PyPI - pulumi-vault - Versions diffs - 6.6.0a1741415971__py3-none-any.whl → 6.7.0__py3-none-any.whl - Mend

pulumi-vault 6.6.0a1741415971py3-none-any.whl → 6.7.0py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (264) hide show

pulumi_vault/__init__.py +9 -0
pulumi_vault/_inputs.py +583 -562
pulumi_vault/ad/__init__.py +1 -0
pulumi_vault/ad/get_access_credentials.py +20 -19
pulumi_vault/ad/secret_backend.py +477 -476
pulumi_vault/ad/secret_library.py +99 -98
pulumi_vault/ad/secret_role.py +85 -84
pulumi_vault/alicloud/__init__.py +1 -0
pulumi_vault/alicloud/auth_backend_role.py +183 -182
pulumi_vault/approle/__init__.py +1 -0
pulumi_vault/approle/auth_backend_login.py +106 -105
pulumi_vault/approle/auth_backend_role.py +239 -238
pulumi_vault/approle/auth_backend_role_secret_id.py +162 -161
pulumi_vault/approle/get_auth_backend_role_id.py +18 -17
pulumi_vault/audit.py +85 -84
pulumi_vault/audit_request_header.py +43 -42
pulumi_vault/auth_backend.py +106 -105
pulumi_vault/aws/__init__.py +1 -0
pulumi_vault/aws/auth_backend_cert.py +71 -70
pulumi_vault/aws/auth_backend_client.py +425 -200
pulumi_vault/aws/auth_backend_config_identity.py +85 -84
pulumi_vault/aws/auth_backend_identity_whitelist.py +57 -56
pulumi_vault/aws/auth_backend_login.py +209 -208
pulumi_vault/aws/auth_backend_role.py +400 -399
pulumi_vault/aws/auth_backend_role_tag.py +127 -126
pulumi_vault/aws/auth_backend_roletag_blacklist.py +57 -56
pulumi_vault/aws/auth_backend_sts_role.py +71 -70
pulumi_vault/aws/get_access_credentials.py +44 -43
pulumi_vault/aws/get_static_access_credentials.py +13 -12
pulumi_vault/aws/secret_backend.py +523 -306
pulumi_vault/aws/secret_backend_role.py +211 -210
pulumi_vault/aws/secret_backend_static_role.py +288 -70
pulumi_vault/azure/__init__.py +1 -0
pulumi_vault/azure/_inputs.py +21 -20
pulumi_vault/azure/auth_backend_config.py +383 -130
pulumi_vault/azure/auth_backend_role.py +253 -252
pulumi_vault/azure/backend.py +432 -186
pulumi_vault/azure/backend_role.py +188 -140
pulumi_vault/azure/get_access_credentials.py +58 -57
pulumi_vault/azure/outputs.py +11 -10
pulumi_vault/cert_auth_backend_role.py +365 -364
pulumi_vault/config/__init__.py +1 -0
pulumi_vault/config/__init__.pyi +1 -0
pulumi_vault/config/_inputs.py +11 -10
pulumi_vault/config/outputs.py +287 -286
pulumi_vault/config/ui_custom_message.py +113 -112
pulumi_vault/config/vars.py +1 -0
pulumi_vault/consul/__init__.py +1 -0
pulumi_vault/consul/secret_backend.py +197 -196
pulumi_vault/consul/secret_backend_role.py +183 -182
pulumi_vault/database/__init__.py +1 -0
pulumi_vault/database/_inputs.py +3857 -2200
pulumi_vault/database/outputs.py +2483 -1330
pulumi_vault/database/secret_backend_connection.py +333 -112
pulumi_vault/database/secret_backend_role.py +169 -168
pulumi_vault/database/secret_backend_static_role.py +283 -140
pulumi_vault/database/secrets_mount.py +275 -266
pulumi_vault/egp_policy.py +71 -70
pulumi_vault/gcp/__init__.py +1 -0
pulumi_vault/gcp/_inputs.py +82 -81
pulumi_vault/gcp/auth_backend.py +426 -205
pulumi_vault/gcp/auth_backend_role.py +281 -280
pulumi_vault/gcp/get_auth_backend_role.py +70 -69
pulumi_vault/gcp/outputs.py +50 -49
pulumi_vault/gcp/secret_backend.py +420 -179
pulumi_vault/gcp/secret_impersonated_account.py +92 -91
pulumi_vault/gcp/secret_roleset.py +92 -91
pulumi_vault/gcp/secret_static_account.py +92 -91
pulumi_vault/generic/__init__.py +1 -0
pulumi_vault/generic/endpoint.py +113 -112
pulumi_vault/generic/get_secret.py +28 -27
pulumi_vault/generic/secret.py +78 -77
pulumi_vault/get_auth_backend.py +19 -18
pulumi_vault/get_auth_backends.py +14 -13
pulumi_vault/get_namespace.py +15 -14
pulumi_vault/get_namespaces.py +68 -18
pulumi_vault/get_nomad_access_token.py +19 -18
pulumi_vault/get_policy_document.py +6 -5
pulumi_vault/get_raft_autopilot_state.py +18 -17
pulumi_vault/github/__init__.py +1 -0
pulumi_vault/github/_inputs.py +42 -41
pulumi_vault/github/auth_backend.py +232 -231
pulumi_vault/github/outputs.py +26 -25
pulumi_vault/github/team.py +57 -56
pulumi_vault/github/user.py +57 -56
pulumi_vault/identity/__init__.py +1 -0
pulumi_vault/identity/entity.py +85 -84
pulumi_vault/identity/entity_alias.py +71 -70
pulumi_vault/identity/entity_policies.py +64 -63
pulumi_vault/identity/get_entity.py +43 -42
pulumi_vault/identity/get_group.py +50 -49
pulumi_vault/identity/get_oidc_client_creds.py +14 -13
pulumi_vault/identity/get_oidc_openid_config.py +24 -23
pulumi_vault/identity/get_oidc_public_keys.py +13 -12
pulumi_vault/identity/group.py +141 -140
pulumi_vault/identity/group_alias.py +57 -56
pulumi_vault/identity/group_member_entity_ids.py +57 -56
pulumi_vault/identity/group_member_group_ids.py +57 -56
pulumi_vault/identity/group_policies.py +64 -63
pulumi_vault/identity/mfa_duo.py +148 -147
pulumi_vault/identity/mfa_login_enforcement.py +120 -119
pulumi_vault/identity/mfa_okta.py +134 -133
pulumi_vault/identity/mfa_pingid.py +127 -126
pulumi_vault/identity/mfa_totp.py +176 -175
pulumi_vault/identity/oidc.py +29 -28
pulumi_vault/identity/oidc_assignment.py +57 -56
pulumi_vault/identity/oidc_client.py +127 -126
pulumi_vault/identity/oidc_key.py +85 -84
pulumi_vault/identity/oidc_key_allowed_client_id.py +43 -42
pulumi_vault/identity/oidc_provider.py +92 -91
pulumi_vault/identity/oidc_role.py +85 -84
pulumi_vault/identity/oidc_scope.py +57 -56
pulumi_vault/identity/outputs.py +32 -31
pulumi_vault/jwt/__init__.py +1 -0
pulumi_vault/jwt/_inputs.py +42 -41
pulumi_vault/jwt/auth_backend.py +288 -287
pulumi_vault/jwt/auth_backend_role.py +407 -406
pulumi_vault/jwt/outputs.py +26 -25
pulumi_vault/kmip/__init__.py +1 -0
pulumi_vault/kmip/secret_backend.py +183 -182
pulumi_vault/kmip/secret_role.py +295 -294
pulumi_vault/kmip/secret_scope.py +57 -56
pulumi_vault/kubernetes/__init__.py +1 -0
pulumi_vault/kubernetes/auth_backend_config.py +141 -140
pulumi_vault/kubernetes/auth_backend_role.py +225 -224
pulumi_vault/kubernetes/get_auth_backend_config.py +47 -46
pulumi_vault/kubernetes/get_auth_backend_role.py +70 -69
pulumi_vault/kubernetes/get_service_account_token.py +38 -37
pulumi_vault/kubernetes/secret_backend.py +316 -315
pulumi_vault/kubernetes/secret_backend_role.py +197 -196
pulumi_vault/kv/__init__.py +1 -0
pulumi_vault/kv/_inputs.py +21 -20
pulumi_vault/kv/get_secret.py +17 -16
pulumi_vault/kv/get_secret_subkeys_v2.py +30 -29
pulumi_vault/kv/get_secret_v2.py +29 -28
pulumi_vault/kv/get_secrets_list.py +13 -12
pulumi_vault/kv/get_secrets_list_v2.py +19 -18
pulumi_vault/kv/outputs.py +13 -12
pulumi_vault/kv/secret.py +50 -49
pulumi_vault/kv/secret_backend_v2.py +71 -70
pulumi_vault/kv/secret_v2.py +134 -133
pulumi_vault/ldap/__init__.py +1 -0
pulumi_vault/ldap/auth_backend.py +754 -533
pulumi_vault/ldap/auth_backend_group.py +57 -56
pulumi_vault/ldap/auth_backend_user.py +71 -70
pulumi_vault/ldap/get_dynamic_credentials.py +17 -16
pulumi_vault/ldap/get_static_credentials.py +18 -17
pulumi_vault/ldap/secret_backend.py +720 -499
pulumi_vault/ldap/secret_backend_dynamic_role.py +127 -126
pulumi_vault/ldap/secret_backend_library_set.py +99 -98
pulumi_vault/ldap/secret_backend_static_role.py +99 -98
pulumi_vault/managed/__init__.py +1 -0
pulumi_vault/managed/_inputs.py +229 -228
pulumi_vault/managed/keys.py +15 -14
pulumi_vault/managed/outputs.py +139 -138
pulumi_vault/mfa_duo.py +113 -112
pulumi_vault/mfa_okta.py +113 -112
pulumi_vault/mfa_pingid.py +120 -119
pulumi_vault/mfa_totp.py +127 -126
pulumi_vault/mongodbatlas/__init__.py +1 -0
pulumi_vault/mongodbatlas/secret_backend.py +64 -63
pulumi_vault/mongodbatlas/secret_role.py +155 -154
pulumi_vault/mount.py +274 -273
pulumi_vault/namespace.py +64 -63
pulumi_vault/nomad_secret_backend.py +211 -210
pulumi_vault/nomad_secret_role.py +85 -84
pulumi_vault/okta/__init__.py +1 -0
pulumi_vault/okta/_inputs.py +26 -25
pulumi_vault/okta/auth_backend.py +274 -273
pulumi_vault/okta/auth_backend_group.py +57 -56
pulumi_vault/okta/auth_backend_user.py +71 -70
pulumi_vault/okta/outputs.py +16 -15
pulumi_vault/outputs.py +73 -60
pulumi_vault/password_policy.py +43 -42
pulumi_vault/pkisecret/__init__.py +3 -0
pulumi_vault/pkisecret/_inputs.py +31 -36
pulumi_vault/pkisecret/backend_acme_eab.py +92 -91
pulumi_vault/pkisecret/backend_config_acme.py +174 -126
pulumi_vault/pkisecret/backend_config_auto_tidy.py +1377 -0
pulumi_vault/pkisecret/backend_config_cluster.py +57 -56
pulumi_vault/pkisecret/backend_config_cmpv2.py +152 -104
pulumi_vault/pkisecret/backend_config_est.py +120 -119
pulumi_vault/pkisecret/get_backend_cert_metadata.py +278 -0
pulumi_vault/pkisecret/get_backend_config_cmpv2.py +35 -17
pulumi_vault/pkisecret/get_backend_config_est.py +19 -18
pulumi_vault/pkisecret/get_backend_issuer.py +139 -25
pulumi_vault/pkisecret/get_backend_issuers.py +15 -14
pulumi_vault/pkisecret/get_backend_key.py +20 -19
pulumi_vault/pkisecret/get_backend_keys.py +15 -14
pulumi_vault/pkisecret/outputs.py +28 -31
pulumi_vault/pkisecret/secret_backend_cert.py +439 -297
pulumi_vault/pkisecret/secret_backend_config_ca.py +43 -42
pulumi_vault/pkisecret/secret_backend_config_issuers.py +57 -56
pulumi_vault/pkisecret/secret_backend_config_urls.py +85 -84
pulumi_vault/pkisecret/secret_backend_crl_config.py +237 -182
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +520 -378
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +57 -56
pulumi_vault/pkisecret/secret_backend_issuer.py +441 -175
pulumi_vault/pkisecret/secret_backend_key.py +120 -119
pulumi_vault/pkisecret/secret_backend_role.py +894 -644
pulumi_vault/pkisecret/secret_backend_root_cert.py +851 -427
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +936 -357
pulumi_vault/pkisecret/secret_backend_sign.py +347 -252
pulumi_vault/plugin.py +127 -126
pulumi_vault/plugin_pinned_version.py +43 -42
pulumi_vault/policy.py +43 -42
pulumi_vault/provider.py +120 -119
pulumi_vault/pulumi-plugin.json +1 -1
pulumi_vault/quota_lease_count.py +85 -84
pulumi_vault/quota_rate_limit.py +113 -112
pulumi_vault/rabbitmq/__init__.py +1 -0
pulumi_vault/rabbitmq/_inputs.py +41 -40
pulumi_vault/rabbitmq/outputs.py +25 -24
pulumi_vault/rabbitmq/secret_backend.py +169 -168
pulumi_vault/rabbitmq/secret_backend_role.py +57 -56
pulumi_vault/raft_autopilot.py +113 -112
pulumi_vault/raft_snapshot_agent_config.py +393 -392
pulumi_vault/rgp_policy.py +57 -56
pulumi_vault/saml/__init__.py +1 -0
pulumi_vault/saml/auth_backend.py +155 -154
pulumi_vault/saml/auth_backend_role.py +239 -238
pulumi_vault/secrets/__init__.py +1 -0
pulumi_vault/secrets/_inputs.py +16 -15
pulumi_vault/secrets/outputs.py +10 -9
pulumi_vault/secrets/sync_association.py +71 -70
pulumi_vault/secrets/sync_aws_destination.py +148 -147
pulumi_vault/secrets/sync_azure_destination.py +148 -147
pulumi_vault/secrets/sync_config.py +43 -42
pulumi_vault/secrets/sync_gcp_destination.py +106 -105
pulumi_vault/secrets/sync_gh_destination.py +134 -133
pulumi_vault/secrets/sync_github_apps.py +64 -63
pulumi_vault/secrets/sync_vercel_destination.py +120 -119
pulumi_vault/ssh/__init__.py +2 -0
pulumi_vault/ssh/_inputs.py +11 -10
pulumi_vault/ssh/get_secret_backend_sign.py +295 -0
pulumi_vault/ssh/outputs.py +7 -6
pulumi_vault/ssh/secret_backend_ca.py +99 -98
pulumi_vault/ssh/secret_backend_role.py +365 -364
pulumi_vault/terraformcloud/__init__.py +1 -0
pulumi_vault/terraformcloud/secret_backend.py +111 -110
pulumi_vault/terraformcloud/secret_creds.py +74 -73
pulumi_vault/terraformcloud/secret_role.py +96 -95
pulumi_vault/token.py +246 -245
pulumi_vault/tokenauth/__init__.py +1 -0
pulumi_vault/tokenauth/auth_backend_role.py +267 -266
pulumi_vault/transform/__init__.py +1 -0
pulumi_vault/transform/alphabet.py +57 -56
pulumi_vault/transform/get_decode.py +47 -46
pulumi_vault/transform/get_encode.py +47 -46
pulumi_vault/transform/role.py +57 -56
pulumi_vault/transform/template.py +113 -112
pulumi_vault/transform/transformation.py +141 -140
pulumi_vault/transit/__init__.py +3 -0
pulumi_vault/transit/get_decrypt.py +18 -17
pulumi_vault/transit/get_encrypt.py +21 -20
pulumi_vault/transit/get_sign.py +325 -0
pulumi_vault/transit/get_verify.py +355 -0
pulumi_vault/transit/secret_backend_key.py +394 -231
pulumi_vault/transit/secret_cache_config.py +43 -42
{pulumi_vault-6.6.0a1741415971.dist-info → pulumi_vault-6.7.0.dist-info}/METADATA +2 -2
pulumi_vault-6.7.0.dist-info/RECORD +265 -0
{pulumi_vault-6.6.0a1741415971.dist-info → pulumi_vault-6.7.0.dist-info}/WHEEL +1 -1
pulumi_vault-6.6.0a1741415971.dist-info/RECORD +0 -260
{pulumi_vault-6.6.0a1741415971.dist-info → pulumi_vault-6.7.0.dist-info}/top_level.txt +0 -0

pulumi_vault/pkisecret/backend_config_acme.py CHANGED Viewed

@@ -2,6 +2,7 @@
 # *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
 # *** Do not edit by hand unless you're certain you know what you are doing! ***
+import builtins
 import copy
 import warnings
 import sys
@@ -19,29 +20,31 @@ __all__ = ['BackendConfigAcmeArgs', 'BackendConfigAcme']
 @pulumi.input_type
 class BackendConfigAcmeArgs:
     def __init__(__self__, *,
-                 backend: pulumi.Input[str],
-                 enabled: pulumi.Input[bool],
-                 allow_role_ext_key_usage: Optional[pulumi.Input[bool]] = None,
-                 allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 default_directory_policy: Optional[pulumi.Input[str]] = None,
-                 dns_resolver: Optional[pulumi.Input[str]] = None,
-                 eab_policy: Optional[pulumi.Input[str]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None):
+                 backend: pulumi.Input[builtins.str],
+                 enabled: pulumi.Input[builtins.bool],
+                 allow_role_ext_key_usage: Optional[pulumi.Input[builtins.bool]] = None,
+                 allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 default_directory_policy: Optional[pulumi.Input[builtins.str]] = None,
+                 dns_resolver: Optional[pulumi.Input[builtins.str]] = None,
+                 eab_policy: Optional[pulumi.Input[builtins.str]] = None,
+                 max_ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None):
         """
         The set of arguments for constructing a BackendConfigAcme resource.
-        :param pulumi.Input[str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
-        :param pulumi.Input[bool] enabled: Specifies whether ACME is enabled.
-        :param pulumi.Input[bool] allow_role_ext_key_usage: Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_issuers: Specifies which issuers are allowed for use with ACME.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_roles: Specifies which roles are allowed for use with ACME.
-        :param pulumi.Input[str] default_directory_policy: Specifies the policy to be used for non-role-qualified ACME requests.
+        :param pulumi.Input[builtins.str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
+        :param pulumi.Input[builtins.bool] enabled: Specifies whether ACME is enabled.
+        :param pulumi.Input[builtins.bool] allow_role_ext_key_usage: Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] allowed_issuers: Specifies which issuers are allowed for use with ACME.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] allowed_roles: Specifies which roles are allowed for use with ACME.
+        :param pulumi.Input[builtins.str] default_directory_policy: Specifies the policy to be used for non-role-qualified ACME requests.
                Allowed values are `forbid`, `sign-verbatim`, `role:<role_name>`, `external-policy` or `external-policy:<policy>`.
-        :param pulumi.Input[str] dns_resolver: DNS resolver to use for domain resolution on this mount.
+        :param pulumi.Input[builtins.str] dns_resolver: DNS resolver to use for domain resolution on this mount.
                Must be in the format `<host>:<port>`, with both parts mandatory.
-        :param pulumi.Input[str] eab_policy: Specifies the policy to use for external account binding behaviour.
+        :param pulumi.Input[builtins.str] eab_policy: Specifies the policy to use for external account binding behaviour.
                Allowed values are `not-required`, `new-account-required` or `always-required`.
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.int] max_ttl: The maximum TTL in seconds for certificates issued by ACME. **Vault 1.17.0+**
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
                *Available only for Vault Enterprise*.
@@ -60,72 +63,74 @@ class BackendConfigAcmeArgs:
             pulumi.set(__self__, "dns_resolver", dns_resolver)
         if eab_policy is not None:
             pulumi.set(__self__, "eab_policy", eab_policy)
+        if max_ttl is not None:
+            pulumi.set(__self__, "max_ttl", max_ttl)
         if namespace is not None:
             pulumi.set(__self__, "namespace", namespace)
     @property
     @pulumi.getter
-    def backend(self) -> pulumi.Input[str]:
+    def backend(self) -> pulumi.Input[builtins.str]:
         """
         The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
         """
         return pulumi.get(self, "backend")
     @backend.setter
-    def backend(self, value: pulumi.Input[str]):
+    def backend(self, value: pulumi.Input[builtins.str]):
         pulumi.set(self, "backend", value)
     @property
     @pulumi.getter
-    def enabled(self) -> pulumi.Input[bool]:
+    def enabled(self) -> pulumi.Input[builtins.bool]:
         """
         Specifies whether ACME is enabled.
         """
         return pulumi.get(self, "enabled")
     @enabled.setter
-    def enabled(self, value: pulumi.Input[bool]):
+    def enabled(self, value: pulumi.Input[builtins.bool]):
         pulumi.set(self, "enabled", value)
     @property
     @pulumi.getter(name="allowRoleExtKeyUsage")
-    def allow_role_ext_key_usage(self) -> Optional[pulumi.Input[bool]]:
+    def allow_role_ext_key_usage(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
         """
         return pulumi.get(self, "allow_role_ext_key_usage")
     @allow_role_ext_key_usage.setter
-    def allow_role_ext_key_usage(self, value: Optional[pulumi.Input[bool]]):
+    def allow_role_ext_key_usage(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "allow_role_ext_key_usage", value)
     @property
     @pulumi.getter(name="allowedIssuers")
-    def allowed_issuers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def allowed_issuers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         Specifies which issuers are allowed for use with ACME.
         """
         return pulumi.get(self, "allowed_issuers")
     @allowed_issuers.setter
-    def allowed_issuers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def allowed_issuers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "allowed_issuers", value)
     @property
     @pulumi.getter(name="allowedRoles")
-    def allowed_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def allowed_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         Specifies which roles are allowed for use with ACME.
         """
         return pulumi.get(self, "allowed_roles")
     @allowed_roles.setter
-    def allowed_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def allowed_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "allowed_roles", value)
     @property
     @pulumi.getter(name="defaultDirectoryPolicy")
-    def default_directory_policy(self) -> Optional[pulumi.Input[str]]:
+    def default_directory_policy(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Specifies the policy to be used for non-role-qualified ACME requests.
         Allowed values are `forbid`, `sign-verbatim`, `role:<role_name>`, `external-policy` or `external-policy:<policy>`.
@@ -133,12 +138,12 @@ class BackendConfigAcmeArgs:
         return pulumi.get(self, "default_directory_policy")
     @default_directory_policy.setter
-    def default_directory_policy(self, value: Optional[pulumi.Input[str]]):
+    def default_directory_policy(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "default_directory_policy", value)
     @property
     @pulumi.getter(name="dnsResolver")
-    def dns_resolver(self) -> Optional[pulumi.Input[str]]:
+    def dns_resolver(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         DNS resolver to use for domain resolution on this mount.
         Must be in the format `<host>:<port>`, with both parts mandatory.
@@ -146,12 +151,12 @@ class BackendConfigAcmeArgs:
         return pulumi.get(self, "dns_resolver")
     @dns_resolver.setter
-    def dns_resolver(self, value: Optional[pulumi.Input[str]]):
+    def dns_resolver(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "dns_resolver", value)
     @property
     @pulumi.getter(name="eabPolicy")
-    def eab_policy(self) -> Optional[pulumi.Input[str]]:
+    def eab_policy(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Specifies the policy to use for external account binding behaviour.
         Allowed values are `not-required`, `new-account-required` or `always-required`.
@@ -159,12 +164,24 @@ class BackendConfigAcmeArgs:
         return pulumi.get(self, "eab_policy")
     @eab_policy.setter
-    def eab_policy(self, value: Optional[pulumi.Input[str]]):
+    def eab_policy(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "eab_policy", value)
+    @property
+    @pulumi.getter(name="maxTtl")
+    def max_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
+        """
+        The maximum TTL in seconds for certificates issued by ACME. **Vault 1.17.0+**
+        """
+        return pulumi.get(self, "max_ttl")
+    @max_ttl.setter
+    def max_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
+        pulumi.set(self, "max_ttl", value)
     @property
     @pulumi.getter
-    def namespace(self) -> Optional[pulumi.Input[str]]:
+    def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -174,36 +191,38 @@ class BackendConfigAcmeArgs:
         return pulumi.get(self, "namespace")
     @namespace.setter
-    def namespace(self, value: Optional[pulumi.Input[str]]):
+    def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "namespace", value)
 @pulumi.input_type
 class _BackendConfigAcmeState:
     def __init__(__self__, *,
-                 allow_role_ext_key_usage: Optional[pulumi.Input[bool]] = None,
-                 allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 backend: Optional[pulumi.Input[str]] = None,
-                 default_directory_policy: Optional[pulumi.Input[str]] = None,
-                 dns_resolver: Optional[pulumi.Input[str]] = None,
-                 eab_policy: Optional[pulumi.Input[str]] = None,
-                 enabled: Optional[pulumi.Input[bool]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None):
+                 allow_role_ext_key_usage: Optional[pulumi.Input[builtins.bool]] = None,
+                 allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[builtins.str]] = None,
+                 default_directory_policy: Optional[pulumi.Input[builtins.str]] = None,
+                 dns_resolver: Optional[pulumi.Input[builtins.str]] = None,
+                 eab_policy: Optional[pulumi.Input[builtins.str]] = None,
+                 enabled: Optional[pulumi.Input[builtins.bool]] = None,
+                 max_ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None):
         """
         Input properties used for looking up and filtering BackendConfigAcme resources.
-        :param pulumi.Input[bool] allow_role_ext_key_usage: Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_issuers: Specifies which issuers are allowed for use with ACME.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_roles: Specifies which roles are allowed for use with ACME.
-        :param pulumi.Input[str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
-        :param pulumi.Input[str] default_directory_policy: Specifies the policy to be used for non-role-qualified ACME requests.
+        :param pulumi.Input[builtins.bool] allow_role_ext_key_usage: Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] allowed_issuers: Specifies which issuers are allowed for use with ACME.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] allowed_roles: Specifies which roles are allowed for use with ACME.
+        :param pulumi.Input[builtins.str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
+        :param pulumi.Input[builtins.str] default_directory_policy: Specifies the policy to be used for non-role-qualified ACME requests.
                Allowed values are `forbid`, `sign-verbatim`, `role:<role_name>`, `external-policy` or `external-policy:<policy>`.
-        :param pulumi.Input[str] dns_resolver: DNS resolver to use for domain resolution on this mount.
+        :param pulumi.Input[builtins.str] dns_resolver: DNS resolver to use for domain resolution on this mount.
                Must be in the format `<host>:<port>`, with both parts mandatory.
-        :param pulumi.Input[str] eab_policy: Specifies the policy to use for external account binding behaviour.
+        :param pulumi.Input[builtins.str] eab_policy: Specifies the policy to use for external account binding behaviour.
                Allowed values are `not-required`, `new-account-required` or `always-required`.
-        :param pulumi.Input[bool] enabled: Specifies whether ACME is enabled.
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.bool] enabled: Specifies whether ACME is enabled.
+        :param pulumi.Input[builtins.int] max_ttl: The maximum TTL in seconds for certificates issued by ACME. **Vault 1.17.0+**
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
                *Available only for Vault Enterprise*.
@@ -224,60 +243,62 @@ class _BackendConfigAcmeState:
             pulumi.set(__self__, "eab_policy", eab_policy)
         if enabled is not None:
             pulumi.set(__self__, "enabled", enabled)
+        if max_ttl is not None:
+            pulumi.set(__self__, "max_ttl", max_ttl)
         if namespace is not None:
             pulumi.set(__self__, "namespace", namespace)
     @property
     @pulumi.getter(name="allowRoleExtKeyUsage")
-    def allow_role_ext_key_usage(self) -> Optional[pulumi.Input[bool]]:
+    def allow_role_ext_key_usage(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
         """
         return pulumi.get(self, "allow_role_ext_key_usage")
     @allow_role_ext_key_usage.setter
-    def allow_role_ext_key_usage(self, value: Optional[pulumi.Input[bool]]):
+    def allow_role_ext_key_usage(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "allow_role_ext_key_usage", value)
     @property
     @pulumi.getter(name="allowedIssuers")
-    def allowed_issuers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def allowed_issuers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         Specifies which issuers are allowed for use with ACME.
         """
         return pulumi.get(self, "allowed_issuers")
     @allowed_issuers.setter
-    def allowed_issuers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def allowed_issuers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "allowed_issuers", value)
     @property
     @pulumi.getter(name="allowedRoles")
-    def allowed_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+    def allowed_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
         """
         Specifies which roles are allowed for use with ACME.
         """
         return pulumi.get(self, "allowed_roles")
     @allowed_roles.setter
-    def allowed_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+    def allowed_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "allowed_roles", value)
     @property
     @pulumi.getter
-    def backend(self) -> Optional[pulumi.Input[str]]:
+    def backend(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
         """
         return pulumi.get(self, "backend")
     @backend.setter
-    def backend(self, value: Optional[pulumi.Input[str]]):
+    def backend(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "backend", value)
     @property
     @pulumi.getter(name="defaultDirectoryPolicy")
-    def default_directory_policy(self) -> Optional[pulumi.Input[str]]:
+    def default_directory_policy(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Specifies the policy to be used for non-role-qualified ACME requests.
         Allowed values are `forbid`, `sign-verbatim`, `role:<role_name>`, `external-policy` or `external-policy:<policy>`.
@@ -285,12 +306,12 @@ class _BackendConfigAcmeState:
         return pulumi.get(self, "default_directory_policy")
     @default_directory_policy.setter
-    def default_directory_policy(self, value: Optional[pulumi.Input[str]]):
+    def default_directory_policy(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "default_directory_policy", value)
     @property
     @pulumi.getter(name="dnsResolver")
-    def dns_resolver(self) -> Optional[pulumi.Input[str]]:
+    def dns_resolver(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         DNS resolver to use for domain resolution on this mount.
         Must be in the format `<host>:<port>`, with both parts mandatory.
@@ -298,12 +319,12 @@ class _BackendConfigAcmeState:
         return pulumi.get(self, "dns_resolver")
     @dns_resolver.setter
-    def dns_resolver(self, value: Optional[pulumi.Input[str]]):
+    def dns_resolver(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "dns_resolver", value)
     @property
     @pulumi.getter(name="eabPolicy")
-    def eab_policy(self) -> Optional[pulumi.Input[str]]:
+    def eab_policy(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Specifies the policy to use for external account binding behaviour.
         Allowed values are `not-required`, `new-account-required` or `always-required`.
@@ -311,24 +332,36 @@ class _BackendConfigAcmeState:
         return pulumi.get(self, "eab_policy")
     @eab_policy.setter
-    def eab_policy(self, value: Optional[pulumi.Input[str]]):
+    def eab_policy(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "eab_policy", value)
     @property
     @pulumi.getter
-    def enabled(self) -> Optional[pulumi.Input[bool]]:
+    def enabled(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Specifies whether ACME is enabled.
         """
         return pulumi.get(self, "enabled")
     @enabled.setter
-    def enabled(self, value: Optional[pulumi.Input[bool]]):
+    def enabled(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "enabled", value)
+    @property
+    @pulumi.getter(name="maxTtl")
+    def max_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
+        """
+        The maximum TTL in seconds for certificates issued by ACME. **Vault 1.17.0+**
+        """
+        return pulumi.get(self, "max_ttl")
+    @max_ttl.setter
+    def max_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
+        pulumi.set(self, "max_ttl", value)
     @property
     @pulumi.getter
-    def namespace(self) -> Optional[pulumi.Input[str]]:
+    def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -338,7 +371,7 @@ class _BackendConfigAcmeState:
         return pulumi.get(self, "namespace")
     @namespace.setter
-    def namespace(self, value: Optional[pulumi.Input[str]]):
+    def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "namespace", value)
@@ -347,15 +380,16 @@ class BackendConfigAcme(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 allow_role_ext_key_usage: Optional[pulumi.Input[bool]] = None,
-                 allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 backend: Optional[pulumi.Input[str]] = None,
-                 default_directory_policy: Optional[pulumi.Input[str]] = None,
-                 dns_resolver: Optional[pulumi.Input[str]] = None,
-                 eab_policy: Optional[pulumi.Input[str]] = None,
-                 enabled: Optional[pulumi.Input[bool]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
+                 allow_role_ext_key_usage: Optional[pulumi.Input[builtins.bool]] = None,
+                 allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[builtins.str]] = None,
+                 default_directory_policy: Optional[pulumi.Input[builtins.str]] = None,
+                 dns_resolver: Optional[pulumi.Input[builtins.str]] = None,
+                 eab_policy: Optional[pulumi.Input[builtins.str]] = None,
+                 enabled: Optional[pulumi.Input[builtins.bool]] = None,
+                 max_ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
                  __props__=None):
         """
         Allows setting the ACME server configuration used by specified mount.
@@ -398,18 +432,19 @@ class BackendConfigAcme(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[bool] allow_role_ext_key_usage: Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_issuers: Specifies which issuers are allowed for use with ACME.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_roles: Specifies which roles are allowed for use with ACME.
-        :param pulumi.Input[str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
-        :param pulumi.Input[str] default_directory_policy: Specifies the policy to be used for non-role-qualified ACME requests.
+        :param pulumi.Input[builtins.bool] allow_role_ext_key_usage: Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] allowed_issuers: Specifies which issuers are allowed for use with ACME.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] allowed_roles: Specifies which roles are allowed for use with ACME.
+        :param pulumi.Input[builtins.str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
+        :param pulumi.Input[builtins.str] default_directory_policy: Specifies the policy to be used for non-role-qualified ACME requests.
                Allowed values are `forbid`, `sign-verbatim`, `role:<role_name>`, `external-policy` or `external-policy:<policy>`.
-        :param pulumi.Input[str] dns_resolver: DNS resolver to use for domain resolution on this mount.
+        :param pulumi.Input[builtins.str] dns_resolver: DNS resolver to use for domain resolution on this mount.
                Must be in the format `<host>:<port>`, with both parts mandatory.
-        :param pulumi.Input[str] eab_policy: Specifies the policy to use for external account binding behaviour.
+        :param pulumi.Input[builtins.str] eab_policy: Specifies the policy to use for external account binding behaviour.
                Allowed values are `not-required`, `new-account-required` or `always-required`.
-        :param pulumi.Input[bool] enabled: Specifies whether ACME is enabled.
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.bool] enabled: Specifies whether ACME is enabled.
+        :param pulumi.Input[builtins.int] max_ttl: The maximum TTL in seconds for certificates issued by ACME. **Vault 1.17.0+**
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
                *Available only for Vault Enterprise*.
@@ -474,15 +509,16 @@ class BackendConfigAcme(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 allow_role_ext_key_usage: Optional[pulumi.Input[bool]] = None,
-                 allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 backend: Optional[pulumi.Input[str]] = None,
-                 default_directory_policy: Optional[pulumi.Input[str]] = None,
-                 dns_resolver: Optional[pulumi.Input[str]] = None,
-                 eab_policy: Optional[pulumi.Input[str]] = None,
-                 enabled: Optional[pulumi.Input[bool]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
+                 allow_role_ext_key_usage: Optional[pulumi.Input[builtins.bool]] = None,
+                 allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[builtins.str]] = None,
+                 default_directory_policy: Optional[pulumi.Input[builtins.str]] = None,
+                 dns_resolver: Optional[pulumi.Input[builtins.str]] = None,
+                 eab_policy: Optional[pulumi.Input[builtins.str]] = None,
+                 enabled: Optional[pulumi.Input[builtins.bool]] = None,
+                 max_ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -504,6 +540,7 @@ class BackendConfigAcme(pulumi.CustomResource):
             if enabled is None and not opts.urn:
                 raise TypeError("Missing required property 'enabled'")
             __props__.__dict__["enabled"] = enabled
+            __props__.__dict__["max_ttl"] = max_ttl
             __props__.__dict__["namespace"] = namespace
         super(BackendConfigAcme, __self__).__init__(
             'vault:pkiSecret/backendConfigAcme:BackendConfigAcme',
@@ -515,15 +552,16 @@ class BackendConfigAcme(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            allow_role_ext_key_usage: Optional[pulumi.Input[bool]] = None,
-            allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            backend: Optional[pulumi.Input[str]] = None,
-            default_directory_policy: Optional[pulumi.Input[str]] = None,
-            dns_resolver: Optional[pulumi.Input[str]] = None,
-            eab_policy: Optional[pulumi.Input[str]] = None,
-            enabled: Optional[pulumi.Input[bool]] = None,
-            namespace: Optional[pulumi.Input[str]] = None) -> 'BackendConfigAcme':
+            allow_role_ext_key_usage: Optional[pulumi.Input[builtins.bool]] = None,
+            allowed_issuers: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            backend: Optional[pulumi.Input[builtins.str]] = None,
+            default_directory_policy: Optional[pulumi.Input[builtins.str]] = None,
+            dns_resolver: Optional[pulumi.Input[builtins.str]] = None,
+            eab_policy: Optional[pulumi.Input[builtins.str]] = None,
+            enabled: Optional[pulumi.Input[builtins.bool]] = None,
+            max_ttl: Optional[pulumi.Input[builtins.int]] = None,
+            namespace: Optional[pulumi.Input[builtins.str]] = None) -> 'BackendConfigAcme':
         """
         Get an existing BackendConfigAcme resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -531,18 +569,19 @@ class BackendConfigAcme(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[bool] allow_role_ext_key_usage: Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_issuers: Specifies which issuers are allowed for use with ACME.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_roles: Specifies which roles are allowed for use with ACME.
-        :param pulumi.Input[str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
-        :param pulumi.Input[str] default_directory_policy: Specifies the policy to be used for non-role-qualified ACME requests.
+        :param pulumi.Input[builtins.bool] allow_role_ext_key_usage: Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] allowed_issuers: Specifies which issuers are allowed for use with ACME.
+        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] allowed_roles: Specifies which roles are allowed for use with ACME.
+        :param pulumi.Input[builtins.str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
+        :param pulumi.Input[builtins.str] default_directory_policy: Specifies the policy to be used for non-role-qualified ACME requests.
                Allowed values are `forbid`, `sign-verbatim`, `role:<role_name>`, `external-policy` or `external-policy:<policy>`.
-        :param pulumi.Input[str] dns_resolver: DNS resolver to use for domain resolution on this mount.
+        :param pulumi.Input[builtins.str] dns_resolver: DNS resolver to use for domain resolution on this mount.
                Must be in the format `<host>:<port>`, with both parts mandatory.
-        :param pulumi.Input[str] eab_policy: Specifies the policy to use for external account binding behaviour.
+        :param pulumi.Input[builtins.str] eab_policy: Specifies the policy to use for external account binding behaviour.
                Allowed values are `not-required`, `new-account-required` or `always-required`.
-        :param pulumi.Input[bool] enabled: Specifies whether ACME is enabled.
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.bool] enabled: Specifies whether ACME is enabled.
+        :param pulumi.Input[builtins.int] max_ttl: The maximum TTL in seconds for certificates issued by ACME. **Vault 1.17.0+**
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault#namespace).
                *Available only for Vault Enterprise*.
@@ -559,12 +598,13 @@ class BackendConfigAcme(pulumi.CustomResource):
         __props__.__dict__["dns_resolver"] = dns_resolver
         __props__.__dict__["eab_policy"] = eab_policy
         __props__.__dict__["enabled"] = enabled
+        __props__.__dict__["max_ttl"] = max_ttl
         __props__.__dict__["namespace"] = namespace
         return BackendConfigAcme(resource_name, opts=opts, __props__=__props__)
     @property
     @pulumi.getter(name="allowRoleExtKeyUsage")
-    def allow_role_ext_key_usage(self) -> pulumi.Output[Optional[bool]]:
+    def allow_role_ext_key_usage(self) -> pulumi.Output[Optional[builtins.bool]]:
         """
         Specifies whether the ExtKeyUsage field from a role is used. **Vault 1.14.1+**
         """
@@ -572,7 +612,7 @@ class BackendConfigAcme(pulumi.CustomResource):
     @property
     @pulumi.getter(name="allowedIssuers")
-    def allowed_issuers(self) -> pulumi.Output[Sequence[str]]:
+    def allowed_issuers(self) -> pulumi.Output[Sequence[builtins.str]]:
         """
         Specifies which issuers are allowed for use with ACME.
         """
@@ -580,7 +620,7 @@ class BackendConfigAcme(pulumi.CustomResource):
     @property
     @pulumi.getter(name="allowedRoles")
-    def allowed_roles(self) -> pulumi.Output[Sequence[str]]:
+    def allowed_roles(self) -> pulumi.Output[Sequence[builtins.str]]:
         """
         Specifies which roles are allowed for use with ACME.
         """
@@ -588,7 +628,7 @@ class BackendConfigAcme(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def backend(self) -> pulumi.Output[str]:
+    def backend(self) -> pulumi.Output[builtins.str]:
         """
         The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
         """
@@ -596,7 +636,7 @@ class BackendConfigAcme(pulumi.CustomResource):
     @property
     @pulumi.getter(name="defaultDirectoryPolicy")
-    def default_directory_policy(self) -> pulumi.Output[str]:
+    def default_directory_policy(self) -> pulumi.Output[builtins.str]:
         """
         Specifies the policy to be used for non-role-qualified ACME requests.
         Allowed values are `forbid`, `sign-verbatim`, `role:<role_name>`, `external-policy` or `external-policy:<policy>`.
@@ -605,7 +645,7 @@ class BackendConfigAcme(pulumi.CustomResource):
     @property
     @pulumi.getter(name="dnsResolver")
-    def dns_resolver(self) -> pulumi.Output[Optional[str]]:
+    def dns_resolver(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         DNS resolver to use for domain resolution on this mount.
         Must be in the format `<host>:<port>`, with both parts mandatory.
@@ -614,7 +654,7 @@ class BackendConfigAcme(pulumi.CustomResource):
     @property
     @pulumi.getter(name="eabPolicy")
-    def eab_policy(self) -> pulumi.Output[str]:
+    def eab_policy(self) -> pulumi.Output[builtins.str]:
         """
         Specifies the policy to use for external account binding behaviour.
         Allowed values are `not-required`, `new-account-required` or `always-required`.
@@ -623,15 +663,23 @@ class BackendConfigAcme(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def enabled(self) -> pulumi.Output[bool]:
+    def enabled(self) -> pulumi.Output[builtins.bool]:
         """
         Specifies whether ACME is enabled.
         """
         return pulumi.get(self, "enabled")
+    @property
+    @pulumi.getter(name="maxTtl")
+    def max_ttl(self) -> pulumi.Output[builtins.int]:
+        """
+        The maximum TTL in seconds for certificates issued by ACME. **Vault 1.17.0+**
+        """
+        return pulumi.get(self, "max_ttl")
     @property
     @pulumi.getter
-    def namespace(self) -> pulumi.Output[Optional[str]]:
+    def namespace(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.

pulumi-vault 6.6.0a1741415971__py3-none-any.whl → 6.7.0__py3-none-any.whl

pulumi-vault 6.6.0a1741415971py3-none-any.whl → 6.7.0py3-none-any.whl