pulumi-vault 6.8.0a1750231010__py3-none-any.whl → 7.0.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +0 -9
- pulumi_vault/_inputs.py +88 -83
- pulumi_vault/azure/backend.py +5 -93
- pulumi_vault/config/outputs.py +52 -47
- pulumi_vault/database/_inputs.py +440 -0
- pulumi_vault/database/outputs.py +308 -0
- pulumi_vault/database/secret_backend_connection.py +14 -0
- pulumi_vault/database/secrets_mount.py +14 -0
- pulumi_vault/gcp/secret_backend.py +61 -0
- pulumi_vault/kv/_inputs.py +12 -12
- pulumi_vault/kv/outputs.py +8 -8
- pulumi_vault/kv/secret_v2.py +101 -36
- pulumi_vault/okta/auth_backend.py +0 -126
- pulumi_vault/provider.py +1 -5
- pulumi_vault/pulumi-plugin.json +1 -1
- {pulumi_vault-6.8.0a1750231010.dist-info → pulumi_vault-7.0.0.dist-info}/METADATA +1 -1
- {pulumi_vault-6.8.0a1750231010.dist-info → pulumi_vault-7.0.0.dist-info}/RECORD +19 -20
- pulumi_vault/password_policy.py +0 -318
- {pulumi_vault-6.8.0a1750231010.dist-info → pulumi_vault-7.0.0.dist-info}/WHEEL +0 -0
- {pulumi_vault-6.8.0a1750231010.dist-info → pulumi_vault-7.0.0.dist-info}/top_level.txt +0 -0
pulumi_vault/__init__.py
CHANGED
@@ -26,7 +26,6 @@ from .mount import *
|
|
26
26
|
from .namespace import *
|
27
27
|
from .nomad_secret_backend import *
|
28
28
|
from .nomad_secret_role import *
|
29
|
-
from .password_policy import *
|
30
29
|
from .plugin import *
|
31
30
|
from .plugin_pinned_version import *
|
32
31
|
from .policy import *
|
@@ -734,14 +733,6 @@ _utilities.register(
|
|
734
733
|
"vault:index/nomadSecretRole:NomadSecretRole": "NomadSecretRole"
|
735
734
|
}
|
736
735
|
},
|
737
|
-
{
|
738
|
-
"pkg": "vault",
|
739
|
-
"mod": "index/passwordPolicy",
|
740
|
-
"fqn": "pulumi_vault",
|
741
|
-
"classes": {
|
742
|
-
"vault:index/passwordPolicy:PasswordPolicy": "PasswordPolicy"
|
743
|
-
}
|
744
|
-
},
|
745
736
|
{
|
746
737
|
"pkg": "vault",
|
747
738
|
"mod": "index/plugin",
|
pulumi_vault/_inputs.py
CHANGED
@@ -1211,14 +1211,14 @@ class ProviderAuthLoginGcpArgs:
|
|
1211
1211
|
|
1212
1212
|
if not MYPY:
|
1213
1213
|
class ProviderAuthLoginJwtArgsDict(TypedDict):
|
1214
|
-
jwt: pulumi.Input[builtins.str]
|
1215
|
-
"""
|
1216
|
-
A signed JSON Web Token.
|
1217
|
-
"""
|
1218
1214
|
role: pulumi.Input[builtins.str]
|
1219
1215
|
"""
|
1220
1216
|
Name of the login role.
|
1221
1217
|
"""
|
1218
|
+
jwt: NotRequired[pulumi.Input[builtins.str]]
|
1219
|
+
"""
|
1220
|
+
A signed JSON Web Token.
|
1221
|
+
"""
|
1222
1222
|
mount: NotRequired[pulumi.Input[builtins.str]]
|
1223
1223
|
"""
|
1224
1224
|
The path where the authentication engine is mounted.
|
@@ -1237,20 +1237,21 @@ elif False:
|
|
1237
1237
|
@pulumi.input_type
|
1238
1238
|
class ProviderAuthLoginJwtArgs:
|
1239
1239
|
def __init__(__self__, *,
|
1240
|
-
jwt: pulumi.Input[builtins.str],
|
1241
1240
|
role: pulumi.Input[builtins.str],
|
1241
|
+
jwt: Optional[pulumi.Input[builtins.str]] = None,
|
1242
1242
|
mount: Optional[pulumi.Input[builtins.str]] = None,
|
1243
1243
|
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
1244
1244
|
use_root_namespace: Optional[pulumi.Input[builtins.bool]] = None):
|
1245
1245
|
"""
|
1246
|
-
:param pulumi.Input[builtins.str] jwt: A signed JSON Web Token.
|
1247
1246
|
:param pulumi.Input[builtins.str] role: Name of the login role.
|
1247
|
+
:param pulumi.Input[builtins.str] jwt: A signed JSON Web Token.
|
1248
1248
|
:param pulumi.Input[builtins.str] mount: The path where the authentication engine is mounted.
|
1249
1249
|
:param pulumi.Input[builtins.str] namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
1250
1250
|
:param pulumi.Input[builtins.bool] use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
1251
1251
|
"""
|
1252
|
-
pulumi.set(__self__, "jwt", jwt)
|
1253
1252
|
pulumi.set(__self__, "role", role)
|
1253
|
+
if jwt is not None:
|
1254
|
+
pulumi.set(__self__, "jwt", jwt)
|
1254
1255
|
if mount is not None:
|
1255
1256
|
pulumi.set(__self__, "mount", mount)
|
1256
1257
|
if namespace is not None:
|
@@ -1258,18 +1259,6 @@ class ProviderAuthLoginJwtArgs:
|
|
1258
1259
|
if use_root_namespace is not None:
|
1259
1260
|
pulumi.set(__self__, "use_root_namespace", use_root_namespace)
|
1260
1261
|
|
1261
|
-
@property
|
1262
|
-
@pulumi.getter
|
1263
|
-
def jwt(self) -> pulumi.Input[builtins.str]:
|
1264
|
-
"""
|
1265
|
-
A signed JSON Web Token.
|
1266
|
-
"""
|
1267
|
-
return pulumi.get(self, "jwt")
|
1268
|
-
|
1269
|
-
@jwt.setter
|
1270
|
-
def jwt(self, value: pulumi.Input[builtins.str]):
|
1271
|
-
pulumi.set(self, "jwt", value)
|
1272
|
-
|
1273
1262
|
@property
|
1274
1263
|
@pulumi.getter
|
1275
1264
|
def role(self) -> pulumi.Input[builtins.str]:
|
@@ -1282,6 +1271,18 @@ class ProviderAuthLoginJwtArgs:
|
|
1282
1271
|
def role(self, value: pulumi.Input[builtins.str]):
|
1283
1272
|
pulumi.set(self, "role", value)
|
1284
1273
|
|
1274
|
+
@property
|
1275
|
+
@pulumi.getter
|
1276
|
+
def jwt(self) -> Optional[pulumi.Input[builtins.str]]:
|
1277
|
+
"""
|
1278
|
+
A signed JSON Web Token.
|
1279
|
+
"""
|
1280
|
+
return pulumi.get(self, "jwt")
|
1281
|
+
|
1282
|
+
@jwt.setter
|
1283
|
+
def jwt(self, value: Optional[pulumi.Input[builtins.str]]):
|
1284
|
+
pulumi.set(self, "jwt", value)
|
1285
|
+
|
1285
1286
|
@property
|
1286
1287
|
@pulumi.getter
|
1287
1288
|
def mount(self) -> Optional[pulumi.Input[builtins.str]]:
|
@@ -1794,14 +1795,6 @@ class ProviderAuthLoginOidcArgs:
|
|
1794
1795
|
|
1795
1796
|
if not MYPY:
|
1796
1797
|
class ProviderAuthLoginRadiusArgsDict(TypedDict):
|
1797
|
-
password: pulumi.Input[builtins.str]
|
1798
|
-
"""
|
1799
|
-
The Radius password for username.
|
1800
|
-
"""
|
1801
|
-
username: pulumi.Input[builtins.str]
|
1802
|
-
"""
|
1803
|
-
The Radius username.
|
1804
|
-
"""
|
1805
1798
|
mount: NotRequired[pulumi.Input[builtins.str]]
|
1806
1799
|
"""
|
1807
1800
|
The path where the authentication engine is mounted.
|
@@ -1810,60 +1803,46 @@ if not MYPY:
|
|
1810
1803
|
"""
|
1811
1804
|
The authentication engine's namespace. Conflicts with use_root_namespace
|
1812
1805
|
"""
|
1806
|
+
password: NotRequired[pulumi.Input[builtins.str]]
|
1807
|
+
"""
|
1808
|
+
The Radius password for username.
|
1809
|
+
"""
|
1813
1810
|
use_root_namespace: NotRequired[pulumi.Input[builtins.bool]]
|
1814
1811
|
"""
|
1815
1812
|
Authenticate to the root Vault namespace. Conflicts with namespace
|
1816
1813
|
"""
|
1814
|
+
username: NotRequired[pulumi.Input[builtins.str]]
|
1815
|
+
"""
|
1816
|
+
The Radius username.
|
1817
|
+
"""
|
1817
1818
|
elif False:
|
1818
1819
|
ProviderAuthLoginRadiusArgsDict: TypeAlias = Mapping[str, Any]
|
1819
1820
|
|
1820
1821
|
@pulumi.input_type
|
1821
1822
|
class ProviderAuthLoginRadiusArgs:
|
1822
1823
|
def __init__(__self__, *,
|
1823
|
-
password: pulumi.Input[builtins.str],
|
1824
|
-
username: pulumi.Input[builtins.str],
|
1825
1824
|
mount: Optional[pulumi.Input[builtins.str]] = None,
|
1826
1825
|
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
1827
|
-
|
1826
|
+
password: Optional[pulumi.Input[builtins.str]] = None,
|
1827
|
+
use_root_namespace: Optional[pulumi.Input[builtins.bool]] = None,
|
1828
|
+
username: Optional[pulumi.Input[builtins.str]] = None):
|
1828
1829
|
"""
|
1829
|
-
:param pulumi.Input[builtins.str] password: The Radius password for username.
|
1830
|
-
:param pulumi.Input[builtins.str] username: The Radius username.
|
1831
1830
|
:param pulumi.Input[builtins.str] mount: The path where the authentication engine is mounted.
|
1832
1831
|
:param pulumi.Input[builtins.str] namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
1832
|
+
:param pulumi.Input[builtins.str] password: The Radius password for username.
|
1833
1833
|
:param pulumi.Input[builtins.bool] use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
1834
|
+
:param pulumi.Input[builtins.str] username: The Radius username.
|
1834
1835
|
"""
|
1835
|
-
pulumi.set(__self__, "password", password)
|
1836
|
-
pulumi.set(__self__, "username", username)
|
1837
1836
|
if mount is not None:
|
1838
1837
|
pulumi.set(__self__, "mount", mount)
|
1839
1838
|
if namespace is not None:
|
1840
1839
|
pulumi.set(__self__, "namespace", namespace)
|
1840
|
+
if password is not None:
|
1841
|
+
pulumi.set(__self__, "password", password)
|
1841
1842
|
if use_root_namespace is not None:
|
1842
1843
|
pulumi.set(__self__, "use_root_namespace", use_root_namespace)
|
1843
|
-
|
1844
|
-
|
1845
|
-
@pulumi.getter
|
1846
|
-
def password(self) -> pulumi.Input[builtins.str]:
|
1847
|
-
"""
|
1848
|
-
The Radius password for username.
|
1849
|
-
"""
|
1850
|
-
return pulumi.get(self, "password")
|
1851
|
-
|
1852
|
-
@password.setter
|
1853
|
-
def password(self, value: pulumi.Input[builtins.str]):
|
1854
|
-
pulumi.set(self, "password", value)
|
1855
|
-
|
1856
|
-
@property
|
1857
|
-
@pulumi.getter
|
1858
|
-
def username(self) -> pulumi.Input[builtins.str]:
|
1859
|
-
"""
|
1860
|
-
The Radius username.
|
1861
|
-
"""
|
1862
|
-
return pulumi.get(self, "username")
|
1863
|
-
|
1864
|
-
@username.setter
|
1865
|
-
def username(self, value: pulumi.Input[builtins.str]):
|
1866
|
-
pulumi.set(self, "username", value)
|
1844
|
+
if username is not None:
|
1845
|
+
pulumi.set(__self__, "username", username)
|
1867
1846
|
|
1868
1847
|
@property
|
1869
1848
|
@pulumi.getter
|
@@ -1889,6 +1868,18 @@ class ProviderAuthLoginRadiusArgs:
|
|
1889
1868
|
def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
|
1890
1869
|
pulumi.set(self, "namespace", value)
|
1891
1870
|
|
1871
|
+
@property
|
1872
|
+
@pulumi.getter
|
1873
|
+
def password(self) -> Optional[pulumi.Input[builtins.str]]:
|
1874
|
+
"""
|
1875
|
+
The Radius password for username.
|
1876
|
+
"""
|
1877
|
+
return pulumi.get(self, "password")
|
1878
|
+
|
1879
|
+
@password.setter
|
1880
|
+
def password(self, value: Optional[pulumi.Input[builtins.str]]):
|
1881
|
+
pulumi.set(self, "password", value)
|
1882
|
+
|
1892
1883
|
@property
|
1893
1884
|
@pulumi.getter(name="useRootNamespace")
|
1894
1885
|
def use_root_namespace(self) -> Optional[pulumi.Input[builtins.bool]]:
|
@@ -1901,10 +1892,22 @@ class ProviderAuthLoginRadiusArgs:
|
|
1901
1892
|
def use_root_namespace(self, value: Optional[pulumi.Input[builtins.bool]]):
|
1902
1893
|
pulumi.set(self, "use_root_namespace", value)
|
1903
1894
|
|
1895
|
+
@property
|
1896
|
+
@pulumi.getter
|
1897
|
+
def username(self) -> Optional[pulumi.Input[builtins.str]]:
|
1898
|
+
"""
|
1899
|
+
The Radius username.
|
1900
|
+
"""
|
1901
|
+
return pulumi.get(self, "username")
|
1902
|
+
|
1903
|
+
@username.setter
|
1904
|
+
def username(self, value: Optional[pulumi.Input[builtins.str]]):
|
1905
|
+
pulumi.set(self, "username", value)
|
1906
|
+
|
1904
1907
|
|
1905
1908
|
if not MYPY:
|
1906
1909
|
class ProviderAuthLoginTokenFileArgsDict(TypedDict):
|
1907
|
-
filename: pulumi.Input[builtins.str]
|
1910
|
+
filename: NotRequired[pulumi.Input[builtins.str]]
|
1908
1911
|
"""
|
1909
1912
|
The name of a file containing a single line that is a valid Vault token
|
1910
1913
|
"""
|
@@ -1922,7 +1925,7 @@ elif False:
|
|
1922
1925
|
@pulumi.input_type
|
1923
1926
|
class ProviderAuthLoginTokenFileArgs:
|
1924
1927
|
def __init__(__self__, *,
|
1925
|
-
filename: pulumi.Input[builtins.str],
|
1928
|
+
filename: Optional[pulumi.Input[builtins.str]] = None,
|
1926
1929
|
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
1927
1930
|
use_root_namespace: Optional[pulumi.Input[builtins.bool]] = None):
|
1928
1931
|
"""
|
@@ -1930,7 +1933,8 @@ class ProviderAuthLoginTokenFileArgs:
|
|
1930
1933
|
:param pulumi.Input[builtins.str] namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
1931
1934
|
:param pulumi.Input[builtins.bool] use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
1932
1935
|
"""
|
1933
|
-
|
1936
|
+
if filename is not None:
|
1937
|
+
pulumi.set(__self__, "filename", filename)
|
1934
1938
|
if namespace is not None:
|
1935
1939
|
pulumi.set(__self__, "namespace", namespace)
|
1936
1940
|
if use_root_namespace is not None:
|
@@ -1938,14 +1942,14 @@ class ProviderAuthLoginTokenFileArgs:
|
|
1938
1942
|
|
1939
1943
|
@property
|
1940
1944
|
@pulumi.getter
|
1941
|
-
def filename(self) -> pulumi.Input[builtins.str]:
|
1945
|
+
def filename(self) -> Optional[pulumi.Input[builtins.str]]:
|
1942
1946
|
"""
|
1943
1947
|
The name of a file containing a single line that is a valid Vault token
|
1944
1948
|
"""
|
1945
1949
|
return pulumi.get(self, "filename")
|
1946
1950
|
|
1947
1951
|
@filename.setter
|
1948
|
-
def filename(self, value: pulumi.Input[builtins.str]):
|
1952
|
+
def filename(self, value: Optional[pulumi.Input[builtins.str]]):
|
1949
1953
|
pulumi.set(self, "filename", value)
|
1950
1954
|
|
1951
1955
|
@property
|
@@ -1975,10 +1979,6 @@ class ProviderAuthLoginTokenFileArgs:
|
|
1975
1979
|
|
1976
1980
|
if not MYPY:
|
1977
1981
|
class ProviderAuthLoginUserpassArgsDict(TypedDict):
|
1978
|
-
username: pulumi.Input[builtins.str]
|
1979
|
-
"""
|
1980
|
-
Login with username
|
1981
|
-
"""
|
1982
1982
|
mount: NotRequired[pulumi.Input[builtins.str]]
|
1983
1983
|
"""
|
1984
1984
|
The path where the authentication engine is mounted.
|
@@ -1999,27 +1999,30 @@ if not MYPY:
|
|
1999
1999
|
"""
|
2000
2000
|
Authenticate to the root Vault namespace. Conflicts with namespace
|
2001
2001
|
"""
|
2002
|
+
username: NotRequired[pulumi.Input[builtins.str]]
|
2003
|
+
"""
|
2004
|
+
Login with username
|
2005
|
+
"""
|
2002
2006
|
elif False:
|
2003
2007
|
ProviderAuthLoginUserpassArgsDict: TypeAlias = Mapping[str, Any]
|
2004
2008
|
|
2005
2009
|
@pulumi.input_type
|
2006
2010
|
class ProviderAuthLoginUserpassArgs:
|
2007
2011
|
def __init__(__self__, *,
|
2008
|
-
username: pulumi.Input[builtins.str],
|
2009
2012
|
mount: Optional[pulumi.Input[builtins.str]] = None,
|
2010
2013
|
namespace: Optional[pulumi.Input[builtins.str]] = None,
|
2011
2014
|
password: Optional[pulumi.Input[builtins.str]] = None,
|
2012
2015
|
password_file: Optional[pulumi.Input[builtins.str]] = None,
|
2013
|
-
use_root_namespace: Optional[pulumi.Input[builtins.bool]] = None
|
2016
|
+
use_root_namespace: Optional[pulumi.Input[builtins.bool]] = None,
|
2017
|
+
username: Optional[pulumi.Input[builtins.str]] = None):
|
2014
2018
|
"""
|
2015
|
-
:param pulumi.Input[builtins.str] username: Login with username
|
2016
2019
|
:param pulumi.Input[builtins.str] mount: The path where the authentication engine is mounted.
|
2017
2020
|
:param pulumi.Input[builtins.str] namespace: The authentication engine's namespace. Conflicts with use_root_namespace
|
2018
2021
|
:param pulumi.Input[builtins.str] password: Login with password
|
2019
2022
|
:param pulumi.Input[builtins.str] password_file: Login with password from a file
|
2020
2023
|
:param pulumi.Input[builtins.bool] use_root_namespace: Authenticate to the root Vault namespace. Conflicts with namespace
|
2024
|
+
:param pulumi.Input[builtins.str] username: Login with username
|
2021
2025
|
"""
|
2022
|
-
pulumi.set(__self__, "username", username)
|
2023
2026
|
if mount is not None:
|
2024
2027
|
pulumi.set(__self__, "mount", mount)
|
2025
2028
|
if namespace is not None:
|
@@ -2030,18 +2033,8 @@ class ProviderAuthLoginUserpassArgs:
|
|
2030
2033
|
pulumi.set(__self__, "password_file", password_file)
|
2031
2034
|
if use_root_namespace is not None:
|
2032
2035
|
pulumi.set(__self__, "use_root_namespace", use_root_namespace)
|
2033
|
-
|
2034
|
-
|
2035
|
-
@pulumi.getter
|
2036
|
-
def username(self) -> pulumi.Input[builtins.str]:
|
2037
|
-
"""
|
2038
|
-
Login with username
|
2039
|
-
"""
|
2040
|
-
return pulumi.get(self, "username")
|
2041
|
-
|
2042
|
-
@username.setter
|
2043
|
-
def username(self, value: pulumi.Input[builtins.str]):
|
2044
|
-
pulumi.set(self, "username", value)
|
2036
|
+
if username is not None:
|
2037
|
+
pulumi.set(__self__, "username", username)
|
2045
2038
|
|
2046
2039
|
@property
|
2047
2040
|
@pulumi.getter
|
@@ -2103,6 +2096,18 @@ class ProviderAuthLoginUserpassArgs:
|
|
2103
2096
|
def use_root_namespace(self, value: Optional[pulumi.Input[builtins.bool]]):
|
2104
2097
|
pulumi.set(self, "use_root_namespace", value)
|
2105
2098
|
|
2099
|
+
@property
|
2100
|
+
@pulumi.getter
|
2101
|
+
def username(self) -> Optional[pulumi.Input[builtins.str]]:
|
2102
|
+
"""
|
2103
|
+
Login with username
|
2104
|
+
"""
|
2105
|
+
return pulumi.get(self, "username")
|
2106
|
+
|
2107
|
+
@username.setter
|
2108
|
+
def username(self, value: Optional[pulumi.Input[builtins.str]]):
|
2109
|
+
pulumi.set(self, "username", value)
|
2110
|
+
|
2106
2111
|
|
2107
2112
|
if not MYPY:
|
2108
2113
|
class ProviderClientAuthArgsDict(TypedDict):
|
pulumi_vault/azure/backend.py
CHANGED
@@ -35,8 +35,7 @@ class BackendArgs:
|
|
35
35
|
path: Optional[pulumi.Input[builtins.str]] = None,
|
36
36
|
rotation_period: Optional[pulumi.Input[builtins.int]] = None,
|
37
37
|
rotation_schedule: Optional[pulumi.Input[builtins.str]] = None,
|
38
|
-
rotation_window: Optional[pulumi.Input[builtins.int]] = None
|
39
|
-
use_microsoft_graph_api: Optional[pulumi.Input[builtins.bool]] = None):
|
38
|
+
rotation_window: Optional[pulumi.Input[builtins.int]] = None):
|
40
39
|
"""
|
41
40
|
The set of arguments for constructing a Backend resource.
|
42
41
|
:param pulumi.Input[builtins.str] subscription_id: The subscription id for the Azure Active Directory.
|
@@ -69,7 +68,6 @@ class BackendArgs:
|
|
69
68
|
:param pulumi.Input[builtins.int] rotation_window: The maximum amount of time in seconds allowed to complete
|
70
69
|
a rotation when a scheduled token rotation occurs. The default rotation window is
|
71
70
|
unbound and the minimum allowable window is `3600`. Requires Vault Enterprise 1.19+. *Available only for Vault Enterprise*
|
72
|
-
:param pulumi.Input[builtins.bool] use_microsoft_graph_api: Use the Microsoft Graph API. Should be set to true on vault-1.10+
|
73
71
|
"""
|
74
72
|
pulumi.set(__self__, "subscription_id", subscription_id)
|
75
73
|
pulumi.set(__self__, "tenant_id", tenant_id)
|
@@ -101,11 +99,6 @@ class BackendArgs:
|
|
101
99
|
pulumi.set(__self__, "rotation_schedule", rotation_schedule)
|
102
100
|
if rotation_window is not None:
|
103
101
|
pulumi.set(__self__, "rotation_window", rotation_window)
|
104
|
-
if use_microsoft_graph_api is not None:
|
105
|
-
warnings.warn("""This field is not supported in Vault-1.12+ and is the default behavior. This field will be removed in future version of the provider.""", DeprecationWarning)
|
106
|
-
pulumi.log.warn("""use_microsoft_graph_api is deprecated: This field is not supported in Vault-1.12+ and is the default behavior. This field will be removed in future version of the provider.""")
|
107
|
-
if use_microsoft_graph_api is not None:
|
108
|
-
pulumi.set(__self__, "use_microsoft_graph_api", use_microsoft_graph_api)
|
109
102
|
|
110
103
|
@property
|
111
104
|
@pulumi.getter(name="subscriptionId")
|
@@ -313,19 +306,6 @@ class BackendArgs:
|
|
313
306
|
def rotation_window(self, value: Optional[pulumi.Input[builtins.int]]):
|
314
307
|
pulumi.set(self, "rotation_window", value)
|
315
308
|
|
316
|
-
@property
|
317
|
-
@pulumi.getter(name="useMicrosoftGraphApi")
|
318
|
-
@_utilities.deprecated("""This field is not supported in Vault-1.12+ and is the default behavior. This field will be removed in future version of the provider.""")
|
319
|
-
def use_microsoft_graph_api(self) -> Optional[pulumi.Input[builtins.bool]]:
|
320
|
-
"""
|
321
|
-
Use the Microsoft Graph API. Should be set to true on vault-1.10+
|
322
|
-
"""
|
323
|
-
return pulumi.get(self, "use_microsoft_graph_api")
|
324
|
-
|
325
|
-
@use_microsoft_graph_api.setter
|
326
|
-
def use_microsoft_graph_api(self, value: Optional[pulumi.Input[builtins.bool]]):
|
327
|
-
pulumi.set(self, "use_microsoft_graph_api", value)
|
328
|
-
|
329
309
|
|
330
310
|
@pulumi.input_type
|
331
311
|
class _BackendState:
|
@@ -345,8 +325,7 @@ class _BackendState:
|
|
345
325
|
rotation_schedule: Optional[pulumi.Input[builtins.str]] = None,
|
346
326
|
rotation_window: Optional[pulumi.Input[builtins.int]] = None,
|
347
327
|
subscription_id: Optional[pulumi.Input[builtins.str]] = None,
|
348
|
-
tenant_id: Optional[pulumi.Input[builtins.str]] = None
|
349
|
-
use_microsoft_graph_api: Optional[pulumi.Input[builtins.bool]] = None):
|
328
|
+
tenant_id: Optional[pulumi.Input[builtins.str]] = None):
|
350
329
|
"""
|
351
330
|
Input properties used for looking up and filtering Backend resources.
|
352
331
|
:param pulumi.Input[builtins.str] client_id: The OAuth2 client id to connect to Azure.
|
@@ -379,7 +358,6 @@ class _BackendState:
|
|
379
358
|
unbound and the minimum allowable window is `3600`. Requires Vault Enterprise 1.19+. *Available only for Vault Enterprise*
|
380
359
|
:param pulumi.Input[builtins.str] subscription_id: The subscription id for the Azure Active Directory.
|
381
360
|
:param pulumi.Input[builtins.str] tenant_id: The tenant id for the Azure Active Directory.
|
382
|
-
:param pulumi.Input[builtins.bool] use_microsoft_graph_api: Use the Microsoft Graph API. Should be set to true on vault-1.10+
|
383
361
|
"""
|
384
362
|
if client_id is not None:
|
385
363
|
pulumi.set(__self__, "client_id", client_id)
|
@@ -413,11 +391,6 @@ class _BackendState:
|
|
413
391
|
pulumi.set(__self__, "subscription_id", subscription_id)
|
414
392
|
if tenant_id is not None:
|
415
393
|
pulumi.set(__self__, "tenant_id", tenant_id)
|
416
|
-
if use_microsoft_graph_api is not None:
|
417
|
-
warnings.warn("""This field is not supported in Vault-1.12+ and is the default behavior. This field will be removed in future version of the provider.""", DeprecationWarning)
|
418
|
-
pulumi.log.warn("""use_microsoft_graph_api is deprecated: This field is not supported in Vault-1.12+ and is the default behavior. This field will be removed in future version of the provider.""")
|
419
|
-
if use_microsoft_graph_api is not None:
|
420
|
-
pulumi.set(__self__, "use_microsoft_graph_api", use_microsoft_graph_api)
|
421
394
|
|
422
395
|
@property
|
423
396
|
@pulumi.getter(name="clientId")
|
@@ -625,19 +598,6 @@ class _BackendState:
|
|
625
598
|
def tenant_id(self, value: Optional[pulumi.Input[builtins.str]]):
|
626
599
|
pulumi.set(self, "tenant_id", value)
|
627
600
|
|
628
|
-
@property
|
629
|
-
@pulumi.getter(name="useMicrosoftGraphApi")
|
630
|
-
@_utilities.deprecated("""This field is not supported in Vault-1.12+ and is the default behavior. This field will be removed in future version of the provider.""")
|
631
|
-
def use_microsoft_graph_api(self) -> Optional[pulumi.Input[builtins.bool]]:
|
632
|
-
"""
|
633
|
-
Use the Microsoft Graph API. Should be set to true on vault-1.10+
|
634
|
-
"""
|
635
|
-
return pulumi.get(self, "use_microsoft_graph_api")
|
636
|
-
|
637
|
-
@use_microsoft_graph_api.setter
|
638
|
-
def use_microsoft_graph_api(self, value: Optional[pulumi.Input[builtins.bool]]):
|
639
|
-
pulumi.set(self, "use_microsoft_graph_api", value)
|
640
|
-
|
641
601
|
|
642
602
|
@pulumi.type_token("vault:azure/backend:Backend")
|
643
603
|
class Backend(pulumi.CustomResource):
|
@@ -661,12 +621,11 @@ class Backend(pulumi.CustomResource):
|
|
661
621
|
rotation_window: Optional[pulumi.Input[builtins.int]] = None,
|
662
622
|
subscription_id: Optional[pulumi.Input[builtins.str]] = None,
|
663
623
|
tenant_id: Optional[pulumi.Input[builtins.str]] = None,
|
664
|
-
use_microsoft_graph_api: Optional[pulumi.Input[builtins.bool]] = None,
|
665
624
|
__props__=None):
|
666
625
|
"""
|
667
626
|
## Example Usage
|
668
627
|
|
669
|
-
###
|
628
|
+
###
|
670
629
|
|
671
630
|
You can setup the Azure secrets engine with Workload Identity Federation (WIF) for a secret-less configuration:
|
672
631
|
```python
|
@@ -688,7 +647,6 @@ class Backend(pulumi.CustomResource):
|
|
688
647
|
import pulumi_vault as vault
|
689
648
|
|
690
649
|
azure = vault.azure.Backend("azure",
|
691
|
-
use_microsoft_graph_api=True,
|
692
650
|
subscription_id="11111111-2222-3333-4444-111111111111",
|
693
651
|
tenant_id="11111111-2222-3333-4444-222222222222",
|
694
652
|
client_id="11111111-2222-3333-4444-333333333333",
|
@@ -698,21 +656,6 @@ class Backend(pulumi.CustomResource):
|
|
698
656
|
rotation_window=3600)
|
699
657
|
```
|
700
658
|
|
701
|
-
### *Vault-1.8 And Below*
|
702
|
-
|
703
|
-
```python
|
704
|
-
import pulumi
|
705
|
-
import pulumi_vault as vault
|
706
|
-
|
707
|
-
azure = vault.azure.Backend("azure",
|
708
|
-
use_microsoft_graph_api=False,
|
709
|
-
subscription_id="11111111-2222-3333-4444-111111111111",
|
710
|
-
tenant_id="11111111-2222-3333-4444-222222222222",
|
711
|
-
client_id="11111111-2222-3333-4444-333333333333",
|
712
|
-
client_secret="12345678901234567890",
|
713
|
-
environment="AzurePublicCloud")
|
714
|
-
```
|
715
|
-
|
716
659
|
:param str resource_name: The name of the resource.
|
717
660
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
718
661
|
:param pulumi.Input[builtins.str] client_id: The OAuth2 client id to connect to Azure.
|
@@ -745,7 +688,6 @@ class Backend(pulumi.CustomResource):
|
|
745
688
|
unbound and the minimum allowable window is `3600`. Requires Vault Enterprise 1.19+. *Available only for Vault Enterprise*
|
746
689
|
:param pulumi.Input[builtins.str] subscription_id: The subscription id for the Azure Active Directory.
|
747
690
|
:param pulumi.Input[builtins.str] tenant_id: The tenant id for the Azure Active Directory.
|
748
|
-
:param pulumi.Input[builtins.bool] use_microsoft_graph_api: Use the Microsoft Graph API. Should be set to true on vault-1.10+
|
749
691
|
"""
|
750
692
|
...
|
751
693
|
@overload
|
@@ -756,7 +698,7 @@ class Backend(pulumi.CustomResource):
|
|
756
698
|
"""
|
757
699
|
## Example Usage
|
758
700
|
|
759
|
-
###
|
701
|
+
###
|
760
702
|
|
761
703
|
You can setup the Azure secrets engine with Workload Identity Federation (WIF) for a secret-less configuration:
|
762
704
|
```python
|
@@ -778,7 +720,6 @@ class Backend(pulumi.CustomResource):
|
|
778
720
|
import pulumi_vault as vault
|
779
721
|
|
780
722
|
azure = vault.azure.Backend("azure",
|
781
|
-
use_microsoft_graph_api=True,
|
782
723
|
subscription_id="11111111-2222-3333-4444-111111111111",
|
783
724
|
tenant_id="11111111-2222-3333-4444-222222222222",
|
784
725
|
client_id="11111111-2222-3333-4444-333333333333",
|
@@ -788,21 +729,6 @@ class Backend(pulumi.CustomResource):
|
|
788
729
|
rotation_window=3600)
|
789
730
|
```
|
790
731
|
|
791
|
-
### *Vault-1.8 And Below*
|
792
|
-
|
793
|
-
```python
|
794
|
-
import pulumi
|
795
|
-
import pulumi_vault as vault
|
796
|
-
|
797
|
-
azure = vault.azure.Backend("azure",
|
798
|
-
use_microsoft_graph_api=False,
|
799
|
-
subscription_id="11111111-2222-3333-4444-111111111111",
|
800
|
-
tenant_id="11111111-2222-3333-4444-222222222222",
|
801
|
-
client_id="11111111-2222-3333-4444-333333333333",
|
802
|
-
client_secret="12345678901234567890",
|
803
|
-
environment="AzurePublicCloud")
|
804
|
-
```
|
805
|
-
|
806
732
|
:param str resource_name: The name of the resource.
|
807
733
|
:param BackendArgs args: The arguments to use to populate this resource's properties.
|
808
734
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
@@ -834,7 +760,6 @@ class Backend(pulumi.CustomResource):
|
|
834
760
|
rotation_window: Optional[pulumi.Input[builtins.int]] = None,
|
835
761
|
subscription_id: Optional[pulumi.Input[builtins.str]] = None,
|
836
762
|
tenant_id: Optional[pulumi.Input[builtins.str]] = None,
|
837
|
-
use_microsoft_graph_api: Optional[pulumi.Input[builtins.bool]] = None,
|
838
763
|
__props__=None):
|
839
764
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
840
765
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -864,7 +789,6 @@ class Backend(pulumi.CustomResource):
|
|
864
789
|
if tenant_id is None and not opts.urn:
|
865
790
|
raise TypeError("Missing required property 'tenant_id'")
|
866
791
|
__props__.__dict__["tenant_id"] = None if tenant_id is None else pulumi.Output.secret(tenant_id)
|
867
|
-
__props__.__dict__["use_microsoft_graph_api"] = use_microsoft_graph_api
|
868
792
|
secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["clientId", "clientSecret", "subscriptionId", "tenantId"])
|
869
793
|
opts = pulumi.ResourceOptions.merge(opts, secret_opts)
|
870
794
|
super(Backend, __self__).__init__(
|
@@ -892,8 +816,7 @@ class Backend(pulumi.CustomResource):
|
|
892
816
|
rotation_schedule: Optional[pulumi.Input[builtins.str]] = None,
|
893
817
|
rotation_window: Optional[pulumi.Input[builtins.int]] = None,
|
894
818
|
subscription_id: Optional[pulumi.Input[builtins.str]] = None,
|
895
|
-
tenant_id: Optional[pulumi.Input[builtins.str]] = None
|
896
|
-
use_microsoft_graph_api: Optional[pulumi.Input[builtins.bool]] = None) -> 'Backend':
|
819
|
+
tenant_id: Optional[pulumi.Input[builtins.str]] = None) -> 'Backend':
|
897
820
|
"""
|
898
821
|
Get an existing Backend resource's state with the given name, id, and optional extra
|
899
822
|
properties used to qualify the lookup.
|
@@ -931,7 +854,6 @@ class Backend(pulumi.CustomResource):
|
|
931
854
|
unbound and the minimum allowable window is `3600`. Requires Vault Enterprise 1.19+. *Available only for Vault Enterprise*
|
932
855
|
:param pulumi.Input[builtins.str] subscription_id: The subscription id for the Azure Active Directory.
|
933
856
|
:param pulumi.Input[builtins.str] tenant_id: The tenant id for the Azure Active Directory.
|
934
|
-
:param pulumi.Input[builtins.bool] use_microsoft_graph_api: Use the Microsoft Graph API. Should be set to true on vault-1.10+
|
935
857
|
"""
|
936
858
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
937
859
|
|
@@ -953,7 +875,6 @@ class Backend(pulumi.CustomResource):
|
|
953
875
|
__props__.__dict__["rotation_window"] = rotation_window
|
954
876
|
__props__.__dict__["subscription_id"] = subscription_id
|
955
877
|
__props__.__dict__["tenant_id"] = tenant_id
|
956
|
-
__props__.__dict__["use_microsoft_graph_api"] = use_microsoft_graph_api
|
957
878
|
return Backend(resource_name, opts=opts, __props__=__props__)
|
958
879
|
|
959
880
|
@property
|
@@ -1098,12 +1019,3 @@ class Backend(pulumi.CustomResource):
|
|
1098
1019
|
"""
|
1099
1020
|
return pulumi.get(self, "tenant_id")
|
1100
1021
|
|
1101
|
-
@property
|
1102
|
-
@pulumi.getter(name="useMicrosoftGraphApi")
|
1103
|
-
@_utilities.deprecated("""This field is not supported in Vault-1.12+ and is the default behavior. This field will be removed in future version of the provider.""")
|
1104
|
-
def use_microsoft_graph_api(self) -> pulumi.Output[builtins.bool]:
|
1105
|
-
"""
|
1106
|
-
Use the Microsoft Graph API. Should be set to true on vault-1.10+
|
1107
|
-
"""
|
1108
|
-
return pulumi.get(self, "use_microsoft_graph_api")
|
1109
|
-
|