pulumi-vault 6.7.0a1743576047__py3-none-any.whl → 6.7.0a1744267302__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -0
- pulumi_vault/_inputs.py +554 -553
- pulumi_vault/ad/__init__.py +1 -0
- pulumi_vault/ad/get_access_credentials.py +20 -19
- pulumi_vault/ad/secret_backend.py +477 -476
- pulumi_vault/ad/secret_library.py +99 -98
- pulumi_vault/ad/secret_role.py +85 -84
- pulumi_vault/alicloud/__init__.py +1 -0
- pulumi_vault/alicloud/auth_backend_role.py +183 -182
- pulumi_vault/approle/__init__.py +1 -0
- pulumi_vault/approle/auth_backend_login.py +106 -105
- pulumi_vault/approle/auth_backend_role.py +239 -238
- pulumi_vault/approle/auth_backend_role_secret_id.py +162 -161
- pulumi_vault/approle/get_auth_backend_role_id.py +18 -17
- pulumi_vault/audit.py +85 -84
- pulumi_vault/audit_request_header.py +43 -42
- pulumi_vault/auth_backend.py +106 -105
- pulumi_vault/aws/__init__.py +1 -0
- pulumi_vault/aws/auth_backend_cert.py +71 -70
- pulumi_vault/aws/auth_backend_client.py +253 -252
- pulumi_vault/aws/auth_backend_config_identity.py +85 -84
- pulumi_vault/aws/auth_backend_identity_whitelist.py +57 -56
- pulumi_vault/aws/auth_backend_login.py +209 -208
- pulumi_vault/aws/auth_backend_role.py +400 -399
- pulumi_vault/aws/auth_backend_role_tag.py +127 -126
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +57 -56
- pulumi_vault/aws/auth_backend_sts_role.py +71 -70
- pulumi_vault/aws/get_access_credentials.py +44 -43
- pulumi_vault/aws/get_static_access_credentials.py +13 -12
- pulumi_vault/aws/secret_backend.py +337 -336
- pulumi_vault/aws/secret_backend_role.py +211 -210
- pulumi_vault/aws/secret_backend_static_role.py +113 -112
- pulumi_vault/azure/__init__.py +1 -0
- pulumi_vault/azure/_inputs.py +21 -20
- pulumi_vault/azure/auth_backend_config.py +183 -182
- pulumi_vault/azure/auth_backend_role.py +253 -252
- pulumi_vault/azure/backend.py +239 -238
- pulumi_vault/azure/backend_role.py +141 -140
- pulumi_vault/azure/get_access_credentials.py +58 -57
- pulumi_vault/azure/outputs.py +11 -10
- pulumi_vault/cert_auth_backend_role.py +365 -364
- pulumi_vault/config/__init__.py +1 -0
- pulumi_vault/config/__init__.pyi +1 -0
- pulumi_vault/config/_inputs.py +11 -10
- pulumi_vault/config/outputs.py +287 -286
- pulumi_vault/config/ui_custom_message.py +113 -112
- pulumi_vault/config/vars.py +1 -0
- pulumi_vault/consul/__init__.py +1 -0
- pulumi_vault/consul/secret_backend.py +197 -196
- pulumi_vault/consul/secret_backend_role.py +183 -182
- pulumi_vault/database/__init__.py +1 -0
- pulumi_vault/database/_inputs.py +2525 -2524
- pulumi_vault/database/outputs.py +1529 -1528
- pulumi_vault/database/secret_backend_connection.py +169 -168
- pulumi_vault/database/secret_backend_role.py +169 -168
- pulumi_vault/database/secret_backend_static_role.py +179 -178
- pulumi_vault/database/secrets_mount.py +267 -266
- pulumi_vault/egp_policy.py +71 -70
- pulumi_vault/gcp/__init__.py +1 -0
- pulumi_vault/gcp/_inputs.py +82 -81
- pulumi_vault/gcp/auth_backend.py +260 -259
- pulumi_vault/gcp/auth_backend_role.py +281 -280
- pulumi_vault/gcp/get_auth_backend_role.py +70 -69
- pulumi_vault/gcp/outputs.py +50 -49
- pulumi_vault/gcp/secret_backend.py +232 -231
- pulumi_vault/gcp/secret_impersonated_account.py +92 -91
- pulumi_vault/gcp/secret_roleset.py +92 -91
- pulumi_vault/gcp/secret_static_account.py +92 -91
- pulumi_vault/generic/__init__.py +1 -0
- pulumi_vault/generic/endpoint.py +113 -112
- pulumi_vault/generic/get_secret.py +28 -27
- pulumi_vault/generic/secret.py +78 -77
- pulumi_vault/get_auth_backend.py +19 -18
- pulumi_vault/get_auth_backends.py +14 -13
- pulumi_vault/get_namespace.py +15 -14
- pulumi_vault/get_namespaces.py +8 -7
- pulumi_vault/get_nomad_access_token.py +19 -18
- pulumi_vault/get_policy_document.py +6 -5
- pulumi_vault/get_raft_autopilot_state.py +18 -17
- pulumi_vault/github/__init__.py +1 -0
- pulumi_vault/github/_inputs.py +42 -41
- pulumi_vault/github/auth_backend.py +232 -231
- pulumi_vault/github/outputs.py +26 -25
- pulumi_vault/github/team.py +57 -56
- pulumi_vault/github/user.py +57 -56
- pulumi_vault/identity/__init__.py +1 -0
- pulumi_vault/identity/entity.py +85 -84
- pulumi_vault/identity/entity_alias.py +71 -70
- pulumi_vault/identity/entity_policies.py +64 -63
- pulumi_vault/identity/get_entity.py +43 -42
- pulumi_vault/identity/get_group.py +50 -49
- pulumi_vault/identity/get_oidc_client_creds.py +14 -13
- pulumi_vault/identity/get_oidc_openid_config.py +24 -23
- pulumi_vault/identity/get_oidc_public_keys.py +13 -12
- pulumi_vault/identity/group.py +141 -140
- pulumi_vault/identity/group_alias.py +57 -56
- pulumi_vault/identity/group_member_entity_ids.py +57 -56
- pulumi_vault/identity/group_member_group_ids.py +57 -56
- pulumi_vault/identity/group_policies.py +64 -63
- pulumi_vault/identity/mfa_duo.py +148 -147
- pulumi_vault/identity/mfa_login_enforcement.py +120 -119
- pulumi_vault/identity/mfa_okta.py +134 -133
- pulumi_vault/identity/mfa_pingid.py +127 -126
- pulumi_vault/identity/mfa_totp.py +176 -175
- pulumi_vault/identity/oidc.py +29 -28
- pulumi_vault/identity/oidc_assignment.py +57 -56
- pulumi_vault/identity/oidc_client.py +127 -126
- pulumi_vault/identity/oidc_key.py +85 -84
- pulumi_vault/identity/oidc_key_allowed_client_id.py +43 -42
- pulumi_vault/identity/oidc_provider.py +92 -91
- pulumi_vault/identity/oidc_role.py +85 -84
- pulumi_vault/identity/oidc_scope.py +57 -56
- pulumi_vault/identity/outputs.py +32 -31
- pulumi_vault/jwt/__init__.py +1 -0
- pulumi_vault/jwt/_inputs.py +42 -41
- pulumi_vault/jwt/auth_backend.py +288 -287
- pulumi_vault/jwt/auth_backend_role.py +407 -406
- pulumi_vault/jwt/outputs.py +26 -25
- pulumi_vault/kmip/__init__.py +1 -0
- pulumi_vault/kmip/secret_backend.py +183 -182
- pulumi_vault/kmip/secret_role.py +295 -294
- pulumi_vault/kmip/secret_scope.py +57 -56
- pulumi_vault/kubernetes/__init__.py +1 -0
- pulumi_vault/kubernetes/auth_backend_config.py +141 -140
- pulumi_vault/kubernetes/auth_backend_role.py +225 -224
- pulumi_vault/kubernetes/get_auth_backend_config.py +47 -46
- pulumi_vault/kubernetes/get_auth_backend_role.py +70 -69
- pulumi_vault/kubernetes/get_service_account_token.py +38 -37
- pulumi_vault/kubernetes/secret_backend.py +316 -315
- pulumi_vault/kubernetes/secret_backend_role.py +197 -196
- pulumi_vault/kv/__init__.py +1 -0
- pulumi_vault/kv/_inputs.py +21 -20
- pulumi_vault/kv/get_secret.py +17 -16
- pulumi_vault/kv/get_secret_subkeys_v2.py +30 -29
- pulumi_vault/kv/get_secret_v2.py +29 -28
- pulumi_vault/kv/get_secrets_list.py +13 -12
- pulumi_vault/kv/get_secrets_list_v2.py +19 -18
- pulumi_vault/kv/outputs.py +13 -12
- pulumi_vault/kv/secret.py +50 -49
- pulumi_vault/kv/secret_backend_v2.py +71 -70
- pulumi_vault/kv/secret_v2.py +134 -133
- pulumi_vault/ldap/__init__.py +1 -0
- pulumi_vault/ldap/auth_backend.py +588 -587
- pulumi_vault/ldap/auth_backend_group.py +57 -56
- pulumi_vault/ldap/auth_backend_user.py +71 -70
- pulumi_vault/ldap/get_dynamic_credentials.py +17 -16
- pulumi_vault/ldap/get_static_credentials.py +18 -17
- pulumi_vault/ldap/secret_backend.py +554 -553
- pulumi_vault/ldap/secret_backend_dynamic_role.py +127 -126
- pulumi_vault/ldap/secret_backend_library_set.py +99 -98
- pulumi_vault/ldap/secret_backend_static_role.py +99 -98
- pulumi_vault/managed/__init__.py +1 -0
- pulumi_vault/managed/_inputs.py +229 -228
- pulumi_vault/managed/keys.py +15 -14
- pulumi_vault/managed/outputs.py +139 -138
- pulumi_vault/mfa_duo.py +113 -112
- pulumi_vault/mfa_okta.py +113 -112
- pulumi_vault/mfa_pingid.py +120 -119
- pulumi_vault/mfa_totp.py +127 -126
- pulumi_vault/mongodbatlas/__init__.py +1 -0
- pulumi_vault/mongodbatlas/secret_backend.py +64 -63
- pulumi_vault/mongodbatlas/secret_role.py +155 -154
- pulumi_vault/mount.py +274 -273
- pulumi_vault/namespace.py +64 -63
- pulumi_vault/nomad_secret_backend.py +211 -210
- pulumi_vault/nomad_secret_role.py +85 -84
- pulumi_vault/okta/__init__.py +1 -0
- pulumi_vault/okta/_inputs.py +26 -25
- pulumi_vault/okta/auth_backend.py +274 -273
- pulumi_vault/okta/auth_backend_group.py +57 -56
- pulumi_vault/okta/auth_backend_user.py +71 -70
- pulumi_vault/okta/outputs.py +16 -15
- pulumi_vault/outputs.py +56 -55
- pulumi_vault/password_policy.py +43 -42
- pulumi_vault/pkisecret/__init__.py +1 -0
- pulumi_vault/pkisecret/_inputs.py +31 -30
- pulumi_vault/pkisecret/backend_acme_eab.py +92 -91
- pulumi_vault/pkisecret/backend_config_acme.py +141 -140
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +323 -322
- pulumi_vault/pkisecret/backend_config_cluster.py +57 -56
- pulumi_vault/pkisecret/backend_config_cmpv2.py +106 -105
- pulumi_vault/pkisecret/backend_config_est.py +120 -119
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +22 -21
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +22 -21
- pulumi_vault/pkisecret/get_backend_config_est.py +19 -18
- pulumi_vault/pkisecret/get_backend_issuer.py +45 -44
- pulumi_vault/pkisecret/get_backend_issuers.py +15 -14
- pulumi_vault/pkisecret/get_backend_key.py +20 -19
- pulumi_vault/pkisecret/get_backend_keys.py +15 -14
- pulumi_vault/pkisecret/outputs.py +28 -27
- pulumi_vault/pkisecret/secret_backend_cert.py +337 -336
- pulumi_vault/pkisecret/secret_backend_config_ca.py +43 -42
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +57 -56
- pulumi_vault/pkisecret/secret_backend_config_urls.py +85 -84
- pulumi_vault/pkisecret/secret_backend_crl_config.py +197 -196
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +421 -420
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +57 -56
- pulumi_vault/pkisecret/secret_backend_issuer.py +232 -231
- pulumi_vault/pkisecret/secret_backend_key.py +120 -119
- pulumi_vault/pkisecret/secret_backend_role.py +715 -714
- pulumi_vault/pkisecret/secret_backend_root_cert.py +554 -553
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +526 -525
- pulumi_vault/pkisecret/secret_backend_sign.py +281 -280
- pulumi_vault/plugin.py +127 -126
- pulumi_vault/plugin_pinned_version.py +43 -42
- pulumi_vault/policy.py +43 -42
- pulumi_vault/provider.py +120 -119
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +85 -84
- pulumi_vault/quota_rate_limit.py +113 -112
- pulumi_vault/rabbitmq/__init__.py +1 -0
- pulumi_vault/rabbitmq/_inputs.py +41 -40
- pulumi_vault/rabbitmq/outputs.py +25 -24
- pulumi_vault/rabbitmq/secret_backend.py +169 -168
- pulumi_vault/rabbitmq/secret_backend_role.py +57 -56
- pulumi_vault/raft_autopilot.py +113 -112
- pulumi_vault/raft_snapshot_agent_config.py +393 -392
- pulumi_vault/rgp_policy.py +57 -56
- pulumi_vault/saml/__init__.py +1 -0
- pulumi_vault/saml/auth_backend.py +155 -154
- pulumi_vault/saml/auth_backend_role.py +239 -238
- pulumi_vault/secrets/__init__.py +1 -0
- pulumi_vault/secrets/_inputs.py +16 -15
- pulumi_vault/secrets/outputs.py +10 -9
- pulumi_vault/secrets/sync_association.py +71 -70
- pulumi_vault/secrets/sync_aws_destination.py +148 -147
- pulumi_vault/secrets/sync_azure_destination.py +148 -147
- pulumi_vault/secrets/sync_config.py +43 -42
- pulumi_vault/secrets/sync_gcp_destination.py +106 -105
- pulumi_vault/secrets/sync_gh_destination.py +134 -133
- pulumi_vault/secrets/sync_github_apps.py +64 -63
- pulumi_vault/secrets/sync_vercel_destination.py +120 -119
- pulumi_vault/ssh/__init__.py +1 -0
- pulumi_vault/ssh/_inputs.py +11 -10
- pulumi_vault/ssh/get_secret_backend_sign.py +52 -51
- pulumi_vault/ssh/outputs.py +7 -6
- pulumi_vault/ssh/secret_backend_ca.py +99 -98
- pulumi_vault/ssh/secret_backend_role.py +365 -364
- pulumi_vault/terraformcloud/__init__.py +1 -0
- pulumi_vault/terraformcloud/secret_backend.py +111 -110
- pulumi_vault/terraformcloud/secret_creds.py +74 -73
- pulumi_vault/terraformcloud/secret_role.py +93 -92
- pulumi_vault/token.py +246 -245
- pulumi_vault/tokenauth/__init__.py +1 -0
- pulumi_vault/tokenauth/auth_backend_role.py +267 -266
- pulumi_vault/transform/__init__.py +1 -0
- pulumi_vault/transform/alphabet.py +57 -56
- pulumi_vault/transform/get_decode.py +47 -46
- pulumi_vault/transform/get_encode.py +47 -46
- pulumi_vault/transform/role.py +57 -56
- pulumi_vault/transform/template.py +113 -112
- pulumi_vault/transform/transformation.py +141 -140
- pulumi_vault/transit/__init__.py +1 -0
- pulumi_vault/transit/get_decrypt.py +18 -17
- pulumi_vault/transit/get_encrypt.py +21 -20
- pulumi_vault/transit/get_sign.py +54 -53
- pulumi_vault/transit/get_verify.py +60 -59
- pulumi_vault/transit/secret_backend_key.py +274 -273
- pulumi_vault/transit/secret_cache_config.py +43 -42
- {pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744267302.dist-info}/METADATA +1 -1
- pulumi_vault-6.7.0a1744267302.dist-info/RECORD +265 -0
- pulumi_vault-6.7.0a1743576047.dist-info/RECORD +0 -265
- {pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744267302.dist-info}/WHEEL +0 -0
- {pulumi_vault-6.7.0a1743576047.dist-info → pulumi_vault-6.7.0a1744267302.dist-info}/top_level.txt +0 -0
pulumi_vault/kmip/secret_role.py
CHANGED
@@ -2,6 +2,7 @@
|
|
2
2
|
# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
4
4
|
|
5
|
+
import builtins
|
5
6
|
import copy
|
6
7
|
import warnings
|
7
8
|
import sys
|
@@ -19,54 +20,54 @@ __all__ = ['SecretRoleArgs', 'SecretRole']
|
|
19
20
|
@pulumi.input_type
|
20
21
|
class SecretRoleArgs:
|
21
22
|
def __init__(__self__, *,
|
22
|
-
path: pulumi.Input[str],
|
23
|
-
role: pulumi.Input[str],
|
24
|
-
scope: pulumi.Input[str],
|
25
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
26
|
-
operation_activate: Optional[pulumi.Input[bool]] = None,
|
27
|
-
operation_add_attribute: Optional[pulumi.Input[bool]] = None,
|
28
|
-
operation_all: Optional[pulumi.Input[bool]] = None,
|
29
|
-
operation_create: Optional[pulumi.Input[bool]] = None,
|
30
|
-
operation_destroy: Optional[pulumi.Input[bool]] = None,
|
31
|
-
operation_discover_versions: Optional[pulumi.Input[bool]] = None,
|
32
|
-
operation_get: Optional[pulumi.Input[bool]] = None,
|
33
|
-
operation_get_attribute_list: Optional[pulumi.Input[bool]] = None,
|
34
|
-
operation_get_attributes: Optional[pulumi.Input[bool]] = None,
|
35
|
-
operation_locate: Optional[pulumi.Input[bool]] = None,
|
36
|
-
operation_none: Optional[pulumi.Input[bool]] = None,
|
37
|
-
operation_register: Optional[pulumi.Input[bool]] = None,
|
38
|
-
operation_rekey: Optional[pulumi.Input[bool]] = None,
|
39
|
-
operation_revoke: Optional[pulumi.Input[bool]] = None,
|
40
|
-
tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
41
|
-
tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
42
|
-
tls_client_ttl: Optional[pulumi.Input[int]] = None):
|
23
|
+
path: pulumi.Input[builtins.str],
|
24
|
+
role: pulumi.Input[builtins.str],
|
25
|
+
scope: pulumi.Input[builtins.str],
|
26
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
27
|
+
operation_activate: Optional[pulumi.Input[builtins.bool]] = None,
|
28
|
+
operation_add_attribute: Optional[pulumi.Input[builtins.bool]] = None,
|
29
|
+
operation_all: Optional[pulumi.Input[builtins.bool]] = None,
|
30
|
+
operation_create: Optional[pulumi.Input[builtins.bool]] = None,
|
31
|
+
operation_destroy: Optional[pulumi.Input[builtins.bool]] = None,
|
32
|
+
operation_discover_versions: Optional[pulumi.Input[builtins.bool]] = None,
|
33
|
+
operation_get: Optional[pulumi.Input[builtins.bool]] = None,
|
34
|
+
operation_get_attribute_list: Optional[pulumi.Input[builtins.bool]] = None,
|
35
|
+
operation_get_attributes: Optional[pulumi.Input[builtins.bool]] = None,
|
36
|
+
operation_locate: Optional[pulumi.Input[builtins.bool]] = None,
|
37
|
+
operation_none: Optional[pulumi.Input[builtins.bool]] = None,
|
38
|
+
operation_register: Optional[pulumi.Input[builtins.bool]] = None,
|
39
|
+
operation_rekey: Optional[pulumi.Input[builtins.bool]] = None,
|
40
|
+
operation_revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
41
|
+
tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
42
|
+
tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
43
|
+
tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None):
|
43
44
|
"""
|
44
45
|
The set of arguments for constructing a SecretRole resource.
|
45
|
-
:param pulumi.Input[str] path: The unique path this backend should be mounted at. Must
|
46
|
+
:param pulumi.Input[builtins.str] path: The unique path this backend should be mounted at. Must
|
46
47
|
not begin or end with a `/`. Defaults to `kmip`.
|
47
|
-
:param pulumi.Input[str] role: Name of the role.
|
48
|
-
:param pulumi.Input[str] scope: Name of the scope.
|
49
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
48
|
+
:param pulumi.Input[builtins.str] role: Name of the role.
|
49
|
+
:param pulumi.Input[builtins.str] scope: Name of the scope.
|
50
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
50
51
|
The value should not contain leading or trailing forward slashes.
|
51
52
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
52
53
|
*Available only for Vault Enterprise*.
|
53
|
-
:param pulumi.Input[bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
54
|
-
:param pulumi.Input[bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
55
|
-
:param pulumi.Input[bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
56
|
-
:param pulumi.Input[bool] operation_create: Grant permission to use the KMIP Create operation.
|
57
|
-
:param pulumi.Input[bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
58
|
-
:param pulumi.Input[bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
59
|
-
:param pulumi.Input[bool] operation_get: Grant permission to use the KMIP Get operation.
|
60
|
-
:param pulumi.Input[bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
61
|
-
:param pulumi.Input[bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
62
|
-
:param pulumi.Input[bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
63
|
-
:param pulumi.Input[bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
64
|
-
:param pulumi.Input[bool] operation_register: Grant permission to use the KMIP Register operation.
|
65
|
-
:param pulumi.Input[bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
66
|
-
:param pulumi.Input[bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
67
|
-
:param pulumi.Input[int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
68
|
-
:param pulumi.Input[str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
69
|
-
:param pulumi.Input[int] tls_client_ttl: Client certificate TTL in seconds.
|
54
|
+
:param pulumi.Input[builtins.bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
55
|
+
:param pulumi.Input[builtins.bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
56
|
+
:param pulumi.Input[builtins.bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
57
|
+
:param pulumi.Input[builtins.bool] operation_create: Grant permission to use the KMIP Create operation.
|
58
|
+
:param pulumi.Input[builtins.bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
59
|
+
:param pulumi.Input[builtins.bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
60
|
+
:param pulumi.Input[builtins.bool] operation_get: Grant permission to use the KMIP Get operation.
|
61
|
+
:param pulumi.Input[builtins.bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
62
|
+
:param pulumi.Input[builtins.bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
63
|
+
:param pulumi.Input[builtins.bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
64
|
+
:param pulumi.Input[builtins.bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
65
|
+
:param pulumi.Input[builtins.bool] operation_register: Grant permission to use the KMIP Register operation.
|
66
|
+
:param pulumi.Input[builtins.bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
67
|
+
:param pulumi.Input[builtins.bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
68
|
+
:param pulumi.Input[builtins.int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
69
|
+
:param pulumi.Input[builtins.str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
70
|
+
:param pulumi.Input[builtins.int] tls_client_ttl: Client certificate TTL in seconds.
|
70
71
|
"""
|
71
72
|
pulumi.set(__self__, "path", path)
|
72
73
|
pulumi.set(__self__, "role", role)
|
@@ -110,7 +111,7 @@ class SecretRoleArgs:
|
|
110
111
|
|
111
112
|
@property
|
112
113
|
@pulumi.getter
|
113
|
-
def path(self) -> pulumi.Input[str]:
|
114
|
+
def path(self) -> pulumi.Input[builtins.str]:
|
114
115
|
"""
|
115
116
|
The unique path this backend should be mounted at. Must
|
116
117
|
not begin or end with a `/`. Defaults to `kmip`.
|
@@ -118,36 +119,36 @@ class SecretRoleArgs:
|
|
118
119
|
return pulumi.get(self, "path")
|
119
120
|
|
120
121
|
@path.setter
|
121
|
-
def path(self, value: pulumi.Input[str]):
|
122
|
+
def path(self, value: pulumi.Input[builtins.str]):
|
122
123
|
pulumi.set(self, "path", value)
|
123
124
|
|
124
125
|
@property
|
125
126
|
@pulumi.getter
|
126
|
-
def role(self) -> pulumi.Input[str]:
|
127
|
+
def role(self) -> pulumi.Input[builtins.str]:
|
127
128
|
"""
|
128
129
|
Name of the role.
|
129
130
|
"""
|
130
131
|
return pulumi.get(self, "role")
|
131
132
|
|
132
133
|
@role.setter
|
133
|
-
def role(self, value: pulumi.Input[str]):
|
134
|
+
def role(self, value: pulumi.Input[builtins.str]):
|
134
135
|
pulumi.set(self, "role", value)
|
135
136
|
|
136
137
|
@property
|
137
138
|
@pulumi.getter
|
138
|
-
def scope(self) -> pulumi.Input[str]:
|
139
|
+
def scope(self) -> pulumi.Input[builtins.str]:
|
139
140
|
"""
|
140
141
|
Name of the scope.
|
141
142
|
"""
|
142
143
|
return pulumi.get(self, "scope")
|
143
144
|
|
144
145
|
@scope.setter
|
145
|
-
def scope(self, value: pulumi.Input[str]):
|
146
|
+
def scope(self, value: pulumi.Input[builtins.str]):
|
146
147
|
pulumi.set(self, "scope", value)
|
147
148
|
|
148
149
|
@property
|
149
150
|
@pulumi.getter
|
150
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
151
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
151
152
|
"""
|
152
153
|
The namespace to provision the resource in.
|
153
154
|
The value should not contain leading or trailing forward slashes.
|
@@ -157,265 +158,265 @@ class SecretRoleArgs:
|
|
157
158
|
return pulumi.get(self, "namespace")
|
158
159
|
|
159
160
|
@namespace.setter
|
160
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
161
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
161
162
|
pulumi.set(self, "namespace", value)
|
162
163
|
|
163
164
|
@property
|
164
165
|
@pulumi.getter(name="operationActivate")
|
165
|
-
def operation_activate(self) -> Optional[pulumi.Input[bool]]:
|
166
|
+
def operation_activate(self) -> Optional[pulumi.Input[builtins.bool]]:
|
166
167
|
"""
|
167
168
|
Grant permission to use the KMIP Activate operation.
|
168
169
|
"""
|
169
170
|
return pulumi.get(self, "operation_activate")
|
170
171
|
|
171
172
|
@operation_activate.setter
|
172
|
-
def operation_activate(self, value: Optional[pulumi.Input[bool]]):
|
173
|
+
def operation_activate(self, value: Optional[pulumi.Input[builtins.bool]]):
|
173
174
|
pulumi.set(self, "operation_activate", value)
|
174
175
|
|
175
176
|
@property
|
176
177
|
@pulumi.getter(name="operationAddAttribute")
|
177
|
-
def operation_add_attribute(self) -> Optional[pulumi.Input[bool]]:
|
178
|
+
def operation_add_attribute(self) -> Optional[pulumi.Input[builtins.bool]]:
|
178
179
|
"""
|
179
180
|
Grant permission to use the KMIP Add Attribute operation.
|
180
181
|
"""
|
181
182
|
return pulumi.get(self, "operation_add_attribute")
|
182
183
|
|
183
184
|
@operation_add_attribute.setter
|
184
|
-
def operation_add_attribute(self, value: Optional[pulumi.Input[bool]]):
|
185
|
+
def operation_add_attribute(self, value: Optional[pulumi.Input[builtins.bool]]):
|
185
186
|
pulumi.set(self, "operation_add_attribute", value)
|
186
187
|
|
187
188
|
@property
|
188
189
|
@pulumi.getter(name="operationAll")
|
189
|
-
def operation_all(self) -> Optional[pulumi.Input[bool]]:
|
190
|
+
def operation_all(self) -> Optional[pulumi.Input[builtins.bool]]:
|
190
191
|
"""
|
191
192
|
Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
192
193
|
"""
|
193
194
|
return pulumi.get(self, "operation_all")
|
194
195
|
|
195
196
|
@operation_all.setter
|
196
|
-
def operation_all(self, value: Optional[pulumi.Input[bool]]):
|
197
|
+
def operation_all(self, value: Optional[pulumi.Input[builtins.bool]]):
|
197
198
|
pulumi.set(self, "operation_all", value)
|
198
199
|
|
199
200
|
@property
|
200
201
|
@pulumi.getter(name="operationCreate")
|
201
|
-
def operation_create(self) -> Optional[pulumi.Input[bool]]:
|
202
|
+
def operation_create(self) -> Optional[pulumi.Input[builtins.bool]]:
|
202
203
|
"""
|
203
204
|
Grant permission to use the KMIP Create operation.
|
204
205
|
"""
|
205
206
|
return pulumi.get(self, "operation_create")
|
206
207
|
|
207
208
|
@operation_create.setter
|
208
|
-
def operation_create(self, value: Optional[pulumi.Input[bool]]):
|
209
|
+
def operation_create(self, value: Optional[pulumi.Input[builtins.bool]]):
|
209
210
|
pulumi.set(self, "operation_create", value)
|
210
211
|
|
211
212
|
@property
|
212
213
|
@pulumi.getter(name="operationDestroy")
|
213
|
-
def operation_destroy(self) -> Optional[pulumi.Input[bool]]:
|
214
|
+
def operation_destroy(self) -> Optional[pulumi.Input[builtins.bool]]:
|
214
215
|
"""
|
215
216
|
Grant permission to use the KMIP Destroy operation.
|
216
217
|
"""
|
217
218
|
return pulumi.get(self, "operation_destroy")
|
218
219
|
|
219
220
|
@operation_destroy.setter
|
220
|
-
def operation_destroy(self, value: Optional[pulumi.Input[bool]]):
|
221
|
+
def operation_destroy(self, value: Optional[pulumi.Input[builtins.bool]]):
|
221
222
|
pulumi.set(self, "operation_destroy", value)
|
222
223
|
|
223
224
|
@property
|
224
225
|
@pulumi.getter(name="operationDiscoverVersions")
|
225
|
-
def operation_discover_versions(self) -> Optional[pulumi.Input[bool]]:
|
226
|
+
def operation_discover_versions(self) -> Optional[pulumi.Input[builtins.bool]]:
|
226
227
|
"""
|
227
228
|
Grant permission to use the KMIP Discover Version operation.
|
228
229
|
"""
|
229
230
|
return pulumi.get(self, "operation_discover_versions")
|
230
231
|
|
231
232
|
@operation_discover_versions.setter
|
232
|
-
def operation_discover_versions(self, value: Optional[pulumi.Input[bool]]):
|
233
|
+
def operation_discover_versions(self, value: Optional[pulumi.Input[builtins.bool]]):
|
233
234
|
pulumi.set(self, "operation_discover_versions", value)
|
234
235
|
|
235
236
|
@property
|
236
237
|
@pulumi.getter(name="operationGet")
|
237
|
-
def operation_get(self) -> Optional[pulumi.Input[bool]]:
|
238
|
+
def operation_get(self) -> Optional[pulumi.Input[builtins.bool]]:
|
238
239
|
"""
|
239
240
|
Grant permission to use the KMIP Get operation.
|
240
241
|
"""
|
241
242
|
return pulumi.get(self, "operation_get")
|
242
243
|
|
243
244
|
@operation_get.setter
|
244
|
-
def operation_get(self, value: Optional[pulumi.Input[bool]]):
|
245
|
+
def operation_get(self, value: Optional[pulumi.Input[builtins.bool]]):
|
245
246
|
pulumi.set(self, "operation_get", value)
|
246
247
|
|
247
248
|
@property
|
248
249
|
@pulumi.getter(name="operationGetAttributeList")
|
249
|
-
def operation_get_attribute_list(self) -> Optional[pulumi.Input[bool]]:
|
250
|
+
def operation_get_attribute_list(self) -> Optional[pulumi.Input[builtins.bool]]:
|
250
251
|
"""
|
251
252
|
Grant permission to use the KMIP Get Atrribute List operation.
|
252
253
|
"""
|
253
254
|
return pulumi.get(self, "operation_get_attribute_list")
|
254
255
|
|
255
256
|
@operation_get_attribute_list.setter
|
256
|
-
def operation_get_attribute_list(self, value: Optional[pulumi.Input[bool]]):
|
257
|
+
def operation_get_attribute_list(self, value: Optional[pulumi.Input[builtins.bool]]):
|
257
258
|
pulumi.set(self, "operation_get_attribute_list", value)
|
258
259
|
|
259
260
|
@property
|
260
261
|
@pulumi.getter(name="operationGetAttributes")
|
261
|
-
def operation_get_attributes(self) -> Optional[pulumi.Input[bool]]:
|
262
|
+
def operation_get_attributes(self) -> Optional[pulumi.Input[builtins.bool]]:
|
262
263
|
"""
|
263
264
|
Grant permission to use the KMIP Get Atrributes operation.
|
264
265
|
"""
|
265
266
|
return pulumi.get(self, "operation_get_attributes")
|
266
267
|
|
267
268
|
@operation_get_attributes.setter
|
268
|
-
def operation_get_attributes(self, value: Optional[pulumi.Input[bool]]):
|
269
|
+
def operation_get_attributes(self, value: Optional[pulumi.Input[builtins.bool]]):
|
269
270
|
pulumi.set(self, "operation_get_attributes", value)
|
270
271
|
|
271
272
|
@property
|
272
273
|
@pulumi.getter(name="operationLocate")
|
273
|
-
def operation_locate(self) -> Optional[pulumi.Input[bool]]:
|
274
|
+
def operation_locate(self) -> Optional[pulumi.Input[builtins.bool]]:
|
274
275
|
"""
|
275
276
|
Grant permission to use the KMIP Get Locate operation.
|
276
277
|
"""
|
277
278
|
return pulumi.get(self, "operation_locate")
|
278
279
|
|
279
280
|
@operation_locate.setter
|
280
|
-
def operation_locate(self, value: Optional[pulumi.Input[bool]]):
|
281
|
+
def operation_locate(self, value: Optional[pulumi.Input[builtins.bool]]):
|
281
282
|
pulumi.set(self, "operation_locate", value)
|
282
283
|
|
283
284
|
@property
|
284
285
|
@pulumi.getter(name="operationNone")
|
285
|
-
def operation_none(self) -> Optional[pulumi.Input[bool]]:
|
286
|
+
def operation_none(self) -> Optional[pulumi.Input[builtins.bool]]:
|
286
287
|
"""
|
287
288
|
Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
288
289
|
"""
|
289
290
|
return pulumi.get(self, "operation_none")
|
290
291
|
|
291
292
|
@operation_none.setter
|
292
|
-
def operation_none(self, value: Optional[pulumi.Input[bool]]):
|
293
|
+
def operation_none(self, value: Optional[pulumi.Input[builtins.bool]]):
|
293
294
|
pulumi.set(self, "operation_none", value)
|
294
295
|
|
295
296
|
@property
|
296
297
|
@pulumi.getter(name="operationRegister")
|
297
|
-
def operation_register(self) -> Optional[pulumi.Input[bool]]:
|
298
|
+
def operation_register(self) -> Optional[pulumi.Input[builtins.bool]]:
|
298
299
|
"""
|
299
300
|
Grant permission to use the KMIP Register operation.
|
300
301
|
"""
|
301
302
|
return pulumi.get(self, "operation_register")
|
302
303
|
|
303
304
|
@operation_register.setter
|
304
|
-
def operation_register(self, value: Optional[pulumi.Input[bool]]):
|
305
|
+
def operation_register(self, value: Optional[pulumi.Input[builtins.bool]]):
|
305
306
|
pulumi.set(self, "operation_register", value)
|
306
307
|
|
307
308
|
@property
|
308
309
|
@pulumi.getter(name="operationRekey")
|
309
|
-
def operation_rekey(self) -> Optional[pulumi.Input[bool]]:
|
310
|
+
def operation_rekey(self) -> Optional[pulumi.Input[builtins.bool]]:
|
310
311
|
"""
|
311
312
|
Grant permission to use the KMIP Rekey operation.
|
312
313
|
"""
|
313
314
|
return pulumi.get(self, "operation_rekey")
|
314
315
|
|
315
316
|
@operation_rekey.setter
|
316
|
-
def operation_rekey(self, value: Optional[pulumi.Input[bool]]):
|
317
|
+
def operation_rekey(self, value: Optional[pulumi.Input[builtins.bool]]):
|
317
318
|
pulumi.set(self, "operation_rekey", value)
|
318
319
|
|
319
320
|
@property
|
320
321
|
@pulumi.getter(name="operationRevoke")
|
321
|
-
def operation_revoke(self) -> Optional[pulumi.Input[bool]]:
|
322
|
+
def operation_revoke(self) -> Optional[pulumi.Input[builtins.bool]]:
|
322
323
|
"""
|
323
324
|
Grant permission to use the KMIP Revoke operation.
|
324
325
|
"""
|
325
326
|
return pulumi.get(self, "operation_revoke")
|
326
327
|
|
327
328
|
@operation_revoke.setter
|
328
|
-
def operation_revoke(self, value: Optional[pulumi.Input[bool]]):
|
329
|
+
def operation_revoke(self, value: Optional[pulumi.Input[builtins.bool]]):
|
329
330
|
pulumi.set(self, "operation_revoke", value)
|
330
331
|
|
331
332
|
@property
|
332
333
|
@pulumi.getter(name="tlsClientKeyBits")
|
333
|
-
def tls_client_key_bits(self) -> Optional[pulumi.Input[int]]:
|
334
|
+
def tls_client_key_bits(self) -> Optional[pulumi.Input[builtins.int]]:
|
334
335
|
"""
|
335
336
|
Client certificate key bits, valid values depend on key type.
|
336
337
|
"""
|
337
338
|
return pulumi.get(self, "tls_client_key_bits")
|
338
339
|
|
339
340
|
@tls_client_key_bits.setter
|
340
|
-
def tls_client_key_bits(self, value: Optional[pulumi.Input[int]]):
|
341
|
+
def tls_client_key_bits(self, value: Optional[pulumi.Input[builtins.int]]):
|
341
342
|
pulumi.set(self, "tls_client_key_bits", value)
|
342
343
|
|
343
344
|
@property
|
344
345
|
@pulumi.getter(name="tlsClientKeyType")
|
345
|
-
def tls_client_key_type(self) -> Optional[pulumi.Input[str]]:
|
346
|
+
def tls_client_key_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
346
347
|
"""
|
347
348
|
Client certificate key type, `rsa` or `ec`.
|
348
349
|
"""
|
349
350
|
return pulumi.get(self, "tls_client_key_type")
|
350
351
|
|
351
352
|
@tls_client_key_type.setter
|
352
|
-
def tls_client_key_type(self, value: Optional[pulumi.Input[str]]):
|
353
|
+
def tls_client_key_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
353
354
|
pulumi.set(self, "tls_client_key_type", value)
|
354
355
|
|
355
356
|
@property
|
356
357
|
@pulumi.getter(name="tlsClientTtl")
|
357
|
-
def tls_client_ttl(self) -> Optional[pulumi.Input[int]]:
|
358
|
+
def tls_client_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
358
359
|
"""
|
359
360
|
Client certificate TTL in seconds.
|
360
361
|
"""
|
361
362
|
return pulumi.get(self, "tls_client_ttl")
|
362
363
|
|
363
364
|
@tls_client_ttl.setter
|
364
|
-
def tls_client_ttl(self, value: Optional[pulumi.Input[int]]):
|
365
|
+
def tls_client_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
365
366
|
pulumi.set(self, "tls_client_ttl", value)
|
366
367
|
|
367
368
|
|
368
369
|
@pulumi.input_type
|
369
370
|
class _SecretRoleState:
|
370
371
|
def __init__(__self__, *,
|
371
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
372
|
-
operation_activate: Optional[pulumi.Input[bool]] = None,
|
373
|
-
operation_add_attribute: Optional[pulumi.Input[bool]] = None,
|
374
|
-
operation_all: Optional[pulumi.Input[bool]] = None,
|
375
|
-
operation_create: Optional[pulumi.Input[bool]] = None,
|
376
|
-
operation_destroy: Optional[pulumi.Input[bool]] = None,
|
377
|
-
operation_discover_versions: Optional[pulumi.Input[bool]] = None,
|
378
|
-
operation_get: Optional[pulumi.Input[bool]] = None,
|
379
|
-
operation_get_attribute_list: Optional[pulumi.Input[bool]] = None,
|
380
|
-
operation_get_attributes: Optional[pulumi.Input[bool]] = None,
|
381
|
-
operation_locate: Optional[pulumi.Input[bool]] = None,
|
382
|
-
operation_none: Optional[pulumi.Input[bool]] = None,
|
383
|
-
operation_register: Optional[pulumi.Input[bool]] = None,
|
384
|
-
operation_rekey: Optional[pulumi.Input[bool]] = None,
|
385
|
-
operation_revoke: Optional[pulumi.Input[bool]] = None,
|
386
|
-
path: Optional[pulumi.Input[str]] = None,
|
387
|
-
role: Optional[pulumi.Input[str]] = None,
|
388
|
-
scope: Optional[pulumi.Input[str]] = None,
|
389
|
-
tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
390
|
-
tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
391
|
-
tls_client_ttl: Optional[pulumi.Input[int]] = None):
|
372
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
373
|
+
operation_activate: Optional[pulumi.Input[builtins.bool]] = None,
|
374
|
+
operation_add_attribute: Optional[pulumi.Input[builtins.bool]] = None,
|
375
|
+
operation_all: Optional[pulumi.Input[builtins.bool]] = None,
|
376
|
+
operation_create: Optional[pulumi.Input[builtins.bool]] = None,
|
377
|
+
operation_destroy: Optional[pulumi.Input[builtins.bool]] = None,
|
378
|
+
operation_discover_versions: Optional[pulumi.Input[builtins.bool]] = None,
|
379
|
+
operation_get: Optional[pulumi.Input[builtins.bool]] = None,
|
380
|
+
operation_get_attribute_list: Optional[pulumi.Input[builtins.bool]] = None,
|
381
|
+
operation_get_attributes: Optional[pulumi.Input[builtins.bool]] = None,
|
382
|
+
operation_locate: Optional[pulumi.Input[builtins.bool]] = None,
|
383
|
+
operation_none: Optional[pulumi.Input[builtins.bool]] = None,
|
384
|
+
operation_register: Optional[pulumi.Input[builtins.bool]] = None,
|
385
|
+
operation_rekey: Optional[pulumi.Input[builtins.bool]] = None,
|
386
|
+
operation_revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
387
|
+
path: Optional[pulumi.Input[builtins.str]] = None,
|
388
|
+
role: Optional[pulumi.Input[builtins.str]] = None,
|
389
|
+
scope: Optional[pulumi.Input[builtins.str]] = None,
|
390
|
+
tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
391
|
+
tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
392
|
+
tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None):
|
392
393
|
"""
|
393
394
|
Input properties used for looking up and filtering SecretRole resources.
|
394
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
395
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
395
396
|
The value should not contain leading or trailing forward slashes.
|
396
397
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
397
398
|
*Available only for Vault Enterprise*.
|
398
|
-
:param pulumi.Input[bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
399
|
-
:param pulumi.Input[bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
400
|
-
:param pulumi.Input[bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
401
|
-
:param pulumi.Input[bool] operation_create: Grant permission to use the KMIP Create operation.
|
402
|
-
:param pulumi.Input[bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
403
|
-
:param pulumi.Input[bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
404
|
-
:param pulumi.Input[bool] operation_get: Grant permission to use the KMIP Get operation.
|
405
|
-
:param pulumi.Input[bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
406
|
-
:param pulumi.Input[bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
407
|
-
:param pulumi.Input[bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
408
|
-
:param pulumi.Input[bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
409
|
-
:param pulumi.Input[bool] operation_register: Grant permission to use the KMIP Register operation.
|
410
|
-
:param pulumi.Input[bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
411
|
-
:param pulumi.Input[bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
412
|
-
:param pulumi.Input[str] path: The unique path this backend should be mounted at. Must
|
399
|
+
:param pulumi.Input[builtins.bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
400
|
+
:param pulumi.Input[builtins.bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
401
|
+
:param pulumi.Input[builtins.bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
402
|
+
:param pulumi.Input[builtins.bool] operation_create: Grant permission to use the KMIP Create operation.
|
403
|
+
:param pulumi.Input[builtins.bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
404
|
+
:param pulumi.Input[builtins.bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
405
|
+
:param pulumi.Input[builtins.bool] operation_get: Grant permission to use the KMIP Get operation.
|
406
|
+
:param pulumi.Input[builtins.bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
407
|
+
:param pulumi.Input[builtins.bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
408
|
+
:param pulumi.Input[builtins.bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
409
|
+
:param pulumi.Input[builtins.bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
410
|
+
:param pulumi.Input[builtins.bool] operation_register: Grant permission to use the KMIP Register operation.
|
411
|
+
:param pulumi.Input[builtins.bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
412
|
+
:param pulumi.Input[builtins.bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
413
|
+
:param pulumi.Input[builtins.str] path: The unique path this backend should be mounted at. Must
|
413
414
|
not begin or end with a `/`. Defaults to `kmip`.
|
414
|
-
:param pulumi.Input[str] role: Name of the role.
|
415
|
-
:param pulumi.Input[str] scope: Name of the scope.
|
416
|
-
:param pulumi.Input[int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
417
|
-
:param pulumi.Input[str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
418
|
-
:param pulumi.Input[int] tls_client_ttl: Client certificate TTL in seconds.
|
415
|
+
:param pulumi.Input[builtins.str] role: Name of the role.
|
416
|
+
:param pulumi.Input[builtins.str] scope: Name of the scope.
|
417
|
+
:param pulumi.Input[builtins.int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
418
|
+
:param pulumi.Input[builtins.str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
419
|
+
:param pulumi.Input[builtins.int] tls_client_ttl: Client certificate TTL in seconds.
|
419
420
|
"""
|
420
421
|
if namespace is not None:
|
421
422
|
pulumi.set(__self__, "namespace", namespace)
|
@@ -462,7 +463,7 @@ class _SecretRoleState:
|
|
462
463
|
|
463
464
|
@property
|
464
465
|
@pulumi.getter
|
465
|
-
def namespace(self) -> Optional[pulumi.Input[str]]:
|
466
|
+
def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
|
466
467
|
"""
|
467
468
|
The namespace to provision the resource in.
|
468
469
|
The value should not contain leading or trailing forward slashes.
|
@@ -472,180 +473,180 @@ class _SecretRoleState:
|
|
472
473
|
return pulumi.get(self, "namespace")
|
473
474
|
|
474
475
|
@namespace.setter
|
475
|
-
def namespace(self, value: Optional[pulumi.Input[str]]):
|
476
|
+
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
476
477
|
pulumi.set(self, "namespace", value)
|
477
478
|
|
478
479
|
@property
|
479
480
|
@pulumi.getter(name="operationActivate")
|
480
|
-
def operation_activate(self) -> Optional[pulumi.Input[bool]]:
|
481
|
+
def operation_activate(self) -> Optional[pulumi.Input[builtins.bool]]:
|
481
482
|
"""
|
482
483
|
Grant permission to use the KMIP Activate operation.
|
483
484
|
"""
|
484
485
|
return pulumi.get(self, "operation_activate")
|
485
486
|
|
486
487
|
@operation_activate.setter
|
487
|
-
def operation_activate(self, value: Optional[pulumi.Input[bool]]):
|
488
|
+
def operation_activate(self, value: Optional[pulumi.Input[builtins.bool]]):
|
488
489
|
pulumi.set(self, "operation_activate", value)
|
489
490
|
|
490
491
|
@property
|
491
492
|
@pulumi.getter(name="operationAddAttribute")
|
492
|
-
def operation_add_attribute(self) -> Optional[pulumi.Input[bool]]:
|
493
|
+
def operation_add_attribute(self) -> Optional[pulumi.Input[builtins.bool]]:
|
493
494
|
"""
|
494
495
|
Grant permission to use the KMIP Add Attribute operation.
|
495
496
|
"""
|
496
497
|
return pulumi.get(self, "operation_add_attribute")
|
497
498
|
|
498
499
|
@operation_add_attribute.setter
|
499
|
-
def operation_add_attribute(self, value: Optional[pulumi.Input[bool]]):
|
500
|
+
def operation_add_attribute(self, value: Optional[pulumi.Input[builtins.bool]]):
|
500
501
|
pulumi.set(self, "operation_add_attribute", value)
|
501
502
|
|
502
503
|
@property
|
503
504
|
@pulumi.getter(name="operationAll")
|
504
|
-
def operation_all(self) -> Optional[pulumi.Input[bool]]:
|
505
|
+
def operation_all(self) -> Optional[pulumi.Input[builtins.bool]]:
|
505
506
|
"""
|
506
507
|
Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
507
508
|
"""
|
508
509
|
return pulumi.get(self, "operation_all")
|
509
510
|
|
510
511
|
@operation_all.setter
|
511
|
-
def operation_all(self, value: Optional[pulumi.Input[bool]]):
|
512
|
+
def operation_all(self, value: Optional[pulumi.Input[builtins.bool]]):
|
512
513
|
pulumi.set(self, "operation_all", value)
|
513
514
|
|
514
515
|
@property
|
515
516
|
@pulumi.getter(name="operationCreate")
|
516
|
-
def operation_create(self) -> Optional[pulumi.Input[bool]]:
|
517
|
+
def operation_create(self) -> Optional[pulumi.Input[builtins.bool]]:
|
517
518
|
"""
|
518
519
|
Grant permission to use the KMIP Create operation.
|
519
520
|
"""
|
520
521
|
return pulumi.get(self, "operation_create")
|
521
522
|
|
522
523
|
@operation_create.setter
|
523
|
-
def operation_create(self, value: Optional[pulumi.Input[bool]]):
|
524
|
+
def operation_create(self, value: Optional[pulumi.Input[builtins.bool]]):
|
524
525
|
pulumi.set(self, "operation_create", value)
|
525
526
|
|
526
527
|
@property
|
527
528
|
@pulumi.getter(name="operationDestroy")
|
528
|
-
def operation_destroy(self) -> Optional[pulumi.Input[bool]]:
|
529
|
+
def operation_destroy(self) -> Optional[pulumi.Input[builtins.bool]]:
|
529
530
|
"""
|
530
531
|
Grant permission to use the KMIP Destroy operation.
|
531
532
|
"""
|
532
533
|
return pulumi.get(self, "operation_destroy")
|
533
534
|
|
534
535
|
@operation_destroy.setter
|
535
|
-
def operation_destroy(self, value: Optional[pulumi.Input[bool]]):
|
536
|
+
def operation_destroy(self, value: Optional[pulumi.Input[builtins.bool]]):
|
536
537
|
pulumi.set(self, "operation_destroy", value)
|
537
538
|
|
538
539
|
@property
|
539
540
|
@pulumi.getter(name="operationDiscoverVersions")
|
540
|
-
def operation_discover_versions(self) -> Optional[pulumi.Input[bool]]:
|
541
|
+
def operation_discover_versions(self) -> Optional[pulumi.Input[builtins.bool]]:
|
541
542
|
"""
|
542
543
|
Grant permission to use the KMIP Discover Version operation.
|
543
544
|
"""
|
544
545
|
return pulumi.get(self, "operation_discover_versions")
|
545
546
|
|
546
547
|
@operation_discover_versions.setter
|
547
|
-
def operation_discover_versions(self, value: Optional[pulumi.Input[bool]]):
|
548
|
+
def operation_discover_versions(self, value: Optional[pulumi.Input[builtins.bool]]):
|
548
549
|
pulumi.set(self, "operation_discover_versions", value)
|
549
550
|
|
550
551
|
@property
|
551
552
|
@pulumi.getter(name="operationGet")
|
552
|
-
def operation_get(self) -> Optional[pulumi.Input[bool]]:
|
553
|
+
def operation_get(self) -> Optional[pulumi.Input[builtins.bool]]:
|
553
554
|
"""
|
554
555
|
Grant permission to use the KMIP Get operation.
|
555
556
|
"""
|
556
557
|
return pulumi.get(self, "operation_get")
|
557
558
|
|
558
559
|
@operation_get.setter
|
559
|
-
def operation_get(self, value: Optional[pulumi.Input[bool]]):
|
560
|
+
def operation_get(self, value: Optional[pulumi.Input[builtins.bool]]):
|
560
561
|
pulumi.set(self, "operation_get", value)
|
561
562
|
|
562
563
|
@property
|
563
564
|
@pulumi.getter(name="operationGetAttributeList")
|
564
|
-
def operation_get_attribute_list(self) -> Optional[pulumi.Input[bool]]:
|
565
|
+
def operation_get_attribute_list(self) -> Optional[pulumi.Input[builtins.bool]]:
|
565
566
|
"""
|
566
567
|
Grant permission to use the KMIP Get Atrribute List operation.
|
567
568
|
"""
|
568
569
|
return pulumi.get(self, "operation_get_attribute_list")
|
569
570
|
|
570
571
|
@operation_get_attribute_list.setter
|
571
|
-
def operation_get_attribute_list(self, value: Optional[pulumi.Input[bool]]):
|
572
|
+
def operation_get_attribute_list(self, value: Optional[pulumi.Input[builtins.bool]]):
|
572
573
|
pulumi.set(self, "operation_get_attribute_list", value)
|
573
574
|
|
574
575
|
@property
|
575
576
|
@pulumi.getter(name="operationGetAttributes")
|
576
|
-
def operation_get_attributes(self) -> Optional[pulumi.Input[bool]]:
|
577
|
+
def operation_get_attributes(self) -> Optional[pulumi.Input[builtins.bool]]:
|
577
578
|
"""
|
578
579
|
Grant permission to use the KMIP Get Atrributes operation.
|
579
580
|
"""
|
580
581
|
return pulumi.get(self, "operation_get_attributes")
|
581
582
|
|
582
583
|
@operation_get_attributes.setter
|
583
|
-
def operation_get_attributes(self, value: Optional[pulumi.Input[bool]]):
|
584
|
+
def operation_get_attributes(self, value: Optional[pulumi.Input[builtins.bool]]):
|
584
585
|
pulumi.set(self, "operation_get_attributes", value)
|
585
586
|
|
586
587
|
@property
|
587
588
|
@pulumi.getter(name="operationLocate")
|
588
|
-
def operation_locate(self) -> Optional[pulumi.Input[bool]]:
|
589
|
+
def operation_locate(self) -> Optional[pulumi.Input[builtins.bool]]:
|
589
590
|
"""
|
590
591
|
Grant permission to use the KMIP Get Locate operation.
|
591
592
|
"""
|
592
593
|
return pulumi.get(self, "operation_locate")
|
593
594
|
|
594
595
|
@operation_locate.setter
|
595
|
-
def operation_locate(self, value: Optional[pulumi.Input[bool]]):
|
596
|
+
def operation_locate(self, value: Optional[pulumi.Input[builtins.bool]]):
|
596
597
|
pulumi.set(self, "operation_locate", value)
|
597
598
|
|
598
599
|
@property
|
599
600
|
@pulumi.getter(name="operationNone")
|
600
|
-
def operation_none(self) -> Optional[pulumi.Input[bool]]:
|
601
|
+
def operation_none(self) -> Optional[pulumi.Input[builtins.bool]]:
|
601
602
|
"""
|
602
603
|
Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
603
604
|
"""
|
604
605
|
return pulumi.get(self, "operation_none")
|
605
606
|
|
606
607
|
@operation_none.setter
|
607
|
-
def operation_none(self, value: Optional[pulumi.Input[bool]]):
|
608
|
+
def operation_none(self, value: Optional[pulumi.Input[builtins.bool]]):
|
608
609
|
pulumi.set(self, "operation_none", value)
|
609
610
|
|
610
611
|
@property
|
611
612
|
@pulumi.getter(name="operationRegister")
|
612
|
-
def operation_register(self) -> Optional[pulumi.Input[bool]]:
|
613
|
+
def operation_register(self) -> Optional[pulumi.Input[builtins.bool]]:
|
613
614
|
"""
|
614
615
|
Grant permission to use the KMIP Register operation.
|
615
616
|
"""
|
616
617
|
return pulumi.get(self, "operation_register")
|
617
618
|
|
618
619
|
@operation_register.setter
|
619
|
-
def operation_register(self, value: Optional[pulumi.Input[bool]]):
|
620
|
+
def operation_register(self, value: Optional[pulumi.Input[builtins.bool]]):
|
620
621
|
pulumi.set(self, "operation_register", value)
|
621
622
|
|
622
623
|
@property
|
623
624
|
@pulumi.getter(name="operationRekey")
|
624
|
-
def operation_rekey(self) -> Optional[pulumi.Input[bool]]:
|
625
|
+
def operation_rekey(self) -> Optional[pulumi.Input[builtins.bool]]:
|
625
626
|
"""
|
626
627
|
Grant permission to use the KMIP Rekey operation.
|
627
628
|
"""
|
628
629
|
return pulumi.get(self, "operation_rekey")
|
629
630
|
|
630
631
|
@operation_rekey.setter
|
631
|
-
def operation_rekey(self, value: Optional[pulumi.Input[bool]]):
|
632
|
+
def operation_rekey(self, value: Optional[pulumi.Input[builtins.bool]]):
|
632
633
|
pulumi.set(self, "operation_rekey", value)
|
633
634
|
|
634
635
|
@property
|
635
636
|
@pulumi.getter(name="operationRevoke")
|
636
|
-
def operation_revoke(self) -> Optional[pulumi.Input[bool]]:
|
637
|
+
def operation_revoke(self) -> Optional[pulumi.Input[builtins.bool]]:
|
637
638
|
"""
|
638
639
|
Grant permission to use the KMIP Revoke operation.
|
639
640
|
"""
|
640
641
|
return pulumi.get(self, "operation_revoke")
|
641
642
|
|
642
643
|
@operation_revoke.setter
|
643
|
-
def operation_revoke(self, value: Optional[pulumi.Input[bool]]):
|
644
|
+
def operation_revoke(self, value: Optional[pulumi.Input[builtins.bool]]):
|
644
645
|
pulumi.set(self, "operation_revoke", value)
|
645
646
|
|
646
647
|
@property
|
647
648
|
@pulumi.getter
|
648
|
-
def path(self) -> Optional[pulumi.Input[str]]:
|
649
|
+
def path(self) -> Optional[pulumi.Input[builtins.str]]:
|
649
650
|
"""
|
650
651
|
The unique path this backend should be mounted at. Must
|
651
652
|
not begin or end with a `/`. Defaults to `kmip`.
|
@@ -653,67 +654,67 @@ class _SecretRoleState:
|
|
653
654
|
return pulumi.get(self, "path")
|
654
655
|
|
655
656
|
@path.setter
|
656
|
-
def path(self, value: Optional[pulumi.Input[str]]):
|
657
|
+
def path(self, value: Optional[pulumi.Input[builtins.str]]):
|
657
658
|
pulumi.set(self, "path", value)
|
658
659
|
|
659
660
|
@property
|
660
661
|
@pulumi.getter
|
661
|
-
def role(self) -> Optional[pulumi.Input[str]]:
|
662
|
+
def role(self) -> Optional[pulumi.Input[builtins.str]]:
|
662
663
|
"""
|
663
664
|
Name of the role.
|
664
665
|
"""
|
665
666
|
return pulumi.get(self, "role")
|
666
667
|
|
667
668
|
@role.setter
|
668
|
-
def role(self, value: Optional[pulumi.Input[str]]):
|
669
|
+
def role(self, value: Optional[pulumi.Input[builtins.str]]):
|
669
670
|
pulumi.set(self, "role", value)
|
670
671
|
|
671
672
|
@property
|
672
673
|
@pulumi.getter
|
673
|
-
def scope(self) -> Optional[pulumi.Input[str]]:
|
674
|
+
def scope(self) -> Optional[pulumi.Input[builtins.str]]:
|
674
675
|
"""
|
675
676
|
Name of the scope.
|
676
677
|
"""
|
677
678
|
return pulumi.get(self, "scope")
|
678
679
|
|
679
680
|
@scope.setter
|
680
|
-
def scope(self, value: Optional[pulumi.Input[str]]):
|
681
|
+
def scope(self, value: Optional[pulumi.Input[builtins.str]]):
|
681
682
|
pulumi.set(self, "scope", value)
|
682
683
|
|
683
684
|
@property
|
684
685
|
@pulumi.getter(name="tlsClientKeyBits")
|
685
|
-
def tls_client_key_bits(self) -> Optional[pulumi.Input[int]]:
|
686
|
+
def tls_client_key_bits(self) -> Optional[pulumi.Input[builtins.int]]:
|
686
687
|
"""
|
687
688
|
Client certificate key bits, valid values depend on key type.
|
688
689
|
"""
|
689
690
|
return pulumi.get(self, "tls_client_key_bits")
|
690
691
|
|
691
692
|
@tls_client_key_bits.setter
|
692
|
-
def tls_client_key_bits(self, value: Optional[pulumi.Input[int]]):
|
693
|
+
def tls_client_key_bits(self, value: Optional[pulumi.Input[builtins.int]]):
|
693
694
|
pulumi.set(self, "tls_client_key_bits", value)
|
694
695
|
|
695
696
|
@property
|
696
697
|
@pulumi.getter(name="tlsClientKeyType")
|
697
|
-
def tls_client_key_type(self) -> Optional[pulumi.Input[str]]:
|
698
|
+
def tls_client_key_type(self) -> Optional[pulumi.Input[builtins.str]]:
|
698
699
|
"""
|
699
700
|
Client certificate key type, `rsa` or `ec`.
|
700
701
|
"""
|
701
702
|
return pulumi.get(self, "tls_client_key_type")
|
702
703
|
|
703
704
|
@tls_client_key_type.setter
|
704
|
-
def tls_client_key_type(self, value: Optional[pulumi.Input[str]]):
|
705
|
+
def tls_client_key_type(self, value: Optional[pulumi.Input[builtins.str]]):
|
705
706
|
pulumi.set(self, "tls_client_key_type", value)
|
706
707
|
|
707
708
|
@property
|
708
709
|
@pulumi.getter(name="tlsClientTtl")
|
709
|
-
def tls_client_ttl(self) -> Optional[pulumi.Input[int]]:
|
710
|
+
def tls_client_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
|
710
711
|
"""
|
711
712
|
Client certificate TTL in seconds.
|
712
713
|
"""
|
713
714
|
return pulumi.get(self, "tls_client_ttl")
|
714
715
|
|
715
716
|
@tls_client_ttl.setter
|
716
|
-
def tls_client_ttl(self, value: Optional[pulumi.Input[int]]):
|
717
|
+
def tls_client_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
|
717
718
|
pulumi.set(self, "tls_client_ttl", value)
|
718
719
|
|
719
720
|
|
@@ -722,27 +723,27 @@ class SecretRole(pulumi.CustomResource):
|
|
722
723
|
def __init__(__self__,
|
723
724
|
resource_name: str,
|
724
725
|
opts: Optional[pulumi.ResourceOptions] = None,
|
725
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
726
|
-
operation_activate: Optional[pulumi.Input[bool]] = None,
|
727
|
-
operation_add_attribute: Optional[pulumi.Input[bool]] = None,
|
728
|
-
operation_all: Optional[pulumi.Input[bool]] = None,
|
729
|
-
operation_create: Optional[pulumi.Input[bool]] = None,
|
730
|
-
operation_destroy: Optional[pulumi.Input[bool]] = None,
|
731
|
-
operation_discover_versions: Optional[pulumi.Input[bool]] = None,
|
732
|
-
operation_get: Optional[pulumi.Input[bool]] = None,
|
733
|
-
operation_get_attribute_list: Optional[pulumi.Input[bool]] = None,
|
734
|
-
operation_get_attributes: Optional[pulumi.Input[bool]] = None,
|
735
|
-
operation_locate: Optional[pulumi.Input[bool]] = None,
|
736
|
-
operation_none: Optional[pulumi.Input[bool]] = None,
|
737
|
-
operation_register: Optional[pulumi.Input[bool]] = None,
|
738
|
-
operation_rekey: Optional[pulumi.Input[bool]] = None,
|
739
|
-
operation_revoke: Optional[pulumi.Input[bool]] = None,
|
740
|
-
path: Optional[pulumi.Input[str]] = None,
|
741
|
-
role: Optional[pulumi.Input[str]] = None,
|
742
|
-
scope: Optional[pulumi.Input[str]] = None,
|
743
|
-
tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
744
|
-
tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
745
|
-
tls_client_ttl: Optional[pulumi.Input[int]] = None,
|
726
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
727
|
+
operation_activate: Optional[pulumi.Input[builtins.bool]] = None,
|
728
|
+
operation_add_attribute: Optional[pulumi.Input[builtins.bool]] = None,
|
729
|
+
operation_all: Optional[pulumi.Input[builtins.bool]] = None,
|
730
|
+
operation_create: Optional[pulumi.Input[builtins.bool]] = None,
|
731
|
+
operation_destroy: Optional[pulumi.Input[builtins.bool]] = None,
|
732
|
+
operation_discover_versions: Optional[pulumi.Input[builtins.bool]] = None,
|
733
|
+
operation_get: Optional[pulumi.Input[builtins.bool]] = None,
|
734
|
+
operation_get_attribute_list: Optional[pulumi.Input[builtins.bool]] = None,
|
735
|
+
operation_get_attributes: Optional[pulumi.Input[builtins.bool]] = None,
|
736
|
+
operation_locate: Optional[pulumi.Input[builtins.bool]] = None,
|
737
|
+
operation_none: Optional[pulumi.Input[builtins.bool]] = None,
|
738
|
+
operation_register: Optional[pulumi.Input[builtins.bool]] = None,
|
739
|
+
operation_rekey: Optional[pulumi.Input[builtins.bool]] = None,
|
740
|
+
operation_revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
741
|
+
path: Optional[pulumi.Input[builtins.str]] = None,
|
742
|
+
role: Optional[pulumi.Input[builtins.str]] = None,
|
743
|
+
scope: Optional[pulumi.Input[builtins.str]] = None,
|
744
|
+
tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
745
|
+
tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
746
|
+
tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
746
747
|
__props__=None):
|
747
748
|
"""
|
748
749
|
Manages KMIP Secret roles in a Vault server. This feature requires
|
@@ -785,31 +786,31 @@ class SecretRole(pulumi.CustomResource):
|
|
785
786
|
|
786
787
|
:param str resource_name: The name of the resource.
|
787
788
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
788
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
789
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
789
790
|
The value should not contain leading or trailing forward slashes.
|
790
791
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
791
792
|
*Available only for Vault Enterprise*.
|
792
|
-
:param pulumi.Input[bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
793
|
-
:param pulumi.Input[bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
794
|
-
:param pulumi.Input[bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
795
|
-
:param pulumi.Input[bool] operation_create: Grant permission to use the KMIP Create operation.
|
796
|
-
:param pulumi.Input[bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
797
|
-
:param pulumi.Input[bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
798
|
-
:param pulumi.Input[bool] operation_get: Grant permission to use the KMIP Get operation.
|
799
|
-
:param pulumi.Input[bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
800
|
-
:param pulumi.Input[bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
801
|
-
:param pulumi.Input[bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
802
|
-
:param pulumi.Input[bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
803
|
-
:param pulumi.Input[bool] operation_register: Grant permission to use the KMIP Register operation.
|
804
|
-
:param pulumi.Input[bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
805
|
-
:param pulumi.Input[bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
806
|
-
:param pulumi.Input[str] path: The unique path this backend should be mounted at. Must
|
793
|
+
:param pulumi.Input[builtins.bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
794
|
+
:param pulumi.Input[builtins.bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
795
|
+
:param pulumi.Input[builtins.bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
796
|
+
:param pulumi.Input[builtins.bool] operation_create: Grant permission to use the KMIP Create operation.
|
797
|
+
:param pulumi.Input[builtins.bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
798
|
+
:param pulumi.Input[builtins.bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
799
|
+
:param pulumi.Input[builtins.bool] operation_get: Grant permission to use the KMIP Get operation.
|
800
|
+
:param pulumi.Input[builtins.bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
801
|
+
:param pulumi.Input[builtins.bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
802
|
+
:param pulumi.Input[builtins.bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
803
|
+
:param pulumi.Input[builtins.bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
804
|
+
:param pulumi.Input[builtins.bool] operation_register: Grant permission to use the KMIP Register operation.
|
805
|
+
:param pulumi.Input[builtins.bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
806
|
+
:param pulumi.Input[builtins.bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
807
|
+
:param pulumi.Input[builtins.str] path: The unique path this backend should be mounted at. Must
|
807
808
|
not begin or end with a `/`. Defaults to `kmip`.
|
808
|
-
:param pulumi.Input[str] role: Name of the role.
|
809
|
-
:param pulumi.Input[str] scope: Name of the scope.
|
810
|
-
:param pulumi.Input[int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
811
|
-
:param pulumi.Input[str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
812
|
-
:param pulumi.Input[int] tls_client_ttl: Client certificate TTL in seconds.
|
809
|
+
:param pulumi.Input[builtins.str] role: Name of the role.
|
810
|
+
:param pulumi.Input[builtins.str] scope: Name of the scope.
|
811
|
+
:param pulumi.Input[builtins.int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
812
|
+
:param pulumi.Input[builtins.str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
813
|
+
:param pulumi.Input[builtins.int] tls_client_ttl: Client certificate TTL in seconds.
|
813
814
|
"""
|
814
815
|
...
|
815
816
|
@overload
|
@@ -871,27 +872,27 @@ class SecretRole(pulumi.CustomResource):
|
|
871
872
|
def _internal_init(__self__,
|
872
873
|
resource_name: str,
|
873
874
|
opts: Optional[pulumi.ResourceOptions] = None,
|
874
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
875
|
-
operation_activate: Optional[pulumi.Input[bool]] = None,
|
876
|
-
operation_add_attribute: Optional[pulumi.Input[bool]] = None,
|
877
|
-
operation_all: Optional[pulumi.Input[bool]] = None,
|
878
|
-
operation_create: Optional[pulumi.Input[bool]] = None,
|
879
|
-
operation_destroy: Optional[pulumi.Input[bool]] = None,
|
880
|
-
operation_discover_versions: Optional[pulumi.Input[bool]] = None,
|
881
|
-
operation_get: Optional[pulumi.Input[bool]] = None,
|
882
|
-
operation_get_attribute_list: Optional[pulumi.Input[bool]] = None,
|
883
|
-
operation_get_attributes: Optional[pulumi.Input[bool]] = None,
|
884
|
-
operation_locate: Optional[pulumi.Input[bool]] = None,
|
885
|
-
operation_none: Optional[pulumi.Input[bool]] = None,
|
886
|
-
operation_register: Optional[pulumi.Input[bool]] = None,
|
887
|
-
operation_rekey: Optional[pulumi.Input[bool]] = None,
|
888
|
-
operation_revoke: Optional[pulumi.Input[bool]] = None,
|
889
|
-
path: Optional[pulumi.Input[str]] = None,
|
890
|
-
role: Optional[pulumi.Input[str]] = None,
|
891
|
-
scope: Optional[pulumi.Input[str]] = None,
|
892
|
-
tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
893
|
-
tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
894
|
-
tls_client_ttl: Optional[pulumi.Input[int]] = None,
|
875
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
876
|
+
operation_activate: Optional[pulumi.Input[builtins.bool]] = None,
|
877
|
+
operation_add_attribute: Optional[pulumi.Input[builtins.bool]] = None,
|
878
|
+
operation_all: Optional[pulumi.Input[builtins.bool]] = None,
|
879
|
+
operation_create: Optional[pulumi.Input[builtins.bool]] = None,
|
880
|
+
operation_destroy: Optional[pulumi.Input[builtins.bool]] = None,
|
881
|
+
operation_discover_versions: Optional[pulumi.Input[builtins.bool]] = None,
|
882
|
+
operation_get: Optional[pulumi.Input[builtins.bool]] = None,
|
883
|
+
operation_get_attribute_list: Optional[pulumi.Input[builtins.bool]] = None,
|
884
|
+
operation_get_attributes: Optional[pulumi.Input[builtins.bool]] = None,
|
885
|
+
operation_locate: Optional[pulumi.Input[builtins.bool]] = None,
|
886
|
+
operation_none: Optional[pulumi.Input[builtins.bool]] = None,
|
887
|
+
operation_register: Optional[pulumi.Input[builtins.bool]] = None,
|
888
|
+
operation_rekey: Optional[pulumi.Input[builtins.bool]] = None,
|
889
|
+
operation_revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
890
|
+
path: Optional[pulumi.Input[builtins.str]] = None,
|
891
|
+
role: Optional[pulumi.Input[builtins.str]] = None,
|
892
|
+
scope: Optional[pulumi.Input[builtins.str]] = None,
|
893
|
+
tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
894
|
+
tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
895
|
+
tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None,
|
895
896
|
__props__=None):
|
896
897
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
897
898
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -938,27 +939,27 @@ class SecretRole(pulumi.CustomResource):
|
|
938
939
|
def get(resource_name: str,
|
939
940
|
id: pulumi.Input[str],
|
940
941
|
opts: Optional[pulumi.ResourceOptions] = None,
|
941
|
-
namespace: Optional[pulumi.Input[str]] = None,
|
942
|
-
operation_activate: Optional[pulumi.Input[bool]] = None,
|
943
|
-
operation_add_attribute: Optional[pulumi.Input[bool]] = None,
|
944
|
-
operation_all: Optional[pulumi.Input[bool]] = None,
|
945
|
-
operation_create: Optional[pulumi.Input[bool]] = None,
|
946
|
-
operation_destroy: Optional[pulumi.Input[bool]] = None,
|
947
|
-
operation_discover_versions: Optional[pulumi.Input[bool]] = None,
|
948
|
-
operation_get: Optional[pulumi.Input[bool]] = None,
|
949
|
-
operation_get_attribute_list: Optional[pulumi.Input[bool]] = None,
|
950
|
-
operation_get_attributes: Optional[pulumi.Input[bool]] = None,
|
951
|
-
operation_locate: Optional[pulumi.Input[bool]] = None,
|
952
|
-
operation_none: Optional[pulumi.Input[bool]] = None,
|
953
|
-
operation_register: Optional[pulumi.Input[bool]] = None,
|
954
|
-
operation_rekey: Optional[pulumi.Input[bool]] = None,
|
955
|
-
operation_revoke: Optional[pulumi.Input[bool]] = None,
|
956
|
-
path: Optional[pulumi.Input[str]] = None,
|
957
|
-
role: Optional[pulumi.Input[str]] = None,
|
958
|
-
scope: Optional[pulumi.Input[str]] = None,
|
959
|
-
tls_client_key_bits: Optional[pulumi.Input[int]] = None,
|
960
|
-
tls_client_key_type: Optional[pulumi.Input[str]] = None,
|
961
|
-
tls_client_ttl: Optional[pulumi.Input[int]] = None) -> 'SecretRole':
|
942
|
+
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
943
|
+
operation_activate: Optional[pulumi.Input[builtins.bool]] = None,
|
944
|
+
operation_add_attribute: Optional[pulumi.Input[builtins.bool]] = None,
|
945
|
+
operation_all: Optional[pulumi.Input[builtins.bool]] = None,
|
946
|
+
operation_create: Optional[pulumi.Input[builtins.bool]] = None,
|
947
|
+
operation_destroy: Optional[pulumi.Input[builtins.bool]] = None,
|
948
|
+
operation_discover_versions: Optional[pulumi.Input[builtins.bool]] = None,
|
949
|
+
operation_get: Optional[pulumi.Input[builtins.bool]] = None,
|
950
|
+
operation_get_attribute_list: Optional[pulumi.Input[builtins.bool]] = None,
|
951
|
+
operation_get_attributes: Optional[pulumi.Input[builtins.bool]] = None,
|
952
|
+
operation_locate: Optional[pulumi.Input[builtins.bool]] = None,
|
953
|
+
operation_none: Optional[pulumi.Input[builtins.bool]] = None,
|
954
|
+
operation_register: Optional[pulumi.Input[builtins.bool]] = None,
|
955
|
+
operation_rekey: Optional[pulumi.Input[builtins.bool]] = None,
|
956
|
+
operation_revoke: Optional[pulumi.Input[builtins.bool]] = None,
|
957
|
+
path: Optional[pulumi.Input[builtins.str]] = None,
|
958
|
+
role: Optional[pulumi.Input[builtins.str]] = None,
|
959
|
+
scope: Optional[pulumi.Input[builtins.str]] = None,
|
960
|
+
tls_client_key_bits: Optional[pulumi.Input[builtins.int]] = None,
|
961
|
+
tls_client_key_type: Optional[pulumi.Input[builtins.str]] = None,
|
962
|
+
tls_client_ttl: Optional[pulumi.Input[builtins.int]] = None) -> 'SecretRole':
|
962
963
|
"""
|
963
964
|
Get an existing SecretRole resource's state with the given name, id, and optional extra
|
964
965
|
properties used to qualify the lookup.
|
@@ -966,31 +967,31 @@ class SecretRole(pulumi.CustomResource):
|
|
966
967
|
:param str resource_name: The unique name of the resulting resource.
|
967
968
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
968
969
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
969
|
-
:param pulumi.Input[str] namespace: The namespace to provision the resource in.
|
970
|
+
:param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
|
970
971
|
The value should not contain leading or trailing forward slashes.
|
971
972
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
972
973
|
*Available only for Vault Enterprise*.
|
973
|
-
:param pulumi.Input[bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
974
|
-
:param pulumi.Input[bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
975
|
-
:param pulumi.Input[bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
976
|
-
:param pulumi.Input[bool] operation_create: Grant permission to use the KMIP Create operation.
|
977
|
-
:param pulumi.Input[bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
978
|
-
:param pulumi.Input[bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
979
|
-
:param pulumi.Input[bool] operation_get: Grant permission to use the KMIP Get operation.
|
980
|
-
:param pulumi.Input[bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
981
|
-
:param pulumi.Input[bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
982
|
-
:param pulumi.Input[bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
983
|
-
:param pulumi.Input[bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
984
|
-
:param pulumi.Input[bool] operation_register: Grant permission to use the KMIP Register operation.
|
985
|
-
:param pulumi.Input[bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
986
|
-
:param pulumi.Input[bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
987
|
-
:param pulumi.Input[str] path: The unique path this backend should be mounted at. Must
|
974
|
+
:param pulumi.Input[builtins.bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
975
|
+
:param pulumi.Input[builtins.bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
976
|
+
:param pulumi.Input[builtins.bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
977
|
+
:param pulumi.Input[builtins.bool] operation_create: Grant permission to use the KMIP Create operation.
|
978
|
+
:param pulumi.Input[builtins.bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
979
|
+
:param pulumi.Input[builtins.bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
980
|
+
:param pulumi.Input[builtins.bool] operation_get: Grant permission to use the KMIP Get operation.
|
981
|
+
:param pulumi.Input[builtins.bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
982
|
+
:param pulumi.Input[builtins.bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
983
|
+
:param pulumi.Input[builtins.bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
984
|
+
:param pulumi.Input[builtins.bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
985
|
+
:param pulumi.Input[builtins.bool] operation_register: Grant permission to use the KMIP Register operation.
|
986
|
+
:param pulumi.Input[builtins.bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
987
|
+
:param pulumi.Input[builtins.bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
988
|
+
:param pulumi.Input[builtins.str] path: The unique path this backend should be mounted at. Must
|
988
989
|
not begin or end with a `/`. Defaults to `kmip`.
|
989
|
-
:param pulumi.Input[str] role: Name of the role.
|
990
|
-
:param pulumi.Input[str] scope: Name of the scope.
|
991
|
-
:param pulumi.Input[int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
992
|
-
:param pulumi.Input[str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
993
|
-
:param pulumi.Input[int] tls_client_ttl: Client certificate TTL in seconds.
|
990
|
+
:param pulumi.Input[builtins.str] role: Name of the role.
|
991
|
+
:param pulumi.Input[builtins.str] scope: Name of the scope.
|
992
|
+
:param pulumi.Input[builtins.int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
993
|
+
:param pulumi.Input[builtins.str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
994
|
+
:param pulumi.Input[builtins.int] tls_client_ttl: Client certificate TTL in seconds.
|
994
995
|
"""
|
995
996
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
996
997
|
|
@@ -1021,7 +1022,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1021
1022
|
|
1022
1023
|
@property
|
1023
1024
|
@pulumi.getter
|
1024
|
-
def namespace(self) -> pulumi.Output[Optional[str]]:
|
1025
|
+
def namespace(self) -> pulumi.Output[Optional[builtins.str]]:
|
1025
1026
|
"""
|
1026
1027
|
The namespace to provision the resource in.
|
1027
1028
|
The value should not contain leading or trailing forward slashes.
|
@@ -1032,7 +1033,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1032
1033
|
|
1033
1034
|
@property
|
1034
1035
|
@pulumi.getter(name="operationActivate")
|
1035
|
-
def operation_activate(self) -> pulumi.Output[bool]:
|
1036
|
+
def operation_activate(self) -> pulumi.Output[builtins.bool]:
|
1036
1037
|
"""
|
1037
1038
|
Grant permission to use the KMIP Activate operation.
|
1038
1039
|
"""
|
@@ -1040,7 +1041,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1040
1041
|
|
1041
1042
|
@property
|
1042
1043
|
@pulumi.getter(name="operationAddAttribute")
|
1043
|
-
def operation_add_attribute(self) -> pulumi.Output[bool]:
|
1044
|
+
def operation_add_attribute(self) -> pulumi.Output[builtins.bool]:
|
1044
1045
|
"""
|
1045
1046
|
Grant permission to use the KMIP Add Attribute operation.
|
1046
1047
|
"""
|
@@ -1048,7 +1049,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1048
1049
|
|
1049
1050
|
@property
|
1050
1051
|
@pulumi.getter(name="operationAll")
|
1051
|
-
def operation_all(self) -> pulumi.Output[bool]:
|
1052
|
+
def operation_all(self) -> pulumi.Output[builtins.bool]:
|
1052
1053
|
"""
|
1053
1054
|
Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
1054
1055
|
"""
|
@@ -1056,7 +1057,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1056
1057
|
|
1057
1058
|
@property
|
1058
1059
|
@pulumi.getter(name="operationCreate")
|
1059
|
-
def operation_create(self) -> pulumi.Output[bool]:
|
1060
|
+
def operation_create(self) -> pulumi.Output[builtins.bool]:
|
1060
1061
|
"""
|
1061
1062
|
Grant permission to use the KMIP Create operation.
|
1062
1063
|
"""
|
@@ -1064,7 +1065,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1064
1065
|
|
1065
1066
|
@property
|
1066
1067
|
@pulumi.getter(name="operationDestroy")
|
1067
|
-
def operation_destroy(self) -> pulumi.Output[bool]:
|
1068
|
+
def operation_destroy(self) -> pulumi.Output[builtins.bool]:
|
1068
1069
|
"""
|
1069
1070
|
Grant permission to use the KMIP Destroy operation.
|
1070
1071
|
"""
|
@@ -1072,7 +1073,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1072
1073
|
|
1073
1074
|
@property
|
1074
1075
|
@pulumi.getter(name="operationDiscoverVersions")
|
1075
|
-
def operation_discover_versions(self) -> pulumi.Output[bool]:
|
1076
|
+
def operation_discover_versions(self) -> pulumi.Output[builtins.bool]:
|
1076
1077
|
"""
|
1077
1078
|
Grant permission to use the KMIP Discover Version operation.
|
1078
1079
|
"""
|
@@ -1080,7 +1081,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1080
1081
|
|
1081
1082
|
@property
|
1082
1083
|
@pulumi.getter(name="operationGet")
|
1083
|
-
def operation_get(self) -> pulumi.Output[bool]:
|
1084
|
+
def operation_get(self) -> pulumi.Output[builtins.bool]:
|
1084
1085
|
"""
|
1085
1086
|
Grant permission to use the KMIP Get operation.
|
1086
1087
|
"""
|
@@ -1088,7 +1089,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1088
1089
|
|
1089
1090
|
@property
|
1090
1091
|
@pulumi.getter(name="operationGetAttributeList")
|
1091
|
-
def operation_get_attribute_list(self) -> pulumi.Output[bool]:
|
1092
|
+
def operation_get_attribute_list(self) -> pulumi.Output[builtins.bool]:
|
1092
1093
|
"""
|
1093
1094
|
Grant permission to use the KMIP Get Atrribute List operation.
|
1094
1095
|
"""
|
@@ -1096,7 +1097,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1096
1097
|
|
1097
1098
|
@property
|
1098
1099
|
@pulumi.getter(name="operationGetAttributes")
|
1099
|
-
def operation_get_attributes(self) -> pulumi.Output[bool]:
|
1100
|
+
def operation_get_attributes(self) -> pulumi.Output[builtins.bool]:
|
1100
1101
|
"""
|
1101
1102
|
Grant permission to use the KMIP Get Atrributes operation.
|
1102
1103
|
"""
|
@@ -1104,7 +1105,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1104
1105
|
|
1105
1106
|
@property
|
1106
1107
|
@pulumi.getter(name="operationLocate")
|
1107
|
-
def operation_locate(self) -> pulumi.Output[bool]:
|
1108
|
+
def operation_locate(self) -> pulumi.Output[builtins.bool]:
|
1108
1109
|
"""
|
1109
1110
|
Grant permission to use the KMIP Get Locate operation.
|
1110
1111
|
"""
|
@@ -1112,7 +1113,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1112
1113
|
|
1113
1114
|
@property
|
1114
1115
|
@pulumi.getter(name="operationNone")
|
1115
|
-
def operation_none(self) -> pulumi.Output[bool]:
|
1116
|
+
def operation_none(self) -> pulumi.Output[builtins.bool]:
|
1116
1117
|
"""
|
1117
1118
|
Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
1118
1119
|
"""
|
@@ -1120,7 +1121,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1120
1121
|
|
1121
1122
|
@property
|
1122
1123
|
@pulumi.getter(name="operationRegister")
|
1123
|
-
def operation_register(self) -> pulumi.Output[bool]:
|
1124
|
+
def operation_register(self) -> pulumi.Output[builtins.bool]:
|
1124
1125
|
"""
|
1125
1126
|
Grant permission to use the KMIP Register operation.
|
1126
1127
|
"""
|
@@ -1128,7 +1129,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1128
1129
|
|
1129
1130
|
@property
|
1130
1131
|
@pulumi.getter(name="operationRekey")
|
1131
|
-
def operation_rekey(self) -> pulumi.Output[bool]:
|
1132
|
+
def operation_rekey(self) -> pulumi.Output[builtins.bool]:
|
1132
1133
|
"""
|
1133
1134
|
Grant permission to use the KMIP Rekey operation.
|
1134
1135
|
"""
|
@@ -1136,7 +1137,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1136
1137
|
|
1137
1138
|
@property
|
1138
1139
|
@pulumi.getter(name="operationRevoke")
|
1139
|
-
def operation_revoke(self) -> pulumi.Output[bool]:
|
1140
|
+
def operation_revoke(self) -> pulumi.Output[builtins.bool]:
|
1140
1141
|
"""
|
1141
1142
|
Grant permission to use the KMIP Revoke operation.
|
1142
1143
|
"""
|
@@ -1144,7 +1145,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1144
1145
|
|
1145
1146
|
@property
|
1146
1147
|
@pulumi.getter
|
1147
|
-
def path(self) -> pulumi.Output[str]:
|
1148
|
+
def path(self) -> pulumi.Output[builtins.str]:
|
1148
1149
|
"""
|
1149
1150
|
The unique path this backend should be mounted at. Must
|
1150
1151
|
not begin or end with a `/`. Defaults to `kmip`.
|
@@ -1153,7 +1154,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1153
1154
|
|
1154
1155
|
@property
|
1155
1156
|
@pulumi.getter
|
1156
|
-
def role(self) -> pulumi.Output[str]:
|
1157
|
+
def role(self) -> pulumi.Output[builtins.str]:
|
1157
1158
|
"""
|
1158
1159
|
Name of the role.
|
1159
1160
|
"""
|
@@ -1161,7 +1162,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1161
1162
|
|
1162
1163
|
@property
|
1163
1164
|
@pulumi.getter
|
1164
|
-
def scope(self) -> pulumi.Output[str]:
|
1165
|
+
def scope(self) -> pulumi.Output[builtins.str]:
|
1165
1166
|
"""
|
1166
1167
|
Name of the scope.
|
1167
1168
|
"""
|
@@ -1169,7 +1170,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1169
1170
|
|
1170
1171
|
@property
|
1171
1172
|
@pulumi.getter(name="tlsClientKeyBits")
|
1172
|
-
def tls_client_key_bits(self) -> pulumi.Output[Optional[int]]:
|
1173
|
+
def tls_client_key_bits(self) -> pulumi.Output[Optional[builtins.int]]:
|
1173
1174
|
"""
|
1174
1175
|
Client certificate key bits, valid values depend on key type.
|
1175
1176
|
"""
|
@@ -1177,7 +1178,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1177
1178
|
|
1178
1179
|
@property
|
1179
1180
|
@pulumi.getter(name="tlsClientKeyType")
|
1180
|
-
def tls_client_key_type(self) -> pulumi.Output[Optional[str]]:
|
1181
|
+
def tls_client_key_type(self) -> pulumi.Output[Optional[builtins.str]]:
|
1181
1182
|
"""
|
1182
1183
|
Client certificate key type, `rsa` or `ec`.
|
1183
1184
|
"""
|
@@ -1185,7 +1186,7 @@ class SecretRole(pulumi.CustomResource):
|
|
1185
1186
|
|
1186
1187
|
@property
|
1187
1188
|
@pulumi.getter(name="tlsClientTtl")
|
1188
|
-
def tls_client_ttl(self) -> pulumi.Output[Optional[int]]:
|
1189
|
+
def tls_client_ttl(self) -> pulumi.Output[Optional[builtins.int]]:
|
1189
1190
|
"""
|
1190
1191
|
Client certificate TTL in seconds.
|
1191
1192
|
"""
|