pulumi-vault 6.7.0a1743490126__py3-none-any.whl → 6.7.0a1744183682__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -0
- pulumi_vault/_inputs.py +554 -553
- pulumi_vault/ad/__init__.py +1 -0
- pulumi_vault/ad/get_access_credentials.py +20 -19
- pulumi_vault/ad/secret_backend.py +477 -476
- pulumi_vault/ad/secret_library.py +99 -98
- pulumi_vault/ad/secret_role.py +85 -84
- pulumi_vault/alicloud/__init__.py +1 -0
- pulumi_vault/alicloud/auth_backend_role.py +183 -182
- pulumi_vault/approle/__init__.py +1 -0
- pulumi_vault/approle/auth_backend_login.py +106 -105
- pulumi_vault/approle/auth_backend_role.py +239 -238
- pulumi_vault/approle/auth_backend_role_secret_id.py +162 -161
- pulumi_vault/approle/get_auth_backend_role_id.py +18 -17
- pulumi_vault/audit.py +85 -84
- pulumi_vault/audit_request_header.py +43 -42
- pulumi_vault/auth_backend.py +106 -105
- pulumi_vault/aws/__init__.py +1 -0
- pulumi_vault/aws/auth_backend_cert.py +71 -70
- pulumi_vault/aws/auth_backend_client.py +253 -252
- pulumi_vault/aws/auth_backend_config_identity.py +85 -84
- pulumi_vault/aws/auth_backend_identity_whitelist.py +57 -56
- pulumi_vault/aws/auth_backend_login.py +209 -208
- pulumi_vault/aws/auth_backend_role.py +400 -399
- pulumi_vault/aws/auth_backend_role_tag.py +127 -126
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +57 -56
- pulumi_vault/aws/auth_backend_sts_role.py +71 -70
- pulumi_vault/aws/get_access_credentials.py +44 -43
- pulumi_vault/aws/get_static_access_credentials.py +13 -12
- pulumi_vault/aws/secret_backend.py +337 -336
- pulumi_vault/aws/secret_backend_role.py +211 -210
- pulumi_vault/aws/secret_backend_static_role.py +113 -112
- pulumi_vault/azure/__init__.py +1 -0
- pulumi_vault/azure/_inputs.py +21 -20
- pulumi_vault/azure/auth_backend_config.py +183 -182
- pulumi_vault/azure/auth_backend_role.py +253 -252
- pulumi_vault/azure/backend.py +239 -238
- pulumi_vault/azure/backend_role.py +141 -140
- pulumi_vault/azure/get_access_credentials.py +58 -57
- pulumi_vault/azure/outputs.py +11 -10
- pulumi_vault/cert_auth_backend_role.py +365 -364
- pulumi_vault/config/__init__.py +1 -0
- pulumi_vault/config/__init__.pyi +1 -0
- pulumi_vault/config/_inputs.py +11 -10
- pulumi_vault/config/outputs.py +287 -286
- pulumi_vault/config/ui_custom_message.py +113 -112
- pulumi_vault/config/vars.py +1 -0
- pulumi_vault/consul/__init__.py +1 -0
- pulumi_vault/consul/secret_backend.py +197 -196
- pulumi_vault/consul/secret_backend_role.py +183 -182
- pulumi_vault/database/__init__.py +1 -0
- pulumi_vault/database/_inputs.py +2525 -2524
- pulumi_vault/database/outputs.py +1529 -1528
- pulumi_vault/database/secret_backend_connection.py +169 -168
- pulumi_vault/database/secret_backend_role.py +169 -168
- pulumi_vault/database/secret_backend_static_role.py +179 -178
- pulumi_vault/database/secrets_mount.py +267 -266
- pulumi_vault/egp_policy.py +71 -70
- pulumi_vault/gcp/__init__.py +1 -0
- pulumi_vault/gcp/_inputs.py +82 -81
- pulumi_vault/gcp/auth_backend.py +260 -259
- pulumi_vault/gcp/auth_backend_role.py +281 -280
- pulumi_vault/gcp/get_auth_backend_role.py +70 -69
- pulumi_vault/gcp/outputs.py +50 -49
- pulumi_vault/gcp/secret_backend.py +232 -231
- pulumi_vault/gcp/secret_impersonated_account.py +92 -91
- pulumi_vault/gcp/secret_roleset.py +92 -91
- pulumi_vault/gcp/secret_static_account.py +92 -91
- pulumi_vault/generic/__init__.py +1 -0
- pulumi_vault/generic/endpoint.py +113 -112
- pulumi_vault/generic/get_secret.py +28 -27
- pulumi_vault/generic/secret.py +78 -77
- pulumi_vault/get_auth_backend.py +19 -18
- pulumi_vault/get_auth_backends.py +14 -13
- pulumi_vault/get_namespace.py +15 -14
- pulumi_vault/get_namespaces.py +8 -7
- pulumi_vault/get_nomad_access_token.py +19 -18
- pulumi_vault/get_policy_document.py +6 -5
- pulumi_vault/get_raft_autopilot_state.py +18 -17
- pulumi_vault/github/__init__.py +1 -0
- pulumi_vault/github/_inputs.py +42 -41
- pulumi_vault/github/auth_backend.py +232 -231
- pulumi_vault/github/outputs.py +26 -25
- pulumi_vault/github/team.py +57 -56
- pulumi_vault/github/user.py +57 -56
- pulumi_vault/identity/__init__.py +1 -0
- pulumi_vault/identity/entity.py +85 -84
- pulumi_vault/identity/entity_alias.py +71 -70
- pulumi_vault/identity/entity_policies.py +64 -63
- pulumi_vault/identity/get_entity.py +43 -42
- pulumi_vault/identity/get_group.py +50 -49
- pulumi_vault/identity/get_oidc_client_creds.py +14 -13
- pulumi_vault/identity/get_oidc_openid_config.py +24 -23
- pulumi_vault/identity/get_oidc_public_keys.py +13 -12
- pulumi_vault/identity/group.py +141 -140
- pulumi_vault/identity/group_alias.py +57 -56
- pulumi_vault/identity/group_member_entity_ids.py +57 -56
- pulumi_vault/identity/group_member_group_ids.py +57 -56
- pulumi_vault/identity/group_policies.py +64 -63
- pulumi_vault/identity/mfa_duo.py +148 -147
- pulumi_vault/identity/mfa_login_enforcement.py +120 -119
- pulumi_vault/identity/mfa_okta.py +134 -133
- pulumi_vault/identity/mfa_pingid.py +127 -126
- pulumi_vault/identity/mfa_totp.py +176 -175
- pulumi_vault/identity/oidc.py +29 -28
- pulumi_vault/identity/oidc_assignment.py +57 -56
- pulumi_vault/identity/oidc_client.py +127 -126
- pulumi_vault/identity/oidc_key.py +85 -84
- pulumi_vault/identity/oidc_key_allowed_client_id.py +43 -42
- pulumi_vault/identity/oidc_provider.py +92 -91
- pulumi_vault/identity/oidc_role.py +85 -84
- pulumi_vault/identity/oidc_scope.py +57 -56
- pulumi_vault/identity/outputs.py +32 -31
- pulumi_vault/jwt/__init__.py +1 -0
- pulumi_vault/jwt/_inputs.py +42 -41
- pulumi_vault/jwt/auth_backend.py +288 -287
- pulumi_vault/jwt/auth_backend_role.py +407 -406
- pulumi_vault/jwt/outputs.py +26 -25
- pulumi_vault/kmip/__init__.py +1 -0
- pulumi_vault/kmip/secret_backend.py +183 -182
- pulumi_vault/kmip/secret_role.py +295 -294
- pulumi_vault/kmip/secret_scope.py +57 -56
- pulumi_vault/kubernetes/__init__.py +1 -0
- pulumi_vault/kubernetes/auth_backend_config.py +141 -140
- pulumi_vault/kubernetes/auth_backend_role.py +225 -224
- pulumi_vault/kubernetes/get_auth_backend_config.py +47 -46
- pulumi_vault/kubernetes/get_auth_backend_role.py +70 -69
- pulumi_vault/kubernetes/get_service_account_token.py +38 -37
- pulumi_vault/kubernetes/secret_backend.py +316 -315
- pulumi_vault/kubernetes/secret_backend_role.py +197 -196
- pulumi_vault/kv/__init__.py +1 -0
- pulumi_vault/kv/_inputs.py +21 -20
- pulumi_vault/kv/get_secret.py +17 -16
- pulumi_vault/kv/get_secret_subkeys_v2.py +30 -29
- pulumi_vault/kv/get_secret_v2.py +29 -28
- pulumi_vault/kv/get_secrets_list.py +13 -12
- pulumi_vault/kv/get_secrets_list_v2.py +19 -18
- pulumi_vault/kv/outputs.py +13 -12
- pulumi_vault/kv/secret.py +50 -49
- pulumi_vault/kv/secret_backend_v2.py +71 -70
- pulumi_vault/kv/secret_v2.py +134 -133
- pulumi_vault/ldap/__init__.py +1 -0
- pulumi_vault/ldap/auth_backend.py +588 -587
- pulumi_vault/ldap/auth_backend_group.py +57 -56
- pulumi_vault/ldap/auth_backend_user.py +71 -70
- pulumi_vault/ldap/get_dynamic_credentials.py +17 -16
- pulumi_vault/ldap/get_static_credentials.py +18 -17
- pulumi_vault/ldap/secret_backend.py +554 -553
- pulumi_vault/ldap/secret_backend_dynamic_role.py +127 -126
- pulumi_vault/ldap/secret_backend_library_set.py +99 -98
- pulumi_vault/ldap/secret_backend_static_role.py +99 -98
- pulumi_vault/managed/__init__.py +1 -0
- pulumi_vault/managed/_inputs.py +229 -228
- pulumi_vault/managed/keys.py +15 -14
- pulumi_vault/managed/outputs.py +139 -138
- pulumi_vault/mfa_duo.py +113 -112
- pulumi_vault/mfa_okta.py +113 -112
- pulumi_vault/mfa_pingid.py +120 -119
- pulumi_vault/mfa_totp.py +127 -126
- pulumi_vault/mongodbatlas/__init__.py +1 -0
- pulumi_vault/mongodbatlas/secret_backend.py +64 -63
- pulumi_vault/mongodbatlas/secret_role.py +155 -154
- pulumi_vault/mount.py +274 -273
- pulumi_vault/namespace.py +64 -63
- pulumi_vault/nomad_secret_backend.py +211 -210
- pulumi_vault/nomad_secret_role.py +85 -84
- pulumi_vault/okta/__init__.py +1 -0
- pulumi_vault/okta/_inputs.py +26 -25
- pulumi_vault/okta/auth_backend.py +274 -273
- pulumi_vault/okta/auth_backend_group.py +57 -56
- pulumi_vault/okta/auth_backend_user.py +71 -70
- pulumi_vault/okta/outputs.py +16 -15
- pulumi_vault/outputs.py +56 -55
- pulumi_vault/password_policy.py +43 -42
- pulumi_vault/pkisecret/__init__.py +1 -0
- pulumi_vault/pkisecret/_inputs.py +31 -30
- pulumi_vault/pkisecret/backend_acme_eab.py +92 -91
- pulumi_vault/pkisecret/backend_config_acme.py +141 -140
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +323 -322
- pulumi_vault/pkisecret/backend_config_cluster.py +57 -56
- pulumi_vault/pkisecret/backend_config_cmpv2.py +106 -105
- pulumi_vault/pkisecret/backend_config_est.py +120 -119
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +22 -21
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +22 -21
- pulumi_vault/pkisecret/get_backend_config_est.py +19 -18
- pulumi_vault/pkisecret/get_backend_issuer.py +45 -44
- pulumi_vault/pkisecret/get_backend_issuers.py +15 -14
- pulumi_vault/pkisecret/get_backend_key.py +20 -19
- pulumi_vault/pkisecret/get_backend_keys.py +15 -14
- pulumi_vault/pkisecret/outputs.py +28 -27
- pulumi_vault/pkisecret/secret_backend_cert.py +337 -336
- pulumi_vault/pkisecret/secret_backend_config_ca.py +43 -42
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +57 -56
- pulumi_vault/pkisecret/secret_backend_config_urls.py +85 -84
- pulumi_vault/pkisecret/secret_backend_crl_config.py +197 -196
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +421 -420
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +57 -56
- pulumi_vault/pkisecret/secret_backend_issuer.py +232 -231
- pulumi_vault/pkisecret/secret_backend_key.py +120 -119
- pulumi_vault/pkisecret/secret_backend_role.py +715 -714
- pulumi_vault/pkisecret/secret_backend_root_cert.py +554 -553
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +526 -525
- pulumi_vault/pkisecret/secret_backend_sign.py +281 -280
- pulumi_vault/plugin.py +127 -126
- pulumi_vault/plugin_pinned_version.py +43 -42
- pulumi_vault/policy.py +43 -42
- pulumi_vault/provider.py +120 -119
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +85 -84
- pulumi_vault/quota_rate_limit.py +113 -112
- pulumi_vault/rabbitmq/__init__.py +1 -0
- pulumi_vault/rabbitmq/_inputs.py +41 -40
- pulumi_vault/rabbitmq/outputs.py +25 -24
- pulumi_vault/rabbitmq/secret_backend.py +169 -168
- pulumi_vault/rabbitmq/secret_backend_role.py +57 -56
- pulumi_vault/raft_autopilot.py +113 -112
- pulumi_vault/raft_snapshot_agent_config.py +393 -392
- pulumi_vault/rgp_policy.py +57 -56
- pulumi_vault/saml/__init__.py +1 -0
- pulumi_vault/saml/auth_backend.py +155 -154
- pulumi_vault/saml/auth_backend_role.py +239 -238
- pulumi_vault/secrets/__init__.py +1 -0
- pulumi_vault/secrets/_inputs.py +16 -15
- pulumi_vault/secrets/outputs.py +10 -9
- pulumi_vault/secrets/sync_association.py +71 -70
- pulumi_vault/secrets/sync_aws_destination.py +148 -147
- pulumi_vault/secrets/sync_azure_destination.py +148 -147
- pulumi_vault/secrets/sync_config.py +43 -42
- pulumi_vault/secrets/sync_gcp_destination.py +106 -105
- pulumi_vault/secrets/sync_gh_destination.py +134 -133
- pulumi_vault/secrets/sync_github_apps.py +64 -63
- pulumi_vault/secrets/sync_vercel_destination.py +120 -119
- pulumi_vault/ssh/__init__.py +1 -0
- pulumi_vault/ssh/_inputs.py +11 -10
- pulumi_vault/ssh/get_secret_backend_sign.py +52 -51
- pulumi_vault/ssh/outputs.py +7 -6
- pulumi_vault/ssh/secret_backend_ca.py +99 -98
- pulumi_vault/ssh/secret_backend_role.py +365 -364
- pulumi_vault/terraformcloud/__init__.py +1 -0
- pulumi_vault/terraformcloud/secret_backend.py +111 -110
- pulumi_vault/terraformcloud/secret_creds.py +74 -73
- pulumi_vault/terraformcloud/secret_role.py +93 -92
- pulumi_vault/token.py +246 -245
- pulumi_vault/tokenauth/__init__.py +1 -0
- pulumi_vault/tokenauth/auth_backend_role.py +267 -266
- pulumi_vault/transform/__init__.py +1 -0
- pulumi_vault/transform/alphabet.py +57 -56
- pulumi_vault/transform/get_decode.py +47 -46
- pulumi_vault/transform/get_encode.py +47 -46
- pulumi_vault/transform/role.py +57 -56
- pulumi_vault/transform/template.py +113 -112
- pulumi_vault/transform/transformation.py +141 -140
- pulumi_vault/transit/__init__.py +1 -0
- pulumi_vault/transit/get_decrypt.py +18 -17
- pulumi_vault/transit/get_encrypt.py +21 -20
- pulumi_vault/transit/get_sign.py +54 -53
- pulumi_vault/transit/get_verify.py +60 -59
- pulumi_vault/transit/secret_backend_key.py +274 -273
- pulumi_vault/transit/secret_cache_config.py +43 -42
- {pulumi_vault-6.7.0a1743490126.dist-info → pulumi_vault-6.7.0a1744183682.dist-info}/METADATA +1 -1
- pulumi_vault-6.7.0a1744183682.dist-info/RECORD +265 -0
- pulumi_vault-6.7.0a1743490126.dist-info/RECORD +0 -265
- {pulumi_vault-6.7.0a1743490126.dist-info → pulumi_vault-6.7.0a1744183682.dist-info}/WHEEL +0 -0
- {pulumi_vault-6.7.0a1743490126.dist-info → pulumi_vault-6.7.0a1744183682.dist-info}/top_level.txt +0 -0
|
@@ -2,6 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
+
import builtins
|
|
5
6
|
import copy
|
|
6
7
|
import warnings
|
|
7
8
|
import sys
|
|
@@ -19,51 +20,51 @@ __all__ = ['SecretBackendCertArgs', 'SecretBackendCert']
|
|
|
19
20
|
@pulumi.input_type
|
|
20
21
|
class SecretBackendCertArgs:
|
|
21
22
|
def __init__(__self__, *,
|
|
22
|
-
backend: pulumi.Input[str],
|
|
23
|
-
common_name: pulumi.Input[str],
|
|
24
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
25
|
-
auto_renew: Optional[pulumi.Input[bool]] = None,
|
|
26
|
-
cert_metadata: Optional[pulumi.Input[str]] = None,
|
|
27
|
-
exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
|
|
28
|
-
format: Optional[pulumi.Input[str]] = None,
|
|
29
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
30
|
-
issuer_ref: Optional[pulumi.Input[str]] = None,
|
|
31
|
-
min_seconds_remaining: Optional[pulumi.Input[int]] = None,
|
|
32
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
33
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
34
|
-
not_after: Optional[pulumi.Input[str]] = None,
|
|
35
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
36
|
-
private_key_format: Optional[pulumi.Input[str]] = None,
|
|
37
|
-
revoke: Optional[pulumi.Input[bool]] = None,
|
|
38
|
-
revoke_with_key: Optional[pulumi.Input[bool]] = None,
|
|
39
|
-
ttl: Optional[pulumi.Input[str]] = None,
|
|
40
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
41
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
23
|
+
backend: pulumi.Input[builtins.str],
|
|
24
|
+
common_name: pulumi.Input[builtins.str],
|
|
25
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
26
|
+
auto_renew: Optional[pulumi.Input[builtins.bool]] = None,
|
|
27
|
+
cert_metadata: Optional[pulumi.Input[builtins.str]] = None,
|
|
28
|
+
exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
|
|
29
|
+
format: Optional[pulumi.Input[builtins.str]] = None,
|
|
30
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
31
|
+
issuer_ref: Optional[pulumi.Input[builtins.str]] = None,
|
|
32
|
+
min_seconds_remaining: Optional[pulumi.Input[builtins.int]] = None,
|
|
33
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
34
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
35
|
+
not_after: Optional[pulumi.Input[builtins.str]] = None,
|
|
36
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
37
|
+
private_key_format: Optional[pulumi.Input[builtins.str]] = None,
|
|
38
|
+
revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
|
39
|
+
revoke_with_key: Optional[pulumi.Input[builtins.bool]] = None,
|
|
40
|
+
ttl: Optional[pulumi.Input[builtins.str]] = None,
|
|
41
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
42
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None):
|
|
42
43
|
"""
|
|
43
44
|
The set of arguments for constructing a SecretBackendCert resource.
|
|
44
|
-
:param pulumi.Input[str] backend: The PKI secret backend the resource belongs to.
|
|
45
|
-
:param pulumi.Input[str] common_name: CN of certificate to create
|
|
46
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] alt_names: List of alternative names
|
|
47
|
-
:param pulumi.Input[bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
48
|
-
:param pulumi.Input[str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
49
|
-
:param pulumi.Input[bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
50
|
-
:param pulumi.Input[str] format: The format of data
|
|
51
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_sans: List of alternative IPs
|
|
52
|
-
:param pulumi.Input[str] issuer_ref: Specifies the default issuer of this request.
|
|
53
|
-
:param pulumi.Input[int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
54
|
-
:param pulumi.Input[str] name: Name of the role to create the certificate against
|
|
55
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
|
45
|
+
:param pulumi.Input[builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
46
|
+
:param pulumi.Input[builtins.str] common_name: CN of certificate to create
|
|
47
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] alt_names: List of alternative names
|
|
48
|
+
:param pulumi.Input[builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
49
|
+
:param pulumi.Input[builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
50
|
+
:param pulumi.Input[builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
51
|
+
:param pulumi.Input[builtins.str] format: The format of data
|
|
52
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ip_sans: List of alternative IPs
|
|
53
|
+
:param pulumi.Input[builtins.str] issuer_ref: Specifies the default issuer of this request.
|
|
54
|
+
:param pulumi.Input[builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
55
|
+
:param pulumi.Input[builtins.str] name: Name of the role to create the certificate against
|
|
56
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
|
56
57
|
The value should not contain leading or trailing forward slashes.
|
|
57
58
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
58
59
|
*Available only for Vault Enterprise*.
|
|
59
|
-
:param pulumi.Input[str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
60
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] other_sans: List of other SANs
|
|
61
|
-
:param pulumi.Input[str] private_key_format: The private key format
|
|
62
|
-
:param pulumi.Input[bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
63
|
-
:param pulumi.Input[bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
64
|
-
:param pulumi.Input[str] ttl: Time to live
|
|
65
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] uri_sans: List of alternative URIs
|
|
66
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] user_ids: List of Subject User IDs
|
|
60
|
+
:param pulumi.Input[builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
61
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] other_sans: List of other SANs
|
|
62
|
+
:param pulumi.Input[builtins.str] private_key_format: The private key format
|
|
63
|
+
:param pulumi.Input[builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
64
|
+
:param pulumi.Input[builtins.bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
65
|
+
:param pulumi.Input[builtins.str] ttl: Time to live
|
|
66
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] uri_sans: List of alternative URIs
|
|
67
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] user_ids: List of Subject User IDs
|
|
67
68
|
"""
|
|
68
69
|
pulumi.set(__self__, "backend", backend)
|
|
69
70
|
pulumi.set(__self__, "common_name", common_name)
|
|
@@ -106,139 +107,139 @@ class SecretBackendCertArgs:
|
|
|
106
107
|
|
|
107
108
|
@property
|
|
108
109
|
@pulumi.getter
|
|
109
|
-
def backend(self) -> pulumi.Input[str]:
|
|
110
|
+
def backend(self) -> pulumi.Input[builtins.str]:
|
|
110
111
|
"""
|
|
111
112
|
The PKI secret backend the resource belongs to.
|
|
112
113
|
"""
|
|
113
114
|
return pulumi.get(self, "backend")
|
|
114
115
|
|
|
115
116
|
@backend.setter
|
|
116
|
-
def backend(self, value: pulumi.Input[str]):
|
|
117
|
+
def backend(self, value: pulumi.Input[builtins.str]):
|
|
117
118
|
pulumi.set(self, "backend", value)
|
|
118
119
|
|
|
119
120
|
@property
|
|
120
121
|
@pulumi.getter(name="commonName")
|
|
121
|
-
def common_name(self) -> pulumi.Input[str]:
|
|
122
|
+
def common_name(self) -> pulumi.Input[builtins.str]:
|
|
122
123
|
"""
|
|
123
124
|
CN of certificate to create
|
|
124
125
|
"""
|
|
125
126
|
return pulumi.get(self, "common_name")
|
|
126
127
|
|
|
127
128
|
@common_name.setter
|
|
128
|
-
def common_name(self, value: pulumi.Input[str]):
|
|
129
|
+
def common_name(self, value: pulumi.Input[builtins.str]):
|
|
129
130
|
pulumi.set(self, "common_name", value)
|
|
130
131
|
|
|
131
132
|
@property
|
|
132
133
|
@pulumi.getter(name="altNames")
|
|
133
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
134
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
134
135
|
"""
|
|
135
136
|
List of alternative names
|
|
136
137
|
"""
|
|
137
138
|
return pulumi.get(self, "alt_names")
|
|
138
139
|
|
|
139
140
|
@alt_names.setter
|
|
140
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
141
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
141
142
|
pulumi.set(self, "alt_names", value)
|
|
142
143
|
|
|
143
144
|
@property
|
|
144
145
|
@pulumi.getter(name="autoRenew")
|
|
145
|
-
def auto_renew(self) -> Optional[pulumi.Input[bool]]:
|
|
146
|
+
def auto_renew(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
146
147
|
"""
|
|
147
148
|
If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
148
149
|
"""
|
|
149
150
|
return pulumi.get(self, "auto_renew")
|
|
150
151
|
|
|
151
152
|
@auto_renew.setter
|
|
152
|
-
def auto_renew(self, value: Optional[pulumi.Input[bool]]):
|
|
153
|
+
def auto_renew(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
153
154
|
pulumi.set(self, "auto_renew", value)
|
|
154
155
|
|
|
155
156
|
@property
|
|
156
157
|
@pulumi.getter(name="certMetadata")
|
|
157
|
-
def cert_metadata(self) -> Optional[pulumi.Input[str]]:
|
|
158
|
+
def cert_metadata(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
158
159
|
"""
|
|
159
160
|
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
160
161
|
"""
|
|
161
162
|
return pulumi.get(self, "cert_metadata")
|
|
162
163
|
|
|
163
164
|
@cert_metadata.setter
|
|
164
|
-
def cert_metadata(self, value: Optional[pulumi.Input[str]]):
|
|
165
|
+
def cert_metadata(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
165
166
|
pulumi.set(self, "cert_metadata", value)
|
|
166
167
|
|
|
167
168
|
@property
|
|
168
169
|
@pulumi.getter(name="excludeCnFromSans")
|
|
169
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[bool]]:
|
|
170
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
170
171
|
"""
|
|
171
172
|
Flag to exclude CN from SANs
|
|
172
173
|
"""
|
|
173
174
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
174
175
|
|
|
175
176
|
@exclude_cn_from_sans.setter
|
|
176
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[bool]]):
|
|
177
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
177
178
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
178
179
|
|
|
179
180
|
@property
|
|
180
181
|
@pulumi.getter
|
|
181
|
-
def format(self) -> Optional[pulumi.Input[str]]:
|
|
182
|
+
def format(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
182
183
|
"""
|
|
183
184
|
The format of data
|
|
184
185
|
"""
|
|
185
186
|
return pulumi.get(self, "format")
|
|
186
187
|
|
|
187
188
|
@format.setter
|
|
188
|
-
def format(self, value: Optional[pulumi.Input[str]]):
|
|
189
|
+
def format(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
189
190
|
pulumi.set(self, "format", value)
|
|
190
191
|
|
|
191
192
|
@property
|
|
192
193
|
@pulumi.getter(name="ipSans")
|
|
193
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
194
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
194
195
|
"""
|
|
195
196
|
List of alternative IPs
|
|
196
197
|
"""
|
|
197
198
|
return pulumi.get(self, "ip_sans")
|
|
198
199
|
|
|
199
200
|
@ip_sans.setter
|
|
200
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
201
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
201
202
|
pulumi.set(self, "ip_sans", value)
|
|
202
203
|
|
|
203
204
|
@property
|
|
204
205
|
@pulumi.getter(name="issuerRef")
|
|
205
|
-
def issuer_ref(self) -> Optional[pulumi.Input[str]]:
|
|
206
|
+
def issuer_ref(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
206
207
|
"""
|
|
207
208
|
Specifies the default issuer of this request.
|
|
208
209
|
"""
|
|
209
210
|
return pulumi.get(self, "issuer_ref")
|
|
210
211
|
|
|
211
212
|
@issuer_ref.setter
|
|
212
|
-
def issuer_ref(self, value: Optional[pulumi.Input[str]]):
|
|
213
|
+
def issuer_ref(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
213
214
|
pulumi.set(self, "issuer_ref", value)
|
|
214
215
|
|
|
215
216
|
@property
|
|
216
217
|
@pulumi.getter(name="minSecondsRemaining")
|
|
217
|
-
def min_seconds_remaining(self) -> Optional[pulumi.Input[int]]:
|
|
218
|
+
def min_seconds_remaining(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
218
219
|
"""
|
|
219
220
|
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
220
221
|
"""
|
|
221
222
|
return pulumi.get(self, "min_seconds_remaining")
|
|
222
223
|
|
|
223
224
|
@min_seconds_remaining.setter
|
|
224
|
-
def min_seconds_remaining(self, value: Optional[pulumi.Input[int]]):
|
|
225
|
+
def min_seconds_remaining(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
225
226
|
pulumi.set(self, "min_seconds_remaining", value)
|
|
226
227
|
|
|
227
228
|
@property
|
|
228
229
|
@pulumi.getter
|
|
229
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
230
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
230
231
|
"""
|
|
231
232
|
Name of the role to create the certificate against
|
|
232
233
|
"""
|
|
233
234
|
return pulumi.get(self, "name")
|
|
234
235
|
|
|
235
236
|
@name.setter
|
|
236
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
237
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
237
238
|
pulumi.set(self, "name", value)
|
|
238
239
|
|
|
239
240
|
@property
|
|
240
241
|
@pulumi.getter
|
|
241
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
|
242
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
242
243
|
"""
|
|
243
244
|
The namespace to provision the resource in.
|
|
244
245
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -248,170 +249,170 @@ class SecretBackendCertArgs:
|
|
|
248
249
|
return pulumi.get(self, "namespace")
|
|
249
250
|
|
|
250
251
|
@namespace.setter
|
|
251
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
|
252
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
252
253
|
pulumi.set(self, "namespace", value)
|
|
253
254
|
|
|
254
255
|
@property
|
|
255
256
|
@pulumi.getter(name="notAfter")
|
|
256
|
-
def not_after(self) -> Optional[pulumi.Input[str]]:
|
|
257
|
+
def not_after(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
257
258
|
"""
|
|
258
259
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
259
260
|
"""
|
|
260
261
|
return pulumi.get(self, "not_after")
|
|
261
262
|
|
|
262
263
|
@not_after.setter
|
|
263
|
-
def not_after(self, value: Optional[pulumi.Input[str]]):
|
|
264
|
+
def not_after(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
264
265
|
pulumi.set(self, "not_after", value)
|
|
265
266
|
|
|
266
267
|
@property
|
|
267
268
|
@pulumi.getter(name="otherSans")
|
|
268
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
269
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
269
270
|
"""
|
|
270
271
|
List of other SANs
|
|
271
272
|
"""
|
|
272
273
|
return pulumi.get(self, "other_sans")
|
|
273
274
|
|
|
274
275
|
@other_sans.setter
|
|
275
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
276
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
276
277
|
pulumi.set(self, "other_sans", value)
|
|
277
278
|
|
|
278
279
|
@property
|
|
279
280
|
@pulumi.getter(name="privateKeyFormat")
|
|
280
|
-
def private_key_format(self) -> Optional[pulumi.Input[str]]:
|
|
281
|
+
def private_key_format(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
281
282
|
"""
|
|
282
283
|
The private key format
|
|
283
284
|
"""
|
|
284
285
|
return pulumi.get(self, "private_key_format")
|
|
285
286
|
|
|
286
287
|
@private_key_format.setter
|
|
287
|
-
def private_key_format(self, value: Optional[pulumi.Input[str]]):
|
|
288
|
+
def private_key_format(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
288
289
|
pulumi.set(self, "private_key_format", value)
|
|
289
290
|
|
|
290
291
|
@property
|
|
291
292
|
@pulumi.getter
|
|
292
|
-
def revoke(self) -> Optional[pulumi.Input[bool]]:
|
|
293
|
+
def revoke(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
293
294
|
"""
|
|
294
295
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
295
296
|
"""
|
|
296
297
|
return pulumi.get(self, "revoke")
|
|
297
298
|
|
|
298
299
|
@revoke.setter
|
|
299
|
-
def revoke(self, value: Optional[pulumi.Input[bool]]):
|
|
300
|
+
def revoke(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
300
301
|
pulumi.set(self, "revoke", value)
|
|
301
302
|
|
|
302
303
|
@property
|
|
303
304
|
@pulumi.getter(name="revokeWithKey")
|
|
304
|
-
def revoke_with_key(self) -> Optional[pulumi.Input[bool]]:
|
|
305
|
+
def revoke_with_key(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
305
306
|
"""
|
|
306
307
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
307
308
|
"""
|
|
308
309
|
return pulumi.get(self, "revoke_with_key")
|
|
309
310
|
|
|
310
311
|
@revoke_with_key.setter
|
|
311
|
-
def revoke_with_key(self, value: Optional[pulumi.Input[bool]]):
|
|
312
|
+
def revoke_with_key(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
312
313
|
pulumi.set(self, "revoke_with_key", value)
|
|
313
314
|
|
|
314
315
|
@property
|
|
315
316
|
@pulumi.getter
|
|
316
|
-
def ttl(self) -> Optional[pulumi.Input[str]]:
|
|
317
|
+
def ttl(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
317
318
|
"""
|
|
318
319
|
Time to live
|
|
319
320
|
"""
|
|
320
321
|
return pulumi.get(self, "ttl")
|
|
321
322
|
|
|
322
323
|
@ttl.setter
|
|
323
|
-
def ttl(self, value: Optional[pulumi.Input[str]]):
|
|
324
|
+
def ttl(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
324
325
|
pulumi.set(self, "ttl", value)
|
|
325
326
|
|
|
326
327
|
@property
|
|
327
328
|
@pulumi.getter(name="uriSans")
|
|
328
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
329
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
329
330
|
"""
|
|
330
331
|
List of alternative URIs
|
|
331
332
|
"""
|
|
332
333
|
return pulumi.get(self, "uri_sans")
|
|
333
334
|
|
|
334
335
|
@uri_sans.setter
|
|
335
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
336
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
336
337
|
pulumi.set(self, "uri_sans", value)
|
|
337
338
|
|
|
338
339
|
@property
|
|
339
340
|
@pulumi.getter(name="userIds")
|
|
340
|
-
def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
341
|
+
def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
341
342
|
"""
|
|
342
343
|
List of Subject User IDs
|
|
343
344
|
"""
|
|
344
345
|
return pulumi.get(self, "user_ids")
|
|
345
346
|
|
|
346
347
|
@user_ids.setter
|
|
347
|
-
def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
348
|
+
def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
348
349
|
pulumi.set(self, "user_ids", value)
|
|
349
350
|
|
|
350
351
|
|
|
351
352
|
@pulumi.input_type
|
|
352
353
|
class _SecretBackendCertState:
|
|
353
354
|
def __init__(__self__, *,
|
|
354
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
355
|
-
auto_renew: Optional[pulumi.Input[bool]] = None,
|
|
356
|
-
backend: Optional[pulumi.Input[str]] = None,
|
|
357
|
-
ca_chain: Optional[pulumi.Input[str]] = None,
|
|
358
|
-
cert_metadata: Optional[pulumi.Input[str]] = None,
|
|
359
|
-
certificate: Optional[pulumi.Input[str]] = None,
|
|
360
|
-
common_name: Optional[pulumi.Input[str]] = None,
|
|
361
|
-
exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
|
|
362
|
-
expiration: Optional[pulumi.Input[int]] = None,
|
|
363
|
-
format: Optional[pulumi.Input[str]] = None,
|
|
364
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
365
|
-
issuer_ref: Optional[pulumi.Input[str]] = None,
|
|
366
|
-
issuing_ca: Optional[pulumi.Input[str]] = None,
|
|
367
|
-
min_seconds_remaining: Optional[pulumi.Input[int]] = None,
|
|
368
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
369
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
370
|
-
not_after: Optional[pulumi.Input[str]] = None,
|
|
371
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
372
|
-
private_key: Optional[pulumi.Input[str]] = None,
|
|
373
|
-
private_key_format: Optional[pulumi.Input[str]] = None,
|
|
374
|
-
private_key_type: Optional[pulumi.Input[str]] = None,
|
|
375
|
-
renew_pending: Optional[pulumi.Input[bool]] = None,
|
|
376
|
-
revoke: Optional[pulumi.Input[bool]] = None,
|
|
377
|
-
revoke_with_key: Optional[pulumi.Input[bool]] = None,
|
|
378
|
-
serial_number: Optional[pulumi.Input[str]] = None,
|
|
379
|
-
ttl: Optional[pulumi.Input[str]] = None,
|
|
380
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
381
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
|
|
355
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
356
|
+
auto_renew: Optional[pulumi.Input[builtins.bool]] = None,
|
|
357
|
+
backend: Optional[pulumi.Input[builtins.str]] = None,
|
|
358
|
+
ca_chain: Optional[pulumi.Input[builtins.str]] = None,
|
|
359
|
+
cert_metadata: Optional[pulumi.Input[builtins.str]] = None,
|
|
360
|
+
certificate: Optional[pulumi.Input[builtins.str]] = None,
|
|
361
|
+
common_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
362
|
+
exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
|
|
363
|
+
expiration: Optional[pulumi.Input[builtins.int]] = None,
|
|
364
|
+
format: Optional[pulumi.Input[builtins.str]] = None,
|
|
365
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
366
|
+
issuer_ref: Optional[pulumi.Input[builtins.str]] = None,
|
|
367
|
+
issuing_ca: Optional[pulumi.Input[builtins.str]] = None,
|
|
368
|
+
min_seconds_remaining: Optional[pulumi.Input[builtins.int]] = None,
|
|
369
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
370
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
371
|
+
not_after: Optional[pulumi.Input[builtins.str]] = None,
|
|
372
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
373
|
+
private_key: Optional[pulumi.Input[builtins.str]] = None,
|
|
374
|
+
private_key_format: Optional[pulumi.Input[builtins.str]] = None,
|
|
375
|
+
private_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
|
376
|
+
renew_pending: Optional[pulumi.Input[builtins.bool]] = None,
|
|
377
|
+
revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
|
378
|
+
revoke_with_key: Optional[pulumi.Input[builtins.bool]] = None,
|
|
379
|
+
serial_number: Optional[pulumi.Input[builtins.str]] = None,
|
|
380
|
+
ttl: Optional[pulumi.Input[builtins.str]] = None,
|
|
381
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
382
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None):
|
|
382
383
|
"""
|
|
383
384
|
Input properties used for looking up and filtering SecretBackendCert resources.
|
|
384
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] alt_names: List of alternative names
|
|
385
|
-
:param pulumi.Input[bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
386
|
-
:param pulumi.Input[str] backend: The PKI secret backend the resource belongs to.
|
|
387
|
-
:param pulumi.Input[str] ca_chain: The CA chain
|
|
388
|
-
:param pulumi.Input[str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
389
|
-
:param pulumi.Input[str] certificate: The certificate
|
|
390
|
-
:param pulumi.Input[str] common_name: CN of certificate to create
|
|
391
|
-
:param pulumi.Input[bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
392
|
-
:param pulumi.Input[int] expiration: The expiration date of the certificate in unix epoch format
|
|
393
|
-
:param pulumi.Input[str] format: The format of data
|
|
394
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_sans: List of alternative IPs
|
|
395
|
-
:param pulumi.Input[str] issuer_ref: Specifies the default issuer of this request.
|
|
396
|
-
:param pulumi.Input[str] issuing_ca: The issuing CA
|
|
397
|
-
:param pulumi.Input[int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
398
|
-
:param pulumi.Input[str] name: Name of the role to create the certificate against
|
|
399
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
|
385
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] alt_names: List of alternative names
|
|
386
|
+
:param pulumi.Input[builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
387
|
+
:param pulumi.Input[builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
388
|
+
:param pulumi.Input[builtins.str] ca_chain: The CA chain
|
|
389
|
+
:param pulumi.Input[builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
390
|
+
:param pulumi.Input[builtins.str] certificate: The certificate
|
|
391
|
+
:param pulumi.Input[builtins.str] common_name: CN of certificate to create
|
|
392
|
+
:param pulumi.Input[builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
393
|
+
:param pulumi.Input[builtins.int] expiration: The expiration date of the certificate in unix epoch format
|
|
394
|
+
:param pulumi.Input[builtins.str] format: The format of data
|
|
395
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ip_sans: List of alternative IPs
|
|
396
|
+
:param pulumi.Input[builtins.str] issuer_ref: Specifies the default issuer of this request.
|
|
397
|
+
:param pulumi.Input[builtins.str] issuing_ca: The issuing CA
|
|
398
|
+
:param pulumi.Input[builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
399
|
+
:param pulumi.Input[builtins.str] name: Name of the role to create the certificate against
|
|
400
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
|
400
401
|
The value should not contain leading or trailing forward slashes.
|
|
401
402
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
402
403
|
*Available only for Vault Enterprise*.
|
|
403
|
-
:param pulumi.Input[str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
404
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] other_sans: List of other SANs
|
|
405
|
-
:param pulumi.Input[str] private_key: The private key
|
|
406
|
-
:param pulumi.Input[str] private_key_format: The private key format
|
|
407
|
-
:param pulumi.Input[str] private_key_type: The private key type
|
|
408
|
-
:param pulumi.Input[bool] renew_pending: `true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
409
|
-
:param pulumi.Input[bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
410
|
-
:param pulumi.Input[bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
411
|
-
:param pulumi.Input[str] serial_number: The serial number
|
|
412
|
-
:param pulumi.Input[str] ttl: Time to live
|
|
413
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] uri_sans: List of alternative URIs
|
|
414
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] user_ids: List of Subject User IDs
|
|
404
|
+
:param pulumi.Input[builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
405
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] other_sans: List of other SANs
|
|
406
|
+
:param pulumi.Input[builtins.str] private_key: The private key
|
|
407
|
+
:param pulumi.Input[builtins.str] private_key_format: The private key format
|
|
408
|
+
:param pulumi.Input[builtins.str] private_key_type: The private key type
|
|
409
|
+
:param pulumi.Input[builtins.bool] renew_pending: `true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
410
|
+
:param pulumi.Input[builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
411
|
+
:param pulumi.Input[builtins.bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
412
|
+
:param pulumi.Input[builtins.str] serial_number: The serial number
|
|
413
|
+
:param pulumi.Input[builtins.str] ttl: Time to live
|
|
414
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] uri_sans: List of alternative URIs
|
|
415
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] user_ids: List of Subject User IDs
|
|
415
416
|
"""
|
|
416
417
|
if alt_names is not None:
|
|
417
418
|
pulumi.set(__self__, "alt_names", alt_names)
|
|
@@ -472,187 +473,187 @@ class _SecretBackendCertState:
|
|
|
472
473
|
|
|
473
474
|
@property
|
|
474
475
|
@pulumi.getter(name="altNames")
|
|
475
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
476
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
476
477
|
"""
|
|
477
478
|
List of alternative names
|
|
478
479
|
"""
|
|
479
480
|
return pulumi.get(self, "alt_names")
|
|
480
481
|
|
|
481
482
|
@alt_names.setter
|
|
482
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
483
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
483
484
|
pulumi.set(self, "alt_names", value)
|
|
484
485
|
|
|
485
486
|
@property
|
|
486
487
|
@pulumi.getter(name="autoRenew")
|
|
487
|
-
def auto_renew(self) -> Optional[pulumi.Input[bool]]:
|
|
488
|
+
def auto_renew(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
488
489
|
"""
|
|
489
490
|
If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
490
491
|
"""
|
|
491
492
|
return pulumi.get(self, "auto_renew")
|
|
492
493
|
|
|
493
494
|
@auto_renew.setter
|
|
494
|
-
def auto_renew(self, value: Optional[pulumi.Input[bool]]):
|
|
495
|
+
def auto_renew(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
495
496
|
pulumi.set(self, "auto_renew", value)
|
|
496
497
|
|
|
497
498
|
@property
|
|
498
499
|
@pulumi.getter
|
|
499
|
-
def backend(self) -> Optional[pulumi.Input[str]]:
|
|
500
|
+
def backend(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
500
501
|
"""
|
|
501
502
|
The PKI secret backend the resource belongs to.
|
|
502
503
|
"""
|
|
503
504
|
return pulumi.get(self, "backend")
|
|
504
505
|
|
|
505
506
|
@backend.setter
|
|
506
|
-
def backend(self, value: Optional[pulumi.Input[str]]):
|
|
507
|
+
def backend(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
507
508
|
pulumi.set(self, "backend", value)
|
|
508
509
|
|
|
509
510
|
@property
|
|
510
511
|
@pulumi.getter(name="caChain")
|
|
511
|
-
def ca_chain(self) -> Optional[pulumi.Input[str]]:
|
|
512
|
+
def ca_chain(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
512
513
|
"""
|
|
513
514
|
The CA chain
|
|
514
515
|
"""
|
|
515
516
|
return pulumi.get(self, "ca_chain")
|
|
516
517
|
|
|
517
518
|
@ca_chain.setter
|
|
518
|
-
def ca_chain(self, value: Optional[pulumi.Input[str]]):
|
|
519
|
+
def ca_chain(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
519
520
|
pulumi.set(self, "ca_chain", value)
|
|
520
521
|
|
|
521
522
|
@property
|
|
522
523
|
@pulumi.getter(name="certMetadata")
|
|
523
|
-
def cert_metadata(self) -> Optional[pulumi.Input[str]]:
|
|
524
|
+
def cert_metadata(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
524
525
|
"""
|
|
525
526
|
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
526
527
|
"""
|
|
527
528
|
return pulumi.get(self, "cert_metadata")
|
|
528
529
|
|
|
529
530
|
@cert_metadata.setter
|
|
530
|
-
def cert_metadata(self, value: Optional[pulumi.Input[str]]):
|
|
531
|
+
def cert_metadata(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
531
532
|
pulumi.set(self, "cert_metadata", value)
|
|
532
533
|
|
|
533
534
|
@property
|
|
534
535
|
@pulumi.getter
|
|
535
|
-
def certificate(self) -> Optional[pulumi.Input[str]]:
|
|
536
|
+
def certificate(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
536
537
|
"""
|
|
537
538
|
The certificate
|
|
538
539
|
"""
|
|
539
540
|
return pulumi.get(self, "certificate")
|
|
540
541
|
|
|
541
542
|
@certificate.setter
|
|
542
|
-
def certificate(self, value: Optional[pulumi.Input[str]]):
|
|
543
|
+
def certificate(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
543
544
|
pulumi.set(self, "certificate", value)
|
|
544
545
|
|
|
545
546
|
@property
|
|
546
547
|
@pulumi.getter(name="commonName")
|
|
547
|
-
def common_name(self) -> Optional[pulumi.Input[str]]:
|
|
548
|
+
def common_name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
548
549
|
"""
|
|
549
550
|
CN of certificate to create
|
|
550
551
|
"""
|
|
551
552
|
return pulumi.get(self, "common_name")
|
|
552
553
|
|
|
553
554
|
@common_name.setter
|
|
554
|
-
def common_name(self, value: Optional[pulumi.Input[str]]):
|
|
555
|
+
def common_name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
555
556
|
pulumi.set(self, "common_name", value)
|
|
556
557
|
|
|
557
558
|
@property
|
|
558
559
|
@pulumi.getter(name="excludeCnFromSans")
|
|
559
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[bool]]:
|
|
560
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
560
561
|
"""
|
|
561
562
|
Flag to exclude CN from SANs
|
|
562
563
|
"""
|
|
563
564
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
564
565
|
|
|
565
566
|
@exclude_cn_from_sans.setter
|
|
566
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[bool]]):
|
|
567
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
567
568
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
568
569
|
|
|
569
570
|
@property
|
|
570
571
|
@pulumi.getter
|
|
571
|
-
def expiration(self) -> Optional[pulumi.Input[int]]:
|
|
572
|
+
def expiration(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
572
573
|
"""
|
|
573
574
|
The expiration date of the certificate in unix epoch format
|
|
574
575
|
"""
|
|
575
576
|
return pulumi.get(self, "expiration")
|
|
576
577
|
|
|
577
578
|
@expiration.setter
|
|
578
|
-
def expiration(self, value: Optional[pulumi.Input[int]]):
|
|
579
|
+
def expiration(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
579
580
|
pulumi.set(self, "expiration", value)
|
|
580
581
|
|
|
581
582
|
@property
|
|
582
583
|
@pulumi.getter
|
|
583
|
-
def format(self) -> Optional[pulumi.Input[str]]:
|
|
584
|
+
def format(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
584
585
|
"""
|
|
585
586
|
The format of data
|
|
586
587
|
"""
|
|
587
588
|
return pulumi.get(self, "format")
|
|
588
589
|
|
|
589
590
|
@format.setter
|
|
590
|
-
def format(self, value: Optional[pulumi.Input[str]]):
|
|
591
|
+
def format(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
591
592
|
pulumi.set(self, "format", value)
|
|
592
593
|
|
|
593
594
|
@property
|
|
594
595
|
@pulumi.getter(name="ipSans")
|
|
595
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
596
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
596
597
|
"""
|
|
597
598
|
List of alternative IPs
|
|
598
599
|
"""
|
|
599
600
|
return pulumi.get(self, "ip_sans")
|
|
600
601
|
|
|
601
602
|
@ip_sans.setter
|
|
602
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
603
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
603
604
|
pulumi.set(self, "ip_sans", value)
|
|
604
605
|
|
|
605
606
|
@property
|
|
606
607
|
@pulumi.getter(name="issuerRef")
|
|
607
|
-
def issuer_ref(self) -> Optional[pulumi.Input[str]]:
|
|
608
|
+
def issuer_ref(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
608
609
|
"""
|
|
609
610
|
Specifies the default issuer of this request.
|
|
610
611
|
"""
|
|
611
612
|
return pulumi.get(self, "issuer_ref")
|
|
612
613
|
|
|
613
614
|
@issuer_ref.setter
|
|
614
|
-
def issuer_ref(self, value: Optional[pulumi.Input[str]]):
|
|
615
|
+
def issuer_ref(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
615
616
|
pulumi.set(self, "issuer_ref", value)
|
|
616
617
|
|
|
617
618
|
@property
|
|
618
619
|
@pulumi.getter(name="issuingCa")
|
|
619
|
-
def issuing_ca(self) -> Optional[pulumi.Input[str]]:
|
|
620
|
+
def issuing_ca(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
620
621
|
"""
|
|
621
622
|
The issuing CA
|
|
622
623
|
"""
|
|
623
624
|
return pulumi.get(self, "issuing_ca")
|
|
624
625
|
|
|
625
626
|
@issuing_ca.setter
|
|
626
|
-
def issuing_ca(self, value: Optional[pulumi.Input[str]]):
|
|
627
|
+
def issuing_ca(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
627
628
|
pulumi.set(self, "issuing_ca", value)
|
|
628
629
|
|
|
629
630
|
@property
|
|
630
631
|
@pulumi.getter(name="minSecondsRemaining")
|
|
631
|
-
def min_seconds_remaining(self) -> Optional[pulumi.Input[int]]:
|
|
632
|
+
def min_seconds_remaining(self) -> Optional[pulumi.Input[builtins.int]]:
|
|
632
633
|
"""
|
|
633
634
|
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
634
635
|
"""
|
|
635
636
|
return pulumi.get(self, "min_seconds_remaining")
|
|
636
637
|
|
|
637
638
|
@min_seconds_remaining.setter
|
|
638
|
-
def min_seconds_remaining(self, value: Optional[pulumi.Input[int]]):
|
|
639
|
+
def min_seconds_remaining(self, value: Optional[pulumi.Input[builtins.int]]):
|
|
639
640
|
pulumi.set(self, "min_seconds_remaining", value)
|
|
640
641
|
|
|
641
642
|
@property
|
|
642
643
|
@pulumi.getter
|
|
643
|
-
def name(self) -> Optional[pulumi.Input[str]]:
|
|
644
|
+
def name(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
644
645
|
"""
|
|
645
646
|
Name of the role to create the certificate against
|
|
646
647
|
"""
|
|
647
648
|
return pulumi.get(self, "name")
|
|
648
649
|
|
|
649
650
|
@name.setter
|
|
650
|
-
def name(self, value: Optional[pulumi.Input[str]]):
|
|
651
|
+
def name(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
651
652
|
pulumi.set(self, "name", value)
|
|
652
653
|
|
|
653
654
|
@property
|
|
654
655
|
@pulumi.getter
|
|
655
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
|
656
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
656
657
|
"""
|
|
657
658
|
The namespace to provision the resource in.
|
|
658
659
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -662,151 +663,151 @@ class _SecretBackendCertState:
|
|
|
662
663
|
return pulumi.get(self, "namespace")
|
|
663
664
|
|
|
664
665
|
@namespace.setter
|
|
665
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
|
666
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
666
667
|
pulumi.set(self, "namespace", value)
|
|
667
668
|
|
|
668
669
|
@property
|
|
669
670
|
@pulumi.getter(name="notAfter")
|
|
670
|
-
def not_after(self) -> Optional[pulumi.Input[str]]:
|
|
671
|
+
def not_after(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
671
672
|
"""
|
|
672
673
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
673
674
|
"""
|
|
674
675
|
return pulumi.get(self, "not_after")
|
|
675
676
|
|
|
676
677
|
@not_after.setter
|
|
677
|
-
def not_after(self, value: Optional[pulumi.Input[str]]):
|
|
678
|
+
def not_after(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
678
679
|
pulumi.set(self, "not_after", value)
|
|
679
680
|
|
|
680
681
|
@property
|
|
681
682
|
@pulumi.getter(name="otherSans")
|
|
682
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
683
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
683
684
|
"""
|
|
684
685
|
List of other SANs
|
|
685
686
|
"""
|
|
686
687
|
return pulumi.get(self, "other_sans")
|
|
687
688
|
|
|
688
689
|
@other_sans.setter
|
|
689
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
690
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
690
691
|
pulumi.set(self, "other_sans", value)
|
|
691
692
|
|
|
692
693
|
@property
|
|
693
694
|
@pulumi.getter(name="privateKey")
|
|
694
|
-
def private_key(self) -> Optional[pulumi.Input[str]]:
|
|
695
|
+
def private_key(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
695
696
|
"""
|
|
696
697
|
The private key
|
|
697
698
|
"""
|
|
698
699
|
return pulumi.get(self, "private_key")
|
|
699
700
|
|
|
700
701
|
@private_key.setter
|
|
701
|
-
def private_key(self, value: Optional[pulumi.Input[str]]):
|
|
702
|
+
def private_key(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
702
703
|
pulumi.set(self, "private_key", value)
|
|
703
704
|
|
|
704
705
|
@property
|
|
705
706
|
@pulumi.getter(name="privateKeyFormat")
|
|
706
|
-
def private_key_format(self) -> Optional[pulumi.Input[str]]:
|
|
707
|
+
def private_key_format(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
707
708
|
"""
|
|
708
709
|
The private key format
|
|
709
710
|
"""
|
|
710
711
|
return pulumi.get(self, "private_key_format")
|
|
711
712
|
|
|
712
713
|
@private_key_format.setter
|
|
713
|
-
def private_key_format(self, value: Optional[pulumi.Input[str]]):
|
|
714
|
+
def private_key_format(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
714
715
|
pulumi.set(self, "private_key_format", value)
|
|
715
716
|
|
|
716
717
|
@property
|
|
717
718
|
@pulumi.getter(name="privateKeyType")
|
|
718
|
-
def private_key_type(self) -> Optional[pulumi.Input[str]]:
|
|
719
|
+
def private_key_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
719
720
|
"""
|
|
720
721
|
The private key type
|
|
721
722
|
"""
|
|
722
723
|
return pulumi.get(self, "private_key_type")
|
|
723
724
|
|
|
724
725
|
@private_key_type.setter
|
|
725
|
-
def private_key_type(self, value: Optional[pulumi.Input[str]]):
|
|
726
|
+
def private_key_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
726
727
|
pulumi.set(self, "private_key_type", value)
|
|
727
728
|
|
|
728
729
|
@property
|
|
729
730
|
@pulumi.getter(name="renewPending")
|
|
730
|
-
def renew_pending(self) -> Optional[pulumi.Input[bool]]:
|
|
731
|
+
def renew_pending(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
731
732
|
"""
|
|
732
733
|
`true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
733
734
|
"""
|
|
734
735
|
return pulumi.get(self, "renew_pending")
|
|
735
736
|
|
|
736
737
|
@renew_pending.setter
|
|
737
|
-
def renew_pending(self, value: Optional[pulumi.Input[bool]]):
|
|
738
|
+
def renew_pending(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
738
739
|
pulumi.set(self, "renew_pending", value)
|
|
739
740
|
|
|
740
741
|
@property
|
|
741
742
|
@pulumi.getter
|
|
742
|
-
def revoke(self) -> Optional[pulumi.Input[bool]]:
|
|
743
|
+
def revoke(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
743
744
|
"""
|
|
744
745
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
745
746
|
"""
|
|
746
747
|
return pulumi.get(self, "revoke")
|
|
747
748
|
|
|
748
749
|
@revoke.setter
|
|
749
|
-
def revoke(self, value: Optional[pulumi.Input[bool]]):
|
|
750
|
+
def revoke(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
750
751
|
pulumi.set(self, "revoke", value)
|
|
751
752
|
|
|
752
753
|
@property
|
|
753
754
|
@pulumi.getter(name="revokeWithKey")
|
|
754
|
-
def revoke_with_key(self) -> Optional[pulumi.Input[bool]]:
|
|
755
|
+
def revoke_with_key(self) -> Optional[pulumi.Input[builtins.bool]]:
|
|
755
756
|
"""
|
|
756
757
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
757
758
|
"""
|
|
758
759
|
return pulumi.get(self, "revoke_with_key")
|
|
759
760
|
|
|
760
761
|
@revoke_with_key.setter
|
|
761
|
-
def revoke_with_key(self, value: Optional[pulumi.Input[bool]]):
|
|
762
|
+
def revoke_with_key(self, value: Optional[pulumi.Input[builtins.bool]]):
|
|
762
763
|
pulumi.set(self, "revoke_with_key", value)
|
|
763
764
|
|
|
764
765
|
@property
|
|
765
766
|
@pulumi.getter(name="serialNumber")
|
|
766
|
-
def serial_number(self) -> Optional[pulumi.Input[str]]:
|
|
767
|
+
def serial_number(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
767
768
|
"""
|
|
768
769
|
The serial number
|
|
769
770
|
"""
|
|
770
771
|
return pulumi.get(self, "serial_number")
|
|
771
772
|
|
|
772
773
|
@serial_number.setter
|
|
773
|
-
def serial_number(self, value: Optional[pulumi.Input[str]]):
|
|
774
|
+
def serial_number(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
774
775
|
pulumi.set(self, "serial_number", value)
|
|
775
776
|
|
|
776
777
|
@property
|
|
777
778
|
@pulumi.getter
|
|
778
|
-
def ttl(self) -> Optional[pulumi.Input[str]]:
|
|
779
|
+
def ttl(self) -> Optional[pulumi.Input[builtins.str]]:
|
|
779
780
|
"""
|
|
780
781
|
Time to live
|
|
781
782
|
"""
|
|
782
783
|
return pulumi.get(self, "ttl")
|
|
783
784
|
|
|
784
785
|
@ttl.setter
|
|
785
|
-
def ttl(self, value: Optional[pulumi.Input[str]]):
|
|
786
|
+
def ttl(self, value: Optional[pulumi.Input[builtins.str]]):
|
|
786
787
|
pulumi.set(self, "ttl", value)
|
|
787
788
|
|
|
788
789
|
@property
|
|
789
790
|
@pulumi.getter(name="uriSans")
|
|
790
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
791
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
791
792
|
"""
|
|
792
793
|
List of alternative URIs
|
|
793
794
|
"""
|
|
794
795
|
return pulumi.get(self, "uri_sans")
|
|
795
796
|
|
|
796
797
|
@uri_sans.setter
|
|
797
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
798
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
798
799
|
pulumi.set(self, "uri_sans", value)
|
|
799
800
|
|
|
800
801
|
@property
|
|
801
802
|
@pulumi.getter(name="userIds")
|
|
802
|
-
def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
|
803
|
+
def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
|
803
804
|
"""
|
|
804
805
|
List of Subject User IDs
|
|
805
806
|
"""
|
|
806
807
|
return pulumi.get(self, "user_ids")
|
|
807
808
|
|
|
808
809
|
@user_ids.setter
|
|
809
|
-
def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
|
810
|
+
def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
|
810
811
|
pulumi.set(self, "user_ids", value)
|
|
811
812
|
|
|
812
813
|
|
|
@@ -815,26 +816,26 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
815
816
|
def __init__(__self__,
|
|
816
817
|
resource_name: str,
|
|
817
818
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
818
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
819
|
-
auto_renew: Optional[pulumi.Input[bool]] = None,
|
|
820
|
-
backend: Optional[pulumi.Input[str]] = None,
|
|
821
|
-
cert_metadata: Optional[pulumi.Input[str]] = None,
|
|
822
|
-
common_name: Optional[pulumi.Input[str]] = None,
|
|
823
|
-
exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
|
|
824
|
-
format: Optional[pulumi.Input[str]] = None,
|
|
825
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
826
|
-
issuer_ref: Optional[pulumi.Input[str]] = None,
|
|
827
|
-
min_seconds_remaining: Optional[pulumi.Input[int]] = None,
|
|
828
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
829
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
830
|
-
not_after: Optional[pulumi.Input[str]] = None,
|
|
831
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
832
|
-
private_key_format: Optional[pulumi.Input[str]] = None,
|
|
833
|
-
revoke: Optional[pulumi.Input[bool]] = None,
|
|
834
|
-
revoke_with_key: Optional[pulumi.Input[bool]] = None,
|
|
835
|
-
ttl: Optional[pulumi.Input[str]] = None,
|
|
836
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
837
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
819
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
820
|
+
auto_renew: Optional[pulumi.Input[builtins.bool]] = None,
|
|
821
|
+
backend: Optional[pulumi.Input[builtins.str]] = None,
|
|
822
|
+
cert_metadata: Optional[pulumi.Input[builtins.str]] = None,
|
|
823
|
+
common_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
824
|
+
exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
|
|
825
|
+
format: Optional[pulumi.Input[builtins.str]] = None,
|
|
826
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
827
|
+
issuer_ref: Optional[pulumi.Input[builtins.str]] = None,
|
|
828
|
+
min_seconds_remaining: Optional[pulumi.Input[builtins.int]] = None,
|
|
829
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
830
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
831
|
+
not_after: Optional[pulumi.Input[builtins.str]] = None,
|
|
832
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
833
|
+
private_key_format: Optional[pulumi.Input[builtins.str]] = None,
|
|
834
|
+
revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
|
835
|
+
revoke_with_key: Optional[pulumi.Input[builtins.bool]] = None,
|
|
836
|
+
ttl: Optional[pulumi.Input[builtins.str]] = None,
|
|
837
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
838
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
838
839
|
__props__=None):
|
|
839
840
|
"""
|
|
840
841
|
## Example Usage
|
|
@@ -852,29 +853,29 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
852
853
|
|
|
853
854
|
:param str resource_name: The name of the resource.
|
|
854
855
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
855
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] alt_names: List of alternative names
|
|
856
|
-
:param pulumi.Input[bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
857
|
-
:param pulumi.Input[str] backend: The PKI secret backend the resource belongs to.
|
|
858
|
-
:param pulumi.Input[str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
859
|
-
:param pulumi.Input[str] common_name: CN of certificate to create
|
|
860
|
-
:param pulumi.Input[bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
861
|
-
:param pulumi.Input[str] format: The format of data
|
|
862
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_sans: List of alternative IPs
|
|
863
|
-
:param pulumi.Input[str] issuer_ref: Specifies the default issuer of this request.
|
|
864
|
-
:param pulumi.Input[int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
865
|
-
:param pulumi.Input[str] name: Name of the role to create the certificate against
|
|
866
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
|
856
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] alt_names: List of alternative names
|
|
857
|
+
:param pulumi.Input[builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
858
|
+
:param pulumi.Input[builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
859
|
+
:param pulumi.Input[builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
860
|
+
:param pulumi.Input[builtins.str] common_name: CN of certificate to create
|
|
861
|
+
:param pulumi.Input[builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
862
|
+
:param pulumi.Input[builtins.str] format: The format of data
|
|
863
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ip_sans: List of alternative IPs
|
|
864
|
+
:param pulumi.Input[builtins.str] issuer_ref: Specifies the default issuer of this request.
|
|
865
|
+
:param pulumi.Input[builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
866
|
+
:param pulumi.Input[builtins.str] name: Name of the role to create the certificate against
|
|
867
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
|
867
868
|
The value should not contain leading or trailing forward slashes.
|
|
868
869
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
869
870
|
*Available only for Vault Enterprise*.
|
|
870
|
-
:param pulumi.Input[str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
871
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] other_sans: List of other SANs
|
|
872
|
-
:param pulumi.Input[str] private_key_format: The private key format
|
|
873
|
-
:param pulumi.Input[bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
874
|
-
:param pulumi.Input[bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
875
|
-
:param pulumi.Input[str] ttl: Time to live
|
|
876
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] uri_sans: List of alternative URIs
|
|
877
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] user_ids: List of Subject User IDs
|
|
871
|
+
:param pulumi.Input[builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
872
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] other_sans: List of other SANs
|
|
873
|
+
:param pulumi.Input[builtins.str] private_key_format: The private key format
|
|
874
|
+
:param pulumi.Input[builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
875
|
+
:param pulumi.Input[builtins.bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
876
|
+
:param pulumi.Input[builtins.str] ttl: Time to live
|
|
877
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] uri_sans: List of alternative URIs
|
|
878
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] user_ids: List of Subject User IDs
|
|
878
879
|
"""
|
|
879
880
|
...
|
|
880
881
|
@overload
|
|
@@ -911,26 +912,26 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
911
912
|
def _internal_init(__self__,
|
|
912
913
|
resource_name: str,
|
|
913
914
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
914
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
915
|
-
auto_renew: Optional[pulumi.Input[bool]] = None,
|
|
916
|
-
backend: Optional[pulumi.Input[str]] = None,
|
|
917
|
-
cert_metadata: Optional[pulumi.Input[str]] = None,
|
|
918
|
-
common_name: Optional[pulumi.Input[str]] = None,
|
|
919
|
-
exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
|
|
920
|
-
format: Optional[pulumi.Input[str]] = None,
|
|
921
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
922
|
-
issuer_ref: Optional[pulumi.Input[str]] = None,
|
|
923
|
-
min_seconds_remaining: Optional[pulumi.Input[int]] = None,
|
|
924
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
925
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
926
|
-
not_after: Optional[pulumi.Input[str]] = None,
|
|
927
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
928
|
-
private_key_format: Optional[pulumi.Input[str]] = None,
|
|
929
|
-
revoke: Optional[pulumi.Input[bool]] = None,
|
|
930
|
-
revoke_with_key: Optional[pulumi.Input[bool]] = None,
|
|
931
|
-
ttl: Optional[pulumi.Input[str]] = None,
|
|
932
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
933
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
915
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
916
|
+
auto_renew: Optional[pulumi.Input[builtins.bool]] = None,
|
|
917
|
+
backend: Optional[pulumi.Input[builtins.str]] = None,
|
|
918
|
+
cert_metadata: Optional[pulumi.Input[builtins.str]] = None,
|
|
919
|
+
common_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
920
|
+
exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
|
|
921
|
+
format: Optional[pulumi.Input[builtins.str]] = None,
|
|
922
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
923
|
+
issuer_ref: Optional[pulumi.Input[builtins.str]] = None,
|
|
924
|
+
min_seconds_remaining: Optional[pulumi.Input[builtins.int]] = None,
|
|
925
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
926
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
927
|
+
not_after: Optional[pulumi.Input[builtins.str]] = None,
|
|
928
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
929
|
+
private_key_format: Optional[pulumi.Input[builtins.str]] = None,
|
|
930
|
+
revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
|
931
|
+
revoke_with_key: Optional[pulumi.Input[builtins.bool]] = None,
|
|
932
|
+
ttl: Optional[pulumi.Input[builtins.str]] = None,
|
|
933
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
934
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
934
935
|
__props__=None):
|
|
935
936
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
936
937
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -984,34 +985,34 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
984
985
|
def get(resource_name: str,
|
|
985
986
|
id: pulumi.Input[str],
|
|
986
987
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
987
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
988
|
-
auto_renew: Optional[pulumi.Input[bool]] = None,
|
|
989
|
-
backend: Optional[pulumi.Input[str]] = None,
|
|
990
|
-
ca_chain: Optional[pulumi.Input[str]] = None,
|
|
991
|
-
cert_metadata: Optional[pulumi.Input[str]] = None,
|
|
992
|
-
certificate: Optional[pulumi.Input[str]] = None,
|
|
993
|
-
common_name: Optional[pulumi.Input[str]] = None,
|
|
994
|
-
exclude_cn_from_sans: Optional[pulumi.Input[bool]] = None,
|
|
995
|
-
expiration: Optional[pulumi.Input[int]] = None,
|
|
996
|
-
format: Optional[pulumi.Input[str]] = None,
|
|
997
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
998
|
-
issuer_ref: Optional[pulumi.Input[str]] = None,
|
|
999
|
-
issuing_ca: Optional[pulumi.Input[str]] = None,
|
|
1000
|
-
min_seconds_remaining: Optional[pulumi.Input[int]] = None,
|
|
1001
|
-
name: Optional[pulumi.Input[str]] = None,
|
|
1002
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
|
1003
|
-
not_after: Optional[pulumi.Input[str]] = None,
|
|
1004
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1005
|
-
private_key: Optional[pulumi.Input[str]] = None,
|
|
1006
|
-
private_key_format: Optional[pulumi.Input[str]] = None,
|
|
1007
|
-
private_key_type: Optional[pulumi.Input[str]] = None,
|
|
1008
|
-
renew_pending: Optional[pulumi.Input[bool]] = None,
|
|
1009
|
-
revoke: Optional[pulumi.Input[bool]] = None,
|
|
1010
|
-
revoke_with_key: Optional[pulumi.Input[bool]] = None,
|
|
1011
|
-
serial_number: Optional[pulumi.Input[str]] = None,
|
|
1012
|
-
ttl: Optional[pulumi.Input[str]] = None,
|
|
1013
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
|
1014
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None) -> 'SecretBackendCert':
|
|
988
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
989
|
+
auto_renew: Optional[pulumi.Input[builtins.bool]] = None,
|
|
990
|
+
backend: Optional[pulumi.Input[builtins.str]] = None,
|
|
991
|
+
ca_chain: Optional[pulumi.Input[builtins.str]] = None,
|
|
992
|
+
cert_metadata: Optional[pulumi.Input[builtins.str]] = None,
|
|
993
|
+
certificate: Optional[pulumi.Input[builtins.str]] = None,
|
|
994
|
+
common_name: Optional[pulumi.Input[builtins.str]] = None,
|
|
995
|
+
exclude_cn_from_sans: Optional[pulumi.Input[builtins.bool]] = None,
|
|
996
|
+
expiration: Optional[pulumi.Input[builtins.int]] = None,
|
|
997
|
+
format: Optional[pulumi.Input[builtins.str]] = None,
|
|
998
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
999
|
+
issuer_ref: Optional[pulumi.Input[builtins.str]] = None,
|
|
1000
|
+
issuing_ca: Optional[pulumi.Input[builtins.str]] = None,
|
|
1001
|
+
min_seconds_remaining: Optional[pulumi.Input[builtins.int]] = None,
|
|
1002
|
+
name: Optional[pulumi.Input[builtins.str]] = None,
|
|
1003
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
|
1004
|
+
not_after: Optional[pulumi.Input[builtins.str]] = None,
|
|
1005
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
1006
|
+
private_key: Optional[pulumi.Input[builtins.str]] = None,
|
|
1007
|
+
private_key_format: Optional[pulumi.Input[builtins.str]] = None,
|
|
1008
|
+
private_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
|
1009
|
+
renew_pending: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1010
|
+
revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1011
|
+
revoke_with_key: Optional[pulumi.Input[builtins.bool]] = None,
|
|
1012
|
+
serial_number: Optional[pulumi.Input[builtins.str]] = None,
|
|
1013
|
+
ttl: Optional[pulumi.Input[builtins.str]] = None,
|
|
1014
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
|
1015
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None) -> 'SecretBackendCert':
|
|
1015
1016
|
"""
|
|
1016
1017
|
Get an existing SecretBackendCert resource's state with the given name, id, and optional extra
|
|
1017
1018
|
properties used to qualify the lookup.
|
|
@@ -1019,37 +1020,37 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1019
1020
|
:param str resource_name: The unique name of the resulting resource.
|
|
1020
1021
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
1021
1022
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1022
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] alt_names: List of alternative names
|
|
1023
|
-
:param pulumi.Input[bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
1024
|
-
:param pulumi.Input[str] backend: The PKI secret backend the resource belongs to.
|
|
1025
|
-
:param pulumi.Input[str] ca_chain: The CA chain
|
|
1026
|
-
:param pulumi.Input[str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
1027
|
-
:param pulumi.Input[str] certificate: The certificate
|
|
1028
|
-
:param pulumi.Input[str] common_name: CN of certificate to create
|
|
1029
|
-
:param pulumi.Input[bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
1030
|
-
:param pulumi.Input[int] expiration: The expiration date of the certificate in unix epoch format
|
|
1031
|
-
:param pulumi.Input[str] format: The format of data
|
|
1032
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] ip_sans: List of alternative IPs
|
|
1033
|
-
:param pulumi.Input[str] issuer_ref: Specifies the default issuer of this request.
|
|
1034
|
-
:param pulumi.Input[str] issuing_ca: The issuing CA
|
|
1035
|
-
:param pulumi.Input[int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
1036
|
-
:param pulumi.Input[str] name: Name of the role to create the certificate against
|
|
1037
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
|
1023
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] alt_names: List of alternative names
|
|
1024
|
+
:param pulumi.Input[builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
1025
|
+
:param pulumi.Input[builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
1026
|
+
:param pulumi.Input[builtins.str] ca_chain: The CA chain
|
|
1027
|
+
:param pulumi.Input[builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
1028
|
+
:param pulumi.Input[builtins.str] certificate: The certificate
|
|
1029
|
+
:param pulumi.Input[builtins.str] common_name: CN of certificate to create
|
|
1030
|
+
:param pulumi.Input[builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
1031
|
+
:param pulumi.Input[builtins.int] expiration: The expiration date of the certificate in unix epoch format
|
|
1032
|
+
:param pulumi.Input[builtins.str] format: The format of data
|
|
1033
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ip_sans: List of alternative IPs
|
|
1034
|
+
:param pulumi.Input[builtins.str] issuer_ref: Specifies the default issuer of this request.
|
|
1035
|
+
:param pulumi.Input[builtins.str] issuing_ca: The issuing CA
|
|
1036
|
+
:param pulumi.Input[builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
1037
|
+
:param pulumi.Input[builtins.str] name: Name of the role to create the certificate against
|
|
1038
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
|
1038
1039
|
The value should not contain leading or trailing forward slashes.
|
|
1039
1040
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
1040
1041
|
*Available only for Vault Enterprise*.
|
|
1041
|
-
:param pulumi.Input[str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1042
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] other_sans: List of other SANs
|
|
1043
|
-
:param pulumi.Input[str] private_key: The private key
|
|
1044
|
-
:param pulumi.Input[str] private_key_format: The private key format
|
|
1045
|
-
:param pulumi.Input[str] private_key_type: The private key type
|
|
1046
|
-
:param pulumi.Input[bool] renew_pending: `true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
1047
|
-
:param pulumi.Input[bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
1048
|
-
:param pulumi.Input[bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
1049
|
-
:param pulumi.Input[str] serial_number: The serial number
|
|
1050
|
-
:param pulumi.Input[str] ttl: Time to live
|
|
1051
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] uri_sans: List of alternative URIs
|
|
1052
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] user_ids: List of Subject User IDs
|
|
1042
|
+
:param pulumi.Input[builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1043
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] other_sans: List of other SANs
|
|
1044
|
+
:param pulumi.Input[builtins.str] private_key: The private key
|
|
1045
|
+
:param pulumi.Input[builtins.str] private_key_format: The private key format
|
|
1046
|
+
:param pulumi.Input[builtins.str] private_key_type: The private key type
|
|
1047
|
+
:param pulumi.Input[builtins.bool] renew_pending: `true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
1048
|
+
:param pulumi.Input[builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
1049
|
+
:param pulumi.Input[builtins.bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
1050
|
+
:param pulumi.Input[builtins.str] serial_number: The serial number
|
|
1051
|
+
:param pulumi.Input[builtins.str] ttl: Time to live
|
|
1052
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] uri_sans: List of alternative URIs
|
|
1053
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] user_ids: List of Subject User IDs
|
|
1053
1054
|
"""
|
|
1054
1055
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
1055
1056
|
|
|
@@ -1087,7 +1088,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1087
1088
|
|
|
1088
1089
|
@property
|
|
1089
1090
|
@pulumi.getter(name="altNames")
|
|
1090
|
-
def alt_names(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
1091
|
+
def alt_names(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
1091
1092
|
"""
|
|
1092
1093
|
List of alternative names
|
|
1093
1094
|
"""
|
|
@@ -1095,7 +1096,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1095
1096
|
|
|
1096
1097
|
@property
|
|
1097
1098
|
@pulumi.getter(name="autoRenew")
|
|
1098
|
-
def auto_renew(self) -> pulumi.Output[Optional[bool]]:
|
|
1099
|
+
def auto_renew(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1099
1100
|
"""
|
|
1100
1101
|
If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
1101
1102
|
"""
|
|
@@ -1103,7 +1104,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1103
1104
|
|
|
1104
1105
|
@property
|
|
1105
1106
|
@pulumi.getter
|
|
1106
|
-
def backend(self) -> pulumi.Output[str]:
|
|
1107
|
+
def backend(self) -> pulumi.Output[builtins.str]:
|
|
1107
1108
|
"""
|
|
1108
1109
|
The PKI secret backend the resource belongs to.
|
|
1109
1110
|
"""
|
|
@@ -1111,7 +1112,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1111
1112
|
|
|
1112
1113
|
@property
|
|
1113
1114
|
@pulumi.getter(name="caChain")
|
|
1114
|
-
def ca_chain(self) -> pulumi.Output[str]:
|
|
1115
|
+
def ca_chain(self) -> pulumi.Output[builtins.str]:
|
|
1115
1116
|
"""
|
|
1116
1117
|
The CA chain
|
|
1117
1118
|
"""
|
|
@@ -1119,7 +1120,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1119
1120
|
|
|
1120
1121
|
@property
|
|
1121
1122
|
@pulumi.getter(name="certMetadata")
|
|
1122
|
-
def cert_metadata(self) -> pulumi.Output[Optional[str]]:
|
|
1123
|
+
def cert_metadata(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1123
1124
|
"""
|
|
1124
1125
|
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
1125
1126
|
"""
|
|
@@ -1127,7 +1128,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1127
1128
|
|
|
1128
1129
|
@property
|
|
1129
1130
|
@pulumi.getter
|
|
1130
|
-
def certificate(self) -> pulumi.Output[str]:
|
|
1131
|
+
def certificate(self) -> pulumi.Output[builtins.str]:
|
|
1131
1132
|
"""
|
|
1132
1133
|
The certificate
|
|
1133
1134
|
"""
|
|
@@ -1135,7 +1136,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1135
1136
|
|
|
1136
1137
|
@property
|
|
1137
1138
|
@pulumi.getter(name="commonName")
|
|
1138
|
-
def common_name(self) -> pulumi.Output[str]:
|
|
1139
|
+
def common_name(self) -> pulumi.Output[builtins.str]:
|
|
1139
1140
|
"""
|
|
1140
1141
|
CN of certificate to create
|
|
1141
1142
|
"""
|
|
@@ -1143,7 +1144,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1143
1144
|
|
|
1144
1145
|
@property
|
|
1145
1146
|
@pulumi.getter(name="excludeCnFromSans")
|
|
1146
|
-
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[bool]]:
|
|
1147
|
+
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1147
1148
|
"""
|
|
1148
1149
|
Flag to exclude CN from SANs
|
|
1149
1150
|
"""
|
|
@@ -1151,7 +1152,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1151
1152
|
|
|
1152
1153
|
@property
|
|
1153
1154
|
@pulumi.getter
|
|
1154
|
-
def expiration(self) -> pulumi.Output[int]:
|
|
1155
|
+
def expiration(self) -> pulumi.Output[builtins.int]:
|
|
1155
1156
|
"""
|
|
1156
1157
|
The expiration date of the certificate in unix epoch format
|
|
1157
1158
|
"""
|
|
@@ -1159,7 +1160,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1159
1160
|
|
|
1160
1161
|
@property
|
|
1161
1162
|
@pulumi.getter
|
|
1162
|
-
def format(self) -> pulumi.Output[Optional[str]]:
|
|
1163
|
+
def format(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1163
1164
|
"""
|
|
1164
1165
|
The format of data
|
|
1165
1166
|
"""
|
|
@@ -1167,7 +1168,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1167
1168
|
|
|
1168
1169
|
@property
|
|
1169
1170
|
@pulumi.getter(name="ipSans")
|
|
1170
|
-
def ip_sans(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
1171
|
+
def ip_sans(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
1171
1172
|
"""
|
|
1172
1173
|
List of alternative IPs
|
|
1173
1174
|
"""
|
|
@@ -1175,7 +1176,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1175
1176
|
|
|
1176
1177
|
@property
|
|
1177
1178
|
@pulumi.getter(name="issuerRef")
|
|
1178
|
-
def issuer_ref(self) -> pulumi.Output[Optional[str]]:
|
|
1179
|
+
def issuer_ref(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1179
1180
|
"""
|
|
1180
1181
|
Specifies the default issuer of this request.
|
|
1181
1182
|
"""
|
|
@@ -1183,7 +1184,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1183
1184
|
|
|
1184
1185
|
@property
|
|
1185
1186
|
@pulumi.getter(name="issuingCa")
|
|
1186
|
-
def issuing_ca(self) -> pulumi.Output[str]:
|
|
1187
|
+
def issuing_ca(self) -> pulumi.Output[builtins.str]:
|
|
1187
1188
|
"""
|
|
1188
1189
|
The issuing CA
|
|
1189
1190
|
"""
|
|
@@ -1191,7 +1192,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1191
1192
|
|
|
1192
1193
|
@property
|
|
1193
1194
|
@pulumi.getter(name="minSecondsRemaining")
|
|
1194
|
-
def min_seconds_remaining(self) -> pulumi.Output[Optional[int]]:
|
|
1195
|
+
def min_seconds_remaining(self) -> pulumi.Output[Optional[builtins.int]]:
|
|
1195
1196
|
"""
|
|
1196
1197
|
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
1197
1198
|
"""
|
|
@@ -1199,7 +1200,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1199
1200
|
|
|
1200
1201
|
@property
|
|
1201
1202
|
@pulumi.getter
|
|
1202
|
-
def name(self) -> pulumi.Output[str]:
|
|
1203
|
+
def name(self) -> pulumi.Output[builtins.str]:
|
|
1203
1204
|
"""
|
|
1204
1205
|
Name of the role to create the certificate against
|
|
1205
1206
|
"""
|
|
@@ -1207,7 +1208,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1207
1208
|
|
|
1208
1209
|
@property
|
|
1209
1210
|
@pulumi.getter
|
|
1210
|
-
def namespace(self) -> pulumi.Output[Optional[str]]:
|
|
1211
|
+
def namespace(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1211
1212
|
"""
|
|
1212
1213
|
The namespace to provision the resource in.
|
|
1213
1214
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1218,7 +1219,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1218
1219
|
|
|
1219
1220
|
@property
|
|
1220
1221
|
@pulumi.getter(name="notAfter")
|
|
1221
|
-
def not_after(self) -> pulumi.Output[Optional[str]]:
|
|
1222
|
+
def not_after(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1222
1223
|
"""
|
|
1223
1224
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1224
1225
|
"""
|
|
@@ -1226,7 +1227,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1226
1227
|
|
|
1227
1228
|
@property
|
|
1228
1229
|
@pulumi.getter(name="otherSans")
|
|
1229
|
-
def other_sans(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
1230
|
+
def other_sans(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
1230
1231
|
"""
|
|
1231
1232
|
List of other SANs
|
|
1232
1233
|
"""
|
|
@@ -1234,7 +1235,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1234
1235
|
|
|
1235
1236
|
@property
|
|
1236
1237
|
@pulumi.getter(name="privateKey")
|
|
1237
|
-
def private_key(self) -> pulumi.Output[str]:
|
|
1238
|
+
def private_key(self) -> pulumi.Output[builtins.str]:
|
|
1238
1239
|
"""
|
|
1239
1240
|
The private key
|
|
1240
1241
|
"""
|
|
@@ -1242,7 +1243,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1242
1243
|
|
|
1243
1244
|
@property
|
|
1244
1245
|
@pulumi.getter(name="privateKeyFormat")
|
|
1245
|
-
def private_key_format(self) -> pulumi.Output[Optional[str]]:
|
|
1246
|
+
def private_key_format(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1246
1247
|
"""
|
|
1247
1248
|
The private key format
|
|
1248
1249
|
"""
|
|
@@ -1250,7 +1251,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1250
1251
|
|
|
1251
1252
|
@property
|
|
1252
1253
|
@pulumi.getter(name="privateKeyType")
|
|
1253
|
-
def private_key_type(self) -> pulumi.Output[str]:
|
|
1254
|
+
def private_key_type(self) -> pulumi.Output[builtins.str]:
|
|
1254
1255
|
"""
|
|
1255
1256
|
The private key type
|
|
1256
1257
|
"""
|
|
@@ -1258,7 +1259,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1258
1259
|
|
|
1259
1260
|
@property
|
|
1260
1261
|
@pulumi.getter(name="renewPending")
|
|
1261
|
-
def renew_pending(self) -> pulumi.Output[bool]:
|
|
1262
|
+
def renew_pending(self) -> pulumi.Output[builtins.bool]:
|
|
1262
1263
|
"""
|
|
1263
1264
|
`true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
1264
1265
|
"""
|
|
@@ -1266,7 +1267,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1266
1267
|
|
|
1267
1268
|
@property
|
|
1268
1269
|
@pulumi.getter
|
|
1269
|
-
def revoke(self) -> pulumi.Output[Optional[bool]]:
|
|
1270
|
+
def revoke(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1270
1271
|
"""
|
|
1271
1272
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
1272
1273
|
"""
|
|
@@ -1274,7 +1275,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1274
1275
|
|
|
1275
1276
|
@property
|
|
1276
1277
|
@pulumi.getter(name="revokeWithKey")
|
|
1277
|
-
def revoke_with_key(self) -> pulumi.Output[Optional[bool]]:
|
|
1278
|
+
def revoke_with_key(self) -> pulumi.Output[Optional[builtins.bool]]:
|
|
1278
1279
|
"""
|
|
1279
1280
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
1280
1281
|
"""
|
|
@@ -1282,7 +1283,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1282
1283
|
|
|
1283
1284
|
@property
|
|
1284
1285
|
@pulumi.getter(name="serialNumber")
|
|
1285
|
-
def serial_number(self) -> pulumi.Output[str]:
|
|
1286
|
+
def serial_number(self) -> pulumi.Output[builtins.str]:
|
|
1286
1287
|
"""
|
|
1287
1288
|
The serial number
|
|
1288
1289
|
"""
|
|
@@ -1290,7 +1291,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1290
1291
|
|
|
1291
1292
|
@property
|
|
1292
1293
|
@pulumi.getter
|
|
1293
|
-
def ttl(self) -> pulumi.Output[Optional[str]]:
|
|
1294
|
+
def ttl(self) -> pulumi.Output[Optional[builtins.str]]:
|
|
1294
1295
|
"""
|
|
1295
1296
|
Time to live
|
|
1296
1297
|
"""
|
|
@@ -1298,7 +1299,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1298
1299
|
|
|
1299
1300
|
@property
|
|
1300
1301
|
@pulumi.getter(name="uriSans")
|
|
1301
|
-
def uri_sans(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
1302
|
+
def uri_sans(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
1302
1303
|
"""
|
|
1303
1304
|
List of alternative URIs
|
|
1304
1305
|
"""
|
|
@@ -1306,7 +1307,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1306
1307
|
|
|
1307
1308
|
@property
|
|
1308
1309
|
@pulumi.getter(name="userIds")
|
|
1309
|
-
def user_ids(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
|
1310
|
+
def user_ids(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
|
1310
1311
|
"""
|
|
1311
1312
|
List of Subject User IDs
|
|
1312
1313
|
"""
|