pulumi-vault 6.2.0a1713561465__py3-none-any.whl → 6.2.0a1713905519__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/_inputs.py +0 -20
- pulumi_vault/ad/secret_backend.py +0 -4
- pulumi_vault/ad/secret_library.py +0 -4
- pulumi_vault/ad/secret_role.py +0 -4
- pulumi_vault/alicloud/auth_backend_role.py +63 -186
- pulumi_vault/approle/auth_backend_login.py +0 -4
- pulumi_vault/approle/auth_backend_role.py +63 -186
- pulumi_vault/approle/auth_backend_role_secret_id.py +0 -4
- pulumi_vault/approle/get_auth_backend_role_id.py +0 -4
- pulumi_vault/audit.py +0 -8
- pulumi_vault/audit_request_header.py +0 -4
- pulumi_vault/aws/auth_backend_client.py +0 -4
- pulumi_vault/aws/auth_backend_config_identity.py +0 -4
- pulumi_vault/aws/auth_backend_identity_whitelist.py +0 -4
- pulumi_vault/aws/auth_backend_role.py +63 -186
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +0 -4
- pulumi_vault/aws/auth_backend_sts_role.py +0 -4
- pulumi_vault/aws/secret_backend_role.py +0 -4
- pulumi_vault/aws/secret_backend_static_role.py +0 -4
- pulumi_vault/azure/auth_backend_config.py +0 -4
- pulumi_vault/azure/auth_backend_role.py +63 -186
- pulumi_vault/azure/backend.py +0 -8
- pulumi_vault/azure/backend_role.py +0 -4
- pulumi_vault/azure/get_access_credentials.py +0 -4
- pulumi_vault/cert_auth_backend_role.py +63 -200
- pulumi_vault/consul/secret_backend.py +0 -8
- pulumi_vault/consul/secret_backend_role.py +0 -4
- pulumi_vault/database/_inputs.py +522 -784
- pulumi_vault/database/outputs.py +522 -784
- pulumi_vault/database/secret_backend_connection.py +0 -4
- pulumi_vault/database/secret_backend_role.py +0 -4
- pulumi_vault/database/secret_backend_static_role.py +0 -4
- pulumi_vault/database/secrets_mount.py +0 -4
- pulumi_vault/egp_policy.py +0 -4
- pulumi_vault/gcp/auth_backend_role.py +63 -264
- pulumi_vault/gcp/get_auth_backend_role.py +0 -4
- pulumi_vault/gcp/secret_backend.py +0 -4
- pulumi_vault/gcp/secret_impersonated_account.py +0 -4
- pulumi_vault/gcp/secret_roleset.py +0 -4
- pulumi_vault/gcp/secret_static_account.py +0 -4
- pulumi_vault/generic/endpoint.py +0 -4
- pulumi_vault/generic/get_secret.py +0 -8
- pulumi_vault/get_auth_backend.py +0 -4
- pulumi_vault/get_auth_backends.py +0 -8
- pulumi_vault/get_namespace.py +0 -12
- pulumi_vault/get_namespaces.py +0 -8
- pulumi_vault/get_nomad_access_token.py +0 -4
- pulumi_vault/get_policy_document.py +0 -4
- pulumi_vault/get_raft_autopilot_state.py +0 -4
- pulumi_vault/github/auth_backend.py +0 -4
- pulumi_vault/github/team.py +0 -4
- pulumi_vault/github/user.py +0 -4
- pulumi_vault/identity/entity.py +0 -4
- pulumi_vault/identity/entity_alias.py +0 -4
- pulumi_vault/identity/entity_policies.py +0 -8
- pulumi_vault/identity/get_entity.py +0 -4
- pulumi_vault/identity/get_group.py +0 -4
- pulumi_vault/identity/get_oidc_client_creds.py +0 -4
- pulumi_vault/identity/get_oidc_openid_config.py +0 -4
- pulumi_vault/identity/get_oidc_public_keys.py +0 -4
- pulumi_vault/identity/group.py +0 -12
- pulumi_vault/identity/group_alias.py +0 -4
- pulumi_vault/identity/group_member_entity_ids.py +0 -8
- pulumi_vault/identity/group_member_group_ids.py +0 -8
- pulumi_vault/identity/group_policies.py +0 -8
- pulumi_vault/identity/mfa_duo.py +0 -4
- pulumi_vault/identity/mfa_login_enforcement.py +0 -4
- pulumi_vault/identity/mfa_okta.py +0 -4
- pulumi_vault/identity/mfa_pingid.py +0 -4
- pulumi_vault/identity/mfa_totp.py +0 -4
- pulumi_vault/identity/oidc.py +0 -4
- pulumi_vault/identity/oidc_assignment.py +0 -4
- pulumi_vault/identity/oidc_client.py +0 -4
- pulumi_vault/identity/oidc_key.py +0 -4
- pulumi_vault/identity/oidc_key_allowed_client_id.py +0 -4
- pulumi_vault/identity/oidc_provider.py +0 -4
- pulumi_vault/identity/oidc_role.py +0 -8
- pulumi_vault/identity/oidc_scope.py +0 -4
- pulumi_vault/jwt/auth_backend.py +0 -12
- pulumi_vault/jwt/auth_backend_role.py +63 -190
- pulumi_vault/kmip/secret_backend.py +0 -4
- pulumi_vault/kmip/secret_role.py +0 -4
- pulumi_vault/kmip/secret_scope.py +0 -4
- pulumi_vault/kubernetes/auth_backend_config.py +0 -4
- pulumi_vault/kubernetes/auth_backend_role.py +56 -172
- pulumi_vault/kubernetes/get_service_account_token.py +0 -4
- pulumi_vault/kubernetes/secret_backend.py +0 -4
- pulumi_vault/kubernetes/secret_backend_role.py +0 -12
- pulumi_vault/kv/get_secret.py +0 -4
- pulumi_vault/kv/get_secret_subkeys_v2.py +0 -4
- pulumi_vault/kv/get_secret_v2.py +0 -4
- pulumi_vault/kv/get_secrets_list.py +0 -4
- pulumi_vault/kv/get_secrets_list_v2.py +0 -4
- pulumi_vault/kv/secret.py +0 -4
- pulumi_vault/kv/secret_backend_v2.py +0 -4
- pulumi_vault/kv/secret_v2.py +0 -4
- pulumi_vault/ldap/auth_backend.py +56 -151
- pulumi_vault/ldap/auth_backend_group.py +0 -4
- pulumi_vault/ldap/auth_backend_user.py +0 -4
- pulumi_vault/ldap/secret_backend.py +0 -4
- pulumi_vault/ldap/secret_backend_dynamic_role.py +0 -4
- pulumi_vault/ldap/secret_backend_library_set.py +0 -4
- pulumi_vault/ldap/secret_backend_static_role.py +0 -4
- pulumi_vault/managed/_inputs.py +84 -132
- pulumi_vault/managed/keys.py +7 -28
- pulumi_vault/managed/outputs.py +84 -132
- pulumi_vault/mfa_duo.py +0 -4
- pulumi_vault/mfa_okta.py +0 -4
- pulumi_vault/mfa_pingid.py +0 -4
- pulumi_vault/mfa_totp.py +0 -4
- pulumi_vault/mongodbatlas/secret_backend.py +0 -4
- pulumi_vault/mongodbatlas/secret_role.py +0 -4
- pulumi_vault/mount.py +0 -16
- pulumi_vault/nomad_secret_backend.py +0 -4
- pulumi_vault/nomad_secret_role.py +0 -4
- pulumi_vault/okta/_inputs.py +8 -8
- pulumi_vault/okta/auth_backend.py +0 -4
- pulumi_vault/okta/auth_backend_group.py +0 -4
- pulumi_vault/okta/auth_backend_user.py +0 -4
- pulumi_vault/okta/outputs.py +8 -8
- pulumi_vault/outputs.py +0 -20
- pulumi_vault/password_policy.py +0 -4
- pulumi_vault/pkisecret/backend_config_cluster.py +0 -4
- pulumi_vault/pkisecret/get_backend_issuer.py +0 -4
- pulumi_vault/pkisecret/get_backend_issuers.py +0 -4
- pulumi_vault/pkisecret/get_backend_key.py +0 -4
- pulumi_vault/pkisecret/get_backend_keys.py +0 -4
- pulumi_vault/pkisecret/secret_backend_cert.py +0 -4
- pulumi_vault/pkisecret/secret_backend_config_ca.py +0 -4
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +0 -4
- pulumi_vault/pkisecret/secret_backend_config_urls.py +0 -4
- pulumi_vault/pkisecret/secret_backend_crl_config.py +0 -4
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +0 -4
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +0 -4
- pulumi_vault/pkisecret/secret_backend_issuer.py +0 -4
- pulumi_vault/pkisecret/secret_backend_role.py +0 -4
- pulumi_vault/pkisecret/secret_backend_root_cert.py +0 -4
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +0 -4
- pulumi_vault/pkisecret/secret_backend_sign.py +0 -4
- pulumi_vault/quota_lease_count.py +0 -4
- pulumi_vault/quota_rate_limit.py +0 -4
- pulumi_vault/rabbitmq/secret_backend.py +0 -4
- pulumi_vault/rabbitmq/secret_backend_role.py +0 -4
- pulumi_vault/raft_autopilot.py +0 -4
- pulumi_vault/raft_snapshot_agent_config.py +91 -292
- pulumi_vault/rgp_policy.py +0 -4
- pulumi_vault/saml/auth_backend.py +0 -4
- pulumi_vault/saml/auth_backend_role.py +56 -172
- pulumi_vault/secrets/sync_association.py +0 -4
- pulumi_vault/secrets/sync_aws_destination.py +0 -4
- pulumi_vault/secrets/sync_azure_destination.py +0 -4
- pulumi_vault/secrets/sync_config.py +0 -4
- pulumi_vault/secrets/sync_gcp_destination.py +0 -4
- pulumi_vault/secrets/sync_gh_destination.py +0 -4
- pulumi_vault/secrets/sync_github_apps.py +0 -4
- pulumi_vault/secrets/sync_vercel_destination.py +0 -4
- pulumi_vault/ssh/_inputs.py +6 -20
- pulumi_vault/ssh/outputs.py +6 -20
- pulumi_vault/ssh/secret_backend_ca.py +0 -4
- pulumi_vault/ssh/secret_backend_role.py +0 -4
- pulumi_vault/terraformcloud/secret_backend.py +0 -4
- pulumi_vault/terraformcloud/secret_creds.py +0 -4
- pulumi_vault/terraformcloud/secret_role.py +0 -4
- pulumi_vault/token.py +0 -4
- pulumi_vault/tokenauth/auth_backend_role.py +56 -172
- pulumi_vault/transform/alphabet.py +0 -4
- pulumi_vault/transform/get_decode.py +0 -4
- pulumi_vault/transform/get_encode.py +0 -4
- pulumi_vault/transform/role.py +0 -4
- pulumi_vault/transform/template.py +0 -4
- pulumi_vault/transit/get_decrypt.py +0 -16
- pulumi_vault/transit/get_encrypt.py +0 -14
- pulumi_vault/transit/secret_backend_key.py +0 -4
- pulumi_vault/transit/secret_cache_config.py +0 -4
- {pulumi_vault-6.2.0a1713561465.dist-info → pulumi_vault-6.2.0a1713905519.dist-info}/METADATA +1 -1
- pulumi_vault-6.2.0a1713905519.dist-info/RECORD +252 -0
- pulumi_vault-6.2.0a1713561465.dist-info/RECORD +0 -252
- {pulumi_vault-6.2.0a1713561465.dist-info → pulumi_vault-6.2.0a1713905519.dist-info}/WHEEL +0 -0
- {pulumi_vault-6.2.0a1713561465.dist-info → pulumi_vault-6.2.0a1713905519.dist-info}/top_level.txt +0 -0
@@ -53,56 +53,29 @@ class RaftSnapshotAgentConfigArgs:
|
|
53
53
|
or "google-gcs". The remaining parameters described below are all specific to
|
54
54
|
the selected `storage_type` and prefixed accordingly.
|
55
55
|
:param pulumi.Input[str] aws_access_key_id: AWS access key ID.
|
56
|
-
:param pulumi.Input[str] aws_s3_bucket:
|
57
|
-
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
|
58
|
-
should only be used for testing purposes, typically in conjunction with
|
59
|
-
`aws_s3_endpoint`.
|
56
|
+
:param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
|
57
|
+
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
60
58
|
:param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
|
61
|
-
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
|
62
|
-
|
63
|
-
:param pulumi.Input[
|
64
|
-
|
65
|
-
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
|
66
|
-
:param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
|
59
|
+
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
60
|
+
:param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
|
61
|
+
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
|
62
|
+
:param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
|
67
63
|
:param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
|
68
64
|
:param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
|
69
65
|
:param pulumi.Input[str] aws_session_token: AWS session token.
|
70
66
|
:param pulumi.Input[str] azure_account_key: Azure account key.
|
71
67
|
:param pulumi.Input[str] azure_account_name: Azure account name.
|
72
68
|
:param pulumi.Input[str] azure_blob_environment: Azure blob environment.
|
73
|
-
:param pulumi.Input[str] azure_container_name:
|
74
|
-
|
75
|
-
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
|
76
|
-
only set when using a non-Azure implementation like Azurite.
|
69
|
+
:param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
|
70
|
+
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
77
71
|
:param pulumi.Input[str] file_prefix: Within the directory or bucket
|
78
72
|
prefix given by `path_prefix`, the file or object name of snapshot files
|
79
73
|
will start with this string.
|
80
|
-
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
81
|
-
|
82
|
-
|
83
|
-
:param pulumi.Input[str]
|
84
|
-
|
85
|
-
:param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
|
86
|
-
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
87
|
-
The raw value looks like this:
|
88
|
-
|
89
|
-
```json
|
90
|
-
{
|
91
|
-
"type": "service_account",
|
92
|
-
"project_id": "project-id",
|
93
|
-
"private_key_id": "key-id",
|
94
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
95
|
-
"client_email": "service-account-email",
|
96
|
-
"client_id": "client-id",
|
97
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
98
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
99
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
100
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
101
|
-
}
|
102
|
-
```
|
103
|
-
:param pulumi.Input[int] local_max_space: For `storage_type = local`, the maximum
|
104
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
105
|
-
space left in this allowance.
|
74
|
+
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
75
|
+
:param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
76
|
+
:param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
|
77
|
+
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
78
|
+
:param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
|
106
79
|
:param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
|
107
80
|
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
108
81
|
The value should not contain leading or trailing forward slashes.
|
@@ -223,7 +196,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
223
196
|
@pulumi.getter(name="awsS3Bucket")
|
224
197
|
def aws_s3_bucket(self) -> Optional[pulumi.Input[str]]:
|
225
198
|
"""
|
226
|
-
|
199
|
+
S3 bucket to write snapshots to.
|
227
200
|
"""
|
228
201
|
return pulumi.get(self, "aws_s3_bucket")
|
229
202
|
|
@@ -235,9 +208,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
235
208
|
@pulumi.getter(name="awsS3DisableTls")
|
236
209
|
def aws_s3_disable_tls(self) -> Optional[pulumi.Input[bool]]:
|
237
210
|
"""
|
238
|
-
Disable TLS for the S3 endpoint. This
|
239
|
-
should only be used for testing purposes, typically in conjunction with
|
240
|
-
`aws_s3_endpoint`.
|
211
|
+
Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
241
212
|
"""
|
242
213
|
return pulumi.get(self, "aws_s3_disable_tls")
|
243
214
|
|
@@ -261,8 +232,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
261
232
|
@pulumi.getter(name="awsS3Endpoint")
|
262
233
|
def aws_s3_endpoint(self) -> Optional[pulumi.Input[str]]:
|
263
234
|
"""
|
264
|
-
AWS endpoint. This is typically only set when
|
265
|
-
using a non-AWS S3 implementation like Minio.
|
235
|
+
AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
266
236
|
"""
|
267
237
|
return pulumi.get(self, "aws_s3_endpoint")
|
268
238
|
|
@@ -274,8 +244,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
274
244
|
@pulumi.getter(name="awsS3ForcePathStyle")
|
275
245
|
def aws_s3_force_path_style(self) -> Optional[pulumi.Input[bool]]:
|
276
246
|
"""
|
277
|
-
Use the endpoint/bucket URL style
|
278
|
-
instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
|
247
|
+
Use the endpoint/bucket URL style instead of bucket.endpoint.
|
279
248
|
"""
|
280
249
|
return pulumi.get(self, "aws_s3_force_path_style")
|
281
250
|
|
@@ -287,7 +256,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
287
256
|
@pulumi.getter(name="awsS3KmsKey")
|
288
257
|
def aws_s3_kms_key(self) -> Optional[pulumi.Input[str]]:
|
289
258
|
"""
|
290
|
-
Use named KMS key, when
|
259
|
+
Use named KMS key, when aws_s3_enable_kms=true
|
291
260
|
"""
|
292
261
|
return pulumi.get(self, "aws_s3_kms_key")
|
293
262
|
|
@@ -299,7 +268,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
299
268
|
@pulumi.getter(name="awsS3Region")
|
300
269
|
def aws_s3_region(self) -> Optional[pulumi.Input[str]]:
|
301
270
|
"""
|
302
|
-
|
271
|
+
AWS region bucket is in.
|
303
272
|
"""
|
304
273
|
return pulumi.get(self, "aws_s3_region")
|
305
274
|
|
@@ -383,8 +352,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
383
352
|
@pulumi.getter(name="azureContainerName")
|
384
353
|
def azure_container_name(self) -> Optional[pulumi.Input[str]]:
|
385
354
|
"""
|
386
|
-
|
387
|
-
snapshots to.
|
355
|
+
Azure container name to write snapshots to.
|
388
356
|
"""
|
389
357
|
return pulumi.get(self, "azure_container_name")
|
390
358
|
|
@@ -396,8 +364,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
396
364
|
@pulumi.getter(name="azureEndpoint")
|
397
365
|
def azure_endpoint(self) -> Optional[pulumi.Input[str]]:
|
398
366
|
"""
|
399
|
-
Azure blob storage endpoint. This is typically
|
400
|
-
only set when using a non-Azure implementation like Azurite.
|
367
|
+
Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
401
368
|
"""
|
402
369
|
return pulumi.get(self, "azure_endpoint")
|
403
370
|
|
@@ -423,9 +390,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
423
390
|
@pulumi.getter(name="googleDisableTls")
|
424
391
|
def google_disable_tls(self) -> Optional[pulumi.Input[bool]]:
|
425
392
|
"""
|
426
|
-
Disable TLS for the GCS endpoint.
|
427
|
-
should only be used for testing purposes, typically in conjunction with
|
428
|
-
`google_endpoint`.
|
393
|
+
Disable TLS for the GCS endpoint.
|
429
394
|
"""
|
430
395
|
return pulumi.get(self, "google_disable_tls")
|
431
396
|
|
@@ -437,8 +402,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
437
402
|
@pulumi.getter(name="googleEndpoint")
|
438
403
|
def google_endpoint(self) -> Optional[pulumi.Input[str]]:
|
439
404
|
"""
|
440
|
-
GCS endpoint. This is typically only set when
|
441
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
405
|
+
GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
442
406
|
"""
|
443
407
|
return pulumi.get(self, "google_endpoint")
|
444
408
|
|
@@ -450,7 +414,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
450
414
|
@pulumi.getter(name="googleGcsBucket")
|
451
415
|
def google_gcs_bucket(self) -> Optional[pulumi.Input[str]]:
|
452
416
|
"""
|
453
|
-
|
417
|
+
GCS bucket to write snapshots to.
|
454
418
|
"""
|
455
419
|
return pulumi.get(self, "google_gcs_bucket")
|
456
420
|
|
@@ -462,23 +426,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
462
426
|
@pulumi.getter(name="googleServiceAccountKey")
|
463
427
|
def google_service_account_key(self) -> Optional[pulumi.Input[str]]:
|
464
428
|
"""
|
465
|
-
Google service account key in JSON format.
|
466
|
-
The raw value looks like this:
|
467
|
-
|
468
|
-
```json
|
469
|
-
{
|
470
|
-
"type": "service_account",
|
471
|
-
"project_id": "project-id",
|
472
|
-
"private_key_id": "key-id",
|
473
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
474
|
-
"client_email": "service-account-email",
|
475
|
-
"client_id": "client-id",
|
476
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
477
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
478
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
479
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
480
|
-
}
|
481
|
-
```
|
429
|
+
Google service account key in JSON format.
|
482
430
|
"""
|
483
431
|
return pulumi.get(self, "google_service_account_key")
|
484
432
|
|
@@ -490,9 +438,7 @@ class RaftSnapshotAgentConfigArgs:
|
|
490
438
|
@pulumi.getter(name="localMaxSpace")
|
491
439
|
def local_max_space(self) -> Optional[pulumi.Input[int]]:
|
492
440
|
"""
|
493
|
-
|
494
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
495
|
-
space left in this allowance.
|
441
|
+
The maximum space, in bytes, to use for snapshots.
|
496
442
|
"""
|
497
443
|
return pulumi.get(self, "local_max_space")
|
498
444
|
|
@@ -576,57 +522,30 @@ class _RaftSnapshotAgentConfigState:
|
|
576
522
|
"""
|
577
523
|
Input properties used for looking up and filtering RaftSnapshotAgentConfig resources.
|
578
524
|
:param pulumi.Input[str] aws_access_key_id: AWS access key ID.
|
579
|
-
:param pulumi.Input[str] aws_s3_bucket:
|
580
|
-
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
|
581
|
-
should only be used for testing purposes, typically in conjunction with
|
582
|
-
`aws_s3_endpoint`.
|
525
|
+
:param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
|
526
|
+
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
583
527
|
:param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
|
584
|
-
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
|
585
|
-
|
586
|
-
:param pulumi.Input[
|
587
|
-
|
588
|
-
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
|
589
|
-
:param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
|
528
|
+
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
529
|
+
:param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
|
530
|
+
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
|
531
|
+
:param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
|
590
532
|
:param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
|
591
533
|
:param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
|
592
534
|
:param pulumi.Input[str] aws_session_token: AWS session token.
|
593
535
|
:param pulumi.Input[str] azure_account_key: Azure account key.
|
594
536
|
:param pulumi.Input[str] azure_account_name: Azure account name.
|
595
537
|
:param pulumi.Input[str] azure_blob_environment: Azure blob environment.
|
596
|
-
:param pulumi.Input[str] azure_container_name:
|
597
|
-
|
598
|
-
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
|
599
|
-
only set when using a non-Azure implementation like Azurite.
|
538
|
+
:param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
|
539
|
+
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
600
540
|
:param pulumi.Input[str] file_prefix: Within the directory or bucket
|
601
541
|
prefix given by `path_prefix`, the file or object name of snapshot files
|
602
542
|
will start with this string.
|
603
|
-
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
604
|
-
|
605
|
-
|
606
|
-
:param pulumi.Input[str]
|
607
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
608
|
-
:param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
|
609
|
-
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
610
|
-
The raw value looks like this:
|
611
|
-
|
612
|
-
```json
|
613
|
-
{
|
614
|
-
"type": "service_account",
|
615
|
-
"project_id": "project-id",
|
616
|
-
"private_key_id": "key-id",
|
617
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
618
|
-
"client_email": "service-account-email",
|
619
|
-
"client_id": "client-id",
|
620
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
621
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
622
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
623
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
624
|
-
}
|
625
|
-
```
|
543
|
+
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
544
|
+
:param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
545
|
+
:param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
|
546
|
+
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
626
547
|
:param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
|
627
|
-
:param pulumi.Input[int] local_max_space:
|
628
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
629
|
-
space left in this allowance.
|
548
|
+
:param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
|
630
549
|
:param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
|
631
550
|
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
632
551
|
The value should not contain leading or trailing forward slashes.
|
@@ -716,7 +635,7 @@ class _RaftSnapshotAgentConfigState:
|
|
716
635
|
@pulumi.getter(name="awsS3Bucket")
|
717
636
|
def aws_s3_bucket(self) -> Optional[pulumi.Input[str]]:
|
718
637
|
"""
|
719
|
-
|
638
|
+
S3 bucket to write snapshots to.
|
720
639
|
"""
|
721
640
|
return pulumi.get(self, "aws_s3_bucket")
|
722
641
|
|
@@ -728,9 +647,7 @@ class _RaftSnapshotAgentConfigState:
|
|
728
647
|
@pulumi.getter(name="awsS3DisableTls")
|
729
648
|
def aws_s3_disable_tls(self) -> Optional[pulumi.Input[bool]]:
|
730
649
|
"""
|
731
|
-
Disable TLS for the S3 endpoint. This
|
732
|
-
should only be used for testing purposes, typically in conjunction with
|
733
|
-
`aws_s3_endpoint`.
|
650
|
+
Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
734
651
|
"""
|
735
652
|
return pulumi.get(self, "aws_s3_disable_tls")
|
736
653
|
|
@@ -754,8 +671,7 @@ class _RaftSnapshotAgentConfigState:
|
|
754
671
|
@pulumi.getter(name="awsS3Endpoint")
|
755
672
|
def aws_s3_endpoint(self) -> Optional[pulumi.Input[str]]:
|
756
673
|
"""
|
757
|
-
AWS endpoint. This is typically only set when
|
758
|
-
using a non-AWS S3 implementation like Minio.
|
674
|
+
AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
759
675
|
"""
|
760
676
|
return pulumi.get(self, "aws_s3_endpoint")
|
761
677
|
|
@@ -767,8 +683,7 @@ class _RaftSnapshotAgentConfigState:
|
|
767
683
|
@pulumi.getter(name="awsS3ForcePathStyle")
|
768
684
|
def aws_s3_force_path_style(self) -> Optional[pulumi.Input[bool]]:
|
769
685
|
"""
|
770
|
-
Use the endpoint/bucket URL style
|
771
|
-
instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
|
686
|
+
Use the endpoint/bucket URL style instead of bucket.endpoint.
|
772
687
|
"""
|
773
688
|
return pulumi.get(self, "aws_s3_force_path_style")
|
774
689
|
|
@@ -780,7 +695,7 @@ class _RaftSnapshotAgentConfigState:
|
|
780
695
|
@pulumi.getter(name="awsS3KmsKey")
|
781
696
|
def aws_s3_kms_key(self) -> Optional[pulumi.Input[str]]:
|
782
697
|
"""
|
783
|
-
Use named KMS key, when
|
698
|
+
Use named KMS key, when aws_s3_enable_kms=true
|
784
699
|
"""
|
785
700
|
return pulumi.get(self, "aws_s3_kms_key")
|
786
701
|
|
@@ -792,7 +707,7 @@ class _RaftSnapshotAgentConfigState:
|
|
792
707
|
@pulumi.getter(name="awsS3Region")
|
793
708
|
def aws_s3_region(self) -> Optional[pulumi.Input[str]]:
|
794
709
|
"""
|
795
|
-
|
710
|
+
AWS region bucket is in.
|
796
711
|
"""
|
797
712
|
return pulumi.get(self, "aws_s3_region")
|
798
713
|
|
@@ -876,8 +791,7 @@ class _RaftSnapshotAgentConfigState:
|
|
876
791
|
@pulumi.getter(name="azureContainerName")
|
877
792
|
def azure_container_name(self) -> Optional[pulumi.Input[str]]:
|
878
793
|
"""
|
879
|
-
|
880
|
-
snapshots to.
|
794
|
+
Azure container name to write snapshots to.
|
881
795
|
"""
|
882
796
|
return pulumi.get(self, "azure_container_name")
|
883
797
|
|
@@ -889,8 +803,7 @@ class _RaftSnapshotAgentConfigState:
|
|
889
803
|
@pulumi.getter(name="azureEndpoint")
|
890
804
|
def azure_endpoint(self) -> Optional[pulumi.Input[str]]:
|
891
805
|
"""
|
892
|
-
Azure blob storage endpoint. This is typically
|
893
|
-
only set when using a non-Azure implementation like Azurite.
|
806
|
+
Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
894
807
|
"""
|
895
808
|
return pulumi.get(self, "azure_endpoint")
|
896
809
|
|
@@ -916,9 +829,7 @@ class _RaftSnapshotAgentConfigState:
|
|
916
829
|
@pulumi.getter(name="googleDisableTls")
|
917
830
|
def google_disable_tls(self) -> Optional[pulumi.Input[bool]]:
|
918
831
|
"""
|
919
|
-
Disable TLS for the GCS endpoint.
|
920
|
-
should only be used for testing purposes, typically in conjunction with
|
921
|
-
`google_endpoint`.
|
832
|
+
Disable TLS for the GCS endpoint.
|
922
833
|
"""
|
923
834
|
return pulumi.get(self, "google_disable_tls")
|
924
835
|
|
@@ -930,8 +841,7 @@ class _RaftSnapshotAgentConfigState:
|
|
930
841
|
@pulumi.getter(name="googleEndpoint")
|
931
842
|
def google_endpoint(self) -> Optional[pulumi.Input[str]]:
|
932
843
|
"""
|
933
|
-
GCS endpoint. This is typically only set when
|
934
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
844
|
+
GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
935
845
|
"""
|
936
846
|
return pulumi.get(self, "google_endpoint")
|
937
847
|
|
@@ -943,7 +853,7 @@ class _RaftSnapshotAgentConfigState:
|
|
943
853
|
@pulumi.getter(name="googleGcsBucket")
|
944
854
|
def google_gcs_bucket(self) -> Optional[pulumi.Input[str]]:
|
945
855
|
"""
|
946
|
-
|
856
|
+
GCS bucket to write snapshots to.
|
947
857
|
"""
|
948
858
|
return pulumi.get(self, "google_gcs_bucket")
|
949
859
|
|
@@ -955,23 +865,7 @@ class _RaftSnapshotAgentConfigState:
|
|
955
865
|
@pulumi.getter(name="googleServiceAccountKey")
|
956
866
|
def google_service_account_key(self) -> Optional[pulumi.Input[str]]:
|
957
867
|
"""
|
958
|
-
Google service account key in JSON format.
|
959
|
-
The raw value looks like this:
|
960
|
-
|
961
|
-
```json
|
962
|
-
{
|
963
|
-
"type": "service_account",
|
964
|
-
"project_id": "project-id",
|
965
|
-
"private_key_id": "key-id",
|
966
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
967
|
-
"client_email": "service-account-email",
|
968
|
-
"client_id": "client-id",
|
969
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
970
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
971
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
972
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
973
|
-
}
|
974
|
-
```
|
868
|
+
Google service account key in JSON format.
|
975
869
|
"""
|
976
870
|
return pulumi.get(self, "google_service_account_key")
|
977
871
|
|
@@ -995,9 +889,7 @@ class _RaftSnapshotAgentConfigState:
|
|
995
889
|
@pulumi.getter(name="localMaxSpace")
|
996
890
|
def local_max_space(self) -> Optional[pulumi.Input[int]]:
|
997
891
|
"""
|
998
|
-
|
999
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
1000
|
-
space left in this allowance.
|
892
|
+
The maximum space, in bytes, to use for snapshots.
|
1001
893
|
"""
|
1002
894
|
return pulumi.get(self, "local_max_space")
|
1003
895
|
|
@@ -1114,7 +1006,6 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1114
1006
|
## Example Usage
|
1115
1007
|
|
1116
1008
|
### Local Storage
|
1117
|
-
<!--Start PulumiCodeChooser -->
|
1118
1009
|
```python
|
1119
1010
|
import pulumi
|
1120
1011
|
import pulumi_vault as vault
|
@@ -1127,10 +1018,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1127
1018
|
storage_type="local",
|
1128
1019
|
local_max_space=10000000)
|
1129
1020
|
```
|
1130
|
-
<!--End PulumiCodeChooser -->
|
1131
1021
|
|
1132
1022
|
### AWS S3
|
1133
|
-
<!--Start PulumiCodeChooser -->
|
1134
1023
|
```python
|
1135
1024
|
import pulumi
|
1136
1025
|
import pulumi_aws as aws
|
@@ -1152,11 +1041,9 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1152
1041
|
aws_secret_access_key=aws_secret_access_key,
|
1153
1042
|
aws_s3_enable_kms=True)
|
1154
1043
|
```
|
1155
|
-
<!--End PulumiCodeChooser -->
|
1156
1044
|
|
1157
1045
|
### Azure BLOB
|
1158
1046
|
|
1159
|
-
<!--Start PulumiCodeChooser -->
|
1160
1047
|
```python
|
1161
1048
|
import pulumi
|
1162
1049
|
import pulumi_vault as vault
|
@@ -1174,7 +1061,6 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1174
1061
|
azure_account_name=azure_account_name,
|
1175
1062
|
azure_account_key=azure_account_key)
|
1176
1063
|
```
|
1177
|
-
<!--End PulumiCodeChooser -->
|
1178
1064
|
|
1179
1065
|
## Import
|
1180
1066
|
|
@@ -1187,57 +1073,30 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1187
1073
|
:param str resource_name: The name of the resource.
|
1188
1074
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
1189
1075
|
:param pulumi.Input[str] aws_access_key_id: AWS access key ID.
|
1190
|
-
:param pulumi.Input[str] aws_s3_bucket:
|
1191
|
-
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
|
1192
|
-
should only be used for testing purposes, typically in conjunction with
|
1193
|
-
`aws_s3_endpoint`.
|
1076
|
+
:param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
|
1077
|
+
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
1194
1078
|
:param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
|
1195
|
-
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
|
1196
|
-
|
1197
|
-
:param pulumi.Input[
|
1198
|
-
|
1199
|
-
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
|
1200
|
-
:param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
|
1079
|
+
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
1080
|
+
:param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
|
1081
|
+
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
|
1082
|
+
:param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
|
1201
1083
|
:param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
|
1202
1084
|
:param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
|
1203
1085
|
:param pulumi.Input[str] aws_session_token: AWS session token.
|
1204
1086
|
:param pulumi.Input[str] azure_account_key: Azure account key.
|
1205
1087
|
:param pulumi.Input[str] azure_account_name: Azure account name.
|
1206
1088
|
:param pulumi.Input[str] azure_blob_environment: Azure blob environment.
|
1207
|
-
:param pulumi.Input[str] azure_container_name:
|
1208
|
-
|
1209
|
-
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
|
1210
|
-
only set when using a non-Azure implementation like Azurite.
|
1089
|
+
:param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
|
1090
|
+
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
1211
1091
|
:param pulumi.Input[str] file_prefix: Within the directory or bucket
|
1212
1092
|
prefix given by `path_prefix`, the file or object name of snapshot files
|
1213
1093
|
will start with this string.
|
1214
|
-
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
1215
|
-
|
1216
|
-
|
1217
|
-
:param pulumi.Input[str]
|
1218
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
1219
|
-
:param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
|
1220
|
-
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1221
|
-
The raw value looks like this:
|
1222
|
-
|
1223
|
-
```json
|
1224
|
-
{
|
1225
|
-
"type": "service_account",
|
1226
|
-
"project_id": "project-id",
|
1227
|
-
"private_key_id": "key-id",
|
1228
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
1229
|
-
"client_email": "service-account-email",
|
1230
|
-
"client_id": "client-id",
|
1231
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
1232
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
1233
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
1234
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
1235
|
-
}
|
1236
|
-
```
|
1094
|
+
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
1095
|
+
:param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
1096
|
+
:param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
|
1097
|
+
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1237
1098
|
:param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
|
1238
|
-
:param pulumi.Input[int] local_max_space:
|
1239
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
1240
|
-
space left in this allowance.
|
1099
|
+
:param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
|
1241
1100
|
:param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
|
1242
1101
|
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
1243
1102
|
The value should not contain leading or trailing forward slashes.
|
@@ -1264,7 +1123,6 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1264
1123
|
## Example Usage
|
1265
1124
|
|
1266
1125
|
### Local Storage
|
1267
|
-
<!--Start PulumiCodeChooser -->
|
1268
1126
|
```python
|
1269
1127
|
import pulumi
|
1270
1128
|
import pulumi_vault as vault
|
@@ -1277,10 +1135,8 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1277
1135
|
storage_type="local",
|
1278
1136
|
local_max_space=10000000)
|
1279
1137
|
```
|
1280
|
-
<!--End PulumiCodeChooser -->
|
1281
1138
|
|
1282
1139
|
### AWS S3
|
1283
|
-
<!--Start PulumiCodeChooser -->
|
1284
1140
|
```python
|
1285
1141
|
import pulumi
|
1286
1142
|
import pulumi_aws as aws
|
@@ -1302,11 +1158,9 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1302
1158
|
aws_secret_access_key=aws_secret_access_key,
|
1303
1159
|
aws_s3_enable_kms=True)
|
1304
1160
|
```
|
1305
|
-
<!--End PulumiCodeChooser -->
|
1306
1161
|
|
1307
1162
|
### Azure BLOB
|
1308
1163
|
|
1309
|
-
<!--Start PulumiCodeChooser -->
|
1310
1164
|
```python
|
1311
1165
|
import pulumi
|
1312
1166
|
import pulumi_vault as vault
|
@@ -1324,7 +1178,6 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1324
1178
|
azure_account_name=azure_account_name,
|
1325
1179
|
azure_account_key=azure_account_key)
|
1326
1180
|
```
|
1327
|
-
<!--End PulumiCodeChooser -->
|
1328
1181
|
|
1329
1182
|
## Import
|
1330
1183
|
|
@@ -1466,57 +1319,30 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1466
1319
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
1467
1320
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
1468
1321
|
:param pulumi.Input[str] aws_access_key_id: AWS access key ID.
|
1469
|
-
:param pulumi.Input[str] aws_s3_bucket:
|
1470
|
-
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This
|
1471
|
-
should only be used for testing purposes, typically in conjunction with
|
1472
|
-
`aws_s3_endpoint`.
|
1322
|
+
:param pulumi.Input[str] aws_s3_bucket: S3 bucket to write snapshots to.
|
1323
|
+
:param pulumi.Input[bool] aws_s3_disable_tls: Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
1473
1324
|
:param pulumi.Input[bool] aws_s3_enable_kms: Use KMS to encrypt bucket contents.
|
1474
|
-
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when
|
1475
|
-
|
1476
|
-
:param pulumi.Input[
|
1477
|
-
|
1478
|
-
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when `aws_s3_enable_kms = true`
|
1479
|
-
:param pulumi.Input[str] aws_s3_region: `<required>` - AWS region bucket is in.
|
1325
|
+
:param pulumi.Input[str] aws_s3_endpoint: AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
1326
|
+
:param pulumi.Input[bool] aws_s3_force_path_style: Use the endpoint/bucket URL style instead of bucket.endpoint.
|
1327
|
+
:param pulumi.Input[str] aws_s3_kms_key: Use named KMS key, when aws_s3_enable_kms=true
|
1328
|
+
:param pulumi.Input[str] aws_s3_region: AWS region bucket is in.
|
1480
1329
|
:param pulumi.Input[bool] aws_s3_server_side_encryption: Use AES256 to encrypt bucket contents.
|
1481
1330
|
:param pulumi.Input[str] aws_secret_access_key: AWS secret access key.
|
1482
1331
|
:param pulumi.Input[str] aws_session_token: AWS session token.
|
1483
1332
|
:param pulumi.Input[str] azure_account_key: Azure account key.
|
1484
1333
|
:param pulumi.Input[str] azure_account_name: Azure account name.
|
1485
1334
|
:param pulumi.Input[str] azure_blob_environment: Azure blob environment.
|
1486
|
-
:param pulumi.Input[str] azure_container_name:
|
1487
|
-
|
1488
|
-
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically
|
1489
|
-
only set when using a non-Azure implementation like Azurite.
|
1335
|
+
:param pulumi.Input[str] azure_container_name: Azure container name to write snapshots to.
|
1336
|
+
:param pulumi.Input[str] azure_endpoint: Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
1490
1337
|
:param pulumi.Input[str] file_prefix: Within the directory or bucket
|
1491
1338
|
prefix given by `path_prefix`, the file or object name of snapshot files
|
1492
1339
|
will start with this string.
|
1493
|
-
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
1494
|
-
|
1495
|
-
|
1496
|
-
:param pulumi.Input[str]
|
1497
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
1498
|
-
:param pulumi.Input[str] google_gcs_bucket: `<required>` - GCS bucket to write snapshots to.
|
1499
|
-
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1500
|
-
The raw value looks like this:
|
1501
|
-
|
1502
|
-
```json
|
1503
|
-
{
|
1504
|
-
"type": "service_account",
|
1505
|
-
"project_id": "project-id",
|
1506
|
-
"private_key_id": "key-id",
|
1507
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
1508
|
-
"client_email": "service-account-email",
|
1509
|
-
"client_id": "client-id",
|
1510
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
1511
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
1512
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
1513
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
1514
|
-
}
|
1515
|
-
```
|
1340
|
+
:param pulumi.Input[bool] google_disable_tls: Disable TLS for the GCS endpoint.
|
1341
|
+
:param pulumi.Input[str] google_endpoint: GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
1342
|
+
:param pulumi.Input[str] google_gcs_bucket: GCS bucket to write snapshots to.
|
1343
|
+
:param pulumi.Input[str] google_service_account_key: Google service account key in JSON format.
|
1516
1344
|
:param pulumi.Input[int] interval_seconds: `<required>` - Time (in seconds) between snapshots.
|
1517
|
-
:param pulumi.Input[int] local_max_space:
|
1518
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
1519
|
-
space left in this allowance.
|
1345
|
+
:param pulumi.Input[int] local_max_space: The maximum space, in bytes, to use for snapshots.
|
1520
1346
|
:param pulumi.Input[str] name: `<required>` – Name of the configuration to modify.
|
1521
1347
|
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
1522
1348
|
The value should not contain leading or trailing forward slashes.
|
@@ -1579,7 +1405,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1579
1405
|
@pulumi.getter(name="awsS3Bucket")
|
1580
1406
|
def aws_s3_bucket(self) -> pulumi.Output[Optional[str]]:
|
1581
1407
|
"""
|
1582
|
-
|
1408
|
+
S3 bucket to write snapshots to.
|
1583
1409
|
"""
|
1584
1410
|
return pulumi.get(self, "aws_s3_bucket")
|
1585
1411
|
|
@@ -1587,9 +1413,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1587
1413
|
@pulumi.getter(name="awsS3DisableTls")
|
1588
1414
|
def aws_s3_disable_tls(self) -> pulumi.Output[Optional[bool]]:
|
1589
1415
|
"""
|
1590
|
-
Disable TLS for the S3 endpoint. This
|
1591
|
-
should only be used for testing purposes, typically in conjunction with
|
1592
|
-
`aws_s3_endpoint`.
|
1416
|
+
Disable TLS for the S3 endpoint. This should only be used for testing purposes.
|
1593
1417
|
"""
|
1594
1418
|
return pulumi.get(self, "aws_s3_disable_tls")
|
1595
1419
|
|
@@ -1605,8 +1429,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1605
1429
|
@pulumi.getter(name="awsS3Endpoint")
|
1606
1430
|
def aws_s3_endpoint(self) -> pulumi.Output[Optional[str]]:
|
1607
1431
|
"""
|
1608
|
-
AWS endpoint. This is typically only set when
|
1609
|
-
using a non-AWS S3 implementation like Minio.
|
1432
|
+
AWS endpoint. This is typically only set when using a non-AWS S3 implementation like Minio.
|
1610
1433
|
"""
|
1611
1434
|
return pulumi.get(self, "aws_s3_endpoint")
|
1612
1435
|
|
@@ -1614,8 +1437,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1614
1437
|
@pulumi.getter(name="awsS3ForcePathStyle")
|
1615
1438
|
def aws_s3_force_path_style(self) -> pulumi.Output[Optional[bool]]:
|
1616
1439
|
"""
|
1617
|
-
Use the endpoint/bucket URL style
|
1618
|
-
instead of bucket.endpoint. May be needed when setting `aws_s3_endpoint`.
|
1440
|
+
Use the endpoint/bucket URL style instead of bucket.endpoint.
|
1619
1441
|
"""
|
1620
1442
|
return pulumi.get(self, "aws_s3_force_path_style")
|
1621
1443
|
|
@@ -1623,7 +1445,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1623
1445
|
@pulumi.getter(name="awsS3KmsKey")
|
1624
1446
|
def aws_s3_kms_key(self) -> pulumi.Output[Optional[str]]:
|
1625
1447
|
"""
|
1626
|
-
Use named KMS key, when
|
1448
|
+
Use named KMS key, when aws_s3_enable_kms=true
|
1627
1449
|
"""
|
1628
1450
|
return pulumi.get(self, "aws_s3_kms_key")
|
1629
1451
|
|
@@ -1631,7 +1453,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1631
1453
|
@pulumi.getter(name="awsS3Region")
|
1632
1454
|
def aws_s3_region(self) -> pulumi.Output[Optional[str]]:
|
1633
1455
|
"""
|
1634
|
-
|
1456
|
+
AWS region bucket is in.
|
1635
1457
|
"""
|
1636
1458
|
return pulumi.get(self, "aws_s3_region")
|
1637
1459
|
|
@@ -1687,8 +1509,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1687
1509
|
@pulumi.getter(name="azureContainerName")
|
1688
1510
|
def azure_container_name(self) -> pulumi.Output[Optional[str]]:
|
1689
1511
|
"""
|
1690
|
-
|
1691
|
-
snapshots to.
|
1512
|
+
Azure container name to write snapshots to.
|
1692
1513
|
"""
|
1693
1514
|
return pulumi.get(self, "azure_container_name")
|
1694
1515
|
|
@@ -1696,8 +1517,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1696
1517
|
@pulumi.getter(name="azureEndpoint")
|
1697
1518
|
def azure_endpoint(self) -> pulumi.Output[Optional[str]]:
|
1698
1519
|
"""
|
1699
|
-
Azure blob storage endpoint. This is typically
|
1700
|
-
only set when using a non-Azure implementation like Azurite.
|
1520
|
+
Azure blob storage endpoint. This is typically only set when using a non-Azure implementation like Azurite.
|
1701
1521
|
"""
|
1702
1522
|
return pulumi.get(self, "azure_endpoint")
|
1703
1523
|
|
@@ -1715,9 +1535,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1715
1535
|
@pulumi.getter(name="googleDisableTls")
|
1716
1536
|
def google_disable_tls(self) -> pulumi.Output[Optional[bool]]:
|
1717
1537
|
"""
|
1718
|
-
Disable TLS for the GCS endpoint.
|
1719
|
-
should only be used for testing purposes, typically in conjunction with
|
1720
|
-
`google_endpoint`.
|
1538
|
+
Disable TLS for the GCS endpoint.
|
1721
1539
|
"""
|
1722
1540
|
return pulumi.get(self, "google_disable_tls")
|
1723
1541
|
|
@@ -1725,8 +1543,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1725
1543
|
@pulumi.getter(name="googleEndpoint")
|
1726
1544
|
def google_endpoint(self) -> pulumi.Output[Optional[str]]:
|
1727
1545
|
"""
|
1728
|
-
GCS endpoint. This is typically only set when
|
1729
|
-
using a non-Google GCS implementation like fake-gcs-server.
|
1546
|
+
GCS endpoint. This is typically only set when using a non-Google GCS implementation like fake-gcs-server.
|
1730
1547
|
"""
|
1731
1548
|
return pulumi.get(self, "google_endpoint")
|
1732
1549
|
|
@@ -1734,7 +1551,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1734
1551
|
@pulumi.getter(name="googleGcsBucket")
|
1735
1552
|
def google_gcs_bucket(self) -> pulumi.Output[Optional[str]]:
|
1736
1553
|
"""
|
1737
|
-
|
1554
|
+
GCS bucket to write snapshots to.
|
1738
1555
|
"""
|
1739
1556
|
return pulumi.get(self, "google_gcs_bucket")
|
1740
1557
|
|
@@ -1742,23 +1559,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1742
1559
|
@pulumi.getter(name="googleServiceAccountKey")
|
1743
1560
|
def google_service_account_key(self) -> pulumi.Output[Optional[str]]:
|
1744
1561
|
"""
|
1745
|
-
Google service account key in JSON format.
|
1746
|
-
The raw value looks like this:
|
1747
|
-
|
1748
|
-
```json
|
1749
|
-
{
|
1750
|
-
"type": "service_account",
|
1751
|
-
"project_id": "project-id",
|
1752
|
-
"private_key_id": "key-id",
|
1753
|
-
"private_key": "-----BEGIN RSA PRIVATE KEY-----\\nMIIEpQ ... /WZs=\\n-----END RSA PRIVATE KEY-----\\n",
|
1754
|
-
"client_email": "service-account-email",
|
1755
|
-
"client_id": "client-id",
|
1756
|
-
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
|
1757
|
-
"token_uri": "https://accounts.google.com/o/oauth2/token",
|
1758
|
-
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
|
1759
|
-
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/service-account-email"
|
1760
|
-
}
|
1761
|
-
```
|
1562
|
+
Google service account key in JSON format.
|
1762
1563
|
"""
|
1763
1564
|
return pulumi.get(self, "google_service_account_key")
|
1764
1565
|
|
@@ -1774,9 +1575,7 @@ class RaftSnapshotAgentConfig(pulumi.CustomResource):
|
|
1774
1575
|
@pulumi.getter(name="localMaxSpace")
|
1775
1576
|
def local_max_space(self) -> pulumi.Output[Optional[int]]:
|
1776
1577
|
"""
|
1777
|
-
|
1778
|
-
space, in bytes, to use for snapshots. Snapshot attempts will fail if there is not enough
|
1779
|
-
space left in this allowance.
|
1578
|
+
The maximum space, in bytes, to use for snapshots.
|
1780
1579
|
"""
|
1781
1580
|
return pulumi.get(self, "local_max_space")
|
1782
1581
|
|