py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (192) hide show

pulumi_vault/__init__.py +0 -26
pulumi_vault/_inputs.py +20 -0
pulumi_vault/ad/secret_backend.py +6 -2
pulumi_vault/ad/secret_library.py +4 -2
pulumi_vault/ad/secret_role.py +4 -0
pulumi_vault/alicloud/auth_backend_role.py +192 -69
pulumi_vault/approle/auth_backend_login.py +4 -0
pulumi_vault/approle/auth_backend_role.py +186 -63
pulumi_vault/approle/auth_backend_role_secret_id.py +4 -0
pulumi_vault/approle/get_auth_backend_role_id.py +4 -0
pulumi_vault/audit.py +20 -12
pulumi_vault/audit_request_header.py +6 -6
pulumi_vault/auth_backend.py +0 -47
pulumi_vault/aws/auth_backend_client.py +17 -253
pulumi_vault/aws/auth_backend_config_identity.py +4 -0
pulumi_vault/aws/auth_backend_identity_whitelist.py +10 -6
pulumi_vault/aws/auth_backend_login.py +8 -0
pulumi_vault/aws/auth_backend_role.py +186 -63
pulumi_vault/aws/auth_backend_roletag_blacklist.py +10 -6
pulumi_vault/aws/auth_backend_sts_role.py +4 -0
pulumi_vault/aws/secret_backend_role.py +4 -56
pulumi_vault/aws/secret_backend_static_role.py +4 -2
pulumi_vault/azure/auth_backend_config.py +10 -139
pulumi_vault/azure/auth_backend_role.py +186 -63
pulumi_vault/azure/backend.py +22 -217
pulumi_vault/azure/backend_role.py +18 -14
pulumi_vault/azure/get_access_credentials.py +4 -0
pulumi_vault/cert_auth_backend_role.py +208 -75
pulumi_vault/consul/secret_backend.py +18 -10
pulumi_vault/consul/secret_backend_role.py +4 -2
pulumi_vault/database/_inputs.py +784 -522
pulumi_vault/database/outputs.py +784 -522
pulumi_vault/database/secret_backend_connection.py +4 -2
pulumi_vault/database/secret_backend_role.py +4 -4
pulumi_vault/database/secret_backend_static_role.py +8 -10
pulumi_vault/database/secrets_mount.py +4 -286
pulumi_vault/egp_policy.py +8 -4
pulumi_vault/gcp/auth_backend.py +18 -226
pulumi_vault/gcp/auth_backend_role.py +264 -63
pulumi_vault/gcp/get_auth_backend_role.py +4 -0
pulumi_vault/gcp/secret_backend.py +9 -275
pulumi_vault/gcp/secret_impersonated_account.py +14 -12
pulumi_vault/gcp/secret_roleset.py +6 -4
pulumi_vault/gcp/secret_static_account.py +16 -14
pulumi_vault/generic/endpoint.py +8 -4
pulumi_vault/generic/get_secret.py +4 -40
pulumi_vault/get_auth_backend.py +4 -0
pulumi_vault/get_auth_backends.py +8 -0
pulumi_vault/get_namespace.py +12 -0
pulumi_vault/get_namespaces.py +12 -4
pulumi_vault/get_nomad_access_token.py +4 -0
pulumi_vault/get_policy_document.py +8 -8
pulumi_vault/get_raft_autopilot_state.py +4 -0
pulumi_vault/github/auth_backend.py +4 -0
pulumi_vault/github/team.py +6 -2
pulumi_vault/github/user.py +6 -2
pulumi_vault/identity/entity.py +8 -6
pulumi_vault/identity/entity_alias.py +8 -6
pulumi_vault/identity/entity_policies.py +12 -12
pulumi_vault/identity/get_entity.py +4 -0
pulumi_vault/identity/get_group.py +4 -0
pulumi_vault/identity/get_oidc_client_creds.py +4 -2
pulumi_vault/identity/get_oidc_openid_config.py +6 -10
pulumi_vault/identity/get_oidc_public_keys.py +6 -10
pulumi_vault/identity/group.py +42 -38
pulumi_vault/identity/group_alias.py +4 -2
pulumi_vault/identity/group_member_entity_ids.py +16 -12
pulumi_vault/identity/group_member_group_ids.py +20 -24
pulumi_vault/identity/group_policies.py +8 -4
pulumi_vault/identity/mfa_duo.py +8 -4
pulumi_vault/identity/mfa_login_enforcement.py +8 -8
pulumi_vault/identity/mfa_okta.py +8 -4
pulumi_vault/identity/mfa_pingid.py +4 -0
pulumi_vault/identity/mfa_totp.py +4 -0
pulumi_vault/identity/oidc.py +4 -0
pulumi_vault/identity/oidc_assignment.py +6 -10
pulumi_vault/identity/oidc_client.py +10 -10
pulumi_vault/identity/oidc_key.py +12 -16
pulumi_vault/identity/oidc_key_allowed_client_id.py +12 -16
pulumi_vault/identity/oidc_provider.py +16 -22
pulumi_vault/identity/oidc_role.py +20 -28
pulumi_vault/identity/oidc_scope.py +8 -6
pulumi_vault/jwt/auth_backend.py +32 -20
pulumi_vault/jwt/auth_backend_role.py +225 -91
pulumi_vault/kmip/secret_backend.py +14 -10
pulumi_vault/kmip/secret_role.py +4 -0
pulumi_vault/kmip/secret_scope.py +4 -0
pulumi_vault/kubernetes/auth_backend_config.py +4 -0
pulumi_vault/kubernetes/auth_backend_role.py +172 -56
pulumi_vault/kubernetes/get_service_account_token.py +8 -8
pulumi_vault/kubernetes/secret_backend.py +8 -288
pulumi_vault/kubernetes/secret_backend_role.py +24 -24
pulumi_vault/kv/get_secret.py +4 -0
pulumi_vault/kv/get_secret_subkeys_v2.py +6 -4
pulumi_vault/kv/get_secret_v2.py +0 -58
pulumi_vault/kv/get_secrets_list.py +8 -4
pulumi_vault/kv/get_secrets_list_v2.py +12 -14
pulumi_vault/kv/secret.py +4 -0
pulumi_vault/kv/secret_backend_v2.py +4 -0
pulumi_vault/kv/secret_v2.py +4 -2
pulumi_vault/ldap/auth_backend.py +161 -66
pulumi_vault/ldap/auth_backend_group.py +4 -0
pulumi_vault/ldap/auth_backend_user.py +4 -0
pulumi_vault/ldap/secret_backend.py +8 -286
pulumi_vault/ldap/secret_backend_dynamic_role.py +4 -0
pulumi_vault/ldap/secret_backend_library_set.py +4 -2
pulumi_vault/ldap/secret_backend_static_role.py +4 -0
pulumi_vault/managed/_inputs.py +132 -84
pulumi_vault/managed/keys.py +28 -7
pulumi_vault/managed/outputs.py +132 -84
pulumi_vault/mfa_duo.py +6 -4
pulumi_vault/mfa_okta.py +6 -4
pulumi_vault/mfa_pingid.py +6 -4
pulumi_vault/mfa_totp.py +12 -10
pulumi_vault/mongodbatlas/secret_backend.py +4 -0
pulumi_vault/mongodbatlas/secret_role.py +4 -2
pulumi_vault/mount.py +42 -350
pulumi_vault/nomad_secret_backend.py +8 -4
pulumi_vault/nomad_secret_role.py +4 -0
pulumi_vault/okta/_inputs.py +8 -8
pulumi_vault/okta/auth_backend.py +10 -459
pulumi_vault/okta/auth_backend_group.py +4 -0
pulumi_vault/okta/auth_backend_user.py +4 -0
pulumi_vault/okta/outputs.py +8 -8
pulumi_vault/outputs.py +20 -0
pulumi_vault/password_policy.py +8 -6
pulumi_vault/pkisecret/__init__.py +0 -2
pulumi_vault/pkisecret/_inputs.py +0 -30
pulumi_vault/pkisecret/backend_config_cluster.py +4 -0
pulumi_vault/pkisecret/get_backend_issuer.py +0 -36
pulumi_vault/pkisecret/get_backend_issuers.py +4 -0
pulumi_vault/pkisecret/get_backend_key.py +6 -2
pulumi_vault/pkisecret/get_backend_keys.py +4 -0
pulumi_vault/pkisecret/outputs.py +0 -54
pulumi_vault/pkisecret/secret_backend_cert.py +8 -6
pulumi_vault/pkisecret/secret_backend_config_ca.py +8 -4
pulumi_vault/pkisecret/secret_backend_config_issuers.py +4 -0
pulumi_vault/pkisecret/secret_backend_config_urls.py +4 -0
pulumi_vault/pkisecret/secret_backend_crl_config.py +6 -2
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +8 -4
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +14 -10
pulumi_vault/pkisecret/secret_backend_issuer.py +4 -0
pulumi_vault/pkisecret/secret_backend_role.py +4 -2
pulumi_vault/pkisecret/secret_backend_root_cert.py +8 -4
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +10 -6
pulumi_vault/pkisecret/secret_backend_sign.py +8 -6
pulumi_vault/provider.py +8 -0
pulumi_vault/pulumi-plugin.json +1 -2
pulumi_vault/quota_lease_count.py +8 -53
pulumi_vault/quota_rate_limit.py +4 -49
pulumi_vault/rabbitmq/secret_backend.py +8 -4
pulumi_vault/rabbitmq/secret_backend_role.py +4 -2
pulumi_vault/raft_autopilot.py +4 -0
pulumi_vault/raft_snapshot_agent_config.py +304 -109
pulumi_vault/rgp_policy.py +6 -2
pulumi_vault/saml/auth_backend.py +12 -8
pulumi_vault/saml/auth_backend_role.py +178 -64
pulumi_vault/secrets/sync_association.py +10 -12
pulumi_vault/secrets/sync_aws_destination.py +8 -6
pulumi_vault/secrets/sync_azure_destination.py +12 -10
pulumi_vault/secrets/sync_config.py +6 -2
pulumi_vault/secrets/sync_gcp_destination.py +6 -6
pulumi_vault/secrets/sync_gh_destination.py +8 -6
pulumi_vault/secrets/sync_github_apps.py +8 -8
pulumi_vault/secrets/sync_vercel_destination.py +8 -6
pulumi_vault/ssh/_inputs.py +32 -6
pulumi_vault/ssh/outputs.py +32 -6
pulumi_vault/ssh/secret_backend_ca.py +4 -94
pulumi_vault/ssh/secret_backend_role.py +4 -4
pulumi_vault/terraformcloud/secret_backend.py +56 -0
pulumi_vault/terraformcloud/secret_creds.py +17 -2
pulumi_vault/terraformcloud/secret_role.py +69 -2
pulumi_vault/token.py +18 -14
pulumi_vault/tokenauth/auth_backend_role.py +180 -64
pulumi_vault/transform/alphabet.py +6 -4
pulumi_vault/transform/get_decode.py +4 -4
pulumi_vault/transform/get_encode.py +4 -4
pulumi_vault/transform/role.py +6 -4
pulumi_vault/transform/template.py +4 -4
pulumi_vault/transit/get_decrypt.py +20 -4
pulumi_vault/transit/get_encrypt.py +14 -0
pulumi_vault/transit/secret_backend_key.py +6 -6
pulumi_vault/transit/secret_cache_config.py +4 -0
{pulumi_vault-6.2.0.dist-info → pulumi_vault-6.2.0a1712470779.dist-info}/METADATA +1 -1
pulumi_vault-6.2.0a1712470779.dist-info/RECORD +252 -0
{pulumi_vault-6.2.0.dist-info → pulumi_vault-6.2.0a1712470779.dist-info}/WHEEL +1 -1
pulumi_vault/pkisecret/backend_config_est.py +0 -614
pulumi_vault/pkisecret/get_backend_config_est.py +0 -233
pulumi_vault/plugin.py +0 -590
pulumi_vault/plugin_pinned_version.py +0 -293
pulumi_vault-6.2.0.dist-info/RECORD +0 -256
{pulumi_vault-6.2.0.dist-info → pulumi_vault-6.2.0a1712470779.dist-info}/top_level.txt +0 -0

pulumi_vault/tokenauth/auth_backend_role.py CHANGED Viewed

@@ -50,15 +50,31 @@ class AuthBackendRoleArgs:
                > Due to a bug the resource. This *will* cause all existing tokens issued by this role to be revoked.
         :param pulumi.Input[bool] renewable: Whether to disable the ability of the token to be renewed past its initial TTL.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
-        :param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
-        :param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
-        :param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
-        :param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
-        :param pulumi.Input[int] token_period: Generated Token's Period
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
+               addresses which can authenticate successfully, and ties the resulting token to these blocks
+               as well.
+        :param pulumi.Input[int] token_explicit_max_ttl: If set, will encode an
+               [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
+               onto the token in number of seconds. This is a hard cap even if `token_ttl` and
+               `token_max_ttl` would otherwise allow a renewal.
+        :param pulumi.Input[int] token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
+               Its current value will be referenced at renewal time.
+        :param pulumi.Input[bool] token_no_default_policy: If set, the default policy will not be set on
+               generated tokens; otherwise it will be added to the policies set in token_policies.
+        :param pulumi.Input[int] token_num_uses: The [maximum number](https://www.vaultproject.io/api-docs/token#token_num_uses)
+               of times a generated token may be used (within its lifetime); 0 means unlimited.
+        :param pulumi.Input[int] token_period: If set, indicates that the
+               token generated using this role should never expire. The token should be renewed within the
+               duration specified by this value. At each renewal, the token's TTL will be set to the
+               value of this field. Specified in seconds.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
-        :param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
-        :param pulumi.Input[str] token_type: The type of token to generate, service or batch
+        :param pulumi.Input[int] token_ttl: The incremental lifetime for generated tokens in number of seconds.
+               Its current value will be referenced at renewal time.
+        :param pulumi.Input[str] token_type: The type of token that should be generated. Can be `service`,
+               `batch`, or `default` to use the mount's tuned default (which unless changed will be
+               `service` tokens). For token store roles, there are two additional possibilities:
+               `default-service` and `default-batch` which specify the type to return unless the client
+               requests a different type at generation time.
         """
         pulumi.set(__self__, "role_name", role_name)
         if allowed_entity_aliases is not None:
@@ -227,7 +243,9 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenBoundCidrs")
     def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Specifies the blocks of IP addresses which are allowed to use the generated token
+        List of CIDR blocks; if set, specifies blocks of IP
+        addresses which can authenticate successfully, and ties the resulting token to these blocks
+        as well.
         """
         return pulumi.get(self, "token_bound_cidrs")
@@ -239,7 +257,10 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenExplicitMaxTtl")
     def token_explicit_max_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        Generated Token's Explicit Maximum TTL in seconds
+        If set, will encode an
+        [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
+        onto the token in number of seconds. This is a hard cap even if `token_ttl` and
+        `token_max_ttl` would otherwise allow a renewal.
         """
         return pulumi.get(self, "token_explicit_max_ttl")
@@ -251,7 +272,8 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenMaxTtl")
     def token_max_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum lifetime of the generated token
+        The maximum lifetime for generated tokens in number of seconds.
+        Its current value will be referenced at renewal time.
         """
         return pulumi.get(self, "token_max_ttl")
@@ -263,7 +285,8 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenNoDefaultPolicy")
     def token_no_default_policy(self) -> Optional[pulumi.Input[bool]]:
         """
-        If true, the 'default' policy will not automatically be added to generated tokens
+        If set, the default policy will not be set on
+        generated tokens; otherwise it will be added to the policies set in token_policies.
         """
         return pulumi.get(self, "token_no_default_policy")
@@ -275,7 +298,8 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenNumUses")
     def token_num_uses(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum number of times a token may be used, a value of zero means unlimited
+        The [maximum number](https://www.vaultproject.io/api-docs/token#token_num_uses)
+        of times a generated token may be used (within its lifetime); 0 means unlimited.
         """
         return pulumi.get(self, "token_num_uses")
@@ -287,7 +311,10 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenPeriod")
     def token_period(self) -> Optional[pulumi.Input[int]]:
         """
-        Generated Token's Period
+        If set, indicates that the
+        token generated using this role should never expire. The token should be renewed within the
+        duration specified by this value. At each renewal, the token's TTL will be set to the
+        value of this field. Specified in seconds.
         """
         return pulumi.get(self, "token_period")
@@ -311,7 +338,8 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenTtl")
     def token_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        The initial ttl of the token to generate in seconds
+        The incremental lifetime for generated tokens in number of seconds.
+        Its current value will be referenced at renewal time.
         """
         return pulumi.get(self, "token_ttl")
@@ -323,7 +351,11 @@ class AuthBackendRoleArgs:
     @pulumi.getter(name="tokenType")
     def token_type(self) -> Optional[pulumi.Input[str]]:
         """
-        The type of token to generate, service or batch
+        The type of token that should be generated. Can be `service`,
+        `batch`, or `default` to use the mount's tuned default (which unless changed will be
+        `service` tokens). For token store roles, there are two additional possibilities:
+        `default-service` and `default-batch` which specify the type to return unless the client
+        requests a different type at generation time.
         """
         return pulumi.get(self, "token_type")
@@ -371,15 +403,31 @@ class _AuthBackendRoleState:
                > Due to a bug the resource. This *will* cause all existing tokens issued by this role to be revoked.
         :param pulumi.Input[bool] renewable: Whether to disable the ability of the token to be renewed past its initial TTL.
         :param pulumi.Input[str] role_name: The name of the role.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
-        :param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
-        :param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
-        :param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
-        :param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
-        :param pulumi.Input[int] token_period: Generated Token's Period
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
+               addresses which can authenticate successfully, and ties the resulting token to these blocks
+               as well.
+        :param pulumi.Input[int] token_explicit_max_ttl: If set, will encode an
+               [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
+               onto the token in number of seconds. This is a hard cap even if `token_ttl` and
+               `token_max_ttl` would otherwise allow a renewal.
+        :param pulumi.Input[int] token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
+               Its current value will be referenced at renewal time.
+        :param pulumi.Input[bool] token_no_default_policy: If set, the default policy will not be set on
+               generated tokens; otherwise it will be added to the policies set in token_policies.
+        :param pulumi.Input[int] token_num_uses: The [maximum number](https://www.vaultproject.io/api-docs/token#token_num_uses)
+               of times a generated token may be used (within its lifetime); 0 means unlimited.
+        :param pulumi.Input[int] token_period: If set, indicates that the
+               token generated using this role should never expire. The token should be renewed within the
+               duration specified by this value. At each renewal, the token's TTL will be set to the
+               value of this field. Specified in seconds.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
-        :param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
-        :param pulumi.Input[str] token_type: The type of token to generate, service or batch
+        :param pulumi.Input[int] token_ttl: The incremental lifetime for generated tokens in number of seconds.
+               Its current value will be referenced at renewal time.
+        :param pulumi.Input[str] token_type: The type of token that should be generated. Can be `service`,
+               `batch`, or `default` to use the mount's tuned default (which unless changed will be
+               `service` tokens). For token store roles, there are two additional possibilities:
+               `default-service` and `default-batch` which specify the type to return unless the client
+               requests a different type at generation time.
         """
         if allowed_entity_aliases is not None:
             pulumi.set(__self__, "allowed_entity_aliases", allowed_entity_aliases)
@@ -549,7 +597,9 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenBoundCidrs")
     def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Specifies the blocks of IP addresses which are allowed to use the generated token
+        List of CIDR blocks; if set, specifies blocks of IP
+        addresses which can authenticate successfully, and ties the resulting token to these blocks
+        as well.
         """
         return pulumi.get(self, "token_bound_cidrs")
@@ -561,7 +611,10 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenExplicitMaxTtl")
     def token_explicit_max_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        Generated Token's Explicit Maximum TTL in seconds
+        If set, will encode an
+        [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
+        onto the token in number of seconds. This is a hard cap even if `token_ttl` and
+        `token_max_ttl` would otherwise allow a renewal.
         """
         return pulumi.get(self, "token_explicit_max_ttl")
@@ -573,7 +626,8 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenMaxTtl")
     def token_max_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum lifetime of the generated token
+        The maximum lifetime for generated tokens in number of seconds.
+        Its current value will be referenced at renewal time.
         """
         return pulumi.get(self, "token_max_ttl")
@@ -585,7 +639,8 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenNoDefaultPolicy")
     def token_no_default_policy(self) -> Optional[pulumi.Input[bool]]:
         """
-        If true, the 'default' policy will not automatically be added to generated tokens
+        If set, the default policy will not be set on
+        generated tokens; otherwise it will be added to the policies set in token_policies.
         """
         return pulumi.get(self, "token_no_default_policy")
@@ -597,7 +652,8 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenNumUses")
     def token_num_uses(self) -> Optional[pulumi.Input[int]]:
         """
-        The maximum number of times a token may be used, a value of zero means unlimited
+        The [maximum number](https://www.vaultproject.io/api-docs/token#token_num_uses)
+        of times a generated token may be used (within its lifetime); 0 means unlimited.
         """
         return pulumi.get(self, "token_num_uses")
@@ -609,7 +665,10 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenPeriod")
     def token_period(self) -> Optional[pulumi.Input[int]]:
         """
-        Generated Token's Period
+        If set, indicates that the
+        token generated using this role should never expire. The token should be renewed within the
+        duration specified by this value. At each renewal, the token's TTL will be set to the
+        value of this field. Specified in seconds.
         """
         return pulumi.get(self, "token_period")
@@ -633,7 +692,8 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenTtl")
     def token_ttl(self) -> Optional[pulumi.Input[int]]:
         """
-        The initial ttl of the token to generate in seconds
+        The incremental lifetime for generated tokens in number of seconds.
+        Its current value will be referenced at renewal time.
         """
         return pulumi.get(self, "token_ttl")
@@ -645,7 +705,11 @@ class _AuthBackendRoleState:
     @pulumi.getter(name="tokenType")
     def token_type(self) -> Optional[pulumi.Input[str]]:
         """
-        The type of token to generate, service or batch
+        The type of token that should be generated. Can be `service`,
+        `batch`, or `default` to use the mount's tuned default (which unless changed will be
+        `service` tokens). For token store roles, there are two additional possibilities:
+        `default-service` and `default-batch` which specify the type to return unless the client
+        requests a different type at generation time.
         """
         return pulumi.get(self, "token_type")
@@ -686,24 +750,26 @@ class AuthBackendRole(pulumi.CustomResource):
         ## Example Usage
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         example = vault.tokenauth.AuthBackendRole("example",
-            role_name="my-role",
+            allowed_entity_aliases=["test_entity"],
             allowed_policies=[
                 "dev",
                 "test",
             ],
             disallowed_policies=["default"],
-            allowed_entity_aliases=["test_entity"],
             orphan=True,
-            token_period=86400,
+            path_suffix="path-suffix",
             renewable=True,
+            role_name="my-role",
             token_explicit_max_ttl=115200,
-            path_suffix="path-suffix")
+            token_period=86400)
         ```
+        <!--End PulumiCodeChooser -->
         ## Import
@@ -730,15 +796,31 @@ class AuthBackendRole(pulumi.CustomResource):
                > Due to a bug the resource. This *will* cause all existing tokens issued by this role to be revoked.
         :param pulumi.Input[bool] renewable: Whether to disable the ability of the token to be renewed past its initial TTL.
         :param pulumi.Input[str] role_name: The name of the role.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
-        :param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
-        :param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
-        :param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
-        :param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
-        :param pulumi.Input[int] token_period: Generated Token's Period
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
+               addresses which can authenticate successfully, and ties the resulting token to these blocks
+               as well.
+        :param pulumi.Input[int] token_explicit_max_ttl: If set, will encode an
+               [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
+               onto the token in number of seconds. This is a hard cap even if `token_ttl` and
+               `token_max_ttl` would otherwise allow a renewal.
+        :param pulumi.Input[int] token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
+               Its current value will be referenced at renewal time.
+        :param pulumi.Input[bool] token_no_default_policy: If set, the default policy will not be set on
+               generated tokens; otherwise it will be added to the policies set in token_policies.
+        :param pulumi.Input[int] token_num_uses: The [maximum number](https://www.vaultproject.io/api-docs/token#token_num_uses)
+               of times a generated token may be used (within its lifetime); 0 means unlimited.
+        :param pulumi.Input[int] token_period: If set, indicates that the
+               token generated using this role should never expire. The token should be renewed within the
+               duration specified by this value. At each renewal, the token's TTL will be set to the
+               value of this field. Specified in seconds.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
-        :param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
-        :param pulumi.Input[str] token_type: The type of token to generate, service or batch
+        :param pulumi.Input[int] token_ttl: The incremental lifetime for generated tokens in number of seconds.
+               Its current value will be referenced at renewal time.
+        :param pulumi.Input[str] token_type: The type of token that should be generated. Can be `service`,
+               `batch`, or `default` to use the mount's tuned default (which unless changed will be
+               `service` tokens). For token store roles, there are two additional possibilities:
+               `default-service` and `default-batch` which specify the type to return unless the client
+               requests a different type at generation time.
         """
         ...
     @overload
@@ -753,24 +835,26 @@ class AuthBackendRole(pulumi.CustomResource):
         ## Example Usage
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         example = vault.tokenauth.AuthBackendRole("example",
-            role_name="my-role",
+            allowed_entity_aliases=["test_entity"],
             allowed_policies=[
                 "dev",
                 "test",
             ],
             disallowed_policies=["default"],
-            allowed_entity_aliases=["test_entity"],
             orphan=True,
-            token_period=86400,
+            path_suffix="path-suffix",
             renewable=True,
+            role_name="my-role",
             token_explicit_max_ttl=115200,
-            path_suffix="path-suffix")
+            token_period=86400)
         ```
+        <!--End PulumiCodeChooser -->
         ## Import
@@ -895,15 +979,31 @@ class AuthBackendRole(pulumi.CustomResource):
                > Due to a bug the resource. This *will* cause all existing tokens issued by this role to be revoked.
         :param pulumi.Input[bool] renewable: Whether to disable the ability of the token to be renewed past its initial TTL.
         :param pulumi.Input[str] role_name: The name of the role.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
-        :param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
-        :param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
-        :param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
-        :param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
-        :param pulumi.Input[int] token_period: Generated Token's Period
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
+               addresses which can authenticate successfully, and ties the resulting token to these blocks
+               as well.
+        :param pulumi.Input[int] token_explicit_max_ttl: If set, will encode an
+               [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
+               onto the token in number of seconds. This is a hard cap even if `token_ttl` and
+               `token_max_ttl` would otherwise allow a renewal.
+        :param pulumi.Input[int] token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
+               Its current value will be referenced at renewal time.
+        :param pulumi.Input[bool] token_no_default_policy: If set, the default policy will not be set on
+               generated tokens; otherwise it will be added to the policies set in token_policies.
+        :param pulumi.Input[int] token_num_uses: The [maximum number](https://www.vaultproject.io/api-docs/token#token_num_uses)
+               of times a generated token may be used (within its lifetime); 0 means unlimited.
+        :param pulumi.Input[int] token_period: If set, indicates that the
+               token generated using this role should never expire. The token should be renewed within the
+               duration specified by this value. At each renewal, the token's TTL will be set to the
+               value of this field. Specified in seconds.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
-        :param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
-        :param pulumi.Input[str] token_type: The type of token to generate, service or batch
+        :param pulumi.Input[int] token_ttl: The incremental lifetime for generated tokens in number of seconds.
+               Its current value will be referenced at renewal time.
+        :param pulumi.Input[str] token_type: The type of token that should be generated. Can be `service`,
+               `batch`, or `default` to use the mount's tuned default (which unless changed will be
+               `service` tokens). For token store roles, there are two additional possibilities:
+               `default-service` and `default-batch` which specify the type to return unless the client
+               requests a different type at generation time.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -1019,7 +1119,9 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenBoundCidrs")
     def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[str]]]:
         """
-        Specifies the blocks of IP addresses which are allowed to use the generated token
+        List of CIDR blocks; if set, specifies blocks of IP
+        addresses which can authenticate successfully, and ties the resulting token to these blocks
+        as well.
         """
         return pulumi.get(self, "token_bound_cidrs")
@@ -1027,7 +1129,10 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenExplicitMaxTtl")
     def token_explicit_max_ttl(self) -> pulumi.Output[Optional[int]]:
         """
-        Generated Token's Explicit Maximum TTL in seconds
+        If set, will encode an
+        [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
+        onto the token in number of seconds. This is a hard cap even if `token_ttl` and
+        `token_max_ttl` would otherwise allow a renewal.
         """
         return pulumi.get(self, "token_explicit_max_ttl")
@@ -1035,7 +1140,8 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenMaxTtl")
     def token_max_ttl(self) -> pulumi.Output[Optional[int]]:
         """
-        The maximum lifetime of the generated token
+        The maximum lifetime for generated tokens in number of seconds.
+        Its current value will be referenced at renewal time.
         """
         return pulumi.get(self, "token_max_ttl")
@@ -1043,7 +1149,8 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenNoDefaultPolicy")
     def token_no_default_policy(self) -> pulumi.Output[Optional[bool]]:
         """
-        If true, the 'default' policy will not automatically be added to generated tokens
+        If set, the default policy will not be set on
+        generated tokens; otherwise it will be added to the policies set in token_policies.
         """
         return pulumi.get(self, "token_no_default_policy")
@@ -1051,7 +1158,8 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenNumUses")
     def token_num_uses(self) -> pulumi.Output[Optional[int]]:
         """
-        The maximum number of times a token may be used, a value of zero means unlimited
+        The [maximum number](https://www.vaultproject.io/api-docs/token#token_num_uses)
+        of times a generated token may be used (within its lifetime); 0 means unlimited.
         """
         return pulumi.get(self, "token_num_uses")
@@ -1059,7 +1167,10 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenPeriod")
     def token_period(self) -> pulumi.Output[Optional[int]]:
         """
-        Generated Token's Period
+        If set, indicates that the
+        token generated using this role should never expire. The token should be renewed within the
+        duration specified by this value. At each renewal, the token's TTL will be set to the
+        value of this field. Specified in seconds.
         """
         return pulumi.get(self, "token_period")
@@ -1075,7 +1186,8 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenTtl")
     def token_ttl(self) -> pulumi.Output[Optional[int]]:
         """
-        The initial ttl of the token to generate in seconds
+        The incremental lifetime for generated tokens in number of seconds.
+        Its current value will be referenced at renewal time.
         """
         return pulumi.get(self, "token_ttl")
@@ -1083,7 +1195,11 @@ class AuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="tokenType")
     def token_type(self) -> pulumi.Output[Optional[str]]:
         """
-        The type of token to generate, service or batch
+        The type of token that should be generated. Can be `service`,
+        `batch`, or `default` to use the mount's tuned default (which unless changed will be
+        `service` tokens). For token store roles, there are two additional possibilities:
+        `default-service` and `default-batch` which specify the type to return unless the client
+        requests a different type at generation time.
         """
         return pulumi.get(self, "token_type")

pulumi_vault/transform/alphabet.py CHANGED Viewed

@@ -183,18 +183,19 @@ class Alphabet(pulumi.CustomResource):
         ## Example Usage
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
-        mount_transform = vault.Mount("mount_transform",
+        mount_transform = vault.Mount("mountTransform",
             path="transform",
             type="transform")
         test = vault.transform.Alphabet("test",
             path=mount_transform.path,
-            name="numerics",
             alphabet="0123456789")
         ```
+        <!--End PulumiCodeChooser -->
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
@@ -219,18 +220,19 @@ class Alphabet(pulumi.CustomResource):
         ## Example Usage
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
-        mount_transform = vault.Mount("mount_transform",
+        mount_transform = vault.Mount("mountTransform",
             path="transform",
             type="transform")
         test = vault.transform.Alphabet("test",
             path=mount_transform.path,
-            name="numerics",
             alphabet="0123456789")
         ```
+        <!--End PulumiCodeChooser -->
         :param str resource_name: The name of the resource.
         :param AlphabetArgs args: The arguments to use to populate this resource's properties.

pulumi_vault/transform/get_decode.py CHANGED Viewed

@@ -142,6 +142,7 @@ def get_decode(batch_inputs: Optional[Sequence[Mapping[str, Any]]] = None,
     ## Example Usage
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_vault as vault
@@ -151,19 +152,18 @@ def get_decode(batch_inputs: Optional[Sequence[Mapping[str, Any]]] = None,
         type="transform")
     ccn_fpe = vault.transform.Transformation("ccn-fpe",
         path=transform.path,
-        name="ccn-fpe",
         type="fpe",
         template="builtin/creditcardnumber",
         tweak_source="internal",
         allowed_roles=["payments"])
     payments = vault.transform.Role("payments",
         path=ccn_fpe.path,
-        name="payments",
         transformations=["ccn-fpe"])
     test = vault.transform.get_decode_output(path=payments.path,
         role_name="payments",
         value="9300-3376-4943-8903")
     ```
+    <!--End PulumiCodeChooser -->
     :param Sequence[Mapping[str, Any]] batch_inputs: Specifies a list of items to be decoded in a single batch. If this parameter is set, the top-level parameters 'value', 'transformation' and 'tweak' will be ignored. Each batch item within the list can specify these parameters instead.
@@ -223,6 +223,7 @@ def get_decode_output(batch_inputs: Optional[pulumi.Input[Optional[Sequence[Mapp
     ## Example Usage
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_vault as vault
@@ -232,19 +233,18 @@ def get_decode_output(batch_inputs: Optional[pulumi.Input[Optional[Sequence[Mapp
         type="transform")
     ccn_fpe = vault.transform.Transformation("ccn-fpe",
         path=transform.path,
-        name="ccn-fpe",
         type="fpe",
         template="builtin/creditcardnumber",
         tweak_source="internal",
         allowed_roles=["payments"])
     payments = vault.transform.Role("payments",
         path=ccn_fpe.path,
-        name="payments",
         transformations=["ccn-fpe"])
     test = vault.transform.get_decode_output(path=payments.path,
         role_name="payments",
         value="9300-3376-4943-8903")
     ```
+    <!--End PulumiCodeChooser -->
     :param Sequence[Mapping[str, Any]] batch_inputs: Specifies a list of items to be decoded in a single batch. If this parameter is set, the top-level parameters 'value', 'transformation' and 'tweak' will be ignored. Each batch item within the list can specify these parameters instead.

pulumi_vault/transform/get_encode.py CHANGED Viewed

@@ -142,6 +142,7 @@ def get_encode(batch_inputs: Optional[Sequence[Mapping[str, Any]]] = None,
     ## Example Usage
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_vault as vault
@@ -151,14 +152,12 @@ def get_encode(batch_inputs: Optional[Sequence[Mapping[str, Any]]] = None,
         type="transform")
     ccn_fpe = vault.transform.Transformation("ccn-fpe",
         path=transform.path,
-        name="ccn-fpe",
         type="fpe",
         template="builtin/creditcardnumber",
         tweak_source="internal",
         allowed_roles=["payments"])
     payments = vault.transform.Role("payments",
         path=ccn_fpe.path,
-        name="payments",
         transformations=["ccn-fpe"])
     test = vault.transform.get_encode_output(path=payments.path,
         role_name="payments",
@@ -166,6 +165,7 @@ def get_encode(batch_inputs: Optional[Sequence[Mapping[str, Any]]] = None,
             "value": "1111-2222-3333-4444",
         }])
     ```
+    <!--End PulumiCodeChooser -->
     :param Sequence[Mapping[str, Any]] batch_inputs: Specifies a list of items to be encoded in a single batch. If this parameter is set, the parameters 'value', 'transformation' and 'tweak' will be ignored. Each batch item within the list can specify these parameters instead.
@@ -225,6 +225,7 @@ def get_encode_output(batch_inputs: Optional[pulumi.Input[Optional[Sequence[Mapp
     ## Example Usage
+    <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
     import pulumi_vault as vault
@@ -234,14 +235,12 @@ def get_encode_output(batch_inputs: Optional[pulumi.Input[Optional[Sequence[Mapp
         type="transform")
     ccn_fpe = vault.transform.Transformation("ccn-fpe",
         path=transform.path,
-        name="ccn-fpe",
         type="fpe",
         template="builtin/creditcardnumber",
         tweak_source="internal",
         allowed_roles=["payments"])
     payments = vault.transform.Role("payments",
         path=ccn_fpe.path,
-        name="payments",
         transformations=["ccn-fpe"])
     test = vault.transform.get_encode_output(path=payments.path,
         role_name="payments",
@@ -249,6 +248,7 @@ def get_encode_output(batch_inputs: Optional[pulumi.Input[Optional[Sequence[Mapp
             "value": "1111-2222-3333-4444",
         }])
     ```
+    <!--End PulumiCodeChooser -->
     :param Sequence[Mapping[str, Any]] batch_inputs: Specifies a list of items to be encoded in a single batch. If this parameter is set, the parameters 'value', 'transformation' and 'tweak' will be ignored. Each batch item within the list can specify these parameters instead.

pulumi-vault 6.2.0__py3-none-any.whl → 6.2.0a1712470779__py3-none-any.whl

pulumi-vault 6.2.0py3-none-any.whl → 6.2.0a1712470779py3-none-any.whl