pulumi-vault 7.1.0__py3-none-any.whl → 7.2.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +19 -1
- pulumi_vault/_inputs.py +873 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +1016 -439
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +1057 -285
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +887 -256
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +426 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +878 -336
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +400 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +1006 -227
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +431 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +732 -693
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +380 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +909 -271
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/oci_auth_backend.py +683 -0
- pulumi_vault/oci_auth_backend_role.py +798 -0
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +234 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +205 -159
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +50 -31
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +902 -231
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +217 -124
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +833 -155
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +377 -350
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0.dist-info/RECORD +270 -0
- pulumi_vault-7.1.0.dist-info/RECORD +0 -268
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,91 +19,91 @@ __all__ = ['SecretBackendRootCertArgs', 'SecretBackendRootCert']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class SecretBackendRootCertArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
backend: pulumi.Input[
|
|
24
|
-
common_name: pulumi.Input[
|
|
25
|
-
type: pulumi.Input[
|
|
26
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
27
|
-
country: Optional[pulumi.Input[
|
|
28
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
29
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
30
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
31
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
32
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
33
|
-
format: Optional[pulumi.Input[
|
|
34
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
35
|
-
issuer_name: Optional[pulumi.Input[
|
|
36
|
-
key_bits: Optional[pulumi.Input[
|
|
37
|
-
key_name: Optional[pulumi.Input[
|
|
38
|
-
key_ref: Optional[pulumi.Input[
|
|
39
|
-
key_type: Optional[pulumi.Input[
|
|
40
|
-
locality: Optional[pulumi.Input[
|
|
41
|
-
managed_key_id: Optional[pulumi.Input[
|
|
42
|
-
managed_key_name: Optional[pulumi.Input[
|
|
43
|
-
max_path_length: Optional[pulumi.Input[
|
|
44
|
-
namespace: Optional[pulumi.Input[
|
|
45
|
-
not_after: Optional[pulumi.Input[
|
|
46
|
-
organization: Optional[pulumi.Input[
|
|
47
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
48
|
-
ou: Optional[pulumi.Input[
|
|
49
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
50
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
51
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
52
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
53
|
-
postal_code: Optional[pulumi.Input[
|
|
54
|
-
private_key_format: Optional[pulumi.Input[
|
|
55
|
-
province: Optional[pulumi.Input[
|
|
56
|
-
signature_bits: Optional[pulumi.Input[
|
|
57
|
-
street_address: Optional[pulumi.Input[
|
|
58
|
-
ttl: Optional[pulumi.Input[
|
|
59
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
22
|
+
backend: pulumi.Input[_builtins.str],
|
|
23
|
+
common_name: pulumi.Input[_builtins.str],
|
|
24
|
+
type: pulumi.Input[_builtins.str],
|
|
25
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
26
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
28
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
29
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
30
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
31
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
32
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
34
|
+
issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
36
|
+
key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
key_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
39
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
40
|
+
managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
41
|
+
managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
42
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
43
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
44
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
45
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
46
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
47
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
48
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
49
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
50
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
51
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
52
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
53
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
54
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
55
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
56
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
57
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
58
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
60
59
|
"""
|
|
61
60
|
The set of arguments for constructing a SecretBackendRootCert resource.
|
|
62
|
-
:param pulumi.Input[
|
|
63
|
-
:param pulumi.Input[
|
|
64
|
-
:param pulumi.Input[
|
|
61
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
62
|
+
:param pulumi.Input[_builtins.str] common_name: CN of intermediate to create
|
|
63
|
+
:param pulumi.Input[_builtins.str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
|
|
65
64
|
or \\"kms\\"
|
|
66
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
67
|
-
:param pulumi.Input[
|
|
68
|
-
:param pulumi.Input[
|
|
69
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
70
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
71
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
72
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
73
|
-
:param pulumi.Input[
|
|
74
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
75
|
-
:param pulumi.Input[
|
|
65
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
66
|
+
:param pulumi.Input[_builtins.str] country: The country
|
|
67
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
68
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
69
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
70
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
71
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
72
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
73
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
74
|
+
:param pulumi.Input[_builtins.str] issuer_name: Provides a name to the specified issuer. The name must be unique
|
|
76
75
|
across all issuers and not be the reserved value `default`
|
|
77
|
-
:param pulumi.Input[
|
|
78
|
-
:param pulumi.Input[
|
|
76
|
+
:param pulumi.Input[_builtins.int] key_bits: The number of bits to use
|
|
77
|
+
:param pulumi.Input[_builtins.str] key_name: When a new key is created with this request, optionally specifies
|
|
79
78
|
the name for this. The global ref `default` may not be used as a name.
|
|
80
|
-
:param pulumi.Input[
|
|
79
|
+
:param pulumi.Input[_builtins.str] key_ref: Specifies the key (either default, by name, or by identifier) to use
|
|
81
80
|
for generating this request. Only suitable for `type=existing` requests.
|
|
82
|
-
:param pulumi.Input[
|
|
83
|
-
:param pulumi.Input[
|
|
84
|
-
:param pulumi.Input[
|
|
81
|
+
:param pulumi.Input[_builtins.str] key_type: The desired key type
|
|
82
|
+
:param pulumi.Input[_builtins.str] locality: The locality
|
|
83
|
+
:param pulumi.Input[_builtins.str] managed_key_id: The ID of the previously configured managed key. This field is
|
|
85
84
|
required if `type` is `kms` and it conflicts with `managed_key_name`
|
|
86
|
-
:param pulumi.Input[
|
|
85
|
+
:param pulumi.Input[_builtins.str] managed_key_name: The name of the previously configured managed key. This field is
|
|
87
86
|
required if `type` is `kms` and it conflicts with `managed_key_id`
|
|
88
|
-
:param pulumi.Input[
|
|
89
|
-
:param pulumi.Input[
|
|
87
|
+
:param pulumi.Input[_builtins.int] max_path_length: The maximum path length to encode in the generated certificate
|
|
88
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
90
89
|
The value should not contain leading or trailing forward slashes.
|
|
91
90
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
92
91
|
*Available only for Vault Enterprise*.
|
|
93
|
-
:param pulumi.Input[
|
|
94
|
-
:param pulumi.Input[
|
|
95
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
96
|
-
:param pulumi.Input[
|
|
97
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
98
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
99
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
100
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
101
|
-
:param pulumi.Input[
|
|
102
|
-
:param pulumi.Input[
|
|
103
|
-
:param pulumi.Input[
|
|
104
|
-
:param pulumi.Input[
|
|
105
|
-
:param pulumi.Input[
|
|
106
|
-
:param pulumi.Input[
|
|
107
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
92
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
93
|
+
:param pulumi.Input[_builtins.str] organization: The organization
|
|
94
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
95
|
+
:param pulumi.Input[_builtins.str] ou: The organization unit
|
|
96
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
|
|
97
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
98
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
99
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
100
|
+
:param pulumi.Input[_builtins.str] postal_code: The postal code
|
|
101
|
+
:param pulumi.Input[_builtins.str] private_key_format: The private key format
|
|
102
|
+
:param pulumi.Input[_builtins.str] province: The province
|
|
103
|
+
:param pulumi.Input[_builtins.int] signature_bits: The number of bits to use in the signature algorithm
|
|
104
|
+
:param pulumi.Input[_builtins.str] street_address: The street address
|
|
105
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
106
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
108
107
|
"""
|
|
109
108
|
pulumi.set(__self__, "backend", backend)
|
|
110
109
|
pulumi.set(__self__, "common_name", common_name)
|
|
@@ -178,33 +177,33 @@ class SecretBackendRootCertArgs:
|
|
|
178
177
|
if uri_sans is not None:
|
|
179
178
|
pulumi.set(__self__, "uri_sans", uri_sans)
|
|
180
179
|
|
|
181
|
-
@property
|
|
180
|
+
@_builtins.property
|
|
182
181
|
@pulumi.getter
|
|
183
|
-
def backend(self) -> pulumi.Input[
|
|
182
|
+
def backend(self) -> pulumi.Input[_builtins.str]:
|
|
184
183
|
"""
|
|
185
184
|
The PKI secret backend the resource belongs to.
|
|
186
185
|
"""
|
|
187
186
|
return pulumi.get(self, "backend")
|
|
188
187
|
|
|
189
188
|
@backend.setter
|
|
190
|
-
def backend(self, value: pulumi.Input[
|
|
189
|
+
def backend(self, value: pulumi.Input[_builtins.str]):
|
|
191
190
|
pulumi.set(self, "backend", value)
|
|
192
191
|
|
|
193
|
-
@property
|
|
192
|
+
@_builtins.property
|
|
194
193
|
@pulumi.getter(name="commonName")
|
|
195
|
-
def common_name(self) -> pulumi.Input[
|
|
194
|
+
def common_name(self) -> pulumi.Input[_builtins.str]:
|
|
196
195
|
"""
|
|
197
196
|
CN of intermediate to create
|
|
198
197
|
"""
|
|
199
198
|
return pulumi.get(self, "common_name")
|
|
200
199
|
|
|
201
200
|
@common_name.setter
|
|
202
|
-
def common_name(self, value: pulumi.Input[
|
|
201
|
+
def common_name(self, value: pulumi.Input[_builtins.str]):
|
|
203
202
|
pulumi.set(self, "common_name", value)
|
|
204
203
|
|
|
205
|
-
@property
|
|
204
|
+
@_builtins.property
|
|
206
205
|
@pulumi.getter
|
|
207
|
-
def type(self) -> pulumi.Input[
|
|
206
|
+
def type(self) -> pulumi.Input[_builtins.str]:
|
|
208
207
|
"""
|
|
209
208
|
Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
|
|
210
209
|
or \\"kms\\"
|
|
@@ -212,120 +211,120 @@ class SecretBackendRootCertArgs:
|
|
|
212
211
|
return pulumi.get(self, "type")
|
|
213
212
|
|
|
214
213
|
@type.setter
|
|
215
|
-
def type(self, value: pulumi.Input[
|
|
214
|
+
def type(self, value: pulumi.Input[_builtins.str]):
|
|
216
215
|
pulumi.set(self, "type", value)
|
|
217
216
|
|
|
218
|
-
@property
|
|
217
|
+
@_builtins.property
|
|
219
218
|
@pulumi.getter(name="altNames")
|
|
220
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
219
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
221
220
|
"""
|
|
222
221
|
List of alternative names
|
|
223
222
|
"""
|
|
224
223
|
return pulumi.get(self, "alt_names")
|
|
225
224
|
|
|
226
225
|
@alt_names.setter
|
|
227
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
226
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
228
227
|
pulumi.set(self, "alt_names", value)
|
|
229
228
|
|
|
230
|
-
@property
|
|
229
|
+
@_builtins.property
|
|
231
230
|
@pulumi.getter
|
|
232
|
-
def country(self) -> Optional[pulumi.Input[
|
|
231
|
+
def country(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
233
232
|
"""
|
|
234
233
|
The country
|
|
235
234
|
"""
|
|
236
235
|
return pulumi.get(self, "country")
|
|
237
236
|
|
|
238
237
|
@country.setter
|
|
239
|
-
def country(self, value: Optional[pulumi.Input[
|
|
238
|
+
def country(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
240
239
|
pulumi.set(self, "country", value)
|
|
241
240
|
|
|
242
|
-
@property
|
|
241
|
+
@_builtins.property
|
|
243
242
|
@pulumi.getter(name="excludeCnFromSans")
|
|
244
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[
|
|
243
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
245
244
|
"""
|
|
246
245
|
Flag to exclude CN from SANs
|
|
247
246
|
"""
|
|
248
247
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
249
248
|
|
|
250
249
|
@exclude_cn_from_sans.setter
|
|
251
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[
|
|
250
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
252
251
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
253
252
|
|
|
254
|
-
@property
|
|
253
|
+
@_builtins.property
|
|
255
254
|
@pulumi.getter(name="excludedDnsDomains")
|
|
256
|
-
def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
255
|
+
def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
257
256
|
"""
|
|
258
257
|
List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
259
258
|
"""
|
|
260
259
|
return pulumi.get(self, "excluded_dns_domains")
|
|
261
260
|
|
|
262
261
|
@excluded_dns_domains.setter
|
|
263
|
-
def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
262
|
+
def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
264
263
|
pulumi.set(self, "excluded_dns_domains", value)
|
|
265
264
|
|
|
266
|
-
@property
|
|
265
|
+
@_builtins.property
|
|
267
266
|
@pulumi.getter(name="excludedEmailAddresses")
|
|
268
|
-
def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
267
|
+
def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
269
268
|
"""
|
|
270
269
|
List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
271
270
|
"""
|
|
272
271
|
return pulumi.get(self, "excluded_email_addresses")
|
|
273
272
|
|
|
274
273
|
@excluded_email_addresses.setter
|
|
275
|
-
def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
274
|
+
def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
276
275
|
pulumi.set(self, "excluded_email_addresses", value)
|
|
277
276
|
|
|
278
|
-
@property
|
|
277
|
+
@_builtins.property
|
|
279
278
|
@pulumi.getter(name="excludedIpRanges")
|
|
280
|
-
def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
279
|
+
def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
281
280
|
"""
|
|
282
281
|
List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
283
282
|
"""
|
|
284
283
|
return pulumi.get(self, "excluded_ip_ranges")
|
|
285
284
|
|
|
286
285
|
@excluded_ip_ranges.setter
|
|
287
|
-
def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
286
|
+
def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
288
287
|
pulumi.set(self, "excluded_ip_ranges", value)
|
|
289
288
|
|
|
290
|
-
@property
|
|
289
|
+
@_builtins.property
|
|
291
290
|
@pulumi.getter(name="excludedUriDomains")
|
|
292
|
-
def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
291
|
+
def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
293
292
|
"""
|
|
294
293
|
List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
295
294
|
"""
|
|
296
295
|
return pulumi.get(self, "excluded_uri_domains")
|
|
297
296
|
|
|
298
297
|
@excluded_uri_domains.setter
|
|
299
|
-
def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
298
|
+
def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
300
299
|
pulumi.set(self, "excluded_uri_domains", value)
|
|
301
300
|
|
|
302
|
-
@property
|
|
301
|
+
@_builtins.property
|
|
303
302
|
@pulumi.getter
|
|
304
|
-
def format(self) -> Optional[pulumi.Input[
|
|
303
|
+
def format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
305
304
|
"""
|
|
306
305
|
The format of data
|
|
307
306
|
"""
|
|
308
307
|
return pulumi.get(self, "format")
|
|
309
308
|
|
|
310
309
|
@format.setter
|
|
311
|
-
def format(self, value: Optional[pulumi.Input[
|
|
310
|
+
def format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
312
311
|
pulumi.set(self, "format", value)
|
|
313
312
|
|
|
314
|
-
@property
|
|
313
|
+
@_builtins.property
|
|
315
314
|
@pulumi.getter(name="ipSans")
|
|
316
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
315
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
317
316
|
"""
|
|
318
317
|
List of alternative IPs
|
|
319
318
|
"""
|
|
320
319
|
return pulumi.get(self, "ip_sans")
|
|
321
320
|
|
|
322
321
|
@ip_sans.setter
|
|
323
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
322
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
324
323
|
pulumi.set(self, "ip_sans", value)
|
|
325
324
|
|
|
326
|
-
@property
|
|
325
|
+
@_builtins.property
|
|
327
326
|
@pulumi.getter(name="issuerName")
|
|
328
|
-
def issuer_name(self) -> Optional[pulumi.Input[
|
|
327
|
+
def issuer_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
329
328
|
"""
|
|
330
329
|
Provides a name to the specified issuer. The name must be unique
|
|
331
330
|
across all issuers and not be the reserved value `default`
|
|
@@ -333,24 +332,24 @@ class SecretBackendRootCertArgs:
|
|
|
333
332
|
return pulumi.get(self, "issuer_name")
|
|
334
333
|
|
|
335
334
|
@issuer_name.setter
|
|
336
|
-
def issuer_name(self, value: Optional[pulumi.Input[
|
|
335
|
+
def issuer_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
337
336
|
pulumi.set(self, "issuer_name", value)
|
|
338
337
|
|
|
339
|
-
@property
|
|
338
|
+
@_builtins.property
|
|
340
339
|
@pulumi.getter(name="keyBits")
|
|
341
|
-
def key_bits(self) -> Optional[pulumi.Input[
|
|
340
|
+
def key_bits(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
342
341
|
"""
|
|
343
342
|
The number of bits to use
|
|
344
343
|
"""
|
|
345
344
|
return pulumi.get(self, "key_bits")
|
|
346
345
|
|
|
347
346
|
@key_bits.setter
|
|
348
|
-
def key_bits(self, value: Optional[pulumi.Input[
|
|
347
|
+
def key_bits(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
349
348
|
pulumi.set(self, "key_bits", value)
|
|
350
349
|
|
|
351
|
-
@property
|
|
350
|
+
@_builtins.property
|
|
352
351
|
@pulumi.getter(name="keyName")
|
|
353
|
-
def key_name(self) -> Optional[pulumi.Input[
|
|
352
|
+
def key_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
354
353
|
"""
|
|
355
354
|
When a new key is created with this request, optionally specifies
|
|
356
355
|
the name for this. The global ref `default` may not be used as a name.
|
|
@@ -358,12 +357,12 @@ class SecretBackendRootCertArgs:
|
|
|
358
357
|
return pulumi.get(self, "key_name")
|
|
359
358
|
|
|
360
359
|
@key_name.setter
|
|
361
|
-
def key_name(self, value: Optional[pulumi.Input[
|
|
360
|
+
def key_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
362
361
|
pulumi.set(self, "key_name", value)
|
|
363
362
|
|
|
364
|
-
@property
|
|
363
|
+
@_builtins.property
|
|
365
364
|
@pulumi.getter(name="keyRef")
|
|
366
|
-
def key_ref(self) -> Optional[pulumi.Input[
|
|
365
|
+
def key_ref(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
367
366
|
"""
|
|
368
367
|
Specifies the key (either default, by name, or by identifier) to use
|
|
369
368
|
for generating this request. Only suitable for `type=existing` requests.
|
|
@@ -371,36 +370,36 @@ class SecretBackendRootCertArgs:
|
|
|
371
370
|
return pulumi.get(self, "key_ref")
|
|
372
371
|
|
|
373
372
|
@key_ref.setter
|
|
374
|
-
def key_ref(self, value: Optional[pulumi.Input[
|
|
373
|
+
def key_ref(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
375
374
|
pulumi.set(self, "key_ref", value)
|
|
376
375
|
|
|
377
|
-
@property
|
|
376
|
+
@_builtins.property
|
|
378
377
|
@pulumi.getter(name="keyType")
|
|
379
|
-
def key_type(self) -> Optional[pulumi.Input[
|
|
378
|
+
def key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
380
379
|
"""
|
|
381
380
|
The desired key type
|
|
382
381
|
"""
|
|
383
382
|
return pulumi.get(self, "key_type")
|
|
384
383
|
|
|
385
384
|
@key_type.setter
|
|
386
|
-
def key_type(self, value: Optional[pulumi.Input[
|
|
385
|
+
def key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
387
386
|
pulumi.set(self, "key_type", value)
|
|
388
387
|
|
|
389
|
-
@property
|
|
388
|
+
@_builtins.property
|
|
390
389
|
@pulumi.getter
|
|
391
|
-
def locality(self) -> Optional[pulumi.Input[
|
|
390
|
+
def locality(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
392
391
|
"""
|
|
393
392
|
The locality
|
|
394
393
|
"""
|
|
395
394
|
return pulumi.get(self, "locality")
|
|
396
395
|
|
|
397
396
|
@locality.setter
|
|
398
|
-
def locality(self, value: Optional[pulumi.Input[
|
|
397
|
+
def locality(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
399
398
|
pulumi.set(self, "locality", value)
|
|
400
399
|
|
|
401
|
-
@property
|
|
400
|
+
@_builtins.property
|
|
402
401
|
@pulumi.getter(name="managedKeyId")
|
|
403
|
-
def managed_key_id(self) -> Optional[pulumi.Input[
|
|
402
|
+
def managed_key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
404
403
|
"""
|
|
405
404
|
The ID of the previously configured managed key. This field is
|
|
406
405
|
required if `type` is `kms` and it conflicts with `managed_key_name`
|
|
@@ -408,12 +407,12 @@ class SecretBackendRootCertArgs:
|
|
|
408
407
|
return pulumi.get(self, "managed_key_id")
|
|
409
408
|
|
|
410
409
|
@managed_key_id.setter
|
|
411
|
-
def managed_key_id(self, value: Optional[pulumi.Input[
|
|
410
|
+
def managed_key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
412
411
|
pulumi.set(self, "managed_key_id", value)
|
|
413
412
|
|
|
414
|
-
@property
|
|
413
|
+
@_builtins.property
|
|
415
414
|
@pulumi.getter(name="managedKeyName")
|
|
416
|
-
def managed_key_name(self) -> Optional[pulumi.Input[
|
|
415
|
+
def managed_key_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
417
416
|
"""
|
|
418
417
|
The name of the previously configured managed key. This field is
|
|
419
418
|
required if `type` is `kms` and it conflicts with `managed_key_id`
|
|
@@ -421,24 +420,24 @@ class SecretBackendRootCertArgs:
|
|
|
421
420
|
return pulumi.get(self, "managed_key_name")
|
|
422
421
|
|
|
423
422
|
@managed_key_name.setter
|
|
424
|
-
def managed_key_name(self, value: Optional[pulumi.Input[
|
|
423
|
+
def managed_key_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
425
424
|
pulumi.set(self, "managed_key_name", value)
|
|
426
425
|
|
|
427
|
-
@property
|
|
426
|
+
@_builtins.property
|
|
428
427
|
@pulumi.getter(name="maxPathLength")
|
|
429
|
-
def max_path_length(self) -> Optional[pulumi.Input[
|
|
428
|
+
def max_path_length(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
430
429
|
"""
|
|
431
430
|
The maximum path length to encode in the generated certificate
|
|
432
431
|
"""
|
|
433
432
|
return pulumi.get(self, "max_path_length")
|
|
434
433
|
|
|
435
434
|
@max_path_length.setter
|
|
436
|
-
def max_path_length(self, value: Optional[pulumi.Input[
|
|
435
|
+
def max_path_length(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
437
436
|
pulumi.set(self, "max_path_length", value)
|
|
438
437
|
|
|
439
|
-
@property
|
|
438
|
+
@_builtins.property
|
|
440
439
|
@pulumi.getter
|
|
441
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
440
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
442
441
|
"""
|
|
443
442
|
The namespace to provision the resource in.
|
|
444
443
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -448,288 +447,288 @@ class SecretBackendRootCertArgs:
|
|
|
448
447
|
return pulumi.get(self, "namespace")
|
|
449
448
|
|
|
450
449
|
@namespace.setter
|
|
451
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
450
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
452
451
|
pulumi.set(self, "namespace", value)
|
|
453
452
|
|
|
454
|
-
@property
|
|
453
|
+
@_builtins.property
|
|
455
454
|
@pulumi.getter(name="notAfter")
|
|
456
|
-
def not_after(self) -> Optional[pulumi.Input[
|
|
455
|
+
def not_after(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
457
456
|
"""
|
|
458
457
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
459
458
|
"""
|
|
460
459
|
return pulumi.get(self, "not_after")
|
|
461
460
|
|
|
462
461
|
@not_after.setter
|
|
463
|
-
def not_after(self, value: Optional[pulumi.Input[
|
|
462
|
+
def not_after(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
464
463
|
pulumi.set(self, "not_after", value)
|
|
465
464
|
|
|
466
|
-
@property
|
|
465
|
+
@_builtins.property
|
|
467
466
|
@pulumi.getter
|
|
468
|
-
def organization(self) -> Optional[pulumi.Input[
|
|
467
|
+
def organization(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
469
468
|
"""
|
|
470
469
|
The organization
|
|
471
470
|
"""
|
|
472
471
|
return pulumi.get(self, "organization")
|
|
473
472
|
|
|
474
473
|
@organization.setter
|
|
475
|
-
def organization(self, value: Optional[pulumi.Input[
|
|
474
|
+
def organization(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
476
475
|
pulumi.set(self, "organization", value)
|
|
477
476
|
|
|
478
|
-
@property
|
|
477
|
+
@_builtins.property
|
|
479
478
|
@pulumi.getter(name="otherSans")
|
|
480
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
479
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
481
480
|
"""
|
|
482
481
|
List of other SANs
|
|
483
482
|
"""
|
|
484
483
|
return pulumi.get(self, "other_sans")
|
|
485
484
|
|
|
486
485
|
@other_sans.setter
|
|
487
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
486
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
488
487
|
pulumi.set(self, "other_sans", value)
|
|
489
488
|
|
|
490
|
-
@property
|
|
489
|
+
@_builtins.property
|
|
491
490
|
@pulumi.getter
|
|
492
|
-
def ou(self) -> Optional[pulumi.Input[
|
|
491
|
+
def ou(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
493
492
|
"""
|
|
494
493
|
The organization unit
|
|
495
494
|
"""
|
|
496
495
|
return pulumi.get(self, "ou")
|
|
497
496
|
|
|
498
497
|
@ou.setter
|
|
499
|
-
def ou(self, value: Optional[pulumi.Input[
|
|
498
|
+
def ou(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
500
499
|
pulumi.set(self, "ou", value)
|
|
501
500
|
|
|
502
|
-
@property
|
|
501
|
+
@_builtins.property
|
|
503
502
|
@pulumi.getter(name="permittedDnsDomains")
|
|
504
|
-
def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
503
|
+
def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
505
504
|
"""
|
|
506
505
|
List of domains for which certificates are allowed to be issued
|
|
507
506
|
"""
|
|
508
507
|
return pulumi.get(self, "permitted_dns_domains")
|
|
509
508
|
|
|
510
509
|
@permitted_dns_domains.setter
|
|
511
|
-
def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
510
|
+
def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
512
511
|
pulumi.set(self, "permitted_dns_domains", value)
|
|
513
512
|
|
|
514
|
-
@property
|
|
513
|
+
@_builtins.property
|
|
515
514
|
@pulumi.getter(name="permittedEmailAddresses")
|
|
516
|
-
def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
515
|
+
def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
517
516
|
"""
|
|
518
517
|
List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
519
518
|
"""
|
|
520
519
|
return pulumi.get(self, "permitted_email_addresses")
|
|
521
520
|
|
|
522
521
|
@permitted_email_addresses.setter
|
|
523
|
-
def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
522
|
+
def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
524
523
|
pulumi.set(self, "permitted_email_addresses", value)
|
|
525
524
|
|
|
526
|
-
@property
|
|
525
|
+
@_builtins.property
|
|
527
526
|
@pulumi.getter(name="permittedIpRanges")
|
|
528
|
-
def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
527
|
+
def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
529
528
|
"""
|
|
530
529
|
List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
531
530
|
"""
|
|
532
531
|
return pulumi.get(self, "permitted_ip_ranges")
|
|
533
532
|
|
|
534
533
|
@permitted_ip_ranges.setter
|
|
535
|
-
def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
534
|
+
def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
536
535
|
pulumi.set(self, "permitted_ip_ranges", value)
|
|
537
536
|
|
|
538
|
-
@property
|
|
537
|
+
@_builtins.property
|
|
539
538
|
@pulumi.getter(name="permittedUriDomains")
|
|
540
|
-
def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
539
|
+
def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
541
540
|
"""
|
|
542
541
|
List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
543
542
|
"""
|
|
544
543
|
return pulumi.get(self, "permitted_uri_domains")
|
|
545
544
|
|
|
546
545
|
@permitted_uri_domains.setter
|
|
547
|
-
def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
546
|
+
def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
548
547
|
pulumi.set(self, "permitted_uri_domains", value)
|
|
549
548
|
|
|
550
|
-
@property
|
|
549
|
+
@_builtins.property
|
|
551
550
|
@pulumi.getter(name="postalCode")
|
|
552
|
-
def postal_code(self) -> Optional[pulumi.Input[
|
|
551
|
+
def postal_code(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
553
552
|
"""
|
|
554
553
|
The postal code
|
|
555
554
|
"""
|
|
556
555
|
return pulumi.get(self, "postal_code")
|
|
557
556
|
|
|
558
557
|
@postal_code.setter
|
|
559
|
-
def postal_code(self, value: Optional[pulumi.Input[
|
|
558
|
+
def postal_code(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
560
559
|
pulumi.set(self, "postal_code", value)
|
|
561
560
|
|
|
562
|
-
@property
|
|
561
|
+
@_builtins.property
|
|
563
562
|
@pulumi.getter(name="privateKeyFormat")
|
|
564
|
-
def private_key_format(self) -> Optional[pulumi.Input[
|
|
563
|
+
def private_key_format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
565
564
|
"""
|
|
566
565
|
The private key format
|
|
567
566
|
"""
|
|
568
567
|
return pulumi.get(self, "private_key_format")
|
|
569
568
|
|
|
570
569
|
@private_key_format.setter
|
|
571
|
-
def private_key_format(self, value: Optional[pulumi.Input[
|
|
570
|
+
def private_key_format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
572
571
|
pulumi.set(self, "private_key_format", value)
|
|
573
572
|
|
|
574
|
-
@property
|
|
573
|
+
@_builtins.property
|
|
575
574
|
@pulumi.getter
|
|
576
|
-
def province(self) -> Optional[pulumi.Input[
|
|
575
|
+
def province(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
577
576
|
"""
|
|
578
577
|
The province
|
|
579
578
|
"""
|
|
580
579
|
return pulumi.get(self, "province")
|
|
581
580
|
|
|
582
581
|
@province.setter
|
|
583
|
-
def province(self, value: Optional[pulumi.Input[
|
|
582
|
+
def province(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
584
583
|
pulumi.set(self, "province", value)
|
|
585
584
|
|
|
586
|
-
@property
|
|
585
|
+
@_builtins.property
|
|
587
586
|
@pulumi.getter(name="signatureBits")
|
|
588
|
-
def signature_bits(self) -> Optional[pulumi.Input[
|
|
587
|
+
def signature_bits(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
589
588
|
"""
|
|
590
589
|
The number of bits to use in the signature algorithm
|
|
591
590
|
"""
|
|
592
591
|
return pulumi.get(self, "signature_bits")
|
|
593
592
|
|
|
594
593
|
@signature_bits.setter
|
|
595
|
-
def signature_bits(self, value: Optional[pulumi.Input[
|
|
594
|
+
def signature_bits(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
596
595
|
pulumi.set(self, "signature_bits", value)
|
|
597
596
|
|
|
598
|
-
@property
|
|
597
|
+
@_builtins.property
|
|
599
598
|
@pulumi.getter(name="streetAddress")
|
|
600
|
-
def street_address(self) -> Optional[pulumi.Input[
|
|
599
|
+
def street_address(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
601
600
|
"""
|
|
602
601
|
The street address
|
|
603
602
|
"""
|
|
604
603
|
return pulumi.get(self, "street_address")
|
|
605
604
|
|
|
606
605
|
@street_address.setter
|
|
607
|
-
def street_address(self, value: Optional[pulumi.Input[
|
|
606
|
+
def street_address(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
608
607
|
pulumi.set(self, "street_address", value)
|
|
609
608
|
|
|
610
|
-
@property
|
|
609
|
+
@_builtins.property
|
|
611
610
|
@pulumi.getter
|
|
612
|
-
def ttl(self) -> Optional[pulumi.Input[
|
|
611
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
613
612
|
"""
|
|
614
613
|
Time to live
|
|
615
614
|
"""
|
|
616
615
|
return pulumi.get(self, "ttl")
|
|
617
616
|
|
|
618
617
|
@ttl.setter
|
|
619
|
-
def ttl(self, value: Optional[pulumi.Input[
|
|
618
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
620
619
|
pulumi.set(self, "ttl", value)
|
|
621
620
|
|
|
622
|
-
@property
|
|
621
|
+
@_builtins.property
|
|
623
622
|
@pulumi.getter(name="uriSans")
|
|
624
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
623
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
625
624
|
"""
|
|
626
625
|
List of alternative URIs
|
|
627
626
|
"""
|
|
628
627
|
return pulumi.get(self, "uri_sans")
|
|
629
628
|
|
|
630
629
|
@uri_sans.setter
|
|
631
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
630
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
632
631
|
pulumi.set(self, "uri_sans", value)
|
|
633
632
|
|
|
634
633
|
|
|
635
634
|
@pulumi.input_type
|
|
636
635
|
class _SecretBackendRootCertState:
|
|
637
636
|
def __init__(__self__, *,
|
|
638
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
639
|
-
backend: Optional[pulumi.Input[
|
|
640
|
-
certificate: Optional[pulumi.Input[
|
|
641
|
-
common_name: Optional[pulumi.Input[
|
|
642
|
-
country: Optional[pulumi.Input[
|
|
643
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
644
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
645
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
646
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
647
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
648
|
-
format: Optional[pulumi.Input[
|
|
649
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
650
|
-
issuer_id: Optional[pulumi.Input[
|
|
651
|
-
issuer_name: Optional[pulumi.Input[
|
|
652
|
-
issuing_ca: Optional[pulumi.Input[
|
|
653
|
-
key_bits: Optional[pulumi.Input[
|
|
654
|
-
key_id: Optional[pulumi.Input[
|
|
655
|
-
key_name: Optional[pulumi.Input[
|
|
656
|
-
key_ref: Optional[pulumi.Input[
|
|
657
|
-
key_type: Optional[pulumi.Input[
|
|
658
|
-
locality: Optional[pulumi.Input[
|
|
659
|
-
managed_key_id: Optional[pulumi.Input[
|
|
660
|
-
managed_key_name: Optional[pulumi.Input[
|
|
661
|
-
max_path_length: Optional[pulumi.Input[
|
|
662
|
-
namespace: Optional[pulumi.Input[
|
|
663
|
-
not_after: Optional[pulumi.Input[
|
|
664
|
-
organization: Optional[pulumi.Input[
|
|
665
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
666
|
-
ou: Optional[pulumi.Input[
|
|
667
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
668
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
669
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
670
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
671
|
-
postal_code: Optional[pulumi.Input[
|
|
672
|
-
private_key_format: Optional[pulumi.Input[
|
|
673
|
-
province: Optional[pulumi.Input[
|
|
674
|
-
serial_number: Optional[pulumi.Input[
|
|
675
|
-
signature_bits: Optional[pulumi.Input[
|
|
676
|
-
street_address: Optional[pulumi.Input[
|
|
677
|
-
ttl: Optional[pulumi.Input[
|
|
678
|
-
type: Optional[pulumi.Input[
|
|
679
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
637
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
638
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
639
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
640
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
641
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
642
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
643
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
644
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
645
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
646
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
647
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
648
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
649
|
+
issuer_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
650
|
+
issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
651
|
+
issuing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
652
|
+
key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
653
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
654
|
+
key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
655
|
+
key_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
656
|
+
key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
657
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
658
|
+
managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
659
|
+
managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
660
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
661
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
662
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
663
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
664
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
665
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
666
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
667
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
668
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
669
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
670
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
671
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
672
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
673
|
+
serial_number: Optional[pulumi.Input[_builtins.str]] = None,
|
|
674
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
675
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
676
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
677
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
678
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
680
679
|
"""
|
|
681
680
|
Input properties used for looking up and filtering SecretBackendRootCert resources.
|
|
682
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
683
|
-
:param pulumi.Input[
|
|
684
|
-
:param pulumi.Input[
|
|
685
|
-
:param pulumi.Input[
|
|
686
|
-
:param pulumi.Input[
|
|
687
|
-
:param pulumi.Input[
|
|
688
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
689
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
690
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
691
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
692
|
-
:param pulumi.Input[
|
|
693
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
694
|
-
:param pulumi.Input[
|
|
695
|
-
:param pulumi.Input[
|
|
681
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
682
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
683
|
+
:param pulumi.Input[_builtins.str] certificate: The certificate.
|
|
684
|
+
:param pulumi.Input[_builtins.str] common_name: CN of intermediate to create
|
|
685
|
+
:param pulumi.Input[_builtins.str] country: The country
|
|
686
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
687
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
688
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
689
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
690
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
691
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
692
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
693
|
+
:param pulumi.Input[_builtins.str] issuer_id: The ID of the generated issuer.
|
|
694
|
+
:param pulumi.Input[_builtins.str] issuer_name: Provides a name to the specified issuer. The name must be unique
|
|
696
695
|
across all issuers and not be the reserved value `default`
|
|
697
|
-
:param pulumi.Input[
|
|
698
|
-
:param pulumi.Input[
|
|
699
|
-
:param pulumi.Input[
|
|
700
|
-
:param pulumi.Input[
|
|
696
|
+
:param pulumi.Input[_builtins.str] issuing_ca: The issuing CA certificate.
|
|
697
|
+
:param pulumi.Input[_builtins.int] key_bits: The number of bits to use
|
|
698
|
+
:param pulumi.Input[_builtins.str] key_id: The ID of the generated key.
|
|
699
|
+
:param pulumi.Input[_builtins.str] key_name: When a new key is created with this request, optionally specifies
|
|
701
700
|
the name for this. The global ref `default` may not be used as a name.
|
|
702
|
-
:param pulumi.Input[
|
|
701
|
+
:param pulumi.Input[_builtins.str] key_ref: Specifies the key (either default, by name, or by identifier) to use
|
|
703
702
|
for generating this request. Only suitable for `type=existing` requests.
|
|
704
|
-
:param pulumi.Input[
|
|
705
|
-
:param pulumi.Input[
|
|
706
|
-
:param pulumi.Input[
|
|
703
|
+
:param pulumi.Input[_builtins.str] key_type: The desired key type
|
|
704
|
+
:param pulumi.Input[_builtins.str] locality: The locality
|
|
705
|
+
:param pulumi.Input[_builtins.str] managed_key_id: The ID of the previously configured managed key. This field is
|
|
707
706
|
required if `type` is `kms` and it conflicts with `managed_key_name`
|
|
708
|
-
:param pulumi.Input[
|
|
707
|
+
:param pulumi.Input[_builtins.str] managed_key_name: The name of the previously configured managed key. This field is
|
|
709
708
|
required if `type` is `kms` and it conflicts with `managed_key_id`
|
|
710
|
-
:param pulumi.Input[
|
|
711
|
-
:param pulumi.Input[
|
|
709
|
+
:param pulumi.Input[_builtins.int] max_path_length: The maximum path length to encode in the generated certificate
|
|
710
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
712
711
|
The value should not contain leading or trailing forward slashes.
|
|
713
712
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
714
713
|
*Available only for Vault Enterprise*.
|
|
715
|
-
:param pulumi.Input[
|
|
716
|
-
:param pulumi.Input[
|
|
717
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
718
|
-
:param pulumi.Input[
|
|
719
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
720
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
721
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
722
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
723
|
-
:param pulumi.Input[
|
|
724
|
-
:param pulumi.Input[
|
|
725
|
-
:param pulumi.Input[
|
|
726
|
-
:param pulumi.Input[
|
|
727
|
-
:param pulumi.Input[
|
|
728
|
-
:param pulumi.Input[
|
|
729
|
-
:param pulumi.Input[
|
|
730
|
-
:param pulumi.Input[
|
|
714
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
715
|
+
:param pulumi.Input[_builtins.str] organization: The organization
|
|
716
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
717
|
+
:param pulumi.Input[_builtins.str] ou: The organization unit
|
|
718
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
|
|
719
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
720
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
721
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
722
|
+
:param pulumi.Input[_builtins.str] postal_code: The postal code
|
|
723
|
+
:param pulumi.Input[_builtins.str] private_key_format: The private key format
|
|
724
|
+
:param pulumi.Input[_builtins.str] province: The province
|
|
725
|
+
:param pulumi.Input[_builtins.str] serial_number: The certificate's serial number, hex formatted.
|
|
726
|
+
:param pulumi.Input[_builtins.int] signature_bits: The number of bits to use in the signature algorithm
|
|
727
|
+
:param pulumi.Input[_builtins.str] street_address: The street address
|
|
728
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
729
|
+
:param pulumi.Input[_builtins.str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
|
|
731
730
|
or \\"kms\\"
|
|
732
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
731
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
733
732
|
"""
|
|
734
733
|
if alt_names is not None:
|
|
735
734
|
pulumi.set(__self__, "alt_names", alt_names)
|
|
@@ -816,165 +815,165 @@ class _SecretBackendRootCertState:
|
|
|
816
815
|
if uri_sans is not None:
|
|
817
816
|
pulumi.set(__self__, "uri_sans", uri_sans)
|
|
818
817
|
|
|
819
|
-
@property
|
|
818
|
+
@_builtins.property
|
|
820
819
|
@pulumi.getter(name="altNames")
|
|
821
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
820
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
822
821
|
"""
|
|
823
822
|
List of alternative names
|
|
824
823
|
"""
|
|
825
824
|
return pulumi.get(self, "alt_names")
|
|
826
825
|
|
|
827
826
|
@alt_names.setter
|
|
828
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
827
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
829
828
|
pulumi.set(self, "alt_names", value)
|
|
830
829
|
|
|
831
|
-
@property
|
|
830
|
+
@_builtins.property
|
|
832
831
|
@pulumi.getter
|
|
833
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
832
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
834
833
|
"""
|
|
835
834
|
The PKI secret backend the resource belongs to.
|
|
836
835
|
"""
|
|
837
836
|
return pulumi.get(self, "backend")
|
|
838
837
|
|
|
839
838
|
@backend.setter
|
|
840
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
839
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
841
840
|
pulumi.set(self, "backend", value)
|
|
842
841
|
|
|
843
|
-
@property
|
|
842
|
+
@_builtins.property
|
|
844
843
|
@pulumi.getter
|
|
845
|
-
def certificate(self) -> Optional[pulumi.Input[
|
|
844
|
+
def certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
846
845
|
"""
|
|
847
846
|
The certificate.
|
|
848
847
|
"""
|
|
849
848
|
return pulumi.get(self, "certificate")
|
|
850
849
|
|
|
851
850
|
@certificate.setter
|
|
852
|
-
def certificate(self, value: Optional[pulumi.Input[
|
|
851
|
+
def certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
853
852
|
pulumi.set(self, "certificate", value)
|
|
854
853
|
|
|
855
|
-
@property
|
|
854
|
+
@_builtins.property
|
|
856
855
|
@pulumi.getter(name="commonName")
|
|
857
|
-
def common_name(self) -> Optional[pulumi.Input[
|
|
856
|
+
def common_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
858
857
|
"""
|
|
859
858
|
CN of intermediate to create
|
|
860
859
|
"""
|
|
861
860
|
return pulumi.get(self, "common_name")
|
|
862
861
|
|
|
863
862
|
@common_name.setter
|
|
864
|
-
def common_name(self, value: Optional[pulumi.Input[
|
|
863
|
+
def common_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
865
864
|
pulumi.set(self, "common_name", value)
|
|
866
865
|
|
|
867
|
-
@property
|
|
866
|
+
@_builtins.property
|
|
868
867
|
@pulumi.getter
|
|
869
|
-
def country(self) -> Optional[pulumi.Input[
|
|
868
|
+
def country(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
870
869
|
"""
|
|
871
870
|
The country
|
|
872
871
|
"""
|
|
873
872
|
return pulumi.get(self, "country")
|
|
874
873
|
|
|
875
874
|
@country.setter
|
|
876
|
-
def country(self, value: Optional[pulumi.Input[
|
|
875
|
+
def country(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
877
876
|
pulumi.set(self, "country", value)
|
|
878
877
|
|
|
879
|
-
@property
|
|
878
|
+
@_builtins.property
|
|
880
879
|
@pulumi.getter(name="excludeCnFromSans")
|
|
881
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[
|
|
880
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
882
881
|
"""
|
|
883
882
|
Flag to exclude CN from SANs
|
|
884
883
|
"""
|
|
885
884
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
886
885
|
|
|
887
886
|
@exclude_cn_from_sans.setter
|
|
888
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[
|
|
887
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
889
888
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
890
889
|
|
|
891
|
-
@property
|
|
890
|
+
@_builtins.property
|
|
892
891
|
@pulumi.getter(name="excludedDnsDomains")
|
|
893
|
-
def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
892
|
+
def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
894
893
|
"""
|
|
895
894
|
List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
896
895
|
"""
|
|
897
896
|
return pulumi.get(self, "excluded_dns_domains")
|
|
898
897
|
|
|
899
898
|
@excluded_dns_domains.setter
|
|
900
|
-
def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
899
|
+
def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
901
900
|
pulumi.set(self, "excluded_dns_domains", value)
|
|
902
901
|
|
|
903
|
-
@property
|
|
902
|
+
@_builtins.property
|
|
904
903
|
@pulumi.getter(name="excludedEmailAddresses")
|
|
905
|
-
def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
904
|
+
def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
906
905
|
"""
|
|
907
906
|
List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
908
907
|
"""
|
|
909
908
|
return pulumi.get(self, "excluded_email_addresses")
|
|
910
909
|
|
|
911
910
|
@excluded_email_addresses.setter
|
|
912
|
-
def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
911
|
+
def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
913
912
|
pulumi.set(self, "excluded_email_addresses", value)
|
|
914
913
|
|
|
915
|
-
@property
|
|
914
|
+
@_builtins.property
|
|
916
915
|
@pulumi.getter(name="excludedIpRanges")
|
|
917
|
-
def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
916
|
+
def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
918
917
|
"""
|
|
919
918
|
List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
920
919
|
"""
|
|
921
920
|
return pulumi.get(self, "excluded_ip_ranges")
|
|
922
921
|
|
|
923
922
|
@excluded_ip_ranges.setter
|
|
924
|
-
def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
923
|
+
def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
925
924
|
pulumi.set(self, "excluded_ip_ranges", value)
|
|
926
925
|
|
|
927
|
-
@property
|
|
926
|
+
@_builtins.property
|
|
928
927
|
@pulumi.getter(name="excludedUriDomains")
|
|
929
|
-
def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
928
|
+
def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
930
929
|
"""
|
|
931
930
|
List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
932
931
|
"""
|
|
933
932
|
return pulumi.get(self, "excluded_uri_domains")
|
|
934
933
|
|
|
935
934
|
@excluded_uri_domains.setter
|
|
936
|
-
def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
935
|
+
def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
937
936
|
pulumi.set(self, "excluded_uri_domains", value)
|
|
938
937
|
|
|
939
|
-
@property
|
|
938
|
+
@_builtins.property
|
|
940
939
|
@pulumi.getter
|
|
941
|
-
def format(self) -> Optional[pulumi.Input[
|
|
940
|
+
def format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
942
941
|
"""
|
|
943
942
|
The format of data
|
|
944
943
|
"""
|
|
945
944
|
return pulumi.get(self, "format")
|
|
946
945
|
|
|
947
946
|
@format.setter
|
|
948
|
-
def format(self, value: Optional[pulumi.Input[
|
|
947
|
+
def format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
949
948
|
pulumi.set(self, "format", value)
|
|
950
949
|
|
|
951
|
-
@property
|
|
950
|
+
@_builtins.property
|
|
952
951
|
@pulumi.getter(name="ipSans")
|
|
953
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
952
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
954
953
|
"""
|
|
955
954
|
List of alternative IPs
|
|
956
955
|
"""
|
|
957
956
|
return pulumi.get(self, "ip_sans")
|
|
958
957
|
|
|
959
958
|
@ip_sans.setter
|
|
960
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
959
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
961
960
|
pulumi.set(self, "ip_sans", value)
|
|
962
961
|
|
|
963
|
-
@property
|
|
962
|
+
@_builtins.property
|
|
964
963
|
@pulumi.getter(name="issuerId")
|
|
965
|
-
def issuer_id(self) -> Optional[pulumi.Input[
|
|
964
|
+
def issuer_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
966
965
|
"""
|
|
967
966
|
The ID of the generated issuer.
|
|
968
967
|
"""
|
|
969
968
|
return pulumi.get(self, "issuer_id")
|
|
970
969
|
|
|
971
970
|
@issuer_id.setter
|
|
972
|
-
def issuer_id(self, value: Optional[pulumi.Input[
|
|
971
|
+
def issuer_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
973
972
|
pulumi.set(self, "issuer_id", value)
|
|
974
973
|
|
|
975
|
-
@property
|
|
974
|
+
@_builtins.property
|
|
976
975
|
@pulumi.getter(name="issuerName")
|
|
977
|
-
def issuer_name(self) -> Optional[pulumi.Input[
|
|
976
|
+
def issuer_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
978
977
|
"""
|
|
979
978
|
Provides a name to the specified issuer. The name must be unique
|
|
980
979
|
across all issuers and not be the reserved value `default`
|
|
@@ -982,48 +981,48 @@ class _SecretBackendRootCertState:
|
|
|
982
981
|
return pulumi.get(self, "issuer_name")
|
|
983
982
|
|
|
984
983
|
@issuer_name.setter
|
|
985
|
-
def issuer_name(self, value: Optional[pulumi.Input[
|
|
984
|
+
def issuer_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
986
985
|
pulumi.set(self, "issuer_name", value)
|
|
987
986
|
|
|
988
|
-
@property
|
|
987
|
+
@_builtins.property
|
|
989
988
|
@pulumi.getter(name="issuingCa")
|
|
990
|
-
def issuing_ca(self) -> Optional[pulumi.Input[
|
|
989
|
+
def issuing_ca(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
991
990
|
"""
|
|
992
991
|
The issuing CA certificate.
|
|
993
992
|
"""
|
|
994
993
|
return pulumi.get(self, "issuing_ca")
|
|
995
994
|
|
|
996
995
|
@issuing_ca.setter
|
|
997
|
-
def issuing_ca(self, value: Optional[pulumi.Input[
|
|
996
|
+
def issuing_ca(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
998
997
|
pulumi.set(self, "issuing_ca", value)
|
|
999
998
|
|
|
1000
|
-
@property
|
|
999
|
+
@_builtins.property
|
|
1001
1000
|
@pulumi.getter(name="keyBits")
|
|
1002
|
-
def key_bits(self) -> Optional[pulumi.Input[
|
|
1001
|
+
def key_bits(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1003
1002
|
"""
|
|
1004
1003
|
The number of bits to use
|
|
1005
1004
|
"""
|
|
1006
1005
|
return pulumi.get(self, "key_bits")
|
|
1007
1006
|
|
|
1008
1007
|
@key_bits.setter
|
|
1009
|
-
def key_bits(self, value: Optional[pulumi.Input[
|
|
1008
|
+
def key_bits(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
1010
1009
|
pulumi.set(self, "key_bits", value)
|
|
1011
1010
|
|
|
1012
|
-
@property
|
|
1011
|
+
@_builtins.property
|
|
1013
1012
|
@pulumi.getter(name="keyId")
|
|
1014
|
-
def key_id(self) -> Optional[pulumi.Input[
|
|
1013
|
+
def key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1015
1014
|
"""
|
|
1016
1015
|
The ID of the generated key.
|
|
1017
1016
|
"""
|
|
1018
1017
|
return pulumi.get(self, "key_id")
|
|
1019
1018
|
|
|
1020
1019
|
@key_id.setter
|
|
1021
|
-
def key_id(self, value: Optional[pulumi.Input[
|
|
1020
|
+
def key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1022
1021
|
pulumi.set(self, "key_id", value)
|
|
1023
1022
|
|
|
1024
|
-
@property
|
|
1023
|
+
@_builtins.property
|
|
1025
1024
|
@pulumi.getter(name="keyName")
|
|
1026
|
-
def key_name(self) -> Optional[pulumi.Input[
|
|
1025
|
+
def key_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1027
1026
|
"""
|
|
1028
1027
|
When a new key is created with this request, optionally specifies
|
|
1029
1028
|
the name for this. The global ref `default` may not be used as a name.
|
|
@@ -1031,12 +1030,12 @@ class _SecretBackendRootCertState:
|
|
|
1031
1030
|
return pulumi.get(self, "key_name")
|
|
1032
1031
|
|
|
1033
1032
|
@key_name.setter
|
|
1034
|
-
def key_name(self, value: Optional[pulumi.Input[
|
|
1033
|
+
def key_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1035
1034
|
pulumi.set(self, "key_name", value)
|
|
1036
1035
|
|
|
1037
|
-
@property
|
|
1036
|
+
@_builtins.property
|
|
1038
1037
|
@pulumi.getter(name="keyRef")
|
|
1039
|
-
def key_ref(self) -> Optional[pulumi.Input[
|
|
1038
|
+
def key_ref(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1040
1039
|
"""
|
|
1041
1040
|
Specifies the key (either default, by name, or by identifier) to use
|
|
1042
1041
|
for generating this request. Only suitable for `type=existing` requests.
|
|
@@ -1044,36 +1043,36 @@ class _SecretBackendRootCertState:
|
|
|
1044
1043
|
return pulumi.get(self, "key_ref")
|
|
1045
1044
|
|
|
1046
1045
|
@key_ref.setter
|
|
1047
|
-
def key_ref(self, value: Optional[pulumi.Input[
|
|
1046
|
+
def key_ref(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1048
1047
|
pulumi.set(self, "key_ref", value)
|
|
1049
1048
|
|
|
1050
|
-
@property
|
|
1049
|
+
@_builtins.property
|
|
1051
1050
|
@pulumi.getter(name="keyType")
|
|
1052
|
-
def key_type(self) -> Optional[pulumi.Input[
|
|
1051
|
+
def key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1053
1052
|
"""
|
|
1054
1053
|
The desired key type
|
|
1055
1054
|
"""
|
|
1056
1055
|
return pulumi.get(self, "key_type")
|
|
1057
1056
|
|
|
1058
1057
|
@key_type.setter
|
|
1059
|
-
def key_type(self, value: Optional[pulumi.Input[
|
|
1058
|
+
def key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1060
1059
|
pulumi.set(self, "key_type", value)
|
|
1061
1060
|
|
|
1062
|
-
@property
|
|
1061
|
+
@_builtins.property
|
|
1063
1062
|
@pulumi.getter
|
|
1064
|
-
def locality(self) -> Optional[pulumi.Input[
|
|
1063
|
+
def locality(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1065
1064
|
"""
|
|
1066
1065
|
The locality
|
|
1067
1066
|
"""
|
|
1068
1067
|
return pulumi.get(self, "locality")
|
|
1069
1068
|
|
|
1070
1069
|
@locality.setter
|
|
1071
|
-
def locality(self, value: Optional[pulumi.Input[
|
|
1070
|
+
def locality(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1072
1071
|
pulumi.set(self, "locality", value)
|
|
1073
1072
|
|
|
1074
|
-
@property
|
|
1073
|
+
@_builtins.property
|
|
1075
1074
|
@pulumi.getter(name="managedKeyId")
|
|
1076
|
-
def managed_key_id(self) -> Optional[pulumi.Input[
|
|
1075
|
+
def managed_key_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1077
1076
|
"""
|
|
1078
1077
|
The ID of the previously configured managed key. This field is
|
|
1079
1078
|
required if `type` is `kms` and it conflicts with `managed_key_name`
|
|
@@ -1081,12 +1080,12 @@ class _SecretBackendRootCertState:
|
|
|
1081
1080
|
return pulumi.get(self, "managed_key_id")
|
|
1082
1081
|
|
|
1083
1082
|
@managed_key_id.setter
|
|
1084
|
-
def managed_key_id(self, value: Optional[pulumi.Input[
|
|
1083
|
+
def managed_key_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1085
1084
|
pulumi.set(self, "managed_key_id", value)
|
|
1086
1085
|
|
|
1087
|
-
@property
|
|
1086
|
+
@_builtins.property
|
|
1088
1087
|
@pulumi.getter(name="managedKeyName")
|
|
1089
|
-
def managed_key_name(self) -> Optional[pulumi.Input[
|
|
1088
|
+
def managed_key_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1090
1089
|
"""
|
|
1091
1090
|
The name of the previously configured managed key. This field is
|
|
1092
1091
|
required if `type` is `kms` and it conflicts with `managed_key_id`
|
|
@@ -1094,24 +1093,24 @@ class _SecretBackendRootCertState:
|
|
|
1094
1093
|
return pulumi.get(self, "managed_key_name")
|
|
1095
1094
|
|
|
1096
1095
|
@managed_key_name.setter
|
|
1097
|
-
def managed_key_name(self, value: Optional[pulumi.Input[
|
|
1096
|
+
def managed_key_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1098
1097
|
pulumi.set(self, "managed_key_name", value)
|
|
1099
1098
|
|
|
1100
|
-
@property
|
|
1099
|
+
@_builtins.property
|
|
1101
1100
|
@pulumi.getter(name="maxPathLength")
|
|
1102
|
-
def max_path_length(self) -> Optional[pulumi.Input[
|
|
1101
|
+
def max_path_length(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1103
1102
|
"""
|
|
1104
1103
|
The maximum path length to encode in the generated certificate
|
|
1105
1104
|
"""
|
|
1106
1105
|
return pulumi.get(self, "max_path_length")
|
|
1107
1106
|
|
|
1108
1107
|
@max_path_length.setter
|
|
1109
|
-
def max_path_length(self, value: Optional[pulumi.Input[
|
|
1108
|
+
def max_path_length(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
1110
1109
|
pulumi.set(self, "max_path_length", value)
|
|
1111
1110
|
|
|
1112
|
-
@property
|
|
1111
|
+
@_builtins.property
|
|
1113
1112
|
@pulumi.getter
|
|
1114
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
1113
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1115
1114
|
"""
|
|
1116
1115
|
The namespace to provision the resource in.
|
|
1117
1116
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1121,192 +1120,192 @@ class _SecretBackendRootCertState:
|
|
|
1121
1120
|
return pulumi.get(self, "namespace")
|
|
1122
1121
|
|
|
1123
1122
|
@namespace.setter
|
|
1124
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
1123
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1125
1124
|
pulumi.set(self, "namespace", value)
|
|
1126
1125
|
|
|
1127
|
-
@property
|
|
1126
|
+
@_builtins.property
|
|
1128
1127
|
@pulumi.getter(name="notAfter")
|
|
1129
|
-
def not_after(self) -> Optional[pulumi.Input[
|
|
1128
|
+
def not_after(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1130
1129
|
"""
|
|
1131
1130
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1132
1131
|
"""
|
|
1133
1132
|
return pulumi.get(self, "not_after")
|
|
1134
1133
|
|
|
1135
1134
|
@not_after.setter
|
|
1136
|
-
def not_after(self, value: Optional[pulumi.Input[
|
|
1135
|
+
def not_after(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1137
1136
|
pulumi.set(self, "not_after", value)
|
|
1138
1137
|
|
|
1139
|
-
@property
|
|
1138
|
+
@_builtins.property
|
|
1140
1139
|
@pulumi.getter
|
|
1141
|
-
def organization(self) -> Optional[pulumi.Input[
|
|
1140
|
+
def organization(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1142
1141
|
"""
|
|
1143
1142
|
The organization
|
|
1144
1143
|
"""
|
|
1145
1144
|
return pulumi.get(self, "organization")
|
|
1146
1145
|
|
|
1147
1146
|
@organization.setter
|
|
1148
|
-
def organization(self, value: Optional[pulumi.Input[
|
|
1147
|
+
def organization(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1149
1148
|
pulumi.set(self, "organization", value)
|
|
1150
1149
|
|
|
1151
|
-
@property
|
|
1150
|
+
@_builtins.property
|
|
1152
1151
|
@pulumi.getter(name="otherSans")
|
|
1153
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1152
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1154
1153
|
"""
|
|
1155
1154
|
List of other SANs
|
|
1156
1155
|
"""
|
|
1157
1156
|
return pulumi.get(self, "other_sans")
|
|
1158
1157
|
|
|
1159
1158
|
@other_sans.setter
|
|
1160
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1159
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1161
1160
|
pulumi.set(self, "other_sans", value)
|
|
1162
1161
|
|
|
1163
|
-
@property
|
|
1162
|
+
@_builtins.property
|
|
1164
1163
|
@pulumi.getter
|
|
1165
|
-
def ou(self) -> Optional[pulumi.Input[
|
|
1164
|
+
def ou(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1166
1165
|
"""
|
|
1167
1166
|
The organization unit
|
|
1168
1167
|
"""
|
|
1169
1168
|
return pulumi.get(self, "ou")
|
|
1170
1169
|
|
|
1171
1170
|
@ou.setter
|
|
1172
|
-
def ou(self, value: Optional[pulumi.Input[
|
|
1171
|
+
def ou(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1173
1172
|
pulumi.set(self, "ou", value)
|
|
1174
1173
|
|
|
1175
|
-
@property
|
|
1174
|
+
@_builtins.property
|
|
1176
1175
|
@pulumi.getter(name="permittedDnsDomains")
|
|
1177
|
-
def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1176
|
+
def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1178
1177
|
"""
|
|
1179
1178
|
List of domains for which certificates are allowed to be issued
|
|
1180
1179
|
"""
|
|
1181
1180
|
return pulumi.get(self, "permitted_dns_domains")
|
|
1182
1181
|
|
|
1183
1182
|
@permitted_dns_domains.setter
|
|
1184
|
-
def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1183
|
+
def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1185
1184
|
pulumi.set(self, "permitted_dns_domains", value)
|
|
1186
1185
|
|
|
1187
|
-
@property
|
|
1186
|
+
@_builtins.property
|
|
1188
1187
|
@pulumi.getter(name="permittedEmailAddresses")
|
|
1189
|
-
def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1188
|
+
def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1190
1189
|
"""
|
|
1191
1190
|
List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1192
1191
|
"""
|
|
1193
1192
|
return pulumi.get(self, "permitted_email_addresses")
|
|
1194
1193
|
|
|
1195
1194
|
@permitted_email_addresses.setter
|
|
1196
|
-
def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1195
|
+
def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1197
1196
|
pulumi.set(self, "permitted_email_addresses", value)
|
|
1198
1197
|
|
|
1199
|
-
@property
|
|
1198
|
+
@_builtins.property
|
|
1200
1199
|
@pulumi.getter(name="permittedIpRanges")
|
|
1201
|
-
def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1200
|
+
def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1202
1201
|
"""
|
|
1203
1202
|
List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1204
1203
|
"""
|
|
1205
1204
|
return pulumi.get(self, "permitted_ip_ranges")
|
|
1206
1205
|
|
|
1207
1206
|
@permitted_ip_ranges.setter
|
|
1208
|
-
def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1207
|
+
def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1209
1208
|
pulumi.set(self, "permitted_ip_ranges", value)
|
|
1210
1209
|
|
|
1211
|
-
@property
|
|
1210
|
+
@_builtins.property
|
|
1212
1211
|
@pulumi.getter(name="permittedUriDomains")
|
|
1213
|
-
def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1212
|
+
def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1214
1213
|
"""
|
|
1215
1214
|
List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1216
1215
|
"""
|
|
1217
1216
|
return pulumi.get(self, "permitted_uri_domains")
|
|
1218
1217
|
|
|
1219
1218
|
@permitted_uri_domains.setter
|
|
1220
|
-
def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1219
|
+
def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1221
1220
|
pulumi.set(self, "permitted_uri_domains", value)
|
|
1222
1221
|
|
|
1223
|
-
@property
|
|
1222
|
+
@_builtins.property
|
|
1224
1223
|
@pulumi.getter(name="postalCode")
|
|
1225
|
-
def postal_code(self) -> Optional[pulumi.Input[
|
|
1224
|
+
def postal_code(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1226
1225
|
"""
|
|
1227
1226
|
The postal code
|
|
1228
1227
|
"""
|
|
1229
1228
|
return pulumi.get(self, "postal_code")
|
|
1230
1229
|
|
|
1231
1230
|
@postal_code.setter
|
|
1232
|
-
def postal_code(self, value: Optional[pulumi.Input[
|
|
1231
|
+
def postal_code(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1233
1232
|
pulumi.set(self, "postal_code", value)
|
|
1234
1233
|
|
|
1235
|
-
@property
|
|
1234
|
+
@_builtins.property
|
|
1236
1235
|
@pulumi.getter(name="privateKeyFormat")
|
|
1237
|
-
def private_key_format(self) -> Optional[pulumi.Input[
|
|
1236
|
+
def private_key_format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1238
1237
|
"""
|
|
1239
1238
|
The private key format
|
|
1240
1239
|
"""
|
|
1241
1240
|
return pulumi.get(self, "private_key_format")
|
|
1242
1241
|
|
|
1243
1242
|
@private_key_format.setter
|
|
1244
|
-
def private_key_format(self, value: Optional[pulumi.Input[
|
|
1243
|
+
def private_key_format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1245
1244
|
pulumi.set(self, "private_key_format", value)
|
|
1246
1245
|
|
|
1247
|
-
@property
|
|
1246
|
+
@_builtins.property
|
|
1248
1247
|
@pulumi.getter
|
|
1249
|
-
def province(self) -> Optional[pulumi.Input[
|
|
1248
|
+
def province(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1250
1249
|
"""
|
|
1251
1250
|
The province
|
|
1252
1251
|
"""
|
|
1253
1252
|
return pulumi.get(self, "province")
|
|
1254
1253
|
|
|
1255
1254
|
@province.setter
|
|
1256
|
-
def province(self, value: Optional[pulumi.Input[
|
|
1255
|
+
def province(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1257
1256
|
pulumi.set(self, "province", value)
|
|
1258
1257
|
|
|
1259
|
-
@property
|
|
1258
|
+
@_builtins.property
|
|
1260
1259
|
@pulumi.getter(name="serialNumber")
|
|
1261
|
-
def serial_number(self) -> Optional[pulumi.Input[
|
|
1260
|
+
def serial_number(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1262
1261
|
"""
|
|
1263
1262
|
The certificate's serial number, hex formatted.
|
|
1264
1263
|
"""
|
|
1265
1264
|
return pulumi.get(self, "serial_number")
|
|
1266
1265
|
|
|
1267
1266
|
@serial_number.setter
|
|
1268
|
-
def serial_number(self, value: Optional[pulumi.Input[
|
|
1267
|
+
def serial_number(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1269
1268
|
pulumi.set(self, "serial_number", value)
|
|
1270
1269
|
|
|
1271
|
-
@property
|
|
1270
|
+
@_builtins.property
|
|
1272
1271
|
@pulumi.getter(name="signatureBits")
|
|
1273
|
-
def signature_bits(self) -> Optional[pulumi.Input[
|
|
1272
|
+
def signature_bits(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1274
1273
|
"""
|
|
1275
1274
|
The number of bits to use in the signature algorithm
|
|
1276
1275
|
"""
|
|
1277
1276
|
return pulumi.get(self, "signature_bits")
|
|
1278
1277
|
|
|
1279
1278
|
@signature_bits.setter
|
|
1280
|
-
def signature_bits(self, value: Optional[pulumi.Input[
|
|
1279
|
+
def signature_bits(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
1281
1280
|
pulumi.set(self, "signature_bits", value)
|
|
1282
1281
|
|
|
1283
|
-
@property
|
|
1282
|
+
@_builtins.property
|
|
1284
1283
|
@pulumi.getter(name="streetAddress")
|
|
1285
|
-
def street_address(self) -> Optional[pulumi.Input[
|
|
1284
|
+
def street_address(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1286
1285
|
"""
|
|
1287
1286
|
The street address
|
|
1288
1287
|
"""
|
|
1289
1288
|
return pulumi.get(self, "street_address")
|
|
1290
1289
|
|
|
1291
1290
|
@street_address.setter
|
|
1292
|
-
def street_address(self, value: Optional[pulumi.Input[
|
|
1291
|
+
def street_address(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1293
1292
|
pulumi.set(self, "street_address", value)
|
|
1294
1293
|
|
|
1295
|
-
@property
|
|
1294
|
+
@_builtins.property
|
|
1296
1295
|
@pulumi.getter
|
|
1297
|
-
def ttl(self) -> Optional[pulumi.Input[
|
|
1296
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1298
1297
|
"""
|
|
1299
1298
|
Time to live
|
|
1300
1299
|
"""
|
|
1301
1300
|
return pulumi.get(self, "ttl")
|
|
1302
1301
|
|
|
1303
1302
|
@ttl.setter
|
|
1304
|
-
def ttl(self, value: Optional[pulumi.Input[
|
|
1303
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1305
1304
|
pulumi.set(self, "ttl", value)
|
|
1306
1305
|
|
|
1307
|
-
@property
|
|
1306
|
+
@_builtins.property
|
|
1308
1307
|
@pulumi.getter
|
|
1309
|
-
def type(self) -> Optional[pulumi.Input[
|
|
1308
|
+
def type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1310
1309
|
"""
|
|
1311
1310
|
Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
|
|
1312
1311
|
or \\"kms\\"
|
|
@@ -1314,19 +1313,19 @@ class _SecretBackendRootCertState:
|
|
|
1314
1313
|
return pulumi.get(self, "type")
|
|
1315
1314
|
|
|
1316
1315
|
@type.setter
|
|
1317
|
-
def type(self, value: Optional[pulumi.Input[
|
|
1316
|
+
def type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1318
1317
|
pulumi.set(self, "type", value)
|
|
1319
1318
|
|
|
1320
|
-
@property
|
|
1319
|
+
@_builtins.property
|
|
1321
1320
|
@pulumi.getter(name="uriSans")
|
|
1322
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1321
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1323
1322
|
"""
|
|
1324
1323
|
List of alternative URIs
|
|
1325
1324
|
"""
|
|
1326
1325
|
return pulumi.get(self, "uri_sans")
|
|
1327
1326
|
|
|
1328
1327
|
@uri_sans.setter
|
|
1329
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1328
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1330
1329
|
pulumi.set(self, "uri_sans", value)
|
|
1331
1330
|
|
|
1332
1331
|
|
|
@@ -1336,43 +1335,43 @@ class SecretBackendRootCert(pulumi.CustomResource):
|
|
|
1336
1335
|
def __init__(__self__,
|
|
1337
1336
|
resource_name: str,
|
|
1338
1337
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1339
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1340
|
-
backend: Optional[pulumi.Input[
|
|
1341
|
-
common_name: Optional[pulumi.Input[
|
|
1342
|
-
country: Optional[pulumi.Input[
|
|
1343
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
1344
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1345
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1346
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1347
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1348
|
-
format: Optional[pulumi.Input[
|
|
1349
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1350
|
-
issuer_name: Optional[pulumi.Input[
|
|
1351
|
-
key_bits: Optional[pulumi.Input[
|
|
1352
|
-
key_name: Optional[pulumi.Input[
|
|
1353
|
-
key_ref: Optional[pulumi.Input[
|
|
1354
|
-
key_type: Optional[pulumi.Input[
|
|
1355
|
-
locality: Optional[pulumi.Input[
|
|
1356
|
-
managed_key_id: Optional[pulumi.Input[
|
|
1357
|
-
managed_key_name: Optional[pulumi.Input[
|
|
1358
|
-
max_path_length: Optional[pulumi.Input[
|
|
1359
|
-
namespace: Optional[pulumi.Input[
|
|
1360
|
-
not_after: Optional[pulumi.Input[
|
|
1361
|
-
organization: Optional[pulumi.Input[
|
|
1362
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1363
|
-
ou: Optional[pulumi.Input[
|
|
1364
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1365
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1366
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1367
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1368
|
-
postal_code: Optional[pulumi.Input[
|
|
1369
|
-
private_key_format: Optional[pulumi.Input[
|
|
1370
|
-
province: Optional[pulumi.Input[
|
|
1371
|
-
signature_bits: Optional[pulumi.Input[
|
|
1372
|
-
street_address: Optional[pulumi.Input[
|
|
1373
|
-
ttl: Optional[pulumi.Input[
|
|
1374
|
-
type: Optional[pulumi.Input[
|
|
1375
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1338
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1339
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1340
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1341
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1342
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1343
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1344
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1345
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1346
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1347
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1348
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1349
|
+
issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1350
|
+
key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1351
|
+
key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1352
|
+
key_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1353
|
+
key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1354
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1355
|
+
managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1356
|
+
managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1357
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1358
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1359
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1360
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1361
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1362
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1363
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1364
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1365
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1366
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1367
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1368
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1369
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1370
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1371
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1372
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1373
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1374
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1376
1375
|
__props__=None):
|
|
1377
1376
|
"""
|
|
1378
1377
|
## Example Usage
|
|
@@ -1381,7 +1380,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
|
|
|
1381
1380
|
import pulumi
|
|
1382
1381
|
import pulumi_vault as vault
|
|
1383
1382
|
|
|
1384
|
-
test = vault.
|
|
1383
|
+
test = vault.pkisecret.SecretBackendRootCert("test",
|
|
1385
1384
|
backend=pki["path"],
|
|
1386
1385
|
type="internal",
|
|
1387
1386
|
common_name="Root CA",
|
|
@@ -1398,52 +1397,52 @@ class SecretBackendRootCert(pulumi.CustomResource):
|
|
|
1398
1397
|
|
|
1399
1398
|
:param str resource_name: The name of the resource.
|
|
1400
1399
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1401
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1402
|
-
:param pulumi.Input[
|
|
1403
|
-
:param pulumi.Input[
|
|
1404
|
-
:param pulumi.Input[
|
|
1405
|
-
:param pulumi.Input[
|
|
1406
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1407
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1408
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1409
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1410
|
-
:param pulumi.Input[
|
|
1411
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1412
|
-
:param pulumi.Input[
|
|
1400
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
1401
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
1402
|
+
:param pulumi.Input[_builtins.str] common_name: CN of intermediate to create
|
|
1403
|
+
:param pulumi.Input[_builtins.str] country: The country
|
|
1404
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
1405
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1406
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1407
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1408
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1409
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
1410
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
1411
|
+
:param pulumi.Input[_builtins.str] issuer_name: Provides a name to the specified issuer. The name must be unique
|
|
1413
1412
|
across all issuers and not be the reserved value `default`
|
|
1414
|
-
:param pulumi.Input[
|
|
1415
|
-
:param pulumi.Input[
|
|
1413
|
+
:param pulumi.Input[_builtins.int] key_bits: The number of bits to use
|
|
1414
|
+
:param pulumi.Input[_builtins.str] key_name: When a new key is created with this request, optionally specifies
|
|
1416
1415
|
the name for this. The global ref `default` may not be used as a name.
|
|
1417
|
-
:param pulumi.Input[
|
|
1416
|
+
:param pulumi.Input[_builtins.str] key_ref: Specifies the key (either default, by name, or by identifier) to use
|
|
1418
1417
|
for generating this request. Only suitable for `type=existing` requests.
|
|
1419
|
-
:param pulumi.Input[
|
|
1420
|
-
:param pulumi.Input[
|
|
1421
|
-
:param pulumi.Input[
|
|
1418
|
+
:param pulumi.Input[_builtins.str] key_type: The desired key type
|
|
1419
|
+
:param pulumi.Input[_builtins.str] locality: The locality
|
|
1420
|
+
:param pulumi.Input[_builtins.str] managed_key_id: The ID of the previously configured managed key. This field is
|
|
1422
1421
|
required if `type` is `kms` and it conflicts with `managed_key_name`
|
|
1423
|
-
:param pulumi.Input[
|
|
1422
|
+
:param pulumi.Input[_builtins.str] managed_key_name: The name of the previously configured managed key. This field is
|
|
1424
1423
|
required if `type` is `kms` and it conflicts with `managed_key_id`
|
|
1425
|
-
:param pulumi.Input[
|
|
1426
|
-
:param pulumi.Input[
|
|
1424
|
+
:param pulumi.Input[_builtins.int] max_path_length: The maximum path length to encode in the generated certificate
|
|
1425
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
1427
1426
|
The value should not contain leading or trailing forward slashes.
|
|
1428
1427
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
1429
1428
|
*Available only for Vault Enterprise*.
|
|
1430
|
-
:param pulumi.Input[
|
|
1431
|
-
:param pulumi.Input[
|
|
1432
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1433
|
-
:param pulumi.Input[
|
|
1434
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1435
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1436
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1437
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1438
|
-
:param pulumi.Input[
|
|
1439
|
-
:param pulumi.Input[
|
|
1440
|
-
:param pulumi.Input[
|
|
1441
|
-
:param pulumi.Input[
|
|
1442
|
-
:param pulumi.Input[
|
|
1443
|
-
:param pulumi.Input[
|
|
1444
|
-
:param pulumi.Input[
|
|
1429
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1430
|
+
:param pulumi.Input[_builtins.str] organization: The organization
|
|
1431
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
1432
|
+
:param pulumi.Input[_builtins.str] ou: The organization unit
|
|
1433
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
|
|
1434
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1435
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1436
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1437
|
+
:param pulumi.Input[_builtins.str] postal_code: The postal code
|
|
1438
|
+
:param pulumi.Input[_builtins.str] private_key_format: The private key format
|
|
1439
|
+
:param pulumi.Input[_builtins.str] province: The province
|
|
1440
|
+
:param pulumi.Input[_builtins.int] signature_bits: The number of bits to use in the signature algorithm
|
|
1441
|
+
:param pulumi.Input[_builtins.str] street_address: The street address
|
|
1442
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
1443
|
+
:param pulumi.Input[_builtins.str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
|
|
1445
1444
|
or \\"kms\\"
|
|
1446
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1445
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
1447
1446
|
"""
|
|
1448
1447
|
...
|
|
1449
1448
|
@overload
|
|
@@ -1458,7 +1457,7 @@ class SecretBackendRootCert(pulumi.CustomResource):
|
|
|
1458
1457
|
import pulumi
|
|
1459
1458
|
import pulumi_vault as vault
|
|
1460
1459
|
|
|
1461
|
-
test = vault.
|
|
1460
|
+
test = vault.pkisecret.SecretBackendRootCert("test",
|
|
1462
1461
|
backend=pki["path"],
|
|
1463
1462
|
type="internal",
|
|
1464
1463
|
common_name="Root CA",
|
|
@@ -1488,43 +1487,43 @@ class SecretBackendRootCert(pulumi.CustomResource):
|
|
|
1488
1487
|
def _internal_init(__self__,
|
|
1489
1488
|
resource_name: str,
|
|
1490
1489
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1491
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1492
|
-
backend: Optional[pulumi.Input[
|
|
1493
|
-
common_name: Optional[pulumi.Input[
|
|
1494
|
-
country: Optional[pulumi.Input[
|
|
1495
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
1496
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1497
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1498
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1499
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1500
|
-
format: Optional[pulumi.Input[
|
|
1501
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1502
|
-
issuer_name: Optional[pulumi.Input[
|
|
1503
|
-
key_bits: Optional[pulumi.Input[
|
|
1504
|
-
key_name: Optional[pulumi.Input[
|
|
1505
|
-
key_ref: Optional[pulumi.Input[
|
|
1506
|
-
key_type: Optional[pulumi.Input[
|
|
1507
|
-
locality: Optional[pulumi.Input[
|
|
1508
|
-
managed_key_id: Optional[pulumi.Input[
|
|
1509
|
-
managed_key_name: Optional[pulumi.Input[
|
|
1510
|
-
max_path_length: Optional[pulumi.Input[
|
|
1511
|
-
namespace: Optional[pulumi.Input[
|
|
1512
|
-
not_after: Optional[pulumi.Input[
|
|
1513
|
-
organization: Optional[pulumi.Input[
|
|
1514
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1515
|
-
ou: Optional[pulumi.Input[
|
|
1516
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1517
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1518
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1519
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1520
|
-
postal_code: Optional[pulumi.Input[
|
|
1521
|
-
private_key_format: Optional[pulumi.Input[
|
|
1522
|
-
province: Optional[pulumi.Input[
|
|
1523
|
-
signature_bits: Optional[pulumi.Input[
|
|
1524
|
-
street_address: Optional[pulumi.Input[
|
|
1525
|
-
ttl: Optional[pulumi.Input[
|
|
1526
|
-
type: Optional[pulumi.Input[
|
|
1527
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1490
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1491
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1492
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1493
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1494
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1495
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1496
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1497
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1498
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1499
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1500
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1501
|
+
issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1502
|
+
key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1503
|
+
key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1504
|
+
key_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1505
|
+
key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1506
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1507
|
+
managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1508
|
+
managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1509
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1510
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1511
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1512
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1513
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1514
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1515
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1516
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1517
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1518
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1519
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1520
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1521
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1522
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1523
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1524
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1525
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1526
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1528
1527
|
__props__=None):
|
|
1529
1528
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
1530
1529
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -1592,48 +1591,48 @@ class SecretBackendRootCert(pulumi.CustomResource):
|
|
|
1592
1591
|
def get(resource_name: str,
|
|
1593
1592
|
id: pulumi.Input[str],
|
|
1594
1593
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1595
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1596
|
-
backend: Optional[pulumi.Input[
|
|
1597
|
-
certificate: Optional[pulumi.Input[
|
|
1598
|
-
common_name: Optional[pulumi.Input[
|
|
1599
|
-
country: Optional[pulumi.Input[
|
|
1600
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
1601
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1602
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1603
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1604
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1605
|
-
format: Optional[pulumi.Input[
|
|
1606
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1607
|
-
issuer_id: Optional[pulumi.Input[
|
|
1608
|
-
issuer_name: Optional[pulumi.Input[
|
|
1609
|
-
issuing_ca: Optional[pulumi.Input[
|
|
1610
|
-
key_bits: Optional[pulumi.Input[
|
|
1611
|
-
key_id: Optional[pulumi.Input[
|
|
1612
|
-
key_name: Optional[pulumi.Input[
|
|
1613
|
-
key_ref: Optional[pulumi.Input[
|
|
1614
|
-
key_type: Optional[pulumi.Input[
|
|
1615
|
-
locality: Optional[pulumi.Input[
|
|
1616
|
-
managed_key_id: Optional[pulumi.Input[
|
|
1617
|
-
managed_key_name: Optional[pulumi.Input[
|
|
1618
|
-
max_path_length: Optional[pulumi.Input[
|
|
1619
|
-
namespace: Optional[pulumi.Input[
|
|
1620
|
-
not_after: Optional[pulumi.Input[
|
|
1621
|
-
organization: Optional[pulumi.Input[
|
|
1622
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1623
|
-
ou: Optional[pulumi.Input[
|
|
1624
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1625
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1626
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1627
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1628
|
-
postal_code: Optional[pulumi.Input[
|
|
1629
|
-
private_key_format: Optional[pulumi.Input[
|
|
1630
|
-
province: Optional[pulumi.Input[
|
|
1631
|
-
serial_number: Optional[pulumi.Input[
|
|
1632
|
-
signature_bits: Optional[pulumi.Input[
|
|
1633
|
-
street_address: Optional[pulumi.Input[
|
|
1634
|
-
ttl: Optional[pulumi.Input[
|
|
1635
|
-
type: Optional[pulumi.Input[
|
|
1636
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1594
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1595
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1596
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1597
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1598
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1599
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1600
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1601
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1602
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1603
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1604
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1605
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1606
|
+
issuer_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1607
|
+
issuer_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1608
|
+
issuing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1609
|
+
key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1610
|
+
key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1611
|
+
key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1612
|
+
key_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1613
|
+
key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1614
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1615
|
+
managed_key_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1616
|
+
managed_key_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1617
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1618
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1619
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1620
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1621
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1622
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1623
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1624
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1625
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1626
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1627
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1628
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1629
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1630
|
+
serial_number: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1631
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1632
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1633
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1634
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1635
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None) -> 'SecretBackendRootCert':
|
|
1637
1636
|
"""
|
|
1638
1637
|
Get an existing SecretBackendRootCert resource's state with the given name, id, and optional extra
|
|
1639
1638
|
properties used to qualify the lookup.
|
|
@@ -1641,57 +1640,57 @@ class SecretBackendRootCert(pulumi.CustomResource):
|
|
|
1641
1640
|
:param str resource_name: The unique name of the resulting resource.
|
|
1642
1641
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
1643
1642
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1644
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1645
|
-
:param pulumi.Input[
|
|
1646
|
-
:param pulumi.Input[
|
|
1647
|
-
:param pulumi.Input[
|
|
1648
|
-
:param pulumi.Input[
|
|
1649
|
-
:param pulumi.Input[
|
|
1650
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1651
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1652
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1653
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1654
|
-
:param pulumi.Input[
|
|
1655
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1656
|
-
:param pulumi.Input[
|
|
1657
|
-
:param pulumi.Input[
|
|
1643
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
1644
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
1645
|
+
:param pulumi.Input[_builtins.str] certificate: The certificate.
|
|
1646
|
+
:param pulumi.Input[_builtins.str] common_name: CN of intermediate to create
|
|
1647
|
+
:param pulumi.Input[_builtins.str] country: The country
|
|
1648
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
1649
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1650
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1651
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1652
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1653
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
1654
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
1655
|
+
:param pulumi.Input[_builtins.str] issuer_id: The ID of the generated issuer.
|
|
1656
|
+
:param pulumi.Input[_builtins.str] issuer_name: Provides a name to the specified issuer. The name must be unique
|
|
1658
1657
|
across all issuers and not be the reserved value `default`
|
|
1659
|
-
:param pulumi.Input[
|
|
1660
|
-
:param pulumi.Input[
|
|
1661
|
-
:param pulumi.Input[
|
|
1662
|
-
:param pulumi.Input[
|
|
1658
|
+
:param pulumi.Input[_builtins.str] issuing_ca: The issuing CA certificate.
|
|
1659
|
+
:param pulumi.Input[_builtins.int] key_bits: The number of bits to use
|
|
1660
|
+
:param pulumi.Input[_builtins.str] key_id: The ID of the generated key.
|
|
1661
|
+
:param pulumi.Input[_builtins.str] key_name: When a new key is created with this request, optionally specifies
|
|
1663
1662
|
the name for this. The global ref `default` may not be used as a name.
|
|
1664
|
-
:param pulumi.Input[
|
|
1663
|
+
:param pulumi.Input[_builtins.str] key_ref: Specifies the key (either default, by name, or by identifier) to use
|
|
1665
1664
|
for generating this request. Only suitable for `type=existing` requests.
|
|
1666
|
-
:param pulumi.Input[
|
|
1667
|
-
:param pulumi.Input[
|
|
1668
|
-
:param pulumi.Input[
|
|
1665
|
+
:param pulumi.Input[_builtins.str] key_type: The desired key type
|
|
1666
|
+
:param pulumi.Input[_builtins.str] locality: The locality
|
|
1667
|
+
:param pulumi.Input[_builtins.str] managed_key_id: The ID of the previously configured managed key. This field is
|
|
1669
1668
|
required if `type` is `kms` and it conflicts with `managed_key_name`
|
|
1670
|
-
:param pulumi.Input[
|
|
1669
|
+
:param pulumi.Input[_builtins.str] managed_key_name: The name of the previously configured managed key. This field is
|
|
1671
1670
|
required if `type` is `kms` and it conflicts with `managed_key_id`
|
|
1672
|
-
:param pulumi.Input[
|
|
1673
|
-
:param pulumi.Input[
|
|
1671
|
+
:param pulumi.Input[_builtins.int] max_path_length: The maximum path length to encode in the generated certificate
|
|
1672
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
1674
1673
|
The value should not contain leading or trailing forward slashes.
|
|
1675
1674
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
1676
1675
|
*Available only for Vault Enterprise*.
|
|
1677
|
-
:param pulumi.Input[
|
|
1678
|
-
:param pulumi.Input[
|
|
1679
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1680
|
-
:param pulumi.Input[
|
|
1681
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1682
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1683
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1684
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1685
|
-
:param pulumi.Input[
|
|
1686
|
-
:param pulumi.Input[
|
|
1687
|
-
:param pulumi.Input[
|
|
1688
|
-
:param pulumi.Input[
|
|
1689
|
-
:param pulumi.Input[
|
|
1690
|
-
:param pulumi.Input[
|
|
1691
|
-
:param pulumi.Input[
|
|
1692
|
-
:param pulumi.Input[
|
|
1676
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1677
|
+
:param pulumi.Input[_builtins.str] organization: The organization
|
|
1678
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
1679
|
+
:param pulumi.Input[_builtins.str] ou: The organization unit
|
|
1680
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
|
|
1681
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1682
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1683
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1684
|
+
:param pulumi.Input[_builtins.str] postal_code: The postal code
|
|
1685
|
+
:param pulumi.Input[_builtins.str] private_key_format: The private key format
|
|
1686
|
+
:param pulumi.Input[_builtins.str] province: The province
|
|
1687
|
+
:param pulumi.Input[_builtins.str] serial_number: The certificate's serial number, hex formatted.
|
|
1688
|
+
:param pulumi.Input[_builtins.int] signature_bits: The number of bits to use in the signature algorithm
|
|
1689
|
+
:param pulumi.Input[_builtins.str] street_address: The street address
|
|
1690
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
1691
|
+
:param pulumi.Input[_builtins.str] type: Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
|
|
1693
1692
|
or \\"kms\\"
|
|
1694
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1693
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
1695
1694
|
"""
|
|
1696
1695
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
1697
1696
|
|
|
@@ -1741,206 +1740,206 @@ class SecretBackendRootCert(pulumi.CustomResource):
|
|
|
1741
1740
|
__props__.__dict__["uri_sans"] = uri_sans
|
|
1742
1741
|
return SecretBackendRootCert(resource_name, opts=opts, __props__=__props__)
|
|
1743
1742
|
|
|
1744
|
-
@property
|
|
1743
|
+
@_builtins.property
|
|
1745
1744
|
@pulumi.getter(name="altNames")
|
|
1746
|
-
def alt_names(self) -> pulumi.Output[Optional[Sequence[
|
|
1745
|
+
def alt_names(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1747
1746
|
"""
|
|
1748
1747
|
List of alternative names
|
|
1749
1748
|
"""
|
|
1750
1749
|
return pulumi.get(self, "alt_names")
|
|
1751
1750
|
|
|
1752
|
-
@property
|
|
1751
|
+
@_builtins.property
|
|
1753
1752
|
@pulumi.getter
|
|
1754
|
-
def backend(self) -> pulumi.Output[
|
|
1753
|
+
def backend(self) -> pulumi.Output[_builtins.str]:
|
|
1755
1754
|
"""
|
|
1756
1755
|
The PKI secret backend the resource belongs to.
|
|
1757
1756
|
"""
|
|
1758
1757
|
return pulumi.get(self, "backend")
|
|
1759
1758
|
|
|
1760
|
-
@property
|
|
1759
|
+
@_builtins.property
|
|
1761
1760
|
@pulumi.getter
|
|
1762
|
-
def certificate(self) -> pulumi.Output[
|
|
1761
|
+
def certificate(self) -> pulumi.Output[_builtins.str]:
|
|
1763
1762
|
"""
|
|
1764
1763
|
The certificate.
|
|
1765
1764
|
"""
|
|
1766
1765
|
return pulumi.get(self, "certificate")
|
|
1767
1766
|
|
|
1768
|
-
@property
|
|
1767
|
+
@_builtins.property
|
|
1769
1768
|
@pulumi.getter(name="commonName")
|
|
1770
|
-
def common_name(self) -> pulumi.Output[
|
|
1769
|
+
def common_name(self) -> pulumi.Output[_builtins.str]:
|
|
1771
1770
|
"""
|
|
1772
1771
|
CN of intermediate to create
|
|
1773
1772
|
"""
|
|
1774
1773
|
return pulumi.get(self, "common_name")
|
|
1775
1774
|
|
|
1776
|
-
@property
|
|
1775
|
+
@_builtins.property
|
|
1777
1776
|
@pulumi.getter
|
|
1778
|
-
def country(self) -> pulumi.Output[Optional[
|
|
1777
|
+
def country(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1779
1778
|
"""
|
|
1780
1779
|
The country
|
|
1781
1780
|
"""
|
|
1782
1781
|
return pulumi.get(self, "country")
|
|
1783
1782
|
|
|
1784
|
-
@property
|
|
1783
|
+
@_builtins.property
|
|
1785
1784
|
@pulumi.getter(name="excludeCnFromSans")
|
|
1786
|
-
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[
|
|
1785
|
+
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1787
1786
|
"""
|
|
1788
1787
|
Flag to exclude CN from SANs
|
|
1789
1788
|
"""
|
|
1790
1789
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
1791
1790
|
|
|
1792
|
-
@property
|
|
1791
|
+
@_builtins.property
|
|
1793
1792
|
@pulumi.getter(name="excludedDnsDomains")
|
|
1794
|
-
def excluded_dns_domains(self) -> pulumi.Output[Optional[Sequence[
|
|
1793
|
+
def excluded_dns_domains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1795
1794
|
"""
|
|
1796
1795
|
List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1797
1796
|
"""
|
|
1798
1797
|
return pulumi.get(self, "excluded_dns_domains")
|
|
1799
1798
|
|
|
1800
|
-
@property
|
|
1799
|
+
@_builtins.property
|
|
1801
1800
|
@pulumi.getter(name="excludedEmailAddresses")
|
|
1802
|
-
def excluded_email_addresses(self) -> pulumi.Output[Optional[Sequence[
|
|
1801
|
+
def excluded_email_addresses(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1803
1802
|
"""
|
|
1804
1803
|
List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1805
1804
|
"""
|
|
1806
1805
|
return pulumi.get(self, "excluded_email_addresses")
|
|
1807
1806
|
|
|
1808
|
-
@property
|
|
1807
|
+
@_builtins.property
|
|
1809
1808
|
@pulumi.getter(name="excludedIpRanges")
|
|
1810
|
-
def excluded_ip_ranges(self) -> pulumi.Output[Optional[Sequence[
|
|
1809
|
+
def excluded_ip_ranges(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1811
1810
|
"""
|
|
1812
1811
|
List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1813
1812
|
"""
|
|
1814
1813
|
return pulumi.get(self, "excluded_ip_ranges")
|
|
1815
1814
|
|
|
1816
|
-
@property
|
|
1815
|
+
@_builtins.property
|
|
1817
1816
|
@pulumi.getter(name="excludedUriDomains")
|
|
1818
|
-
def excluded_uri_domains(self) -> pulumi.Output[Optional[Sequence[
|
|
1817
|
+
def excluded_uri_domains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1819
1818
|
"""
|
|
1820
1819
|
List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1821
1820
|
"""
|
|
1822
1821
|
return pulumi.get(self, "excluded_uri_domains")
|
|
1823
1822
|
|
|
1824
|
-
@property
|
|
1823
|
+
@_builtins.property
|
|
1825
1824
|
@pulumi.getter
|
|
1826
|
-
def format(self) -> pulumi.Output[Optional[
|
|
1825
|
+
def format(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1827
1826
|
"""
|
|
1828
1827
|
The format of data
|
|
1829
1828
|
"""
|
|
1830
1829
|
return pulumi.get(self, "format")
|
|
1831
1830
|
|
|
1832
|
-
@property
|
|
1831
|
+
@_builtins.property
|
|
1833
1832
|
@pulumi.getter(name="ipSans")
|
|
1834
|
-
def ip_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1833
|
+
def ip_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1835
1834
|
"""
|
|
1836
1835
|
List of alternative IPs
|
|
1837
1836
|
"""
|
|
1838
1837
|
return pulumi.get(self, "ip_sans")
|
|
1839
1838
|
|
|
1840
|
-
@property
|
|
1839
|
+
@_builtins.property
|
|
1841
1840
|
@pulumi.getter(name="issuerId")
|
|
1842
|
-
def issuer_id(self) -> pulumi.Output[
|
|
1841
|
+
def issuer_id(self) -> pulumi.Output[_builtins.str]:
|
|
1843
1842
|
"""
|
|
1844
1843
|
The ID of the generated issuer.
|
|
1845
1844
|
"""
|
|
1846
1845
|
return pulumi.get(self, "issuer_id")
|
|
1847
1846
|
|
|
1848
|
-
@property
|
|
1847
|
+
@_builtins.property
|
|
1849
1848
|
@pulumi.getter(name="issuerName")
|
|
1850
|
-
def issuer_name(self) -> pulumi.Output[
|
|
1849
|
+
def issuer_name(self) -> pulumi.Output[_builtins.str]:
|
|
1851
1850
|
"""
|
|
1852
1851
|
Provides a name to the specified issuer. The name must be unique
|
|
1853
1852
|
across all issuers and not be the reserved value `default`
|
|
1854
1853
|
"""
|
|
1855
1854
|
return pulumi.get(self, "issuer_name")
|
|
1856
1855
|
|
|
1857
|
-
@property
|
|
1856
|
+
@_builtins.property
|
|
1858
1857
|
@pulumi.getter(name="issuingCa")
|
|
1859
|
-
def issuing_ca(self) -> pulumi.Output[
|
|
1858
|
+
def issuing_ca(self) -> pulumi.Output[_builtins.str]:
|
|
1860
1859
|
"""
|
|
1861
1860
|
The issuing CA certificate.
|
|
1862
1861
|
"""
|
|
1863
1862
|
return pulumi.get(self, "issuing_ca")
|
|
1864
1863
|
|
|
1865
|
-
@property
|
|
1864
|
+
@_builtins.property
|
|
1866
1865
|
@pulumi.getter(name="keyBits")
|
|
1867
|
-
def key_bits(self) -> pulumi.Output[Optional[
|
|
1866
|
+
def key_bits(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1868
1867
|
"""
|
|
1869
1868
|
The number of bits to use
|
|
1870
1869
|
"""
|
|
1871
1870
|
return pulumi.get(self, "key_bits")
|
|
1872
1871
|
|
|
1873
|
-
@property
|
|
1872
|
+
@_builtins.property
|
|
1874
1873
|
@pulumi.getter(name="keyId")
|
|
1875
|
-
def key_id(self) -> pulumi.Output[
|
|
1874
|
+
def key_id(self) -> pulumi.Output[_builtins.str]:
|
|
1876
1875
|
"""
|
|
1877
1876
|
The ID of the generated key.
|
|
1878
1877
|
"""
|
|
1879
1878
|
return pulumi.get(self, "key_id")
|
|
1880
1879
|
|
|
1881
|
-
@property
|
|
1880
|
+
@_builtins.property
|
|
1882
1881
|
@pulumi.getter(name="keyName")
|
|
1883
|
-
def key_name(self) -> pulumi.Output[
|
|
1882
|
+
def key_name(self) -> pulumi.Output[_builtins.str]:
|
|
1884
1883
|
"""
|
|
1885
1884
|
When a new key is created with this request, optionally specifies
|
|
1886
1885
|
the name for this. The global ref `default` may not be used as a name.
|
|
1887
1886
|
"""
|
|
1888
1887
|
return pulumi.get(self, "key_name")
|
|
1889
1888
|
|
|
1890
|
-
@property
|
|
1889
|
+
@_builtins.property
|
|
1891
1890
|
@pulumi.getter(name="keyRef")
|
|
1892
|
-
def key_ref(self) -> pulumi.Output[
|
|
1891
|
+
def key_ref(self) -> pulumi.Output[_builtins.str]:
|
|
1893
1892
|
"""
|
|
1894
1893
|
Specifies the key (either default, by name, or by identifier) to use
|
|
1895
1894
|
for generating this request. Only suitable for `type=existing` requests.
|
|
1896
1895
|
"""
|
|
1897
1896
|
return pulumi.get(self, "key_ref")
|
|
1898
1897
|
|
|
1899
|
-
@property
|
|
1898
|
+
@_builtins.property
|
|
1900
1899
|
@pulumi.getter(name="keyType")
|
|
1901
|
-
def key_type(self) -> pulumi.Output[Optional[
|
|
1900
|
+
def key_type(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1902
1901
|
"""
|
|
1903
1902
|
The desired key type
|
|
1904
1903
|
"""
|
|
1905
1904
|
return pulumi.get(self, "key_type")
|
|
1906
1905
|
|
|
1907
|
-
@property
|
|
1906
|
+
@_builtins.property
|
|
1908
1907
|
@pulumi.getter
|
|
1909
|
-
def locality(self) -> pulumi.Output[Optional[
|
|
1908
|
+
def locality(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1910
1909
|
"""
|
|
1911
1910
|
The locality
|
|
1912
1911
|
"""
|
|
1913
1912
|
return pulumi.get(self, "locality")
|
|
1914
1913
|
|
|
1915
|
-
@property
|
|
1914
|
+
@_builtins.property
|
|
1916
1915
|
@pulumi.getter(name="managedKeyId")
|
|
1917
|
-
def managed_key_id(self) -> pulumi.Output[
|
|
1916
|
+
def managed_key_id(self) -> pulumi.Output[_builtins.str]:
|
|
1918
1917
|
"""
|
|
1919
1918
|
The ID of the previously configured managed key. This field is
|
|
1920
1919
|
required if `type` is `kms` and it conflicts with `managed_key_name`
|
|
1921
1920
|
"""
|
|
1922
1921
|
return pulumi.get(self, "managed_key_id")
|
|
1923
1922
|
|
|
1924
|
-
@property
|
|
1923
|
+
@_builtins.property
|
|
1925
1924
|
@pulumi.getter(name="managedKeyName")
|
|
1926
|
-
def managed_key_name(self) -> pulumi.Output[
|
|
1925
|
+
def managed_key_name(self) -> pulumi.Output[_builtins.str]:
|
|
1927
1926
|
"""
|
|
1928
1927
|
The name of the previously configured managed key. This field is
|
|
1929
1928
|
required if `type` is `kms` and it conflicts with `managed_key_id`
|
|
1930
1929
|
"""
|
|
1931
1930
|
return pulumi.get(self, "managed_key_name")
|
|
1932
1931
|
|
|
1933
|
-
@property
|
|
1932
|
+
@_builtins.property
|
|
1934
1933
|
@pulumi.getter(name="maxPathLength")
|
|
1935
|
-
def max_path_length(self) -> pulumi.Output[Optional[
|
|
1934
|
+
def max_path_length(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1936
1935
|
"""
|
|
1937
1936
|
The maximum path length to encode in the generated certificate
|
|
1938
1937
|
"""
|
|
1939
1938
|
return pulumi.get(self, "max_path_length")
|
|
1940
1939
|
|
|
1941
|
-
@property
|
|
1940
|
+
@_builtins.property
|
|
1942
1941
|
@pulumi.getter
|
|
1943
|
-
def namespace(self) -> pulumi.Output[Optional[
|
|
1942
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1944
1943
|
"""
|
|
1945
1944
|
The namespace to provision the resource in.
|
|
1946
1945
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1949,138 +1948,138 @@ class SecretBackendRootCert(pulumi.CustomResource):
|
|
|
1949
1948
|
"""
|
|
1950
1949
|
return pulumi.get(self, "namespace")
|
|
1951
1950
|
|
|
1952
|
-
@property
|
|
1951
|
+
@_builtins.property
|
|
1953
1952
|
@pulumi.getter(name="notAfter")
|
|
1954
|
-
def not_after(self) -> pulumi.Output[Optional[
|
|
1953
|
+
def not_after(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1955
1954
|
"""
|
|
1956
1955
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1957
1956
|
"""
|
|
1958
1957
|
return pulumi.get(self, "not_after")
|
|
1959
1958
|
|
|
1960
|
-
@property
|
|
1959
|
+
@_builtins.property
|
|
1961
1960
|
@pulumi.getter
|
|
1962
|
-
def organization(self) -> pulumi.Output[Optional[
|
|
1961
|
+
def organization(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1963
1962
|
"""
|
|
1964
1963
|
The organization
|
|
1965
1964
|
"""
|
|
1966
1965
|
return pulumi.get(self, "organization")
|
|
1967
1966
|
|
|
1968
|
-
@property
|
|
1967
|
+
@_builtins.property
|
|
1969
1968
|
@pulumi.getter(name="otherSans")
|
|
1970
|
-
def other_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1969
|
+
def other_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1971
1970
|
"""
|
|
1972
1971
|
List of other SANs
|
|
1973
1972
|
"""
|
|
1974
1973
|
return pulumi.get(self, "other_sans")
|
|
1975
1974
|
|
|
1976
|
-
@property
|
|
1975
|
+
@_builtins.property
|
|
1977
1976
|
@pulumi.getter
|
|
1978
|
-
def ou(self) -> pulumi.Output[Optional[
|
|
1977
|
+
def ou(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1979
1978
|
"""
|
|
1980
1979
|
The organization unit
|
|
1981
1980
|
"""
|
|
1982
1981
|
return pulumi.get(self, "ou")
|
|
1983
1982
|
|
|
1984
|
-
@property
|
|
1983
|
+
@_builtins.property
|
|
1985
1984
|
@pulumi.getter(name="permittedDnsDomains")
|
|
1986
|
-
def permitted_dns_domains(self) -> pulumi.Output[Optional[Sequence[
|
|
1985
|
+
def permitted_dns_domains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1987
1986
|
"""
|
|
1988
1987
|
List of domains for which certificates are allowed to be issued
|
|
1989
1988
|
"""
|
|
1990
1989
|
return pulumi.get(self, "permitted_dns_domains")
|
|
1991
1990
|
|
|
1992
|
-
@property
|
|
1991
|
+
@_builtins.property
|
|
1993
1992
|
@pulumi.getter(name="permittedEmailAddresses")
|
|
1994
|
-
def permitted_email_addresses(self) -> pulumi.Output[Optional[Sequence[
|
|
1993
|
+
def permitted_email_addresses(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1995
1994
|
"""
|
|
1996
1995
|
List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1997
1996
|
"""
|
|
1998
1997
|
return pulumi.get(self, "permitted_email_addresses")
|
|
1999
1998
|
|
|
2000
|
-
@property
|
|
1999
|
+
@_builtins.property
|
|
2001
2000
|
@pulumi.getter(name="permittedIpRanges")
|
|
2002
|
-
def permitted_ip_ranges(self) -> pulumi.Output[Optional[Sequence[
|
|
2001
|
+
def permitted_ip_ranges(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
2003
2002
|
"""
|
|
2004
2003
|
List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
2005
2004
|
"""
|
|
2006
2005
|
return pulumi.get(self, "permitted_ip_ranges")
|
|
2007
2006
|
|
|
2008
|
-
@property
|
|
2007
|
+
@_builtins.property
|
|
2009
2008
|
@pulumi.getter(name="permittedUriDomains")
|
|
2010
|
-
def permitted_uri_domains(self) -> pulumi.Output[Optional[Sequence[
|
|
2009
|
+
def permitted_uri_domains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
2011
2010
|
"""
|
|
2012
2011
|
List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
2013
2012
|
"""
|
|
2014
2013
|
return pulumi.get(self, "permitted_uri_domains")
|
|
2015
2014
|
|
|
2016
|
-
@property
|
|
2015
|
+
@_builtins.property
|
|
2017
2016
|
@pulumi.getter(name="postalCode")
|
|
2018
|
-
def postal_code(self) -> pulumi.Output[Optional[
|
|
2017
|
+
def postal_code(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2019
2018
|
"""
|
|
2020
2019
|
The postal code
|
|
2021
2020
|
"""
|
|
2022
2021
|
return pulumi.get(self, "postal_code")
|
|
2023
2022
|
|
|
2024
|
-
@property
|
|
2023
|
+
@_builtins.property
|
|
2025
2024
|
@pulumi.getter(name="privateKeyFormat")
|
|
2026
|
-
def private_key_format(self) -> pulumi.Output[Optional[
|
|
2025
|
+
def private_key_format(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2027
2026
|
"""
|
|
2028
2027
|
The private key format
|
|
2029
2028
|
"""
|
|
2030
2029
|
return pulumi.get(self, "private_key_format")
|
|
2031
2030
|
|
|
2032
|
-
@property
|
|
2031
|
+
@_builtins.property
|
|
2033
2032
|
@pulumi.getter
|
|
2034
|
-
def province(self) -> pulumi.Output[Optional[
|
|
2033
|
+
def province(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2035
2034
|
"""
|
|
2036
2035
|
The province
|
|
2037
2036
|
"""
|
|
2038
2037
|
return pulumi.get(self, "province")
|
|
2039
2038
|
|
|
2040
|
-
@property
|
|
2039
|
+
@_builtins.property
|
|
2041
2040
|
@pulumi.getter(name="serialNumber")
|
|
2042
|
-
def serial_number(self) -> pulumi.Output[
|
|
2041
|
+
def serial_number(self) -> pulumi.Output[_builtins.str]:
|
|
2043
2042
|
"""
|
|
2044
2043
|
The certificate's serial number, hex formatted.
|
|
2045
2044
|
"""
|
|
2046
2045
|
return pulumi.get(self, "serial_number")
|
|
2047
2046
|
|
|
2048
|
-
@property
|
|
2047
|
+
@_builtins.property
|
|
2049
2048
|
@pulumi.getter(name="signatureBits")
|
|
2050
|
-
def signature_bits(self) -> pulumi.Output[
|
|
2049
|
+
def signature_bits(self) -> pulumi.Output[_builtins.int]:
|
|
2051
2050
|
"""
|
|
2052
2051
|
The number of bits to use in the signature algorithm
|
|
2053
2052
|
"""
|
|
2054
2053
|
return pulumi.get(self, "signature_bits")
|
|
2055
2054
|
|
|
2056
|
-
@property
|
|
2055
|
+
@_builtins.property
|
|
2057
2056
|
@pulumi.getter(name="streetAddress")
|
|
2058
|
-
def street_address(self) -> pulumi.Output[Optional[
|
|
2057
|
+
def street_address(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2059
2058
|
"""
|
|
2060
2059
|
The street address
|
|
2061
2060
|
"""
|
|
2062
2061
|
return pulumi.get(self, "street_address")
|
|
2063
2062
|
|
|
2064
|
-
@property
|
|
2063
|
+
@_builtins.property
|
|
2065
2064
|
@pulumi.getter
|
|
2066
|
-
def ttl(self) -> pulumi.Output[Optional[
|
|
2065
|
+
def ttl(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2067
2066
|
"""
|
|
2068
2067
|
Time to live
|
|
2069
2068
|
"""
|
|
2070
2069
|
return pulumi.get(self, "ttl")
|
|
2071
2070
|
|
|
2072
|
-
@property
|
|
2071
|
+
@_builtins.property
|
|
2073
2072
|
@pulumi.getter
|
|
2074
|
-
def type(self) -> pulumi.Output[
|
|
2073
|
+
def type(self) -> pulumi.Output[_builtins.str]:
|
|
2075
2074
|
"""
|
|
2076
2075
|
Type of intermediate to create. Must be either \\"exported\\", \\"internal\\"
|
|
2077
2076
|
or \\"kms\\"
|
|
2078
2077
|
"""
|
|
2079
2078
|
return pulumi.get(self, "type")
|
|
2080
2079
|
|
|
2081
|
-
@property
|
|
2080
|
+
@_builtins.property
|
|
2082
2081
|
@pulumi.getter(name="uriSans")
|
|
2083
|
-
def uri_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
2082
|
+
def uri_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
2084
2083
|
"""
|
|
2085
2084
|
List of alternative URIs
|
|
2086
2085
|
"""
|