pulumi-vault 6.7.0a1743576047__py3-none-any.whl → 6.7.0a1744267302__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -0
- pulumi_vault/_inputs.py +554 -553
- pulumi_vault/ad/__init__.py +1 -0
- pulumi_vault/ad/get_access_credentials.py +20 -19
- pulumi_vault/ad/secret_backend.py +477 -476
- pulumi_vault/ad/secret_library.py +99 -98
- pulumi_vault/ad/secret_role.py +85 -84
- pulumi_vault/alicloud/__init__.py +1 -0
- pulumi_vault/alicloud/auth_backend_role.py +183 -182
- pulumi_vault/approle/__init__.py +1 -0
- pulumi_vault/approle/auth_backend_login.py +106 -105
- pulumi_vault/approle/auth_backend_role.py +239 -238
- pulumi_vault/approle/auth_backend_role_secret_id.py +162 -161
- pulumi_vault/approle/get_auth_backend_role_id.py +18 -17
- pulumi_vault/audit.py +85 -84
- pulumi_vault/audit_request_header.py +43 -42
- pulumi_vault/auth_backend.py +106 -105
- pulumi_vault/aws/__init__.py +1 -0
- pulumi_vault/aws/auth_backend_cert.py +71 -70
- pulumi_vault/aws/auth_backend_client.py +253 -252
- pulumi_vault/aws/auth_backend_config_identity.py +85 -84
- pulumi_vault/aws/auth_backend_identity_whitelist.py +57 -56
- pulumi_vault/aws/auth_backend_login.py +209 -208
- pulumi_vault/aws/auth_backend_role.py +400 -399
- pulumi_vault/aws/auth_backend_role_tag.py +127 -126
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +57 -56
- pulumi_vault/aws/auth_backend_sts_role.py +71 -70
- pulumi_vault/aws/get_access_credentials.py +44 -43
- pulumi_vault/aws/get_static_access_credentials.py +13 -12
- pulumi_vault/aws/secret_backend.py +337 -336
- pulumi_vault/aws/secret_backend_role.py +211 -210
- pulumi_vault/aws/secret_backend_static_role.py +113 -112
- pulumi_vault/azure/__init__.py +1 -0
- pulumi_vault/azure/_inputs.py +21 -20
- pulumi_vault/azure/auth_backend_config.py +183 -182
- pulumi_vault/azure/auth_backend_role.py +253 -252
- pulumi_vault/azure/backend.py +239 -238
- pulumi_vault/azure/backend_role.py +141 -140
- pulumi_vault/azure/get_access_credentials.py +58 -57
- pulumi_vault/azure/outputs.py +11 -10
- pulumi_vault/cert_auth_backend_role.py +365 -364
- pulumi_vault/config/__init__.py +1 -0
- pulumi_vault/config/__init__.pyi +1 -0
- pulumi_vault/config/_inputs.py +11 -10
- pulumi_vault/config/outputs.py +287 -286
- pulumi_vault/config/ui_custom_message.py +113 -112
- pulumi_vault/config/vars.py +1 -0
- pulumi_vault/consul/__init__.py +1 -0
- pulumi_vault/consul/secret_backend.py +197 -196
- pulumi_vault/consul/secret_backend_role.py +183 -182
- pulumi_vault/database/__init__.py +1 -0
- pulumi_vault/database/_inputs.py +2525 -2524
- pulumi_vault/database/outputs.py +1529 -1528
- pulumi_vault/database/secret_backend_connection.py +169 -168
- pulumi_vault/database/secret_backend_role.py +169 -168
- pulumi_vault/database/secret_backend_static_role.py +179 -178
- pulumi_vault/database/secrets_mount.py +267 -266
- pulumi_vault/egp_policy.py +71 -70
- pulumi_vault/gcp/__init__.py +1 -0
- pulumi_vault/gcp/_inputs.py +82 -81
- pulumi_vault/gcp/auth_backend.py +260 -259
- pulumi_vault/gcp/auth_backend_role.py +281 -280
- pulumi_vault/gcp/get_auth_backend_role.py +70 -69
- pulumi_vault/gcp/outputs.py +50 -49
- pulumi_vault/gcp/secret_backend.py +232 -231
- pulumi_vault/gcp/secret_impersonated_account.py +92 -91
- pulumi_vault/gcp/secret_roleset.py +92 -91
- pulumi_vault/gcp/secret_static_account.py +92 -91
- pulumi_vault/generic/__init__.py +1 -0
- pulumi_vault/generic/endpoint.py +113 -112
- pulumi_vault/generic/get_secret.py +28 -27
- pulumi_vault/generic/secret.py +78 -77
- pulumi_vault/get_auth_backend.py +19 -18
- pulumi_vault/get_auth_backends.py +14 -13
- pulumi_vault/get_namespace.py +15 -14
- pulumi_vault/get_namespaces.py +8 -7
- pulumi_vault/get_nomad_access_token.py +19 -18
- pulumi_vault/get_policy_document.py +6 -5
- pulumi_vault/get_raft_autopilot_state.py +18 -17
- pulumi_vault/github/__init__.py +1 -0
- pulumi_vault/github/_inputs.py +42 -41
- pulumi_vault/github/auth_backend.py +232 -231
- pulumi_vault/github/outputs.py +26 -25
- pulumi_vault/github/team.py +57 -56
- pulumi_vault/github/user.py +57 -56
- pulumi_vault/identity/__init__.py +1 -0
- pulumi_vault/identity/entity.py +85 -84
- pulumi_vault/identity/entity_alias.py +71 -70
- pulumi_vault/identity/entity_policies.py +64 -63
- pulumi_vault/identity/get_entity.py +43 -42
- pulumi_vault/identity/get_group.py +50 -49
- pulumi_vault/identity/get_oidc_client_creds.py +14 -13
- pulumi_vault/identity/get_oidc_openid_config.py +24 -23
- pulumi_vault/identity/get_oidc_public_keys.py +13 -12
- pulumi_vault/identity/group.py +141 -140
- pulumi_vault/identity/group_alias.py +57 -56
- pulumi_vault/identity/group_member_entity_ids.py +57 -56
- pulumi_vault/identity/group_member_group_ids.py +57 -56
- pulumi_vault/identity/group_policies.py +64 -63
- pulumi_vault/identity/mfa_duo.py +148 -147
- pulumi_vault/identity/mfa_login_enforcement.py +120 -119
- pulumi_vault/identity/mfa_okta.py +134 -133
- pulumi_vault/identity/mfa_pingid.py +127 -126
- pulumi_vault/identity/mfa_totp.py +176 -175
- pulumi_vault/identity/oidc.py +29 -28
- pulumi_vault/identity/oidc_assignment.py +57 -56
- pulumi_vault/identity/oidc_client.py +127 -126
- pulumi_vault/identity/oidc_key.py +85 -84
- pulumi_vault/identity/oidc_key_allowed_client_id.py +43 -42
- pulumi_vault/identity/oidc_provider.py +92 -91
- pulumi_vault/identity/oidc_role.py +85 -84
- pulumi_vault/identity/oidc_scope.py +57 -56
- pulumi_vault/identity/outputs.py +32 -31
- pulumi_vault/jwt/__init__.py +1 -0
- pulumi_vault/jwt/_inputs.py +42 -41
- pulumi_vault/jwt/auth_backend.py +288 -287
- pulumi_vault/jwt/auth_backend_role.py +407 -406
- pulumi_vault/jwt/outputs.py +26 -25
- pulumi_vault/kmip/__init__.py +1 -0
- pulumi_vault/kmip/secret_backend.py +183 -182
- pulumi_vault/kmip/secret_role.py +295 -294
- pulumi_vault/kmip/secret_scope.py +57 -56
- pulumi_vault/kubernetes/__init__.py +1 -0
- pulumi_vault/kubernetes/auth_backend_config.py +141 -140
- pulumi_vault/kubernetes/auth_backend_role.py +225 -224
- pulumi_vault/kubernetes/get_auth_backend_config.py +47 -46
- pulumi_vault/kubernetes/get_auth_backend_role.py +70 -69
- pulumi_vault/kubernetes/get_service_account_token.py +38 -37
- pulumi_vault/kubernetes/secret_backend.py +316 -315
- pulumi_vault/kubernetes/secret_backend_role.py +197 -196
- pulumi_vault/kv/__init__.py +1 -0
- pulumi_vault/kv/_inputs.py +21 -20
- pulumi_vault/kv/get_secret.py +17 -16
- pulumi_vault/kv/get_secret_subkeys_v2.py +30 -29
- pulumi_vault/kv/get_secret_v2.py +29 -28
- pulumi_vault/kv/get_secrets_list.py +13 -12
- pulumi_vault/kv/get_secrets_list_v2.py +19 -18
- pulumi_vault/kv/outputs.py +13 -12
- pulumi_vault/kv/secret.py +50 -49
- pulumi_vault/kv/secret_backend_v2.py +71 -70
- pulumi_vault/kv/secret_v2.py +134 -133
- pulumi_vault/ldap/__init__.py +1 -0
- pulumi_vault/ldap/auth_backend.py +588 -587
- pulumi_vault/ldap/auth_backend_group.py +57 -56
- pulumi_vault/ldap/auth_backend_user.py +71 -70
- pulumi_vault/ldap/get_dynamic_credentials.py +17 -16
- pulumi_vault/ldap/get_static_credentials.py +18 -17
- pulumi_vault/ldap/secret_backend.py +554 -553
- pulumi_vault/ldap/secret_backend_dynamic_role.py +127 -126
- pulumi_vault/ldap/secret_backend_library_set.py +99 -98
- pulumi_vault/ldap/secret_backend_static_role.py +99 -98
- pulumi_vault/managed/__init__.py +1 -0
- pulumi_vault/managed/_inputs.py +229 -228
- pulumi_vault/managed/keys.py +15 -14
- pulumi_vault/managed/outputs.py +139 -138
- pulumi_vault/mfa_duo.py +113 -112
- pulumi_vault/mfa_okta.py +113 -112
- pulumi_vault/mfa_pingid.py +120 -119
- pulumi_vault/mfa_totp.py +127 -126
- pulumi_vault/mongodbatlas/__init__.py +1 -0
- pulumi_vault/mongodbatlas/secret_backend.py +64 -63
- pulumi_vault/mongodbatlas/secret_role.py +155 -154
- pulumi_vault/mount.py +274 -273
- pulumi_vault/namespace.py +64 -63
- pulumi_vault/nomad_secret_backend.py +211 -210
- pulumi_vault/nomad_secret_role.py +85 -84
- pulumi_vault/okta/__init__.py +1 -0
- pulumi_vault/okta/_inputs.py +26 -25
- pulumi_vault/okta/auth_backend.py +274 -273
- pulumi_vault/okta/auth_backend_group.py +57 -56
- pulumi_vault/okta/auth_backend_user.py +71 -70
- pulumi_vault/okta/outputs.py +16 -15
- pulumi_vault/outputs.py +56 -55
- pulumi_vault/password_policy.py +43 -42
- pulumi_vault/pkisecret/__init__.py +1 -0
- pulumi_vault/pkisecret/_inputs.py +31 -30
- pulumi_vault/pkisecret/backend_acme_eab.py +92 -91
- pulumi_vault/pkisecret/backend_config_acme.py +141 -140
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +323 -322
- pulumi_vault/pkisecret/backend_config_cluster.py +57 -56
- pulumi_vault/pkisecret/backend_config_cmpv2.py +106 -105
- pulumi_vault/pkisecret/backend_config_est.py +120 -119
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +22 -21
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +22 -21
- pulumi_vault/pkisecret/get_backend_config_est.py +19 -18
- pulumi_vault/pkisecret/get_backend_issuer.py +45 -44
- pulumi_vault/pkisecret/get_backend_issuers.py +15 -14
- pulumi_vault/pkisecret/get_backend_key.py +20 -19
- pulumi_vault/pkisecret/get_backend_keys.py +15 -14
- pulumi_vault/pkisecret/outputs.py +28 -27
- pulumi_vault/pkisecret/secret_backend_cert.py +337 -336
- pulumi_vault/pkisecret/secret_backend_config_ca.py +43 -42
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +57 -56
- pulumi_vault/pkisecret/secret_backend_config_urls.py +85 -84
- pulumi_vault/pkisecret/secret_backend_crl_config.py +197 -196
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +421 -420
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +57 -56
- pulumi_vault/pkisecret/secret_backend_issuer.py +232 -231
- pulumi_vault/pkisecret/secret_backend_key.py +120 -119
- pulumi_vault/pkisecret/secret_backend_role.py +715 -714
- pulumi_vault/pkisecret/secret_backend_root_cert.py +554 -553
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +526 -525
- pulumi_vault/pkisecret/secret_backend_sign.py +281 -280
- pulumi_vault/plugin.py +127 -126
- pulumi_vault/plugin_pinned_version.py +43 -42
- pulumi_vault/policy.py +43 -42
- pulumi_vault/provider.py +120 -119
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +85 -84
- pulumi_vault/quota_rate_limit.py +113 -112
- pulumi_vault/rabbitmq/__init__.py +1 -0
- pulumi_vault/rabbitmq/_inputs.py +41 -40
- pulumi_vault/rabbitmq/outputs.py +25 -24
- pulumi_vault/rabbitmq/secret_backend.py +169 -168
- pulumi_vault/rabbitmq/secret_backend_role.py +57 -56
- pulumi_vault/raft_autopilot.py +113 -112
- pulumi_vault/raft_snapshot_agent_config.py +393 -392
- pulumi_vault/rgp_policy.py +57 -56
- pulumi_vault/saml/__init__.py +1 -0
- pulumi_vault/saml/auth_backend.py +155 -154
- pulumi_vault/saml/auth_backend_role.py +239 -238
- pulumi_vault/secrets/__init__.py +1 -0
- pulumi_vault/secrets/_inputs.py +16 -15
- pulumi_vault/secrets/outputs.py +10 -9
- pulumi_vault/secrets/sync_association.py +71 -70
- pulumi_vault/secrets/sync_aws_destination.py +148 -147
- pulumi_vault/secrets/sync_azure_destination.py +148 -147
- pulumi_vault/secrets/sync_config.py +43 -42
- pulumi_vault/secrets/sync_gcp_destination.py +106 -105
- pulumi_vault/secrets/sync_gh_destination.py +134 -133
- pulumi_vault/secrets/sync_github_apps.py +64 -63
- pulumi_vault/secrets/sync_vercel_destination.py +120 -119
- pulumi_vault/ssh/__init__.py +1 -0
- pulumi_vault/ssh/_inputs.py +11 -10
- pulumi_vault/ssh/get_secret_backend_sign.py +52 -51
- pulumi_vault/ssh/outputs.py +7 -6
- pulumi_vault/ssh/secret_backend_ca.py +99 -98
- pulumi_vault/ssh/secret_backend_role.py +365 -364
- pulumi_vault/terraformcloud/__init__.py +1 -0
- pulumi_vault/terraformcloud/secret_backend.py +111 -110
- pulumi_vault/terraformcloud/secret_creds.py +74 -73
- pulumi_vault/terraformcloud/secret_role.py +93 -92
- pulumi_vault/token.py +246 -245
- pulumi_vault/tokenauth/__init__.py +1 -0
- pulumi_vault/tokenauth/auth_backend_role.py +267 -266
- pulumi_vault/transform/__init__.py +1 -0
- pulumi_vault/transform/alphabet.py +57 -56
- pulumi_vault/transform/get_decode.py +47 -46
- pulumi_vault/transform/get_encode.py +47 -46
- pulumi_vault/transform/role.py +57 -56
- pulumi_vault/transform/template.py +113 -112
- pulumi_vault/transform/transformation.py +141 -140
- pulumi_vault/transit/__init__.py +1 -0
- pulumi_vault/transit/get_decrypt.py +18 -17
- pulumi_vault/transit/get_encrypt.py +21 -20
- pulumi_vault/transit/get_sign.py +54 -53
- pulumi_vault/transit/get_verify.py +60 -59
- pulumi_vault/transit/secret_backend_key.py +274 -273
- pulumi_vault/transit/secret_cache_config.py +43 -42
- {pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744267302.dist-info}/METADATA +1 -1
- pulumi_vault-6.7.0a1744267302.dist-info/RECORD +265 -0
- pulumi_vault-6.7.0a1743576047.dist-info/RECORD +0 -265
- {pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744267302.dist-info}/WHEEL +0 -0
- {pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744267302.dist-info}/top_level.txt +0 -0
@@ -2,6 +2,7 @@
|
|
2
2
|
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
4
4
|
|
5
|
+
import builtins
|
5
6
|
import copy
|
6
7
|
import warnings
|
7
8
|
import sys
|
@@ -19,48 +20,48 @@ __all__ = ['AuthBackendRoleArgs', 'AuthBackendRole']
|
|
19
20
|
@pulumi.input_type
|
20
21
|
class AuthBackendRoleArgs:
|
21
22
|
def __init__(__self__, *,
|
22
|
-
role: pulumi.Input[str],
|
23
|
-
type: pulumi.Input[str],
|
24
|
-
add_group_aliases: Optional[pulumi.Input[bool]] = None,
|
25
|
-
allow_gce_inference: Optional[pulumi.Input[bool]] = None,
|
26
|
-
backend: Optional[pulumi.Input[str]] = None,
|
27
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
28
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
29
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
30
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
31
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
32
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
33
|
-
max_jwt_exp: Optional[pulumi.Input[str]] = None,
|
34
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
35
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
36
|
-
token_explicit_max_ttl: Optional[pulumi.Input[int]] = None,
|
37
|
-
token_max_ttl: Optional[pulumi.Input[int]] = None,
|
38
|
-
token_no_default_policy: Optional[pulumi.Input[bool]] = None,
|
39
|
-
token_num_uses: Optional[pulumi.Input[int]] = None,
|
40
|
-
token_period: Optional[pulumi.Input[int]] = None,
|
41
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
42
|
-
token_ttl: Optional[pulumi.Input[int]] = None,
|
43
|
-
token_type: Optional[pulumi.Input[str]] = None):
|
23
|
+
role: pulumi.Input[builtins.str],
|
24
|
+
type: pulumi.Input[builtins.str],
|
25
|
+
add_group_aliases: Optional[pulumi.Input[builtins.bool]] = None,
|
26
|
+
allow_gce_inference: Optional[pulumi.Input[builtins.bool]] = None,
|
27
|
+
backend: Optional[pulumi.Input[builtins.str]] = None,
|
28
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
29
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
30
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
31
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
32
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
33
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
34
|
+
max_jwt_exp: Optional[pulumi.Input[builtins.str]] = None,
|
35
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
36
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
37
|
+
token_explicit_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
38
|
+
token_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
39
|
+
token_no_default_policy: Optional[pulumi.Input[builtins.bool]] = None,
|
40
|
+
token_num_uses: Optional[pulumi.Input[builtins.int]] = None,
|
41
|
+
token_period: Optional[pulumi.Input[builtins.int]] = None,
|
42
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
43
|
+
token_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
44
|
+
token_type: Optional[pulumi.Input[builtins.str]] = None):
|
44
45
|
"""
|
45
46
|
The set of arguments for constructing a AuthBackendRole resource.
|
46
|
-
:param pulumi.Input[str] role: Name of the GCP role
|
47
|
-
:param pulumi.Input[str] type: Type of GCP authentication role (either `gce` or `iam`)
|
48
|
-
:param pulumi.Input[str] backend: Path to the mounted GCP auth backend
|
49
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
50
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
51
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
47
|
+
:param pulumi.Input[builtins.str] role: Name of the GCP role
|
48
|
+
:param pulumi.Input[builtins.str] type: Type of GCP authentication role (either `gce` or `iam`)
|
49
|
+
:param pulumi.Input[builtins.str] backend: Path to the mounted GCP auth backend
|
50
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
51
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
52
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
52
53
|
The value should not contain leading or trailing forward slashes.
|
53
54
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
54
55
|
*Available only for Vault Enterprise*.
|
55
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
56
|
-
:param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
57
|
-
:param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
|
58
|
-
:param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
59
|
-
:param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
60
|
-
:param pulumi.Input[int] token_period: Generated Token's Period
|
61
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
|
62
|
-
:param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
|
63
|
-
:param pulumi.Input[str] token_type: The type of token to generate, service or batch
|
56
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
57
|
+
:param pulumi.Input[builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
58
|
+
:param pulumi.Input[builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
59
|
+
:param pulumi.Input[builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
60
|
+
:param pulumi.Input[builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
61
|
+
:param pulumi.Input[builtins.int] token_period: Generated Token's Period
|
62
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] token_policies: Generated Token's Policies
|
63
|
+
:param pulumi.Input[builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
64
|
+
:param pulumi.Input[builtins.str] token_type: The type of token to generate, service or batch
|
64
65
|
"""
|
65
66
|
pulumi.set(__self__, "role", role)
|
66
67
|
pulumi.set(__self__, "type", type)
|
@@ -107,130 +108,130 @@ class AuthBackendRoleArgs:
|
|
107
108
|
|
108
109
|
@property
|
109
110
|
@pulumi.getter
|
110
|
-
def role(self) -> pulumi.Input[str]:
|
111
|
+
def role(self) -> pulumi.Input[builtins.str]:
|
111
112
|
"""
|
112
113
|
Name of the GCP role
|
113
114
|
"""
|
114
115
|
return pulumi.get(self, "role")
|
115
116
|
|
116
117
|
@role.setter
|
117
|
-
def role(self, value: pulumi.Input[str]):
|
118
|
+
def role(self, value: pulumi.Input[builtins.str]):
|
118
119
|
pulumi.set(self, "role", value)
|
119
120
|
|
120
121
|
@property
|
121
122
|
@pulumi.getter
|
122
|
-
def type(self) -> pulumi.Input[str]:
|
123
|
+
def type(self) -> pulumi.Input[builtins.str]:
|
123
124
|
"""
|
124
125
|
Type of GCP authentication role (either `gce` or `iam`)
|
125
126
|
"""
|
126
127
|
return pulumi.get(self, "type")
|
127
128
|
|
128
129
|
@type.setter
|
129
|
-
def type(self, value: pulumi.Input[str]):
|
130
|
+
def type(self, value: pulumi.Input[builtins.str]):
|
130
131
|
pulumi.set(self, "type", value)
|
131
132
|
|
132
133
|
@property
|
133
134
|
@pulumi.getter(name="addGroupAliases")
|
134
|
-
def add_group_aliases(self) -> Optional[pulumi.Input[bool]]:
|
135
|
+
def add_group_aliases(self) -> Optional[pulumi.Input[builtins.bool]]:
|
135
136
|
return pulumi.get(self, "add_group_aliases")
|
136
137
|
|
137
138
|
@add_group_aliases.setter
|
138
|
-
def add_group_aliases(self, value: Optional[pulumi.Input[bool]]):
|
139
|
+
def add_group_aliases(self, value: Optional[pulumi.Input[builtins.bool]]):
|
139
140
|
pulumi.set(self, "add_group_aliases", value)
|
140
141
|
|
141
142
|
@property
|
142
143
|
@pulumi.getter(name="allowGceInference")
|
143
|
-
def allow_gce_inference(self) -> Optional[pulumi.Input[bool]]:
|
144
|
+
def allow_gce_inference(self) -> Optional[pulumi.Input[builtins.bool]]:
|
144
145
|
return pulumi.get(self, "allow_gce_inference")
|
145
146
|
|
146
147
|
@allow_gce_inference.setter
|
147
|
-
def allow_gce_inference(self, value: Optional[pulumi.Input[bool]]):
|
148
|
+
def allow_gce_inference(self, value: Optional[pulumi.Input[builtins.bool]]):
|
148
149
|
pulumi.set(self, "allow_gce_inference", value)
|
149
150
|
|
150
151
|
@property
|
151
152
|
@pulumi.getter
|
152
|
-
def backend(self) -> Optional[pulumi.Input[str]]:
|
153
|
+
def backend(self) -> Optional[pulumi.Input[builtins.str]]:
|
153
154
|
"""
|
154
155
|
Path to the mounted GCP auth backend
|
155
156
|
"""
|
156
157
|
return pulumi.get(self, "backend")
|
157
158
|
|
158
159
|
@backend.setter
|
159
|
-
def backend(self, value: Optional[pulumi.Input[str]]):
|
160
|
+
def backend(self, value: Optional[pulumi.Input[builtins.str]]):
|
160
161
|
pulumi.set(self, "backend", value)
|
161
162
|
|
162
163
|
@property
|
163
164
|
@pulumi.getter(name="boundInstanceGroups")
|
164
|
-
def bound_instance_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
165
|
+
def bound_instance_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
165
166
|
return pulumi.get(self, "bound_instance_groups")
|
166
167
|
|
167
168
|
@bound_instance_groups.setter
|
168
|
-
def bound_instance_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
169
|
+
def bound_instance_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
169
170
|
pulumi.set(self, "bound_instance_groups", value)
|
170
171
|
|
171
172
|
@property
|
172
173
|
@pulumi.getter(name="boundLabels")
|
173
|
-
def bound_labels(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
174
|
+
def bound_labels(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
174
175
|
return pulumi.get(self, "bound_labels")
|
175
176
|
|
176
177
|
@bound_labels.setter
|
177
|
-
def bound_labels(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
178
|
+
def bound_labels(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
178
179
|
pulumi.set(self, "bound_labels", value)
|
179
180
|
|
180
181
|
@property
|
181
182
|
@pulumi.getter(name="boundProjects")
|
182
|
-
def bound_projects(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
183
|
+
def bound_projects(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
183
184
|
"""
|
184
185
|
An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
185
186
|
"""
|
186
187
|
return pulumi.get(self, "bound_projects")
|
187
188
|
|
188
189
|
@bound_projects.setter
|
189
|
-
def bound_projects(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
190
|
+
def bound_projects(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
190
191
|
pulumi.set(self, "bound_projects", value)
|
191
192
|
|
192
193
|
@property
|
193
194
|
@pulumi.getter(name="boundRegions")
|
194
|
-
def bound_regions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
195
|
+
def bound_regions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
195
196
|
return pulumi.get(self, "bound_regions")
|
196
197
|
|
197
198
|
@bound_regions.setter
|
198
|
-
def bound_regions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
199
|
+
def bound_regions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
199
200
|
pulumi.set(self, "bound_regions", value)
|
200
201
|
|
201
202
|
@property
|
202
203
|
@pulumi.getter(name="boundServiceAccounts")
|
203
|
-
def bound_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
204
|
+
def bound_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
204
205
|
"""
|
205
206
|
GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
206
207
|
"""
|
207
208
|
return pulumi.get(self, "bound_service_accounts")
|
208
209
|
|
209
210
|
@bound_service_accounts.setter
|
210
|
-
def bound_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
211
|
+
def bound_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
211
212
|
pulumi.set(self, "bound_service_accounts", value)
|
212
213
|
|
213
214
|
@property
|
214
215
|
@pulumi.getter(name="boundZones")
|
215
|
-
def bound_zones(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
216
|
+
def bound_zones(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
216
217
|
return pulumi.get(self, "bound_zones")
|
217
218
|
|
218
219
|
@bound_zones.setter
|
219
|
-
def bound_zones(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
220
|
+
def bound_zones(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
220
221
|
pulumi.set(self, "bound_zones", value)
|
221
222
|
|
222
223
|
@property
|
223
224
|
@pulumi.getter(name="maxJwtExp")
|
224
|
-
def max_jwt_exp(self) -> Optional[pulumi.Input[str]]:
|
225
|
+
def max_jwt_exp(self) -> Optional[pulumi.Input[builtins.str]]:
|
225
226
|
return pulumi.get(self, "max_jwt_exp")
|
226
227
|
|
227
228
|
@max_jwt_exp.setter
|
228
|
-
def max_jwt_exp(self, value: Optional[pulumi.Input[str]]):
|
229
|
+
def max_jwt_exp(self, value: Optional[pulumi.Input[builtins.str]]):
|
229
230
|
pulumi.set(self, "max_jwt_exp", value)
|
230
231
|
|
231
232
|
@property
|
232
233
|
@pulumi.getter
|
233
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
234
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
234
235
|
"""
|
235
236
|
The namespace to provision the resource in.
|
236
237
|
The value should not contain leading or trailing forward slashes.
|
@@ -240,163 +241,163 @@ class AuthBackendRoleArgs:
|
|
240
241
|
return pulumi.get(self, "namespace")
|
241
242
|
|
242
243
|
@namespace.setter
|
243
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
244
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
244
245
|
pulumi.set(self, "namespace", value)
|
245
246
|
|
246
247
|
@property
|
247
248
|
@pulumi.getter(name="tokenBoundCidrs")
|
248
|
-
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
249
|
+
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
249
250
|
"""
|
250
251
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
251
252
|
"""
|
252
253
|
return pulumi.get(self, "token_bound_cidrs")
|
253
254
|
|
254
255
|
@token_bound_cidrs.setter
|
255
|
-
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
256
|
+
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
256
257
|
pulumi.set(self, "token_bound_cidrs", value)
|
257
258
|
|
258
259
|
@property
|
259
260
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
260
|
-
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[int]]:
|
261
|
+
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
261
262
|
"""
|
262
263
|
Generated Token's Explicit Maximum TTL in seconds
|
263
264
|
"""
|
264
265
|
return pulumi.get(self, "token_explicit_max_ttl")
|
265
266
|
|
266
267
|
@token_explicit_max_ttl.setter
|
267
|
-
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[int]]):
|
268
|
+
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
268
269
|
pulumi.set(self, "token_explicit_max_ttl", value)
|
269
270
|
|
270
271
|
@property
|
271
272
|
@pulumi.getter(name="tokenMaxTtl")
|
272
|
-
def token_max_ttl(self) -> Optional[pulumi.Input[int]]:
|
273
|
+
def token_max_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
273
274
|
"""
|
274
275
|
The maximum lifetime of the generated token
|
275
276
|
"""
|
276
277
|
return pulumi.get(self, "token_max_ttl")
|
277
278
|
|
278
279
|
@token_max_ttl.setter
|
279
|
-
def token_max_ttl(self, value: Optional[pulumi.Input[int]]):
|
280
|
+
def token_max_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
280
281
|
pulumi.set(self, "token_max_ttl", value)
|
281
282
|
|
282
283
|
@property
|
283
284
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
284
|
-
def token_no_default_policy(self) -> Optional[pulumi.Input[bool]]:
|
285
|
+
def token_no_default_policy(self) -> Optional[pulumi.Input[builtins.bool]]:
|
285
286
|
"""
|
286
287
|
If true, the 'default' policy will not automatically be added to generated tokens
|
287
288
|
"""
|
288
289
|
return pulumi.get(self, "token_no_default_policy")
|
289
290
|
|
290
291
|
@token_no_default_policy.setter
|
291
|
-
def token_no_default_policy(self, value: Optional[pulumi.Input[bool]]):
|
292
|
+
def token_no_default_policy(self, value: Optional[pulumi.Input[builtins.bool]]):
|
292
293
|
pulumi.set(self, "token_no_default_policy", value)
|
293
294
|
|
294
295
|
@property
|
295
296
|
@pulumi.getter(name="tokenNumUses")
|
296
|
-
def token_num_uses(self) -> Optional[pulumi.Input[int]]:
|
297
|
+
def token_num_uses(self) -> Optional[pulumi.Input[builtins.int]]:
|
297
298
|
"""
|
298
299
|
The maximum number of times a token may be used, a value of zero means unlimited
|
299
300
|
"""
|
300
301
|
return pulumi.get(self, "token_num_uses")
|
301
302
|
|
302
303
|
@token_num_uses.setter
|
303
|
-
def token_num_uses(self, value: Optional[pulumi.Input[int]]):
|
304
|
+
def token_num_uses(self, value: Optional[pulumi.Input[builtins.int]]):
|
304
305
|
pulumi.set(self, "token_num_uses", value)
|
305
306
|
|
306
307
|
@property
|
307
308
|
@pulumi.getter(name="tokenPeriod")
|
308
|
-
def token_period(self) -> Optional[pulumi.Input[int]]:
|
309
|
+
def token_period(self) -> Optional[pulumi.Input[builtins.int]]:
|
309
310
|
"""
|
310
311
|
Generated Token's Period
|
311
312
|
"""
|
312
313
|
return pulumi.get(self, "token_period")
|
313
314
|
|
314
315
|
@token_period.setter
|
315
|
-
def token_period(self, value: Optional[pulumi.Input[int]]):
|
316
|
+
def token_period(self, value: Optional[pulumi.Input[builtins.int]]):
|
316
317
|
pulumi.set(self, "token_period", value)
|
317
318
|
|
318
319
|
@property
|
319
320
|
@pulumi.getter(name="tokenPolicies")
|
320
|
-
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
321
|
+
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
321
322
|
"""
|
322
323
|
Generated Token's Policies
|
323
324
|
"""
|
324
325
|
return pulumi.get(self, "token_policies")
|
325
326
|
|
326
327
|
@token_policies.setter
|
327
|
-
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
328
|
+
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
328
329
|
pulumi.set(self, "token_policies", value)
|
329
330
|
|
330
331
|
@property
|
331
332
|
@pulumi.getter(name="tokenTtl")
|
332
|
-
def token_ttl(self) -> Optional[pulumi.Input[int]]:
|
333
|
+
def token_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
333
334
|
"""
|
334
335
|
The initial ttl of the token to generate in seconds
|
335
336
|
"""
|
336
337
|
return pulumi.get(self, "token_ttl")
|
337
338
|
|
338
339
|
@token_ttl.setter
|
339
|
-
def token_ttl(self, value: Optional[pulumi.Input[int]]):
|
340
|
+
def token_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
340
341
|
pulumi.set(self, "token_ttl", value)
|
341
342
|
|
342
343
|
@property
|
343
344
|
@pulumi.getter(name="tokenType")
|
344
|
-
def token_type(self) -> Optional[pulumi.Input[str]]:
|
345
|
+
def token_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
345
346
|
"""
|
346
347
|
The type of token to generate, service or batch
|
347
348
|
"""
|
348
349
|
return pulumi.get(self, "token_type")
|
349
350
|
|
350
351
|
@token_type.setter
|
351
|
-
def token_type(self, value: Optional[pulumi.Input[str]]):
|
352
|
+
def token_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
352
353
|
pulumi.set(self, "token_type", value)
|
353
354
|
|
354
355
|
|
355
356
|
@pulumi.input_type
|
356
357
|
class _AuthBackendRoleState:
|
357
358
|
def __init__(__self__, *,
|
358
|
-
add_group_aliases: Optional[pulumi.Input[bool]] = None,
|
359
|
-
allow_gce_inference: Optional[pulumi.Input[bool]] = None,
|
360
|
-
backend: Optional[pulumi.Input[str]] = None,
|
361
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
362
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
363
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
364
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
365
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
366
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
367
|
-
max_jwt_exp: Optional[pulumi.Input[str]] = None,
|
368
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
369
|
-
role: Optional[pulumi.Input[str]] = None,
|
370
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
371
|
-
token_explicit_max_ttl: Optional[pulumi.Input[int]] = None,
|
372
|
-
token_max_ttl: Optional[pulumi.Input[int]] = None,
|
373
|
-
token_no_default_policy: Optional[pulumi.Input[bool]] = None,
|
374
|
-
token_num_uses: Optional[pulumi.Input[int]] = None,
|
375
|
-
token_period: Optional[pulumi.Input[int]] = None,
|
376
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
377
|
-
token_ttl: Optional[pulumi.Input[int]] = None,
|
378
|
-
token_type: Optional[pulumi.Input[str]] = None,
|
379
|
-
type: Optional[pulumi.Input[str]] = None):
|
359
|
+
add_group_aliases: Optional[pulumi.Input[builtins.bool]] = None,
|
360
|
+
allow_gce_inference: Optional[pulumi.Input[builtins.bool]] = None,
|
361
|
+
backend: Optional[pulumi.Input[builtins.str]] = None,
|
362
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
363
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
364
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
365
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
366
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
367
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
368
|
+
max_jwt_exp: Optional[pulumi.Input[builtins.str]] = None,
|
369
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
370
|
+
role: Optional[pulumi.Input[builtins.str]] = None,
|
371
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
372
|
+
token_explicit_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
373
|
+
token_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
374
|
+
token_no_default_policy: Optional[pulumi.Input[builtins.bool]] = None,
|
375
|
+
token_num_uses: Optional[pulumi.Input[builtins.int]] = None,
|
376
|
+
token_period: Optional[pulumi.Input[builtins.int]] = None,
|
377
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
378
|
+
token_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
379
|
+
token_type: Optional[pulumi.Input[builtins.str]] = None,
|
380
|
+
type: Optional[pulumi.Input[builtins.str]] = None):
|
380
381
|
"""
|
381
382
|
Input properties used for looking up and filtering AuthBackendRole resources.
|
382
|
-
:param pulumi.Input[str] backend: Path to the mounted GCP auth backend
|
383
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
384
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
385
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
383
|
+
:param pulumi.Input[builtins.str] backend: Path to the mounted GCP auth backend
|
384
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
385
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
386
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
386
387
|
The value should not contain leading or trailing forward slashes.
|
387
388
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
388
389
|
*Available only for Vault Enterprise*.
|
389
|
-
:param pulumi.Input[str] role: Name of the GCP role
|
390
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
391
|
-
:param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
392
|
-
:param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
|
393
|
-
:param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
394
|
-
:param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
395
|
-
:param pulumi.Input[int] token_period: Generated Token's Period
|
396
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
|
397
|
-
:param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
|
398
|
-
:param pulumi.Input[str] token_type: The type of token to generate, service or batch
|
399
|
-
:param pulumi.Input[str] type: Type of GCP authentication role (either `gce` or `iam`)
|
390
|
+
:param pulumi.Input[builtins.str] role: Name of the GCP role
|
391
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
392
|
+
:param pulumi.Input[builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
393
|
+
:param pulumi.Input[builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
394
|
+
:param pulumi.Input[builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
395
|
+
:param pulumi.Input[builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
396
|
+
:param pulumi.Input[builtins.int] token_period: Generated Token's Period
|
397
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] token_policies: Generated Token's Policies
|
398
|
+
:param pulumi.Input[builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
399
|
+
:param pulumi.Input[builtins.str] token_type: The type of token to generate, service or batch
|
400
|
+
:param pulumi.Input[builtins.str] type: Type of GCP authentication role (either `gce` or `iam`)
|
400
401
|
"""
|
401
402
|
if add_group_aliases is not None:
|
402
403
|
pulumi.set(__self__, "add_group_aliases", add_group_aliases)
|
@@ -445,106 +446,106 @@ class _AuthBackendRoleState:
|
|
445
446
|
|
446
447
|
@property
|
447
448
|
@pulumi.getter(name="addGroupAliases")
|
448
|
-
def add_group_aliases(self) -> Optional[pulumi.Input[bool]]:
|
449
|
+
def add_group_aliases(self) -> Optional[pulumi.Input[builtins.bool]]:
|
449
450
|
return pulumi.get(self, "add_group_aliases")
|
450
451
|
|
451
452
|
@add_group_aliases.setter
|
452
|
-
def add_group_aliases(self, value: Optional[pulumi.Input[bool]]):
|
453
|
+
def add_group_aliases(self, value: Optional[pulumi.Input[builtins.bool]]):
|
453
454
|
pulumi.set(self, "add_group_aliases", value)
|
454
455
|
|
455
456
|
@property
|
456
457
|
@pulumi.getter(name="allowGceInference")
|
457
|
-
def allow_gce_inference(self) -> Optional[pulumi.Input[bool]]:
|
458
|
+
def allow_gce_inference(self) -> Optional[pulumi.Input[builtins.bool]]:
|
458
459
|
return pulumi.get(self, "allow_gce_inference")
|
459
460
|
|
460
461
|
@allow_gce_inference.setter
|
461
|
-
def allow_gce_inference(self, value: Optional[pulumi.Input[bool]]):
|
462
|
+
def allow_gce_inference(self, value: Optional[pulumi.Input[builtins.bool]]):
|
462
463
|
pulumi.set(self, "allow_gce_inference", value)
|
463
464
|
|
464
465
|
@property
|
465
466
|
@pulumi.getter
|
466
|
-
def backend(self) -> Optional[pulumi.Input[str]]:
|
467
|
+
def backend(self) -> Optional[pulumi.Input[builtins.str]]:
|
467
468
|
"""
|
468
469
|
Path to the mounted GCP auth backend
|
469
470
|
"""
|
470
471
|
return pulumi.get(self, "backend")
|
471
472
|
|
472
473
|
@backend.setter
|
473
|
-
def backend(self, value: Optional[pulumi.Input[str]]):
|
474
|
+
def backend(self, value: Optional[pulumi.Input[builtins.str]]):
|
474
475
|
pulumi.set(self, "backend", value)
|
475
476
|
|
476
477
|
@property
|
477
478
|
@pulumi.getter(name="boundInstanceGroups")
|
478
|
-
def bound_instance_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
479
|
+
def bound_instance_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
479
480
|
return pulumi.get(self, "bound_instance_groups")
|
480
481
|
|
481
482
|
@bound_instance_groups.setter
|
482
|
-
def bound_instance_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
483
|
+
def bound_instance_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
483
484
|
pulumi.set(self, "bound_instance_groups", value)
|
484
485
|
|
485
486
|
@property
|
486
487
|
@pulumi.getter(name="boundLabels")
|
487
|
-
def bound_labels(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
488
|
+
def bound_labels(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
488
489
|
return pulumi.get(self, "bound_labels")
|
489
490
|
|
490
491
|
@bound_labels.setter
|
491
|
-
def bound_labels(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
492
|
+
def bound_labels(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
492
493
|
pulumi.set(self, "bound_labels", value)
|
493
494
|
|
494
495
|
@property
|
495
496
|
@pulumi.getter(name="boundProjects")
|
496
|
-
def bound_projects(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
497
|
+
def bound_projects(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
497
498
|
"""
|
498
499
|
An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
499
500
|
"""
|
500
501
|
return pulumi.get(self, "bound_projects")
|
501
502
|
|
502
503
|
@bound_projects.setter
|
503
|
-
def bound_projects(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
504
|
+
def bound_projects(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
504
505
|
pulumi.set(self, "bound_projects", value)
|
505
506
|
|
506
507
|
@property
|
507
508
|
@pulumi.getter(name="boundRegions")
|
508
|
-
def bound_regions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
509
|
+
def bound_regions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
509
510
|
return pulumi.get(self, "bound_regions")
|
510
511
|
|
511
512
|
@bound_regions.setter
|
512
|
-
def bound_regions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
513
|
+
def bound_regions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
513
514
|
pulumi.set(self, "bound_regions", value)
|
514
515
|
|
515
516
|
@property
|
516
517
|
@pulumi.getter(name="boundServiceAccounts")
|
517
|
-
def bound_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
518
|
+
def bound_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
518
519
|
"""
|
519
520
|
GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
520
521
|
"""
|
521
522
|
return pulumi.get(self, "bound_service_accounts")
|
522
523
|
|
523
524
|
@bound_service_accounts.setter
|
524
|
-
def bound_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
525
|
+
def bound_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
525
526
|
pulumi.set(self, "bound_service_accounts", value)
|
526
527
|
|
527
528
|
@property
|
528
529
|
@pulumi.getter(name="boundZones")
|
529
|
-
def bound_zones(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
530
|
+
def bound_zones(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
530
531
|
return pulumi.get(self, "bound_zones")
|
531
532
|
|
532
533
|
@bound_zones.setter
|
533
|
-
def bound_zones(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
534
|
+
def bound_zones(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
534
535
|
pulumi.set(self, "bound_zones", value)
|
535
536
|
|
536
537
|
@property
|
537
538
|
@pulumi.getter(name="maxJwtExp")
|
538
|
-
def max_jwt_exp(self) -> Optional[pulumi.Input[str]]:
|
539
|
+
def max_jwt_exp(self) -> Optional[pulumi.Input[builtins.str]]:
|
539
540
|
return pulumi.get(self, "max_jwt_exp")
|
540
541
|
|
541
542
|
@max_jwt_exp.setter
|
542
|
-
def max_jwt_exp(self, value: Optional[pulumi.Input[str]]):
|
543
|
+
def max_jwt_exp(self, value: Optional[pulumi.Input[builtins.str]]):
|
543
544
|
pulumi.set(self, "max_jwt_exp", value)
|
544
545
|
|
545
546
|
@property
|
546
547
|
@pulumi.getter
|
547
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
548
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
548
549
|
"""
|
549
550
|
The namespace to provision the resource in.
|
550
551
|
The value should not contain leading or trailing forward slashes.
|
@@ -554,139 +555,139 @@ class _AuthBackendRoleState:
|
|
554
555
|
return pulumi.get(self, "namespace")
|
555
556
|
|
556
557
|
@namespace.setter
|
557
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
558
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
558
559
|
pulumi.set(self, "namespace", value)
|
559
560
|
|
560
561
|
@property
|
561
562
|
@pulumi.getter
|
562
|
-
def role(self) -> Optional[pulumi.Input[str]]:
|
563
|
+
def role(self) -> Optional[pulumi.Input[builtins.str]]:
|
563
564
|
"""
|
564
565
|
Name of the GCP role
|
565
566
|
"""
|
566
567
|
return pulumi.get(self, "role")
|
567
568
|
|
568
569
|
@role.setter
|
569
|
-
def role(self, value: Optional[pulumi.Input[str]]):
|
570
|
+
def role(self, value: Optional[pulumi.Input[builtins.str]]):
|
570
571
|
pulumi.set(self, "role", value)
|
571
572
|
|
572
573
|
@property
|
573
574
|
@pulumi.getter(name="tokenBoundCidrs")
|
574
|
-
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
575
|
+
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
575
576
|
"""
|
576
577
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
577
578
|
"""
|
578
579
|
return pulumi.get(self, "token_bound_cidrs")
|
579
580
|
|
580
581
|
@token_bound_cidrs.setter
|
581
|
-
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
582
|
+
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
582
583
|
pulumi.set(self, "token_bound_cidrs", value)
|
583
584
|
|
584
585
|
@property
|
585
586
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
586
|
-
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[int]]:
|
587
|
+
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
587
588
|
"""
|
588
589
|
Generated Token's Explicit Maximum TTL in seconds
|
589
590
|
"""
|
590
591
|
return pulumi.get(self, "token_explicit_max_ttl")
|
591
592
|
|
592
593
|
@token_explicit_max_ttl.setter
|
593
|
-
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[int]]):
|
594
|
+
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
594
595
|
pulumi.set(self, "token_explicit_max_ttl", value)
|
595
596
|
|
596
597
|
@property
|
597
598
|
@pulumi.getter(name="tokenMaxTtl")
|
598
|
-
def token_max_ttl(self) -> Optional[pulumi.Input[int]]:
|
599
|
+
def token_max_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
599
600
|
"""
|
600
601
|
The maximum lifetime of the generated token
|
601
602
|
"""
|
602
603
|
return pulumi.get(self, "token_max_ttl")
|
603
604
|
|
604
605
|
@token_max_ttl.setter
|
605
|
-
def token_max_ttl(self, value: Optional[pulumi.Input[int]]):
|
606
|
+
def token_max_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
606
607
|
pulumi.set(self, "token_max_ttl", value)
|
607
608
|
|
608
609
|
@property
|
609
610
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
610
|
-
def token_no_default_policy(self) -> Optional[pulumi.Input[bool]]:
|
611
|
+
def token_no_default_policy(self) -> Optional[pulumi.Input[builtins.bool]]:
|
611
612
|
"""
|
612
613
|
If true, the 'default' policy will not automatically be added to generated tokens
|
613
614
|
"""
|
614
615
|
return pulumi.get(self, "token_no_default_policy")
|
615
616
|
|
616
617
|
@token_no_default_policy.setter
|
617
|
-
def token_no_default_policy(self, value: Optional[pulumi.Input[bool]]):
|
618
|
+
def token_no_default_policy(self, value: Optional[pulumi.Input[builtins.bool]]):
|
618
619
|
pulumi.set(self, "token_no_default_policy", value)
|
619
620
|
|
620
621
|
@property
|
621
622
|
@pulumi.getter(name="tokenNumUses")
|
622
|
-
def token_num_uses(self) -> Optional[pulumi.Input[int]]:
|
623
|
+
def token_num_uses(self) -> Optional[pulumi.Input[builtins.int]]:
|
623
624
|
"""
|
624
625
|
The maximum number of times a token may be used, a value of zero means unlimited
|
625
626
|
"""
|
626
627
|
return pulumi.get(self, "token_num_uses")
|
627
628
|
|
628
629
|
@token_num_uses.setter
|
629
|
-
def token_num_uses(self, value: Optional[pulumi.Input[int]]):
|
630
|
+
def token_num_uses(self, value: Optional[pulumi.Input[builtins.int]]):
|
630
631
|
pulumi.set(self, "token_num_uses", value)
|
631
632
|
|
632
633
|
@property
|
633
634
|
@pulumi.getter(name="tokenPeriod")
|
634
|
-
def token_period(self) -> Optional[pulumi.Input[int]]:
|
635
|
+
def token_period(self) -> Optional[pulumi.Input[builtins.int]]:
|
635
636
|
"""
|
636
637
|
Generated Token's Period
|
637
638
|
"""
|
638
639
|
return pulumi.get(self, "token_period")
|
639
640
|
|
640
641
|
@token_period.setter
|
641
|
-
def token_period(self, value: Optional[pulumi.Input[int]]):
|
642
|
+
def token_period(self, value: Optional[pulumi.Input[builtins.int]]):
|
642
643
|
pulumi.set(self, "token_period", value)
|
643
644
|
|
644
645
|
@property
|
645
646
|
@pulumi.getter(name="tokenPolicies")
|
646
|
-
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
647
|
+
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
647
648
|
"""
|
648
649
|
Generated Token's Policies
|
649
650
|
"""
|
650
651
|
return pulumi.get(self, "token_policies")
|
651
652
|
|
652
653
|
@token_policies.setter
|
653
|
-
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
654
|
+
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
654
655
|
pulumi.set(self, "token_policies", value)
|
655
656
|
|
656
657
|
@property
|
657
658
|
@pulumi.getter(name="tokenTtl")
|
658
|
-
def token_ttl(self) -> Optional[pulumi.Input[int]]:
|
659
|
+
def token_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
659
660
|
"""
|
660
661
|
The initial ttl of the token to generate in seconds
|
661
662
|
"""
|
662
663
|
return pulumi.get(self, "token_ttl")
|
663
664
|
|
664
665
|
@token_ttl.setter
|
665
|
-
def token_ttl(self, value: Optional[pulumi.Input[int]]):
|
666
|
+
def token_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
666
667
|
pulumi.set(self, "token_ttl", value)
|
667
668
|
|
668
669
|
@property
|
669
670
|
@pulumi.getter(name="tokenType")
|
670
|
-
def token_type(self) -> Optional[pulumi.Input[str]]:
|
671
|
+
def token_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
671
672
|
"""
|
672
673
|
The type of token to generate, service or batch
|
673
674
|
"""
|
674
675
|
return pulumi.get(self, "token_type")
|
675
676
|
|
676
677
|
@token_type.setter
|
677
|
-
def token_type(self, value: Optional[pulumi.Input[str]]):
|
678
|
+
def token_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
678
679
|
pulumi.set(self, "token_type", value)
|
679
680
|
|
680
681
|
@property
|
681
682
|
@pulumi.getter
|
682
|
-
def type(self) -> Optional[pulumi.Input[str]]:
|
683
|
+
def type(self) -> Optional[pulumi.Input[builtins.str]]:
|
683
684
|
"""
|
684
685
|
Type of GCP authentication role (either `gce` or `iam`)
|
685
686
|
"""
|
686
687
|
return pulumi.get(self, "type")
|
687
688
|
|
688
689
|
@type.setter
|
689
|
-
def type(self, value: Optional[pulumi.Input[str]]):
|
690
|
+
def type(self, value: Optional[pulumi.Input[builtins.str]]):
|
690
691
|
pulumi.set(self, "type", value)
|
691
692
|
|
692
693
|
|
@@ -695,28 +696,28 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
695
696
|
def __init__(__self__,
|
696
697
|
resource_name: str,
|
697
698
|
opts: Optional[pulumi.ResourceOptions] = None,
|
698
|
-
add_group_aliases: Optional[pulumi.Input[bool]] = None,
|
699
|
-
allow_gce_inference: Optional[pulumi.Input[bool]] = None,
|
700
|
-
backend: Optional[pulumi.Input[str]] = None,
|
701
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
702
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
703
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
704
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
705
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
706
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
707
|
-
max_jwt_exp: Optional[pulumi.Input[str]] = None,
|
708
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
709
|
-
role: Optional[pulumi.Input[str]] = None,
|
710
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
711
|
-
token_explicit_max_ttl: Optional[pulumi.Input[int]] = None,
|
712
|
-
token_max_ttl: Optional[pulumi.Input[int]] = None,
|
713
|
-
token_no_default_policy: Optional[pulumi.Input[bool]] = None,
|
714
|
-
token_num_uses: Optional[pulumi.Input[int]] = None,
|
715
|
-
token_period: Optional[pulumi.Input[int]] = None,
|
716
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
717
|
-
token_ttl: Optional[pulumi.Input[int]] = None,
|
718
|
-
token_type: Optional[pulumi.Input[str]] = None,
|
719
|
-
type: Optional[pulumi.Input[str]] = None,
|
699
|
+
add_group_aliases: Optional[pulumi.Input[builtins.bool]] = None,
|
700
|
+
allow_gce_inference: Optional[pulumi.Input[builtins.bool]] = None,
|
701
|
+
backend: Optional[pulumi.Input[builtins.str]] = None,
|
702
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
703
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
704
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
705
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
706
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
707
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
708
|
+
max_jwt_exp: Optional[pulumi.Input[builtins.str]] = None,
|
709
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
710
|
+
role: Optional[pulumi.Input[builtins.str]] = None,
|
711
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
712
|
+
token_explicit_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
713
|
+
token_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
714
|
+
token_no_default_policy: Optional[pulumi.Input[builtins.bool]] = None,
|
715
|
+
token_num_uses: Optional[pulumi.Input[builtins.int]] = None,
|
716
|
+
token_period: Optional[pulumi.Input[builtins.int]] = None,
|
717
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
718
|
+
token_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
719
|
+
token_type: Optional[pulumi.Input[builtins.str]] = None,
|
720
|
+
type: Optional[pulumi.Input[builtins.str]] = None,
|
720
721
|
__props__=None):
|
721
722
|
"""
|
722
723
|
Provides a resource to create a role in an [GCP auth backend within Vault](https://www.vaultproject.io/docs/auth/gcp.html).
|
@@ -755,24 +756,24 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
755
756
|
|
756
757
|
:param str resource_name: The name of the resource.
|
757
758
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
758
|
-
:param pulumi.Input[str] backend: Path to the mounted GCP auth backend
|
759
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
760
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
761
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
759
|
+
:param pulumi.Input[builtins.str] backend: Path to the mounted GCP auth backend
|
760
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
761
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
762
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
762
763
|
The value should not contain leading or trailing forward slashes.
|
763
764
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
764
765
|
*Available only for Vault Enterprise*.
|
765
|
-
:param pulumi.Input[str] role: Name of the GCP role
|
766
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
767
|
-
:param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
768
|
-
:param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
|
769
|
-
:param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
770
|
-
:param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
771
|
-
:param pulumi.Input[int] token_period: Generated Token's Period
|
772
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
|
773
|
-
:param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
|
774
|
-
:param pulumi.Input[str] token_type: The type of token to generate, service or batch
|
775
|
-
:param pulumi.Input[str] type: Type of GCP authentication role (either `gce` or `iam`)
|
766
|
+
:param pulumi.Input[builtins.str] role: Name of the GCP role
|
767
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
768
|
+
:param pulumi.Input[builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
769
|
+
:param pulumi.Input[builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
770
|
+
:param pulumi.Input[builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
771
|
+
:param pulumi.Input[builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
772
|
+
:param pulumi.Input[builtins.int] token_period: Generated Token's Period
|
773
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] token_policies: Generated Token's Policies
|
774
|
+
:param pulumi.Input[builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
775
|
+
:param pulumi.Input[builtins.str] token_type: The type of token to generate, service or batch
|
776
|
+
:param pulumi.Input[builtins.str] type: Type of GCP authentication role (either `gce` or `iam`)
|
776
777
|
"""
|
777
778
|
...
|
778
779
|
@overload
|
@@ -830,28 +831,28 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
830
831
|
def _internal_init(__self__,
|
831
832
|
resource_name: str,
|
832
833
|
opts: Optional[pulumi.ResourceOptions] = None,
|
833
|
-
add_group_aliases: Optional[pulumi.Input[bool]] = None,
|
834
|
-
allow_gce_inference: Optional[pulumi.Input[bool]] = None,
|
835
|
-
backend: Optional[pulumi.Input[str]] = None,
|
836
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
837
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
838
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
839
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
840
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
841
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
842
|
-
max_jwt_exp: Optional[pulumi.Input[str]] = None,
|
843
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
844
|
-
role: Optional[pulumi.Input[str]] = None,
|
845
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
846
|
-
token_explicit_max_ttl: Optional[pulumi.Input[int]] = None,
|
847
|
-
token_max_ttl: Optional[pulumi.Input[int]] = None,
|
848
|
-
token_no_default_policy: Optional[pulumi.Input[bool]] = None,
|
849
|
-
token_num_uses: Optional[pulumi.Input[int]] = None,
|
850
|
-
token_period: Optional[pulumi.Input[int]] = None,
|
851
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
852
|
-
token_ttl: Optional[pulumi.Input[int]] = None,
|
853
|
-
token_type: Optional[pulumi.Input[str]] = None,
|
854
|
-
type: Optional[pulumi.Input[str]] = None,
|
834
|
+
add_group_aliases: Optional[pulumi.Input[builtins.bool]] = None,
|
835
|
+
allow_gce_inference: Optional[pulumi.Input[builtins.bool]] = None,
|
836
|
+
backend: Optional[pulumi.Input[builtins.str]] = None,
|
837
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
838
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
839
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
840
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
841
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
842
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
843
|
+
max_jwt_exp: Optional[pulumi.Input[builtins.str]] = None,
|
844
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
845
|
+
role: Optional[pulumi.Input[builtins.str]] = None,
|
846
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
847
|
+
token_explicit_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
848
|
+
token_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
849
|
+
token_no_default_policy: Optional[pulumi.Input[builtins.bool]] = None,
|
850
|
+
token_num_uses: Optional[pulumi.Input[builtins.int]] = None,
|
851
|
+
token_period: Optional[pulumi.Input[builtins.int]] = None,
|
852
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
853
|
+
token_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
854
|
+
token_type: Optional[pulumi.Input[builtins.str]] = None,
|
855
|
+
type: Optional[pulumi.Input[builtins.str]] = None,
|
855
856
|
__props__=None):
|
856
857
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
857
858
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -897,28 +898,28 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
897
898
|
def get(resource_name: str,
|
898
899
|
id: pulumi.Input[str],
|
899
900
|
opts: Optional[pulumi.ResourceOptions] = None,
|
900
|
-
add_group_aliases: Optional[pulumi.Input[bool]] = None,
|
901
|
-
allow_gce_inference: Optional[pulumi.Input[bool]] = None,
|
902
|
-
backend: Optional[pulumi.Input[str]] = None,
|
903
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
904
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
905
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
906
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
907
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
908
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
909
|
-
max_jwt_exp: Optional[pulumi.Input[str]] = None,
|
910
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
911
|
-
role: Optional[pulumi.Input[str]] = None,
|
912
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
913
|
-
token_explicit_max_ttl: Optional[pulumi.Input[int]] = None,
|
914
|
-
token_max_ttl: Optional[pulumi.Input[int]] = None,
|
915
|
-
token_no_default_policy: Optional[pulumi.Input[bool]] = None,
|
916
|
-
token_num_uses: Optional[pulumi.Input[int]] = None,
|
917
|
-
token_period: Optional[pulumi.Input[int]] = None,
|
918
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
919
|
-
token_ttl: Optional[pulumi.Input[int]] = None,
|
920
|
-
token_type: Optional[pulumi.Input[str]] = None,
|
921
|
-
type: Optional[pulumi.Input[str]] = None) -> 'AuthBackendRole':
|
901
|
+
add_group_aliases: Optional[pulumi.Input[builtins.bool]] = None,
|
902
|
+
allow_gce_inference: Optional[pulumi.Input[builtins.bool]] = None,
|
903
|
+
backend: Optional[pulumi.Input[builtins.str]] = None,
|
904
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
905
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
906
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
907
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
908
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
909
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
910
|
+
max_jwt_exp: Optional[pulumi.Input[builtins.str]] = None,
|
911
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
912
|
+
role: Optional[pulumi.Input[builtins.str]] = None,
|
913
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
914
|
+
token_explicit_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
915
|
+
token_max_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
916
|
+
token_no_default_policy: Optional[pulumi.Input[builtins.bool]] = None,
|
917
|
+
token_num_uses: Optional[pulumi.Input[builtins.int]] = None,
|
918
|
+
token_period: Optional[pulumi.Input[builtins.int]] = None,
|
919
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
920
|
+
token_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
921
|
+
token_type: Optional[pulumi.Input[builtins.str]] = None,
|
922
|
+
type: Optional[pulumi.Input[builtins.str]] = None) -> 'AuthBackendRole':
|
922
923
|
"""
|
923
924
|
Get an existing AuthBackendRole resource's state with the given name, id, and optional extra
|
924
925
|
properties used to qualify the lookup.
|
@@ -926,24 +927,24 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
926
927
|
:param str resource_name: The unique name of the resulting resource.
|
927
928
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
928
929
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
929
|
-
:param pulumi.Input[str] backend: Path to the mounted GCP auth backend
|
930
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
931
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
932
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
930
|
+
:param pulumi.Input[builtins.str] backend: Path to the mounted GCP auth backend
|
931
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
932
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
933
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
933
934
|
The value should not contain leading or trailing forward slashes.
|
934
935
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
935
936
|
*Available only for Vault Enterprise*.
|
936
|
-
:param pulumi.Input[str] role: Name of the GCP role
|
937
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
938
|
-
:param pulumi.Input[int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
939
|
-
:param pulumi.Input[int] token_max_ttl: The maximum lifetime of the generated token
|
940
|
-
:param pulumi.Input[bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
941
|
-
:param pulumi.Input[int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
942
|
-
:param pulumi.Input[int] token_period: Generated Token's Period
|
943
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] token_policies: Generated Token's Policies
|
944
|
-
:param pulumi.Input[int] token_ttl: The initial ttl of the token to generate in seconds
|
945
|
-
:param pulumi.Input[str] token_type: The type of token to generate, service or batch
|
946
|
-
:param pulumi.Input[str] type: Type of GCP authentication role (either `gce` or `iam`)
|
937
|
+
:param pulumi.Input[builtins.str] role: Name of the GCP role
|
938
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
939
|
+
:param pulumi.Input[builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
940
|
+
:param pulumi.Input[builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
941
|
+
:param pulumi.Input[builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
942
|
+
:param pulumi.Input[builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
943
|
+
:param pulumi.Input[builtins.int] token_period: Generated Token's Period
|
944
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] token_policies: Generated Token's Policies
|
945
|
+
:param pulumi.Input[builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
946
|
+
:param pulumi.Input[builtins.str] token_type: The type of token to generate, service or batch
|
947
|
+
:param pulumi.Input[builtins.str] type: Type of GCP authentication role (either `gce` or `iam`)
|
947
948
|
"""
|
948
949
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
949
950
|
|
@@ -975,17 +976,17 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
975
976
|
|
976
977
|
@property
|
977
978
|
@pulumi.getter(name="addGroupAliases")
|
978
|
-
def add_group_aliases(self) -> pulumi.Output[bool]:
|
979
|
+
def add_group_aliases(self) -> pulumi.Output[builtins.bool]:
|
979
980
|
return pulumi.get(self, "add_group_aliases")
|
980
981
|
|
981
982
|
@property
|
982
983
|
@pulumi.getter(name="allowGceInference")
|
983
|
-
def allow_gce_inference(self) -> pulumi.Output[bool]:
|
984
|
+
def allow_gce_inference(self) -> pulumi.Output[builtins.bool]:
|
984
985
|
return pulumi.get(self, "allow_gce_inference")
|
985
986
|
|
986
987
|
@property
|
987
988
|
@pulumi.getter
|
988
|
-
def backend(self) -> pulumi.Output[Optional[str]]:
|
989
|
+
def backend(self) -> pulumi.Output[Optional[builtins.str]]:
|
989
990
|
"""
|
990
991
|
Path to the mounted GCP auth backend
|
991
992
|
"""
|
@@ -993,17 +994,17 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
993
994
|
|
994
995
|
@property
|
995
996
|
@pulumi.getter(name="boundInstanceGroups")
|
996
|
-
def bound_instance_groups(self) -> pulumi.Output[Sequence[str]]:
|
997
|
+
def bound_instance_groups(self) -> pulumi.Output[Sequence[builtins.str]]:
|
997
998
|
return pulumi.get(self, "bound_instance_groups")
|
998
999
|
|
999
1000
|
@property
|
1000
1001
|
@pulumi.getter(name="boundLabels")
|
1001
|
-
def bound_labels(self) -> pulumi.Output[Sequence[str]]:
|
1002
|
+
def bound_labels(self) -> pulumi.Output[Sequence[builtins.str]]:
|
1002
1003
|
return pulumi.get(self, "bound_labels")
|
1003
1004
|
|
1004
1005
|
@property
|
1005
1006
|
@pulumi.getter(name="boundProjects")
|
1006
|
-
def bound_projects(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
1007
|
+
def bound_projects(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
1007
1008
|
"""
|
1008
1009
|
An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
1009
1010
|
"""
|
@@ -1011,12 +1012,12 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1011
1012
|
|
1012
1013
|
@property
|
1013
1014
|
@pulumi.getter(name="boundRegions")
|
1014
|
-
def bound_regions(self) -> pulumi.Output[Sequence[str]]:
|
1015
|
+
def bound_regions(self) -> pulumi.Output[Sequence[builtins.str]]:
|
1015
1016
|
return pulumi.get(self, "bound_regions")
|
1016
1017
|
|
1017
1018
|
@property
|
1018
1019
|
@pulumi.getter(name="boundServiceAccounts")
|
1019
|
-
def bound_service_accounts(self) -> pulumi.Output[Sequence[str]]:
|
1020
|
+
def bound_service_accounts(self) -> pulumi.Output[Sequence[builtins.str]]:
|
1020
1021
|
"""
|
1021
1022
|
GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
1022
1023
|
"""
|
@@ -1024,17 +1025,17 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1024
1025
|
|
1025
1026
|
@property
|
1026
1027
|
@pulumi.getter(name="boundZones")
|
1027
|
-
def bound_zones(self) -> pulumi.Output[Sequence[str]]:
|
1028
|
+
def bound_zones(self) -> pulumi.Output[Sequence[builtins.str]]:
|
1028
1029
|
return pulumi.get(self, "bound_zones")
|
1029
1030
|
|
1030
1031
|
@property
|
1031
1032
|
@pulumi.getter(name="maxJwtExp")
|
1032
|
-
def max_jwt_exp(self) -> pulumi.Output[str]:
|
1033
|
+
def max_jwt_exp(self) -> pulumi.Output[builtins.str]:
|
1033
1034
|
return pulumi.get(self, "max_jwt_exp")
|
1034
1035
|
|
1035
1036
|
@property
|
1036
1037
|
@pulumi.getter
|
1037
|
-
def namespace(self) -> pulumi.Output[Optional[str]]:
|
1038
|
+
def namespace(self) -> pulumi.Output[Optional[builtins.str]]:
|
1038
1039
|
"""
|
1039
1040
|
The namespace to provision the resource in.
|
1040
1041
|
The value should not contain leading or trailing forward slashes.
|
@@ -1045,7 +1046,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1045
1046
|
|
1046
1047
|
@property
|
1047
1048
|
@pulumi.getter
|
1048
|
-
def role(self) -> pulumi.Output[str]:
|
1049
|
+
def role(self) -> pulumi.Output[builtins.str]:
|
1049
1050
|
"""
|
1050
1051
|
Name of the GCP role
|
1051
1052
|
"""
|
@@ -1053,7 +1054,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1053
1054
|
|
1054
1055
|
@property
|
1055
1056
|
@pulumi.getter(name="tokenBoundCidrs")
|
1056
|
-
def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
1057
|
+
def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
1057
1058
|
"""
|
1058
1059
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
1059
1060
|
"""
|
@@ -1061,7 +1062,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1061
1062
|
|
1062
1063
|
@property
|
1063
1064
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
1064
|
-
def token_explicit_max_ttl(self) -> pulumi.Output[Optional[int]]:
|
1065
|
+
def token_explicit_max_ttl(self) -> pulumi.Output[Optional[builtins.int]]:
|
1065
1066
|
"""
|
1066
1067
|
Generated Token's Explicit Maximum TTL in seconds
|
1067
1068
|
"""
|
@@ -1069,7 +1070,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1069
1070
|
|
1070
1071
|
@property
|
1071
1072
|
@pulumi.getter(name="tokenMaxTtl")
|
1072
|
-
def token_max_ttl(self) -> pulumi.Output[Optional[int]]:
|
1073
|
+
def token_max_ttl(self) -> pulumi.Output[Optional[builtins.int]]:
|
1073
1074
|
"""
|
1074
1075
|
The maximum lifetime of the generated token
|
1075
1076
|
"""
|
@@ -1077,7 +1078,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1077
1078
|
|
1078
1079
|
@property
|
1079
1080
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
1080
|
-
def token_no_default_policy(self) -> pulumi.Output[Optional[bool]]:
|
1081
|
+
def token_no_default_policy(self) -> pulumi.Output[Optional[builtins.bool]]:
|
1081
1082
|
"""
|
1082
1083
|
If true, the 'default' policy will not automatically be added to generated tokens
|
1083
1084
|
"""
|
@@ -1085,7 +1086,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1085
1086
|
|
1086
1087
|
@property
|
1087
1088
|
@pulumi.getter(name="tokenNumUses")
|
1088
|
-
def token_num_uses(self) -> pulumi.Output[Optional[int]]:
|
1089
|
+
def token_num_uses(self) -> pulumi.Output[Optional[builtins.int]]:
|
1089
1090
|
"""
|
1090
1091
|
The maximum number of times a token may be used, a value of zero means unlimited
|
1091
1092
|
"""
|
@@ -1093,7 +1094,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1093
1094
|
|
1094
1095
|
@property
|
1095
1096
|
@pulumi.getter(name="tokenPeriod")
|
1096
|
-
def token_period(self) -> pulumi.Output[Optional[int]]:
|
1097
|
+
def token_period(self) -> pulumi.Output[Optional[builtins.int]]:
|
1097
1098
|
"""
|
1098
1099
|
Generated Token's Period
|
1099
1100
|
"""
|
@@ -1101,7 +1102,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1101
1102
|
|
1102
1103
|
@property
|
1103
1104
|
@pulumi.getter(name="tokenPolicies")
|
1104
|
-
def token_policies(self) -> pulumi.Output[Optional[Sequence[str]]]:
|
1105
|
+
def token_policies(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
|
1105
1106
|
"""
|
1106
1107
|
Generated Token's Policies
|
1107
1108
|
"""
|
@@ -1109,7 +1110,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1109
1110
|
|
1110
1111
|
@property
|
1111
1112
|
@pulumi.getter(name="tokenTtl")
|
1112
|
-
def token_ttl(self) -> pulumi.Output[Optional[int]]:
|
1113
|
+
def token_ttl(self) -> pulumi.Output[Optional[builtins.int]]:
|
1113
1114
|
"""
|
1114
1115
|
The initial ttl of the token to generate in seconds
|
1115
1116
|
"""
|
@@ -1117,7 +1118,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1117
1118
|
|
1118
1119
|
@property
|
1119
1120
|
@pulumi.getter(name="tokenType")
|
1120
|
-
def token_type(self) -> pulumi.Output[Optional[str]]:
|
1121
|
+
def token_type(self) -> pulumi.Output[Optional[builtins.str]]:
|
1121
1122
|
"""
|
1122
1123
|
The type of token to generate, service or batch
|
1123
1124
|
"""
|
@@ -1125,7 +1126,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
1125
1126
|
|
1126
1127
|
@property
|
1127
1128
|
@pulumi.getter
|
1128
|
-
def type(self) -> pulumi.Output[str]:
|
1129
|
+
def type(self) -> pulumi.Output[builtins.str]:
|
1129
1130
|
"""
|
1130
1131
|
Type of GCP authentication role (either `gce` or `iam`)
|
1131
1132
|
"""
|