pulumi-vault 6.7.0a1743576047__py3-none-any.whl → 6.7.0a1744267302__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -0
- pulumi_vault/_inputs.py +554 -553
- pulumi_vault/ad/__init__.py +1 -0
- pulumi_vault/ad/get_access_credentials.py +20 -19
- pulumi_vault/ad/secret_backend.py +477 -476
- pulumi_vault/ad/secret_library.py +99 -98
- pulumi_vault/ad/secret_role.py +85 -84
- pulumi_vault/alicloud/__init__.py +1 -0
- pulumi_vault/alicloud/auth_backend_role.py +183 -182
- pulumi_vault/approle/__init__.py +1 -0
- pulumi_vault/approle/auth_backend_login.py +106 -105
- pulumi_vault/approle/auth_backend_role.py +239 -238
- pulumi_vault/approle/auth_backend_role_secret_id.py +162 -161
- pulumi_vault/approle/get_auth_backend_role_id.py +18 -17
- pulumi_vault/audit.py +85 -84
- pulumi_vault/audit_request_header.py +43 -42
- pulumi_vault/auth_backend.py +106 -105
- pulumi_vault/aws/__init__.py +1 -0
- pulumi_vault/aws/auth_backend_cert.py +71 -70
- pulumi_vault/aws/auth_backend_client.py +253 -252
- pulumi_vault/aws/auth_backend_config_identity.py +85 -84
- pulumi_vault/aws/auth_backend_identity_whitelist.py +57 -56
- pulumi_vault/aws/auth_backend_login.py +209 -208
- pulumi_vault/aws/auth_backend_role.py +400 -399
- pulumi_vault/aws/auth_backend_role_tag.py +127 -126
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +57 -56
- pulumi_vault/aws/auth_backend_sts_role.py +71 -70
- pulumi_vault/aws/get_access_credentials.py +44 -43
- pulumi_vault/aws/get_static_access_credentials.py +13 -12
- pulumi_vault/aws/secret_backend.py +337 -336
- pulumi_vault/aws/secret_backend_role.py +211 -210
- pulumi_vault/aws/secret_backend_static_role.py +113 -112
- pulumi_vault/azure/__init__.py +1 -0
- pulumi_vault/azure/_inputs.py +21 -20
- pulumi_vault/azure/auth_backend_config.py +183 -182
- pulumi_vault/azure/auth_backend_role.py +253 -252
- pulumi_vault/azure/backend.py +239 -238
- pulumi_vault/azure/backend_role.py +141 -140
- pulumi_vault/azure/get_access_credentials.py +58 -57
- pulumi_vault/azure/outputs.py +11 -10
- pulumi_vault/cert_auth_backend_role.py +365 -364
- pulumi_vault/config/__init__.py +1 -0
- pulumi_vault/config/__init__.pyi +1 -0
- pulumi_vault/config/_inputs.py +11 -10
- pulumi_vault/config/outputs.py +287 -286
- pulumi_vault/config/ui_custom_message.py +113 -112
- pulumi_vault/config/vars.py +1 -0
- pulumi_vault/consul/__init__.py +1 -0
- pulumi_vault/consul/secret_backend.py +197 -196
- pulumi_vault/consul/secret_backend_role.py +183 -182
- pulumi_vault/database/__init__.py +1 -0
- pulumi_vault/database/_inputs.py +2525 -2524
- pulumi_vault/database/outputs.py +1529 -1528
- pulumi_vault/database/secret_backend_connection.py +169 -168
- pulumi_vault/database/secret_backend_role.py +169 -168
- pulumi_vault/database/secret_backend_static_role.py +179 -178
- pulumi_vault/database/secrets_mount.py +267 -266
- pulumi_vault/egp_policy.py +71 -70
- pulumi_vault/gcp/__init__.py +1 -0
- pulumi_vault/gcp/_inputs.py +82 -81
- pulumi_vault/gcp/auth_backend.py +260 -259
- pulumi_vault/gcp/auth_backend_role.py +281 -280
- pulumi_vault/gcp/get_auth_backend_role.py +70 -69
- pulumi_vault/gcp/outputs.py +50 -49
- pulumi_vault/gcp/secret_backend.py +232 -231
- pulumi_vault/gcp/secret_impersonated_account.py +92 -91
- pulumi_vault/gcp/secret_roleset.py +92 -91
- pulumi_vault/gcp/secret_static_account.py +92 -91
- pulumi_vault/generic/__init__.py +1 -0
- pulumi_vault/generic/endpoint.py +113 -112
- pulumi_vault/generic/get_secret.py +28 -27
- pulumi_vault/generic/secret.py +78 -77
- pulumi_vault/get_auth_backend.py +19 -18
- pulumi_vault/get_auth_backends.py +14 -13
- pulumi_vault/get_namespace.py +15 -14
- pulumi_vault/get_namespaces.py +8 -7
- pulumi_vault/get_nomad_access_token.py +19 -18
- pulumi_vault/get_policy_document.py +6 -5
- pulumi_vault/get_raft_autopilot_state.py +18 -17
- pulumi_vault/github/__init__.py +1 -0
- pulumi_vault/github/_inputs.py +42 -41
- pulumi_vault/github/auth_backend.py +232 -231
- pulumi_vault/github/outputs.py +26 -25
- pulumi_vault/github/team.py +57 -56
- pulumi_vault/github/user.py +57 -56
- pulumi_vault/identity/__init__.py +1 -0
- pulumi_vault/identity/entity.py +85 -84
- pulumi_vault/identity/entity_alias.py +71 -70
- pulumi_vault/identity/entity_policies.py +64 -63
- pulumi_vault/identity/get_entity.py +43 -42
- pulumi_vault/identity/get_group.py +50 -49
- pulumi_vault/identity/get_oidc_client_creds.py +14 -13
- pulumi_vault/identity/get_oidc_openid_config.py +24 -23
- pulumi_vault/identity/get_oidc_public_keys.py +13 -12
- pulumi_vault/identity/group.py +141 -140
- pulumi_vault/identity/group_alias.py +57 -56
- pulumi_vault/identity/group_member_entity_ids.py +57 -56
- pulumi_vault/identity/group_member_group_ids.py +57 -56
- pulumi_vault/identity/group_policies.py +64 -63
- pulumi_vault/identity/mfa_duo.py +148 -147
- pulumi_vault/identity/mfa_login_enforcement.py +120 -119
- pulumi_vault/identity/mfa_okta.py +134 -133
- pulumi_vault/identity/mfa_pingid.py +127 -126
- pulumi_vault/identity/mfa_totp.py +176 -175
- pulumi_vault/identity/oidc.py +29 -28
- pulumi_vault/identity/oidc_assignment.py +57 -56
- pulumi_vault/identity/oidc_client.py +127 -126
- pulumi_vault/identity/oidc_key.py +85 -84
- pulumi_vault/identity/oidc_key_allowed_client_id.py +43 -42
- pulumi_vault/identity/oidc_provider.py +92 -91
- pulumi_vault/identity/oidc_role.py +85 -84
- pulumi_vault/identity/oidc_scope.py +57 -56
- pulumi_vault/identity/outputs.py +32 -31
- pulumi_vault/jwt/__init__.py +1 -0
- pulumi_vault/jwt/_inputs.py +42 -41
- pulumi_vault/jwt/auth_backend.py +288 -287
- pulumi_vault/jwt/auth_backend_role.py +407 -406
- pulumi_vault/jwt/outputs.py +26 -25
- pulumi_vault/kmip/__init__.py +1 -0
- pulumi_vault/kmip/secret_backend.py +183 -182
- pulumi_vault/kmip/secret_role.py +295 -294
- pulumi_vault/kmip/secret_scope.py +57 -56
- pulumi_vault/kubernetes/__init__.py +1 -0
- pulumi_vault/kubernetes/auth_backend_config.py +141 -140
- pulumi_vault/kubernetes/auth_backend_role.py +225 -224
- pulumi_vault/kubernetes/get_auth_backend_config.py +47 -46
- pulumi_vault/kubernetes/get_auth_backend_role.py +70 -69
- pulumi_vault/kubernetes/get_service_account_token.py +38 -37
- pulumi_vault/kubernetes/secret_backend.py +316 -315
- pulumi_vault/kubernetes/secret_backend_role.py +197 -196
- pulumi_vault/kv/__init__.py +1 -0
- pulumi_vault/kv/_inputs.py +21 -20
- pulumi_vault/kv/get_secret.py +17 -16
- pulumi_vault/kv/get_secret_subkeys_v2.py +30 -29
- pulumi_vault/kv/get_secret_v2.py +29 -28
- pulumi_vault/kv/get_secrets_list.py +13 -12
- pulumi_vault/kv/get_secrets_list_v2.py +19 -18
- pulumi_vault/kv/outputs.py +13 -12
- pulumi_vault/kv/secret.py +50 -49
- pulumi_vault/kv/secret_backend_v2.py +71 -70
- pulumi_vault/kv/secret_v2.py +134 -133
- pulumi_vault/ldap/__init__.py +1 -0
- pulumi_vault/ldap/auth_backend.py +588 -587
- pulumi_vault/ldap/auth_backend_group.py +57 -56
- pulumi_vault/ldap/auth_backend_user.py +71 -70
- pulumi_vault/ldap/get_dynamic_credentials.py +17 -16
- pulumi_vault/ldap/get_static_credentials.py +18 -17
- pulumi_vault/ldap/secret_backend.py +554 -553
- pulumi_vault/ldap/secret_backend_dynamic_role.py +127 -126
- pulumi_vault/ldap/secret_backend_library_set.py +99 -98
- pulumi_vault/ldap/secret_backend_static_role.py +99 -98
- pulumi_vault/managed/__init__.py +1 -0
- pulumi_vault/managed/_inputs.py +229 -228
- pulumi_vault/managed/keys.py +15 -14
- pulumi_vault/managed/outputs.py +139 -138
- pulumi_vault/mfa_duo.py +113 -112
- pulumi_vault/mfa_okta.py +113 -112
- pulumi_vault/mfa_pingid.py +120 -119
- pulumi_vault/mfa_totp.py +127 -126
- pulumi_vault/mongodbatlas/__init__.py +1 -0
- pulumi_vault/mongodbatlas/secret_backend.py +64 -63
- pulumi_vault/mongodbatlas/secret_role.py +155 -154
- pulumi_vault/mount.py +274 -273
- pulumi_vault/namespace.py +64 -63
- pulumi_vault/nomad_secret_backend.py +211 -210
- pulumi_vault/nomad_secret_role.py +85 -84
- pulumi_vault/okta/__init__.py +1 -0
- pulumi_vault/okta/_inputs.py +26 -25
- pulumi_vault/okta/auth_backend.py +274 -273
- pulumi_vault/okta/auth_backend_group.py +57 -56
- pulumi_vault/okta/auth_backend_user.py +71 -70
- pulumi_vault/okta/outputs.py +16 -15
- pulumi_vault/outputs.py +56 -55
- pulumi_vault/password_policy.py +43 -42
- pulumi_vault/pkisecret/__init__.py +1 -0
- pulumi_vault/pkisecret/_inputs.py +31 -30
- pulumi_vault/pkisecret/backend_acme_eab.py +92 -91
- pulumi_vault/pkisecret/backend_config_acme.py +141 -140
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +323 -322
- pulumi_vault/pkisecret/backend_config_cluster.py +57 -56
- pulumi_vault/pkisecret/backend_config_cmpv2.py +106 -105
- pulumi_vault/pkisecret/backend_config_est.py +120 -119
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +22 -21
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +22 -21
- pulumi_vault/pkisecret/get_backend_config_est.py +19 -18
- pulumi_vault/pkisecret/get_backend_issuer.py +45 -44
- pulumi_vault/pkisecret/get_backend_issuers.py +15 -14
- pulumi_vault/pkisecret/get_backend_key.py +20 -19
- pulumi_vault/pkisecret/get_backend_keys.py +15 -14
- pulumi_vault/pkisecret/outputs.py +28 -27
- pulumi_vault/pkisecret/secret_backend_cert.py +337 -336
- pulumi_vault/pkisecret/secret_backend_config_ca.py +43 -42
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +57 -56
- pulumi_vault/pkisecret/secret_backend_config_urls.py +85 -84
- pulumi_vault/pkisecret/secret_backend_crl_config.py +197 -196
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +421 -420
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +57 -56
- pulumi_vault/pkisecret/secret_backend_issuer.py +232 -231
- pulumi_vault/pkisecret/secret_backend_key.py +120 -119
- pulumi_vault/pkisecret/secret_backend_role.py +715 -714
- pulumi_vault/pkisecret/secret_backend_root_cert.py +554 -553
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +526 -525
- pulumi_vault/pkisecret/secret_backend_sign.py +281 -280
- pulumi_vault/plugin.py +127 -126
- pulumi_vault/plugin_pinned_version.py +43 -42
- pulumi_vault/policy.py +43 -42
- pulumi_vault/provider.py +120 -119
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +85 -84
- pulumi_vault/quota_rate_limit.py +113 -112
- pulumi_vault/rabbitmq/__init__.py +1 -0
- pulumi_vault/rabbitmq/_inputs.py +41 -40
- pulumi_vault/rabbitmq/outputs.py +25 -24
- pulumi_vault/rabbitmq/secret_backend.py +169 -168
- pulumi_vault/rabbitmq/secret_backend_role.py +57 -56
- pulumi_vault/raft_autopilot.py +113 -112
- pulumi_vault/raft_snapshot_agent_config.py +393 -392
- pulumi_vault/rgp_policy.py +57 -56
- pulumi_vault/saml/__init__.py +1 -0
- pulumi_vault/saml/auth_backend.py +155 -154
- pulumi_vault/saml/auth_backend_role.py +239 -238
- pulumi_vault/secrets/__init__.py +1 -0
- pulumi_vault/secrets/_inputs.py +16 -15
- pulumi_vault/secrets/outputs.py +10 -9
- pulumi_vault/secrets/sync_association.py +71 -70
- pulumi_vault/secrets/sync_aws_destination.py +148 -147
- pulumi_vault/secrets/sync_azure_destination.py +148 -147
- pulumi_vault/secrets/sync_config.py +43 -42
- pulumi_vault/secrets/sync_gcp_destination.py +106 -105
- pulumi_vault/secrets/sync_gh_destination.py +134 -133
- pulumi_vault/secrets/sync_github_apps.py +64 -63
- pulumi_vault/secrets/sync_vercel_destination.py +120 -119
- pulumi_vault/ssh/__init__.py +1 -0
- pulumi_vault/ssh/_inputs.py +11 -10
- pulumi_vault/ssh/get_secret_backend_sign.py +52 -51
- pulumi_vault/ssh/outputs.py +7 -6
- pulumi_vault/ssh/secret_backend_ca.py +99 -98
- pulumi_vault/ssh/secret_backend_role.py +365 -364
- pulumi_vault/terraformcloud/__init__.py +1 -0
- pulumi_vault/terraformcloud/secret_backend.py +111 -110
- pulumi_vault/terraformcloud/secret_creds.py +74 -73
- pulumi_vault/terraformcloud/secret_role.py +93 -92
- pulumi_vault/token.py +246 -245
- pulumi_vault/tokenauth/__init__.py +1 -0
- pulumi_vault/tokenauth/auth_backend_role.py +267 -266
- pulumi_vault/transform/__init__.py +1 -0
- pulumi_vault/transform/alphabet.py +57 -56
- pulumi_vault/transform/get_decode.py +47 -46
- pulumi_vault/transform/get_encode.py +47 -46
- pulumi_vault/transform/role.py +57 -56
- pulumi_vault/transform/template.py +113 -112
- pulumi_vault/transform/transformation.py +141 -140
- pulumi_vault/transit/__init__.py +1 -0
- pulumi_vault/transit/get_decrypt.py +18 -17
- pulumi_vault/transit/get_encrypt.py +21 -20
- pulumi_vault/transit/get_sign.py +54 -53
- pulumi_vault/transit/get_verify.py +60 -59
- pulumi_vault/transit/secret_backend_key.py +274 -273
- pulumi_vault/transit/secret_cache_config.py +43 -42
- {pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744267302.dist-info}/METADATA +1 -1
- pulumi_vault-6.7.0a1744267302.dist-info/RECORD +265 -0
- pulumi_vault-6.7.0a1743576047.dist-info/RECORD +0 -265
- {pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744267302.dist-info}/WHEEL +0 -0
- {pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744267302.dist-info}/top_level.txt +0 -0
@@ -2,6 +2,7 @@
|
|
2
2
|
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
4
4
|
|
5
|
+
import builtins
|
5
6
|
import copy
|
6
7
|
import warnings
|
7
8
|
import sys
|
@@ -19,39 +20,39 @@ __all__ = ['SecretBackendArgs', 'SecretBackend']
|
|
19
20
|
@pulumi.input_type
|
20
21
|
class SecretBackendArgs:
|
21
22
|
def __init__(__self__, *,
|
22
|
-
path: pulumi.Input[str],
|
23
|
-
default_tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
24
|
-
default_tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
25
|
-
default_tls_client_ttl: Optional[pulumi.Input[int]] = None,
|
26
|
-
description: Optional[pulumi.Input[str]] = None,
|
27
|
-
disable_remount: Optional[pulumi.Input[bool]] = None,
|
28
|
-
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
29
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
30
|
-
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
31
|
-
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
32
|
-
tls_ca_key_bits: Optional[pulumi.Input[int]] = None,
|
33
|
-
tls_ca_key_type: Optional[pulumi.Input[str]] = None,
|
34
|
-
tls_min_version: Optional[pulumi.Input[str]] = None):
|
23
|
+
path: pulumi.Input[builtins.str],
|
24
|
+
default_tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
25
|
+
default_tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
26
|
+
default_tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
27
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
28
|
+
disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
|
29
|
+
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
30
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
31
|
+
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
32
|
+
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
33
|
+
tls_ca_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
34
|
+
tls_ca_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
35
|
+
tls_min_version: Optional[pulumi.Input[builtins.str]] = None):
|
35
36
|
"""
|
36
37
|
The set of arguments for constructing a SecretBackend resource.
|
37
|
-
:param pulumi.Input[str] path: The unique path this backend should be mounted at. Must
|
38
|
+
:param pulumi.Input[builtins.str] path: The unique path this backend should be mounted at. Must
|
38
39
|
not begin or end with a `/`. Defaults to `kmip`.
|
39
|
-
:param pulumi.Input[int] default_tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
40
|
-
:param pulumi.Input[str] default_tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
41
|
-
:param pulumi.Input[int] default_tls_client_ttl: Client certificate TTL in seconds
|
42
|
-
:param pulumi.Input[str] description: A human-friendly description for this backend.
|
43
|
-
:param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
|
40
|
+
:param pulumi.Input[builtins.int] default_tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
41
|
+
:param pulumi.Input[builtins.str] default_tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
42
|
+
:param pulumi.Input[builtins.int] default_tls_client_ttl: Client certificate TTL in seconds
|
43
|
+
:param pulumi.Input[builtins.str] description: A human-friendly description for this backend.
|
44
|
+
:param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
|
44
45
|
See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
45
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] listen_addrs: Addresses the KMIP server should listen on (`host:port`).
|
46
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
46
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] listen_addrs: Addresses the KMIP server should listen on (`host:port`).
|
47
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
47
48
|
The value should not contain leading or trailing forward slashes.
|
48
49
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
49
50
|
*Available only for Vault Enterprise*.
|
50
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] server_hostnames: Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
51
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] server_ips: IPs to include in the server's TLS certificate as SAN IP addresses.
|
52
|
-
:param pulumi.Input[int] tls_ca_key_bits: CA key bits, valid values depend on key type.
|
53
|
-
:param pulumi.Input[str] tls_ca_key_type: CA key type, rsa or ec.
|
54
|
-
:param pulumi.Input[str] tls_min_version: Minimum TLS version to accept.
|
51
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] server_hostnames: Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
52
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] server_ips: IPs to include in the server's TLS certificate as SAN IP addresses.
|
53
|
+
:param pulumi.Input[builtins.int] tls_ca_key_bits: CA key bits, valid values depend on key type.
|
54
|
+
:param pulumi.Input[builtins.str] tls_ca_key_type: CA key type, rsa or ec.
|
55
|
+
:param pulumi.Input[builtins.str] tls_min_version: Minimum TLS version to accept.
|
55
56
|
"""
|
56
57
|
pulumi.set(__self__, "path", path)
|
57
58
|
if default_tls_client_key_bits is not None:
|
@@ -81,7 +82,7 @@ class SecretBackendArgs:
|
|
81
82
|
|
82
83
|
@property
|
83
84
|
@pulumi.getter
|
84
|
-
def path(self) -> pulumi.Input[str]:
|
85
|
+
def path(self) -> pulumi.Input[builtins.str]:
|
85
86
|
"""
|
86
87
|
The unique path this backend should be mounted at. Must
|
87
88
|
not begin or end with a `/`. Defaults to `kmip`.
|
@@ -89,60 +90,60 @@ class SecretBackendArgs:
|
|
89
90
|
return pulumi.get(self, "path")
|
90
91
|
|
91
92
|
@path.setter
|
92
|
-
def path(self, value: pulumi.Input[str]):
|
93
|
+
def path(self, value: pulumi.Input[builtins.str]):
|
93
94
|
pulumi.set(self, "path", value)
|
94
95
|
|
95
96
|
@property
|
96
97
|
@pulumi.getter(name="defaultTlsClientKeyBits")
|
97
|
-
def default_tls_client_key_bits(self) -> Optional[pulumi.Input[int]]:
|
98
|
+
def default_tls_client_key_bits(self) -> Optional[pulumi.Input[builtins.int]]:
|
98
99
|
"""
|
99
100
|
Client certificate key bits, valid values depend on key type.
|
100
101
|
"""
|
101
102
|
return pulumi.get(self, "default_tls_client_key_bits")
|
102
103
|
|
103
104
|
@default_tls_client_key_bits.setter
|
104
|
-
def default_tls_client_key_bits(self, value: Optional[pulumi.Input[int]]):
|
105
|
+
def default_tls_client_key_bits(self, value: Optional[pulumi.Input[builtins.int]]):
|
105
106
|
pulumi.set(self, "default_tls_client_key_bits", value)
|
106
107
|
|
107
108
|
@property
|
108
109
|
@pulumi.getter(name="defaultTlsClientKeyType")
|
109
|
-
def default_tls_client_key_type(self) -> Optional[pulumi.Input[str]]:
|
110
|
+
def default_tls_client_key_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
110
111
|
"""
|
111
112
|
Client certificate key type, `rsa` or `ec`.
|
112
113
|
"""
|
113
114
|
return pulumi.get(self, "default_tls_client_key_type")
|
114
115
|
|
115
116
|
@default_tls_client_key_type.setter
|
116
|
-
def default_tls_client_key_type(self, value: Optional[pulumi.Input[str]]):
|
117
|
+
def default_tls_client_key_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
117
118
|
pulumi.set(self, "default_tls_client_key_type", value)
|
118
119
|
|
119
120
|
@property
|
120
121
|
@pulumi.getter(name="defaultTlsClientTtl")
|
121
|
-
def default_tls_client_ttl(self) -> Optional[pulumi.Input[int]]:
|
122
|
+
def default_tls_client_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
122
123
|
"""
|
123
124
|
Client certificate TTL in seconds
|
124
125
|
"""
|
125
126
|
return pulumi.get(self, "default_tls_client_ttl")
|
126
127
|
|
127
128
|
@default_tls_client_ttl.setter
|
128
|
-
def default_tls_client_ttl(self, value: Optional[pulumi.Input[int]]):
|
129
|
+
def default_tls_client_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
129
130
|
pulumi.set(self, "default_tls_client_ttl", value)
|
130
131
|
|
131
132
|
@property
|
132
133
|
@pulumi.getter
|
133
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
134
|
+
def description(self) -> Optional[pulumi.Input[builtins.str]]:
|
134
135
|
"""
|
135
136
|
A human-friendly description for this backend.
|
136
137
|
"""
|
137
138
|
return pulumi.get(self, "description")
|
138
139
|
|
139
140
|
@description.setter
|
140
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
141
|
+
def description(self, value: Optional[pulumi.Input[builtins.str]]):
|
141
142
|
pulumi.set(self, "description", value)
|
142
143
|
|
143
144
|
@property
|
144
145
|
@pulumi.getter(name="disableRemount")
|
145
|
-
def disable_remount(self) -> Optional[pulumi.Input[bool]]:
|
146
|
+
def disable_remount(self) -> Optional[pulumi.Input[builtins.bool]]:
|
146
147
|
"""
|
147
148
|
If set, opts out of mount migration on path updates.
|
148
149
|
See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
@@ -150,24 +151,24 @@ class SecretBackendArgs:
|
|
150
151
|
return pulumi.get(self, "disable_remount")
|
151
152
|
|
152
153
|
@disable_remount.setter
|
153
|
-
def disable_remount(self, value: Optional[pulumi.Input[bool]]):
|
154
|
+
def disable_remount(self, value: Optional[pulumi.Input[builtins.bool]]):
|
154
155
|
pulumi.set(self, "disable_remount", value)
|
155
156
|
|
156
157
|
@property
|
157
158
|
@pulumi.getter(name="listenAddrs")
|
158
|
-
def listen_addrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
159
|
+
def listen_addrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
159
160
|
"""
|
160
161
|
Addresses the KMIP server should listen on (`host:port`).
|
161
162
|
"""
|
162
163
|
return pulumi.get(self, "listen_addrs")
|
163
164
|
|
164
165
|
@listen_addrs.setter
|
165
|
-
def listen_addrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
166
|
+
def listen_addrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
166
167
|
pulumi.set(self, "listen_addrs", value)
|
167
168
|
|
168
169
|
@property
|
169
170
|
@pulumi.getter
|
170
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
171
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
171
172
|
"""
|
172
173
|
The namespace to provision the resource in.
|
173
174
|
The value should not contain leading or trailing forward slashes.
|
@@ -177,106 +178,106 @@ class SecretBackendArgs:
|
|
177
178
|
return pulumi.get(self, "namespace")
|
178
179
|
|
179
180
|
@namespace.setter
|
180
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
181
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
181
182
|
pulumi.set(self, "namespace", value)
|
182
183
|
|
183
184
|
@property
|
184
185
|
@pulumi.getter(name="serverHostnames")
|
185
|
-
def server_hostnames(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
186
|
+
def server_hostnames(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
186
187
|
"""
|
187
188
|
Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
188
189
|
"""
|
189
190
|
return pulumi.get(self, "server_hostnames")
|
190
191
|
|
191
192
|
@server_hostnames.setter
|
192
|
-
def server_hostnames(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
193
|
+
def server_hostnames(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
193
194
|
pulumi.set(self, "server_hostnames", value)
|
194
195
|
|
195
196
|
@property
|
196
197
|
@pulumi.getter(name="serverIps")
|
197
|
-
def server_ips(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
198
|
+
def server_ips(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
198
199
|
"""
|
199
200
|
IPs to include in the server's TLS certificate as SAN IP addresses.
|
200
201
|
"""
|
201
202
|
return pulumi.get(self, "server_ips")
|
202
203
|
|
203
204
|
@server_ips.setter
|
204
|
-
def server_ips(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
205
|
+
def server_ips(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
205
206
|
pulumi.set(self, "server_ips", value)
|
206
207
|
|
207
208
|
@property
|
208
209
|
@pulumi.getter(name="tlsCaKeyBits")
|
209
|
-
def tls_ca_key_bits(self) -> Optional[pulumi.Input[int]]:
|
210
|
+
def tls_ca_key_bits(self) -> Optional[pulumi.Input[builtins.int]]:
|
210
211
|
"""
|
211
212
|
CA key bits, valid values depend on key type.
|
212
213
|
"""
|
213
214
|
return pulumi.get(self, "tls_ca_key_bits")
|
214
215
|
|
215
216
|
@tls_ca_key_bits.setter
|
216
|
-
def tls_ca_key_bits(self, value: Optional[pulumi.Input[int]]):
|
217
|
+
def tls_ca_key_bits(self, value: Optional[pulumi.Input[builtins.int]]):
|
217
218
|
pulumi.set(self, "tls_ca_key_bits", value)
|
218
219
|
|
219
220
|
@property
|
220
221
|
@pulumi.getter(name="tlsCaKeyType")
|
221
|
-
def tls_ca_key_type(self) -> Optional[pulumi.Input[str]]:
|
222
|
+
def tls_ca_key_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
222
223
|
"""
|
223
224
|
CA key type, rsa or ec.
|
224
225
|
"""
|
225
226
|
return pulumi.get(self, "tls_ca_key_type")
|
226
227
|
|
227
228
|
@tls_ca_key_type.setter
|
228
|
-
def tls_ca_key_type(self, value: Optional[pulumi.Input[str]]):
|
229
|
+
def tls_ca_key_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
229
230
|
pulumi.set(self, "tls_ca_key_type", value)
|
230
231
|
|
231
232
|
@property
|
232
233
|
@pulumi.getter(name="tlsMinVersion")
|
233
|
-
def tls_min_version(self) -> Optional[pulumi.Input[str]]:
|
234
|
+
def tls_min_version(self) -> Optional[pulumi.Input[builtins.str]]:
|
234
235
|
"""
|
235
236
|
Minimum TLS version to accept.
|
236
237
|
"""
|
237
238
|
return pulumi.get(self, "tls_min_version")
|
238
239
|
|
239
240
|
@tls_min_version.setter
|
240
|
-
def tls_min_version(self, value: Optional[pulumi.Input[str]]):
|
241
|
+
def tls_min_version(self, value: Optional[pulumi.Input[builtins.str]]):
|
241
242
|
pulumi.set(self, "tls_min_version", value)
|
242
243
|
|
243
244
|
|
244
245
|
@pulumi.input_type
|
245
246
|
class _SecretBackendState:
|
246
247
|
def __init__(__self__, *,
|
247
|
-
default_tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
248
|
-
default_tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
249
|
-
default_tls_client_ttl: Optional[pulumi.Input[int]] = None,
|
250
|
-
description: Optional[pulumi.Input[str]] = None,
|
251
|
-
disable_remount: Optional[pulumi.Input[bool]] = None,
|
252
|
-
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
253
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
254
|
-
path: Optional[pulumi.Input[str]] = None,
|
255
|
-
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
256
|
-
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
257
|
-
tls_ca_key_bits: Optional[pulumi.Input[int]] = None,
|
258
|
-
tls_ca_key_type: Optional[pulumi.Input[str]] = None,
|
259
|
-
tls_min_version: Optional[pulumi.Input[str]] = None):
|
248
|
+
default_tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
249
|
+
default_tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
250
|
+
default_tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
251
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
252
|
+
disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
|
253
|
+
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
254
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
255
|
+
path: Optional[pulumi.Input[builtins.str]] = None,
|
256
|
+
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
257
|
+
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
258
|
+
tls_ca_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
259
|
+
tls_ca_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
260
|
+
tls_min_version: Optional[pulumi.Input[builtins.str]] = None):
|
260
261
|
"""
|
261
262
|
Input properties used for looking up and filtering SecretBackend resources.
|
262
|
-
:param pulumi.Input[int] default_tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
263
|
-
:param pulumi.Input[str] default_tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
264
|
-
:param pulumi.Input[int] default_tls_client_ttl: Client certificate TTL in seconds
|
265
|
-
:param pulumi.Input[str] description: A human-friendly description for this backend.
|
266
|
-
:param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
|
263
|
+
:param pulumi.Input[builtins.int] default_tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
264
|
+
:param pulumi.Input[builtins.str] default_tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
265
|
+
:param pulumi.Input[builtins.int] default_tls_client_ttl: Client certificate TTL in seconds
|
266
|
+
:param pulumi.Input[builtins.str] description: A human-friendly description for this backend.
|
267
|
+
:param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
|
267
268
|
See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
268
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] listen_addrs: Addresses the KMIP server should listen on (`host:port`).
|
269
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
269
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] listen_addrs: Addresses the KMIP server should listen on (`host:port`).
|
270
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
270
271
|
The value should not contain leading or trailing forward slashes.
|
271
272
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
272
273
|
*Available only for Vault Enterprise*.
|
273
|
-
:param pulumi.Input[str] path: The unique path this backend should be mounted at. Must
|
274
|
+
:param pulumi.Input[builtins.str] path: The unique path this backend should be mounted at. Must
|
274
275
|
not begin or end with a `/`. Defaults to `kmip`.
|
275
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] server_hostnames: Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
276
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] server_ips: IPs to include in the server's TLS certificate as SAN IP addresses.
|
277
|
-
:param pulumi.Input[int] tls_ca_key_bits: CA key bits, valid values depend on key type.
|
278
|
-
:param pulumi.Input[str] tls_ca_key_type: CA key type, rsa or ec.
|
279
|
-
:param pulumi.Input[str] tls_min_version: Minimum TLS version to accept.
|
276
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] server_hostnames: Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
277
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] server_ips: IPs to include in the server's TLS certificate as SAN IP addresses.
|
278
|
+
:param pulumi.Input[builtins.int] tls_ca_key_bits: CA key bits, valid values depend on key type.
|
279
|
+
:param pulumi.Input[builtins.str] tls_ca_key_type: CA key type, rsa or ec.
|
280
|
+
:param pulumi.Input[builtins.str] tls_min_version: Minimum TLS version to accept.
|
280
281
|
"""
|
281
282
|
if default_tls_client_key_bits is not None:
|
282
283
|
pulumi.set(__self__, "default_tls_client_key_bits", default_tls_client_key_bits)
|
@@ -307,55 +308,55 @@ class _SecretBackendState:
|
|
307
308
|
|
308
309
|
@property
|
309
310
|
@pulumi.getter(name="defaultTlsClientKeyBits")
|
310
|
-
def default_tls_client_key_bits(self) -> Optional[pulumi.Input[int]]:
|
311
|
+
def default_tls_client_key_bits(self) -> Optional[pulumi.Input[builtins.int]]:
|
311
312
|
"""
|
312
313
|
Client certificate key bits, valid values depend on key type.
|
313
314
|
"""
|
314
315
|
return pulumi.get(self, "default_tls_client_key_bits")
|
315
316
|
|
316
317
|
@default_tls_client_key_bits.setter
|
317
|
-
def default_tls_client_key_bits(self, value: Optional[pulumi.Input[int]]):
|
318
|
+
def default_tls_client_key_bits(self, value: Optional[pulumi.Input[builtins.int]]):
|
318
319
|
pulumi.set(self, "default_tls_client_key_bits", value)
|
319
320
|
|
320
321
|
@property
|
321
322
|
@pulumi.getter(name="defaultTlsClientKeyType")
|
322
|
-
def default_tls_client_key_type(self) -> Optional[pulumi.Input[str]]:
|
323
|
+
def default_tls_client_key_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
323
324
|
"""
|
324
325
|
Client certificate key type, `rsa` or `ec`.
|
325
326
|
"""
|
326
327
|
return pulumi.get(self, "default_tls_client_key_type")
|
327
328
|
|
328
329
|
@default_tls_client_key_type.setter
|
329
|
-
def default_tls_client_key_type(self, value: Optional[pulumi.Input[str]]):
|
330
|
+
def default_tls_client_key_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
330
331
|
pulumi.set(self, "default_tls_client_key_type", value)
|
331
332
|
|
332
333
|
@property
|
333
334
|
@pulumi.getter(name="defaultTlsClientTtl")
|
334
|
-
def default_tls_client_ttl(self) -> Optional[pulumi.Input[int]]:
|
335
|
+
def default_tls_client_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
335
336
|
"""
|
336
337
|
Client certificate TTL in seconds
|
337
338
|
"""
|
338
339
|
return pulumi.get(self, "default_tls_client_ttl")
|
339
340
|
|
340
341
|
@default_tls_client_ttl.setter
|
341
|
-
def default_tls_client_ttl(self, value: Optional[pulumi.Input[int]]):
|
342
|
+
def default_tls_client_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
342
343
|
pulumi.set(self, "default_tls_client_ttl", value)
|
343
344
|
|
344
345
|
@property
|
345
346
|
@pulumi.getter
|
346
|
-
def description(self) -> Optional[pulumi.Input[str]]:
|
347
|
+
def description(self) -> Optional[pulumi.Input[builtins.str]]:
|
347
348
|
"""
|
348
349
|
A human-friendly description for this backend.
|
349
350
|
"""
|
350
351
|
return pulumi.get(self, "description")
|
351
352
|
|
352
353
|
@description.setter
|
353
|
-
def description(self, value: Optional[pulumi.Input[str]]):
|
354
|
+
def description(self, value: Optional[pulumi.Input[builtins.str]]):
|
354
355
|
pulumi.set(self, "description", value)
|
355
356
|
|
356
357
|
@property
|
357
358
|
@pulumi.getter(name="disableRemount")
|
358
|
-
def disable_remount(self) -> Optional[pulumi.Input[bool]]:
|
359
|
+
def disable_remount(self) -> Optional[pulumi.Input[builtins.bool]]:
|
359
360
|
"""
|
360
361
|
If set, opts out of mount migration on path updates.
|
361
362
|
See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
@@ -363,24 +364,24 @@ class _SecretBackendState:
|
|
363
364
|
return pulumi.get(self, "disable_remount")
|
364
365
|
|
365
366
|
@disable_remount.setter
|
366
|
-
def disable_remount(self, value: Optional[pulumi.Input[bool]]):
|
367
|
+
def disable_remount(self, value: Optional[pulumi.Input[builtins.bool]]):
|
367
368
|
pulumi.set(self, "disable_remount", value)
|
368
369
|
|
369
370
|
@property
|
370
371
|
@pulumi.getter(name="listenAddrs")
|
371
|
-
def listen_addrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
372
|
+
def listen_addrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
372
373
|
"""
|
373
374
|
Addresses the KMIP server should listen on (`host:port`).
|
374
375
|
"""
|
375
376
|
return pulumi.get(self, "listen_addrs")
|
376
377
|
|
377
378
|
@listen_addrs.setter
|
378
|
-
def listen_addrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
379
|
+
def listen_addrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
379
380
|
pulumi.set(self, "listen_addrs", value)
|
380
381
|
|
381
382
|
@property
|
382
383
|
@pulumi.getter
|
383
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
384
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
384
385
|
"""
|
385
386
|
The namespace to provision the resource in.
|
386
387
|
The value should not contain leading or trailing forward slashes.
|
@@ -390,12 +391,12 @@ class _SecretBackendState:
|
|
390
391
|
return pulumi.get(self, "namespace")
|
391
392
|
|
392
393
|
@namespace.setter
|
393
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
394
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
394
395
|
pulumi.set(self, "namespace", value)
|
395
396
|
|
396
397
|
@property
|
397
398
|
@pulumi.getter
|
398
|
-
def path(self) -> Optional[pulumi.Input[str]]:
|
399
|
+
def path(self) -> Optional[pulumi.Input[builtins.str]]:
|
399
400
|
"""
|
400
401
|
The unique path this backend should be mounted at. Must
|
401
402
|
not begin or end with a `/`. Defaults to `kmip`.
|
@@ -403,67 +404,67 @@ class _SecretBackendState:
|
|
403
404
|
return pulumi.get(self, "path")
|
404
405
|
|
405
406
|
@path.setter
|
406
|
-
def path(self, value: Optional[pulumi.Input[str]]):
|
407
|
+
def path(self, value: Optional[pulumi.Input[builtins.str]]):
|
407
408
|
pulumi.set(self, "path", value)
|
408
409
|
|
409
410
|
@property
|
410
411
|
@pulumi.getter(name="serverHostnames")
|
411
|
-
def server_hostnames(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
412
|
+
def server_hostnames(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
412
413
|
"""
|
413
414
|
Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
414
415
|
"""
|
415
416
|
return pulumi.get(self, "server_hostnames")
|
416
417
|
|
417
418
|
@server_hostnames.setter
|
418
|
-
def server_hostnames(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
419
|
+
def server_hostnames(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
419
420
|
pulumi.set(self, "server_hostnames", value)
|
420
421
|
|
421
422
|
@property
|
422
423
|
@pulumi.getter(name="serverIps")
|
423
|
-
def server_ips(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
|
424
|
+
def server_ips(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
|
424
425
|
"""
|
425
426
|
IPs to include in the server's TLS certificate as SAN IP addresses.
|
426
427
|
"""
|
427
428
|
return pulumi.get(self, "server_ips")
|
428
429
|
|
429
430
|
@server_ips.setter
|
430
|
-
def server_ips(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
|
431
|
+
def server_ips(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
|
431
432
|
pulumi.set(self, "server_ips", value)
|
432
433
|
|
433
434
|
@property
|
434
435
|
@pulumi.getter(name="tlsCaKeyBits")
|
435
|
-
def tls_ca_key_bits(self) -> Optional[pulumi.Input[int]]:
|
436
|
+
def tls_ca_key_bits(self) -> Optional[pulumi.Input[builtins.int]]:
|
436
437
|
"""
|
437
438
|
CA key bits, valid values depend on key type.
|
438
439
|
"""
|
439
440
|
return pulumi.get(self, "tls_ca_key_bits")
|
440
441
|
|
441
442
|
@tls_ca_key_bits.setter
|
442
|
-
def tls_ca_key_bits(self, value: Optional[pulumi.Input[int]]):
|
443
|
+
def tls_ca_key_bits(self, value: Optional[pulumi.Input[builtins.int]]):
|
443
444
|
pulumi.set(self, "tls_ca_key_bits", value)
|
444
445
|
|
445
446
|
@property
|
446
447
|
@pulumi.getter(name="tlsCaKeyType")
|
447
|
-
def tls_ca_key_type(self) -> Optional[pulumi.Input[str]]:
|
448
|
+
def tls_ca_key_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
448
449
|
"""
|
449
450
|
CA key type, rsa or ec.
|
450
451
|
"""
|
451
452
|
return pulumi.get(self, "tls_ca_key_type")
|
452
453
|
|
453
454
|
@tls_ca_key_type.setter
|
454
|
-
def tls_ca_key_type(self, value: Optional[pulumi.Input[str]]):
|
455
|
+
def tls_ca_key_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
455
456
|
pulumi.set(self, "tls_ca_key_type", value)
|
456
457
|
|
457
458
|
@property
|
458
459
|
@pulumi.getter(name="tlsMinVersion")
|
459
|
-
def tls_min_version(self) -> Optional[pulumi.Input[str]]:
|
460
|
+
def tls_min_version(self) -> Optional[pulumi.Input[builtins.str]]:
|
460
461
|
"""
|
461
462
|
Minimum TLS version to accept.
|
462
463
|
"""
|
463
464
|
return pulumi.get(self, "tls_min_version")
|
464
465
|
|
465
466
|
@tls_min_version.setter
|
466
|
-
def tls_min_version(self, value: Optional[pulumi.Input[str]]):
|
467
|
+
def tls_min_version(self, value: Optional[pulumi.Input[builtins.str]]):
|
467
468
|
pulumi.set(self, "tls_min_version", value)
|
468
469
|
|
469
470
|
|
@@ -472,19 +473,19 @@ class SecretBackend(pulumi.CustomResource):
|
|
472
473
|
def __init__(__self__,
|
473
474
|
resource_name: str,
|
474
475
|
opts: Optional[pulumi.ResourceOptions] = None,
|
475
|
-
default_tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
476
|
-
default_tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
477
|
-
default_tls_client_ttl: Optional[pulumi.Input[int]] = None,
|
478
|
-
description: Optional[pulumi.Input[str]] = None,
|
479
|
-
disable_remount: Optional[pulumi.Input[bool]] = None,
|
480
|
-
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
481
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
482
|
-
path: Optional[pulumi.Input[str]] = None,
|
483
|
-
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
484
|
-
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
485
|
-
tls_ca_key_bits: Optional[pulumi.Input[int]] = None,
|
486
|
-
tls_ca_key_type: Optional[pulumi.Input[str]] = None,
|
487
|
-
tls_min_version: Optional[pulumi.Input[str]] = None,
|
476
|
+
default_tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
477
|
+
default_tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
478
|
+
default_tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
479
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
480
|
+
disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
|
481
|
+
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
482
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
483
|
+
path: Optional[pulumi.Input[builtins.str]] = None,
|
484
|
+
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
485
|
+
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
486
|
+
tls_ca_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
487
|
+
tls_ca_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
488
|
+
tls_min_version: Optional[pulumi.Input[builtins.str]] = None,
|
488
489
|
__props__=None):
|
489
490
|
"""
|
490
491
|
Manages KMIP Secret backends in a Vault server. This feature requires
|
@@ -521,24 +522,24 @@ class SecretBackend(pulumi.CustomResource):
|
|
521
522
|
|
522
523
|
:param str resource_name: The name of the resource.
|
523
524
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
524
|
-
:param pulumi.Input[int] default_tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
525
|
-
:param pulumi.Input[str] default_tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
526
|
-
:param pulumi.Input[int] default_tls_client_ttl: Client certificate TTL in seconds
|
527
|
-
:param pulumi.Input[str] description: A human-friendly description for this backend.
|
528
|
-
:param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
|
525
|
+
:param pulumi.Input[builtins.int] default_tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
526
|
+
:param pulumi.Input[builtins.str] default_tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
527
|
+
:param pulumi.Input[builtins.int] default_tls_client_ttl: Client certificate TTL in seconds
|
528
|
+
:param pulumi.Input[builtins.str] description: A human-friendly description for this backend.
|
529
|
+
:param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
|
529
530
|
See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
530
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] listen_addrs: Addresses the KMIP server should listen on (`host:port`).
|
531
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
531
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] listen_addrs: Addresses the KMIP server should listen on (`host:port`).
|
532
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
532
533
|
The value should not contain leading or trailing forward slashes.
|
533
534
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
534
535
|
*Available only for Vault Enterprise*.
|
535
|
-
:param pulumi.Input[str] path: The unique path this backend should be mounted at. Must
|
536
|
+
:param pulumi.Input[builtins.str] path: The unique path this backend should be mounted at. Must
|
536
537
|
not begin or end with a `/`. Defaults to `kmip`.
|
537
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] server_hostnames: Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
538
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] server_ips: IPs to include in the server's TLS certificate as SAN IP addresses.
|
539
|
-
:param pulumi.Input[int] tls_ca_key_bits: CA key bits, valid values depend on key type.
|
540
|
-
:param pulumi.Input[str] tls_ca_key_type: CA key type, rsa or ec.
|
541
|
-
:param pulumi.Input[str] tls_min_version: Minimum TLS version to accept.
|
538
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] server_hostnames: Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
539
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] server_ips: IPs to include in the server's TLS certificate as SAN IP addresses.
|
540
|
+
:param pulumi.Input[builtins.int] tls_ca_key_bits: CA key bits, valid values depend on key type.
|
541
|
+
:param pulumi.Input[builtins.str] tls_ca_key_type: CA key type, rsa or ec.
|
542
|
+
:param pulumi.Input[builtins.str] tls_min_version: Minimum TLS version to accept.
|
542
543
|
"""
|
543
544
|
...
|
544
545
|
@overload
|
@@ -594,19 +595,19 @@ class SecretBackend(pulumi.CustomResource):
|
|
594
595
|
def _internal_init(__self__,
|
595
596
|
resource_name: str,
|
596
597
|
opts: Optional[pulumi.ResourceOptions] = None,
|
597
|
-
default_tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
598
|
-
default_tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
599
|
-
default_tls_client_ttl: Optional[pulumi.Input[int]] = None,
|
600
|
-
description: Optional[pulumi.Input[str]] = None,
|
601
|
-
disable_remount: Optional[pulumi.Input[bool]] = None,
|
602
|
-
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
603
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
604
|
-
path: Optional[pulumi.Input[str]] = None,
|
605
|
-
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
606
|
-
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
607
|
-
tls_ca_key_bits: Optional[pulumi.Input[int]] = None,
|
608
|
-
tls_ca_key_type: Optional[pulumi.Input[str]] = None,
|
609
|
-
tls_min_version: Optional[pulumi.Input[str]] = None,
|
598
|
+
default_tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
599
|
+
default_tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
600
|
+
default_tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
601
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
602
|
+
disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
|
603
|
+
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
604
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
605
|
+
path: Optional[pulumi.Input[builtins.str]] = None,
|
606
|
+
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
607
|
+
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
608
|
+
tls_ca_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
609
|
+
tls_ca_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
610
|
+
tls_min_version: Optional[pulumi.Input[builtins.str]] = None,
|
610
611
|
__props__=None):
|
611
612
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
612
613
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -641,19 +642,19 @@ class SecretBackend(pulumi.CustomResource):
|
|
641
642
|
def get(resource_name: str,
|
642
643
|
id: pulumi.Input[str],
|
643
644
|
opts: Optional[pulumi.ResourceOptions] = None,
|
644
|
-
default_tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
645
|
-
default_tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
646
|
-
default_tls_client_ttl: Optional[pulumi.Input[int]] = None,
|
647
|
-
description: Optional[pulumi.Input[str]] = None,
|
648
|
-
disable_remount: Optional[pulumi.Input[bool]] = None,
|
649
|
-
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
650
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
651
|
-
path: Optional[pulumi.Input[str]] = None,
|
652
|
-
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
653
|
-
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
|
654
|
-
tls_ca_key_bits: Optional[pulumi.Input[int]] = None,
|
655
|
-
tls_ca_key_type: Optional[pulumi.Input[str]] = None,
|
656
|
-
tls_min_version: Optional[pulumi.Input[str]] = None) -> 'SecretBackend':
|
645
|
+
default_tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
646
|
+
default_tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
647
|
+
default_tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
648
|
+
description: Optional[pulumi.Input[builtins.str]] = None,
|
649
|
+
disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
|
650
|
+
listen_addrs: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
651
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
652
|
+
path: Optional[pulumi.Input[builtins.str]] = None,
|
653
|
+
server_hostnames: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
654
|
+
server_ips: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
|
655
|
+
tls_ca_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
656
|
+
tls_ca_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
657
|
+
tls_min_version: Optional[pulumi.Input[builtins.str]] = None) -> 'SecretBackend':
|
657
658
|
"""
|
658
659
|
Get an existing SecretBackend resource's state with the given name, id, and optional extra
|
659
660
|
properties used to qualify the lookup.
|
@@ -661,24 +662,24 @@ class SecretBackend(pulumi.CustomResource):
|
|
661
662
|
:param str resource_name: The unique name of the resulting resource.
|
662
663
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
663
664
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
664
|
-
:param pulumi.Input[int] default_tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
665
|
-
:param pulumi.Input[str] default_tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
666
|
-
:param pulumi.Input[int] default_tls_client_ttl: Client certificate TTL in seconds
|
667
|
-
:param pulumi.Input[str] description: A human-friendly description for this backend.
|
668
|
-
:param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
|
665
|
+
:param pulumi.Input[builtins.int] default_tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
666
|
+
:param pulumi.Input[builtins.str] default_tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
667
|
+
:param pulumi.Input[builtins.int] default_tls_client_ttl: Client certificate TTL in seconds
|
668
|
+
:param pulumi.Input[builtins.str] description: A human-friendly description for this backend.
|
669
|
+
:param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
|
669
670
|
See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
670
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] listen_addrs: Addresses the KMIP server should listen on (`host:port`).
|
671
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
671
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] listen_addrs: Addresses the KMIP server should listen on (`host:port`).
|
672
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
672
673
|
The value should not contain leading or trailing forward slashes.
|
673
674
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
674
675
|
*Available only for Vault Enterprise*.
|
675
|
-
:param pulumi.Input[str] path: The unique path this backend should be mounted at. Must
|
676
|
+
:param pulumi.Input[builtins.str] path: The unique path this backend should be mounted at. Must
|
676
677
|
not begin or end with a `/`. Defaults to `kmip`.
|
677
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] server_hostnames: Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
678
|
-
:param pulumi.Input[Sequence[pulumi.Input[str]]] server_ips: IPs to include in the server's TLS certificate as SAN IP addresses.
|
679
|
-
:param pulumi.Input[int] tls_ca_key_bits: CA key bits, valid values depend on key type.
|
680
|
-
:param pulumi.Input[str] tls_ca_key_type: CA key type, rsa or ec.
|
681
|
-
:param pulumi.Input[str] tls_min_version: Minimum TLS version to accept.
|
678
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] server_hostnames: Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
679
|
+
:param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] server_ips: IPs to include in the server's TLS certificate as SAN IP addresses.
|
680
|
+
:param pulumi.Input[builtins.int] tls_ca_key_bits: CA key bits, valid values depend on key type.
|
681
|
+
:param pulumi.Input[builtins.str] tls_ca_key_type: CA key type, rsa or ec.
|
682
|
+
:param pulumi.Input[builtins.str] tls_min_version: Minimum TLS version to accept.
|
682
683
|
"""
|
683
684
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
684
685
|
|
@@ -701,7 +702,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
701
702
|
|
702
703
|
@property
|
703
704
|
@pulumi.getter(name="defaultTlsClientKeyBits")
|
704
|
-
def default_tls_client_key_bits(self) -> pulumi.Output[int]:
|
705
|
+
def default_tls_client_key_bits(self) -> pulumi.Output[builtins.int]:
|
705
706
|
"""
|
706
707
|
Client certificate key bits, valid values depend on key type.
|
707
708
|
"""
|
@@ -709,7 +710,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
709
710
|
|
710
711
|
@property
|
711
712
|
@pulumi.getter(name="defaultTlsClientKeyType")
|
712
|
-
def default_tls_client_key_type(self) -> pulumi.Output[str]:
|
713
|
+
def default_tls_client_key_type(self) -> pulumi.Output[builtins.str]:
|
713
714
|
"""
|
714
715
|
Client certificate key type, `rsa` or `ec`.
|
715
716
|
"""
|
@@ -717,7 +718,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
717
718
|
|
718
719
|
@property
|
719
720
|
@pulumi.getter(name="defaultTlsClientTtl")
|
720
|
-
def default_tls_client_ttl(self) -> pulumi.Output[int]:
|
721
|
+
def default_tls_client_ttl(self) -> pulumi.Output[builtins.int]:
|
721
722
|
"""
|
722
723
|
Client certificate TTL in seconds
|
723
724
|
"""
|
@@ -725,7 +726,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
725
726
|
|
726
727
|
@property
|
727
728
|
@pulumi.getter
|
728
|
-
def description(self) -> pulumi.Output[Optional[str]]:
|
729
|
+
def description(self) -> pulumi.Output[Optional[builtins.str]]:
|
729
730
|
"""
|
730
731
|
A human-friendly description for this backend.
|
731
732
|
"""
|
@@ -733,7 +734,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
733
734
|
|
734
735
|
@property
|
735
736
|
@pulumi.getter(name="disableRemount")
|
736
|
-
def disable_remount(self) -> pulumi.Output[Optional[bool]]:
|
737
|
+
def disable_remount(self) -> pulumi.Output[Optional[builtins.bool]]:
|
737
738
|
"""
|
738
739
|
If set, opts out of mount migration on path updates.
|
739
740
|
See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
|
@@ -742,7 +743,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
742
743
|
|
743
744
|
@property
|
744
745
|
@pulumi.getter(name="listenAddrs")
|
745
|
-
def listen_addrs(self) -> pulumi.Output[Sequence[str]]:
|
746
|
+
def listen_addrs(self) -> pulumi.Output[Sequence[builtins.str]]:
|
746
747
|
"""
|
747
748
|
Addresses the KMIP server should listen on (`host:port`).
|
748
749
|
"""
|
@@ -750,7 +751,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
750
751
|
|
751
752
|
@property
|
752
753
|
@pulumi.getter
|
753
|
-
def namespace(self) -> pulumi.Output[Optional[str]]:
|
754
|
+
def namespace(self) -> pulumi.Output[Optional[builtins.str]]:
|
754
755
|
"""
|
755
756
|
The namespace to provision the resource in.
|
756
757
|
The value should not contain leading or trailing forward slashes.
|
@@ -761,7 +762,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
761
762
|
|
762
763
|
@property
|
763
764
|
@pulumi.getter
|
764
|
-
def path(self) -> pulumi.Output[str]:
|
765
|
+
def path(self) -> pulumi.Output[builtins.str]:
|
765
766
|
"""
|
766
767
|
The unique path this backend should be mounted at. Must
|
767
768
|
not begin or end with a `/`. Defaults to `kmip`.
|
@@ -770,7 +771,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
770
771
|
|
771
772
|
@property
|
772
773
|
@pulumi.getter(name="serverHostnames")
|
773
|
-
def server_hostnames(self) -> pulumi.Output[Sequence[str]]:
|
774
|
+
def server_hostnames(self) -> pulumi.Output[Sequence[builtins.str]]:
|
774
775
|
"""
|
775
776
|
Hostnames to include in the server's TLS certificate as SAN DNS names. The first will be used as the common name (CN).
|
776
777
|
"""
|
@@ -778,7 +779,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
778
779
|
|
779
780
|
@property
|
780
781
|
@pulumi.getter(name="serverIps")
|
781
|
-
def server_ips(self) -> pulumi.Output[Sequence[str]]:
|
782
|
+
def server_ips(self) -> pulumi.Output[Sequence[builtins.str]]:
|
782
783
|
"""
|
783
784
|
IPs to include in the server's TLS certificate as SAN IP addresses.
|
784
785
|
"""
|
@@ -786,7 +787,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
786
787
|
|
787
788
|
@property
|
788
789
|
@pulumi.getter(name="tlsCaKeyBits")
|
789
|
-
def tls_ca_key_bits(self) -> pulumi.Output[int]:
|
790
|
+
def tls_ca_key_bits(self) -> pulumi.Output[builtins.int]:
|
790
791
|
"""
|
791
792
|
CA key bits, valid values depend on key type.
|
792
793
|
"""
|
@@ -794,7 +795,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
794
795
|
|
795
796
|
@property
|
796
797
|
@pulumi.getter(name="tlsCaKeyType")
|
797
|
-
def tls_ca_key_type(self) -> pulumi.Output[str]:
|
798
|
+
def tls_ca_key_type(self) -> pulumi.Output[builtins.str]:
|
798
799
|
"""
|
799
800
|
CA key type, rsa or ec.
|
800
801
|
"""
|
@@ -802,7 +803,7 @@ class SecretBackend(pulumi.CustomResource):
|
|
802
803
|
|
803
804
|
@property
|
804
805
|
@pulumi.getter(name="tlsMinVersion")
|
805
|
-
def tls_min_version(self) -> pulumi.Output[str]:
|
806
|
+
def tls_min_version(self) -> pulumi.Output[builtins.str]:
|
806
807
|
"""
|
807
808
|
Minimum TLS version to accept.
|
808
809
|
"""
|