pulumi-vault 6.2.0a1713339773__py3-none-any.whl → 6.2.0a1713905519__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/_inputs.py +0 -20
- pulumi_vault/ad/secret_backend.py +2 -6
- pulumi_vault/ad/secret_library.py +2 -4
- pulumi_vault/ad/secret_role.py +0 -4
- pulumi_vault/alicloud/auth_backend_role.py +69 -192
- pulumi_vault/approle/auth_backend_login.py +0 -4
- pulumi_vault/approle/auth_backend_role.py +63 -186
- pulumi_vault/approle/auth_backend_role_secret_id.py +0 -4
- pulumi_vault/approle/get_auth_backend_role_id.py +0 -4
- pulumi_vault/audit.py +12 -20
- pulumi_vault/audit_request_header.py +6 -6
- pulumi_vault/aws/auth_backend_client.py +6 -10
- pulumi_vault/aws/auth_backend_config_identity.py +0 -4
- pulumi_vault/aws/auth_backend_identity_whitelist.py +6 -10
- pulumi_vault/aws/auth_backend_role.py +63 -186
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +6 -10
- pulumi_vault/aws/auth_backend_sts_role.py +0 -4
- pulumi_vault/aws/secret_backend_role.py +2 -4
- pulumi_vault/aws/secret_backend_static_role.py +2 -4
- pulumi_vault/azure/auth_backend_config.py +6 -10
- pulumi_vault/azure/auth_backend_role.py +63 -186
- pulumi_vault/azure/backend.py +16 -24
- pulumi_vault/azure/backend_role.py +14 -18
- pulumi_vault/azure/get_access_credentials.py +0 -4
- pulumi_vault/cert_auth_backend_role.py +75 -208
- pulumi_vault/consul/secret_backend.py +10 -18
- pulumi_vault/consul/secret_backend_role.py +2 -4
- pulumi_vault/database/_inputs.py +522 -784
- pulumi_vault/database/outputs.py +522 -784
- pulumi_vault/database/secret_backend_connection.py +2 -4
- pulumi_vault/database/secret_backend_role.py +4 -4
- pulumi_vault/database/secret_backend_static_role.py +10 -8
- pulumi_vault/database/secrets_mount.py +4 -4
- pulumi_vault/egp_policy.py +4 -8
- pulumi_vault/gcp/auth_backend.py +0 -36
- pulumi_vault/gcp/auth_backend_role.py +63 -264
- pulumi_vault/gcp/get_auth_backend_role.py +0 -4
- pulumi_vault/gcp/secret_backend.py +4 -6
- pulumi_vault/gcp/secret_impersonated_account.py +12 -14
- pulumi_vault/gcp/secret_roleset.py +4 -6
- pulumi_vault/gcp/secret_static_account.py +14 -16
- pulumi_vault/generic/endpoint.py +4 -8
- pulumi_vault/generic/get_secret.py +40 -4
- pulumi_vault/get_auth_backend.py +0 -4
- pulumi_vault/get_auth_backends.py +0 -8
- pulumi_vault/get_namespace.py +0 -12
- pulumi_vault/get_namespaces.py +4 -12
- pulumi_vault/get_nomad_access_token.py +0 -4
- pulumi_vault/get_policy_document.py +8 -8
- pulumi_vault/get_raft_autopilot_state.py +0 -4
- pulumi_vault/github/auth_backend.py +0 -4
- pulumi_vault/github/team.py +2 -6
- pulumi_vault/github/user.py +2 -6
- pulumi_vault/identity/entity.py +6 -8
- pulumi_vault/identity/entity_alias.py +6 -8
- pulumi_vault/identity/entity_policies.py +12 -12
- pulumi_vault/identity/get_entity.py +0 -4
- pulumi_vault/identity/get_group.py +0 -4
- pulumi_vault/identity/get_oidc_client_creds.py +2 -4
- pulumi_vault/identity/get_oidc_openid_config.py +10 -6
- pulumi_vault/identity/get_oidc_public_keys.py +10 -6
- pulumi_vault/identity/group.py +38 -42
- pulumi_vault/identity/group_alias.py +2 -4
- pulumi_vault/identity/group_member_entity_ids.py +12 -16
- pulumi_vault/identity/group_member_group_ids.py +24 -20
- pulumi_vault/identity/group_policies.py +4 -8
- pulumi_vault/identity/mfa_duo.py +4 -8
- pulumi_vault/identity/mfa_login_enforcement.py +8 -8
- pulumi_vault/identity/mfa_okta.py +4 -8
- pulumi_vault/identity/mfa_pingid.py +0 -4
- pulumi_vault/identity/mfa_totp.py +0 -4
- pulumi_vault/identity/oidc.py +0 -4
- pulumi_vault/identity/oidc_assignment.py +10 -6
- pulumi_vault/identity/oidc_client.py +10 -10
- pulumi_vault/identity/oidc_key.py +16 -12
- pulumi_vault/identity/oidc_key_allowed_client_id.py +16 -12
- pulumi_vault/identity/oidc_provider.py +22 -16
- pulumi_vault/identity/oidc_role.py +28 -20
- pulumi_vault/identity/oidc_scope.py +6 -8
- pulumi_vault/jwt/auth_backend.py +20 -32
- pulumi_vault/jwt/auth_backend_role.py +63 -190
- pulumi_vault/kmip/secret_backend.py +10 -14
- pulumi_vault/kmip/secret_role.py +0 -4
- pulumi_vault/kmip/secret_scope.py +0 -4
- pulumi_vault/kubernetes/auth_backend_config.py +0 -4
- pulumi_vault/kubernetes/auth_backend_role.py +56 -172
- pulumi_vault/kubernetes/get_service_account_token.py +8 -8
- pulumi_vault/kubernetes/secret_backend.py +6 -8
- pulumi_vault/kubernetes/secret_backend_role.py +24 -24
- pulumi_vault/kv/get_secret.py +0 -4
- pulumi_vault/kv/get_secret_subkeys_v2.py +4 -6
- pulumi_vault/kv/get_secret_v2.py +58 -0
- pulumi_vault/kv/get_secrets_list.py +4 -8
- pulumi_vault/kv/get_secrets_list_v2.py +14 -12
- pulumi_vault/kv/secret.py +0 -4
- pulumi_vault/kv/secret_backend_v2.py +0 -4
- pulumi_vault/kv/secret_v2.py +2 -4
- pulumi_vault/ldap/auth_backend.py +66 -161
- pulumi_vault/ldap/auth_backend_group.py +0 -4
- pulumi_vault/ldap/auth_backend_user.py +0 -4
- pulumi_vault/ldap/secret_backend.py +4 -8
- pulumi_vault/ldap/secret_backend_dynamic_role.py +0 -4
- pulumi_vault/ldap/secret_backend_library_set.py +2 -4
- pulumi_vault/ldap/secret_backend_static_role.py +0 -4
- pulumi_vault/managed/_inputs.py +84 -132
- pulumi_vault/managed/keys.py +7 -28
- pulumi_vault/managed/outputs.py +84 -132
- pulumi_vault/mfa_duo.py +4 -6
- pulumi_vault/mfa_okta.py +4 -6
- pulumi_vault/mfa_pingid.py +4 -6
- pulumi_vault/mfa_totp.py +10 -12
- pulumi_vault/mongodbatlas/secret_backend.py +0 -4
- pulumi_vault/mongodbatlas/secret_role.py +2 -4
- pulumi_vault/mount.py +26 -42
- pulumi_vault/nomad_secret_backend.py +4 -8
- pulumi_vault/nomad_secret_role.py +0 -4
- pulumi_vault/okta/_inputs.py +8 -8
- pulumi_vault/okta/auth_backend.py +6 -10
- pulumi_vault/okta/auth_backend_group.py +0 -4
- pulumi_vault/okta/auth_backend_user.py +0 -4
- pulumi_vault/okta/outputs.py +8 -8
- pulumi_vault/outputs.py +0 -20
- pulumi_vault/password_policy.py +6 -8
- pulumi_vault/pkisecret/backend_config_cluster.py +0 -4
- pulumi_vault/pkisecret/get_backend_issuer.py +36 -0
- pulumi_vault/pkisecret/get_backend_issuers.py +0 -4
- pulumi_vault/pkisecret/get_backend_key.py +2 -6
- pulumi_vault/pkisecret/get_backend_keys.py +0 -4
- pulumi_vault/pkisecret/secret_backend_cert.py +6 -8
- pulumi_vault/pkisecret/secret_backend_config_ca.py +4 -8
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +0 -4
- pulumi_vault/pkisecret/secret_backend_config_urls.py +0 -4
- pulumi_vault/pkisecret/secret_backend_crl_config.py +2 -6
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +4 -8
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +10 -14
- pulumi_vault/pkisecret/secret_backend_issuer.py +0 -4
- pulumi_vault/pkisecret/secret_backend_role.py +2 -4
- pulumi_vault/pkisecret/secret_backend_root_cert.py +4 -8
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +6 -10
- pulumi_vault/pkisecret/secret_backend_sign.py +6 -8
- pulumi_vault/quota_lease_count.py +6 -8
- pulumi_vault/quota_rate_limit.py +2 -4
- pulumi_vault/rabbitmq/secret_backend.py +4 -8
- pulumi_vault/rabbitmq/secret_backend_role.py +2 -4
- pulumi_vault/raft_autopilot.py +0 -4
- pulumi_vault/raft_snapshot_agent_config.py +109 -304
- pulumi_vault/rgp_policy.py +2 -6
- pulumi_vault/saml/auth_backend.py +8 -12
- pulumi_vault/saml/auth_backend_role.py +64 -178
- pulumi_vault/secrets/sync_association.py +12 -10
- pulumi_vault/secrets/sync_aws_destination.py +6 -8
- pulumi_vault/secrets/sync_azure_destination.py +10 -12
- pulumi_vault/secrets/sync_config.py +2 -6
- pulumi_vault/secrets/sync_gcp_destination.py +6 -6
- pulumi_vault/secrets/sync_gh_destination.py +6 -8
- pulumi_vault/secrets/sync_github_apps.py +8 -8
- pulumi_vault/secrets/sync_vercel_destination.py +6 -8
- pulumi_vault/ssh/_inputs.py +6 -32
- pulumi_vault/ssh/outputs.py +6 -32
- pulumi_vault/ssh/secret_backend_ca.py +0 -4
- pulumi_vault/ssh/secret_backend_role.py +4 -4
- pulumi_vault/terraformcloud/secret_backend.py +0 -4
- pulumi_vault/terraformcloud/secret_creds.py +2 -4
- pulumi_vault/terraformcloud/secret_role.py +2 -4
- pulumi_vault/token.py +14 -18
- pulumi_vault/tokenauth/auth_backend_role.py +64 -180
- pulumi_vault/transform/alphabet.py +4 -6
- pulumi_vault/transform/get_decode.py +4 -4
- pulumi_vault/transform/get_encode.py +4 -4
- pulumi_vault/transform/role.py +4 -6
- pulumi_vault/transform/template.py +4 -4
- pulumi_vault/transit/get_decrypt.py +4 -20
- pulumi_vault/transit/get_encrypt.py +0 -14
- pulumi_vault/transit/secret_backend_key.py +6 -6
- pulumi_vault/transit/secret_cache_config.py +0 -4
- {pulumi_vault-6.2.0a1713339773.dist-info → pulumi_vault-6.2.0a1713905519.dist-info}/METADATA +1 -1
- pulumi_vault-6.2.0a1713905519.dist-info/RECORD +252 -0
- pulumi_vault-6.2.0a1713339773.dist-info/RECORD +0 -252
- {pulumi_vault-6.2.0a1713339773.dist-info → pulumi_vault-6.2.0a1713905519.dist-info}/WHEEL +0 -0
- {pulumi_vault-6.2.0a1713339773.dist-info → pulumi_vault-6.2.0a1713905519.dist-info}/top_level.txt +0 -0
pulumi_vault/azure/backend.py
CHANGED
@@ -382,37 +382,33 @@ class Backend(pulumi.CustomResource):
|
|
382
382
|
|
383
383
|
### *Vault-1.9 And Above*
|
384
384
|
|
385
|
-
<!--Start PulumiCodeChooser -->
|
386
385
|
```python
|
387
386
|
import pulumi
|
388
387
|
import pulumi_vault as vault
|
389
388
|
|
390
389
|
azure = vault.azure.Backend("azure",
|
391
|
-
|
392
|
-
client_secret="12345678901234567890",
|
393
|
-
environment="AzurePublicCloud",
|
390
|
+
use_microsoft_graph_api=True,
|
394
391
|
subscription_id="11111111-2222-3333-4444-111111111111",
|
395
392
|
tenant_id="11111111-2222-3333-4444-222222222222",
|
396
|
-
|
393
|
+
client_id="11111111-2222-3333-4444-333333333333",
|
394
|
+
client_secret="12345678901234567890",
|
395
|
+
environment="AzurePublicCloud")
|
397
396
|
```
|
398
|
-
<!--End PulumiCodeChooser -->
|
399
397
|
|
400
398
|
### *Vault-1.8 And Below*
|
401
399
|
|
402
|
-
<!--Start PulumiCodeChooser -->
|
403
400
|
```python
|
404
401
|
import pulumi
|
405
402
|
import pulumi_vault as vault
|
406
403
|
|
407
404
|
azure = vault.azure.Backend("azure",
|
408
|
-
|
409
|
-
client_secret="12345678901234567890",
|
410
|
-
environment="AzurePublicCloud",
|
405
|
+
use_microsoft_graph_api=False,
|
411
406
|
subscription_id="11111111-2222-3333-4444-111111111111",
|
412
407
|
tenant_id="11111111-2222-3333-4444-222222222222",
|
413
|
-
|
408
|
+
client_id="11111111-2222-3333-4444-333333333333",
|
409
|
+
client_secret="12345678901234567890",
|
410
|
+
environment="AzurePublicCloud")
|
414
411
|
```
|
415
|
-
<!--End PulumiCodeChooser -->
|
416
412
|
|
417
413
|
:param str resource_name: The name of the resource.
|
418
414
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
@@ -442,37 +438,33 @@ class Backend(pulumi.CustomResource):
|
|
442
438
|
|
443
439
|
### *Vault-1.9 And Above*
|
444
440
|
|
445
|
-
<!--Start PulumiCodeChooser -->
|
446
441
|
```python
|
447
442
|
import pulumi
|
448
443
|
import pulumi_vault as vault
|
449
444
|
|
450
445
|
azure = vault.azure.Backend("azure",
|
451
|
-
|
452
|
-
client_secret="12345678901234567890",
|
453
|
-
environment="AzurePublicCloud",
|
446
|
+
use_microsoft_graph_api=True,
|
454
447
|
subscription_id="11111111-2222-3333-4444-111111111111",
|
455
448
|
tenant_id="11111111-2222-3333-4444-222222222222",
|
456
|
-
|
449
|
+
client_id="11111111-2222-3333-4444-333333333333",
|
450
|
+
client_secret="12345678901234567890",
|
451
|
+
environment="AzurePublicCloud")
|
457
452
|
```
|
458
|
-
<!--End PulumiCodeChooser -->
|
459
453
|
|
460
454
|
### *Vault-1.8 And Below*
|
461
455
|
|
462
|
-
<!--Start PulumiCodeChooser -->
|
463
456
|
```python
|
464
457
|
import pulumi
|
465
458
|
import pulumi_vault as vault
|
466
459
|
|
467
460
|
azure = vault.azure.Backend("azure",
|
468
|
-
|
469
|
-
client_secret="12345678901234567890",
|
470
|
-
environment="AzurePublicCloud",
|
461
|
+
use_microsoft_graph_api=False,
|
471
462
|
subscription_id="11111111-2222-3333-4444-111111111111",
|
472
463
|
tenant_id="11111111-2222-3333-4444-222222222222",
|
473
|
-
|
464
|
+
client_id="11111111-2222-3333-4444-333333333333",
|
465
|
+
client_secret="12345678901234567890",
|
466
|
+
environment="AzurePublicCloud")
|
474
467
|
```
|
475
|
-
<!--End PulumiCodeChooser -->
|
476
468
|
|
477
469
|
:param str resource_name: The name of the resource.
|
478
470
|
:param BackendArgs args: The arguments to use to populate this resource's properties.
|
@@ -465,17 +465,16 @@ class BackendRole(pulumi.CustomResource):
|
|
465
465
|
"""
|
466
466
|
## Example Usage
|
467
467
|
|
468
|
-
<!--Start PulumiCodeChooser -->
|
469
468
|
```python
|
470
469
|
import pulumi
|
471
470
|
import pulumi_vault as vault
|
472
471
|
|
473
472
|
azure = vault.azure.Backend("azure",
|
474
|
-
subscription_id=
|
475
|
-
tenant_id=
|
476
|
-
client_secret=
|
477
|
-
client_id=
|
478
|
-
generated_role = vault.azure.BackendRole("
|
473
|
+
subscription_id=subscription_id,
|
474
|
+
tenant_id=tenant_id,
|
475
|
+
client_secret=client_secret,
|
476
|
+
client_id=client_id)
|
477
|
+
generated_role = vault.azure.BackendRole("generated_role",
|
479
478
|
backend=azure.path,
|
480
479
|
role="generated_role",
|
481
480
|
sign_in_audience="AzureADMyOrg",
|
@@ -487,16 +486,15 @@ class BackendRole(pulumi.CustomResource):
|
|
487
486
|
max_ttl="600",
|
488
487
|
azure_roles=[vault.azure.BackendRoleAzureRoleArgs(
|
489
488
|
role_name="Reader",
|
490
|
-
scope=f"/subscriptions/{
|
489
|
+
scope=f"/subscriptions/{subscription_id}/resourceGroups/azure-vault-group",
|
491
490
|
)])
|
492
|
-
existing_object_id = vault.azure.BackendRole("
|
491
|
+
existing_object_id = vault.azure.BackendRole("existing_object_id",
|
493
492
|
backend=azure.path,
|
494
493
|
role="existing_object_id",
|
495
494
|
application_object_id="11111111-2222-3333-4444-44444444444",
|
496
495
|
ttl="300",
|
497
496
|
max_ttl="600")
|
498
497
|
```
|
499
|
-
<!--End PulumiCodeChooser -->
|
500
498
|
|
501
499
|
:param str resource_name: The name of the resource.
|
502
500
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
@@ -530,17 +528,16 @@ class BackendRole(pulumi.CustomResource):
|
|
530
528
|
"""
|
531
529
|
## Example Usage
|
532
530
|
|
533
|
-
<!--Start PulumiCodeChooser -->
|
534
531
|
```python
|
535
532
|
import pulumi
|
536
533
|
import pulumi_vault as vault
|
537
534
|
|
538
535
|
azure = vault.azure.Backend("azure",
|
539
|
-
subscription_id=
|
540
|
-
tenant_id=
|
541
|
-
client_secret=
|
542
|
-
client_id=
|
543
|
-
generated_role = vault.azure.BackendRole("
|
536
|
+
subscription_id=subscription_id,
|
537
|
+
tenant_id=tenant_id,
|
538
|
+
client_secret=client_secret,
|
539
|
+
client_id=client_id)
|
540
|
+
generated_role = vault.azure.BackendRole("generated_role",
|
544
541
|
backend=azure.path,
|
545
542
|
role="generated_role",
|
546
543
|
sign_in_audience="AzureADMyOrg",
|
@@ -552,16 +549,15 @@ class BackendRole(pulumi.CustomResource):
|
|
552
549
|
max_ttl="600",
|
553
550
|
azure_roles=[vault.azure.BackendRoleAzureRoleArgs(
|
554
551
|
role_name="Reader",
|
555
|
-
scope=f"/subscriptions/{
|
552
|
+
scope=f"/subscriptions/{subscription_id}/resourceGroups/azure-vault-group",
|
556
553
|
)])
|
557
|
-
existing_object_id = vault.azure.BackendRole("
|
554
|
+
existing_object_id = vault.azure.BackendRole("existing_object_id",
|
558
555
|
backend=azure.path,
|
559
556
|
role="existing_object_id",
|
560
557
|
application_object_id="11111111-2222-3333-4444-44444444444",
|
561
558
|
ttl="300",
|
562
559
|
max_ttl="600")
|
563
560
|
```
|
564
|
-
<!--End PulumiCodeChooser -->
|
565
561
|
|
566
562
|
:param str resource_name: The name of the resource.
|
567
563
|
:param BackendRoleArgs args: The arguments to use to populate this resource's properties.
|
@@ -216,7 +216,6 @@ def get_access_credentials(backend: Optional[str] = None,
|
|
216
216
|
"""
|
217
217
|
## Example Usage
|
218
218
|
|
219
|
-
<!--Start PulumiCodeChooser -->
|
220
219
|
```python
|
221
220
|
import pulumi
|
222
221
|
import pulumi_vault as vault
|
@@ -227,7 +226,6 @@ def get_access_credentials(backend: Optional[str] = None,
|
|
227
226
|
num_seconds_between_tests=1,
|
228
227
|
max_cred_validation_seconds=300)
|
229
228
|
```
|
230
|
-
<!--End PulumiCodeChooser -->
|
231
229
|
|
232
230
|
## Caveats
|
233
231
|
|
@@ -317,7 +315,6 @@ def get_access_credentials_output(backend: Optional[pulumi.Input[str]] = None,
|
|
317
315
|
"""
|
318
316
|
## Example Usage
|
319
317
|
|
320
|
-
<!--Start PulumiCodeChooser -->
|
321
318
|
```python
|
322
319
|
import pulumi
|
323
320
|
import pulumi_vault as vault
|
@@ -328,7 +325,6 @@ def get_access_credentials_output(backend: Optional[pulumi.Input[str]] = None,
|
|
328
325
|
num_seconds_between_tests=1,
|
329
326
|
max_cred_validation_seconds=300)
|
330
327
|
```
|
331
|
-
<!--End PulumiCodeChooser -->
|
332
328
|
|
333
329
|
## Caveats
|
334
330
|
|