pulumi-vault 7.1.0__py3-none-any.whl → 7.2.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +19 -1
- pulumi_vault/_inputs.py +873 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +1016 -439
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +1057 -285
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +887 -256
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +426 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +878 -336
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +400 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +1006 -227
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +431 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +732 -693
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +380 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +909 -271
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/oci_auth_backend.py +683 -0
- pulumi_vault/oci_auth_backend_role.py +798 -0
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +234 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +205 -159
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +50 -31
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +902 -231
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +217 -124
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +833 -155
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +377 -350
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0.dist-info/RECORD +270 -0
- pulumi_vault-7.1.0.dist-info/RECORD +0 -268
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,48 +19,48 @@ __all__ = ['SecretBackendSignArgs', 'SecretBackendSign']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class SecretBackendSignArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
backend: pulumi.Input[
|
|
24
|
-
common_name: pulumi.Input[
|
|
25
|
-
csr: pulumi.Input[
|
|
26
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
27
|
-
auto_renew: Optional[pulumi.Input[
|
|
28
|
-
cert_metadata: Optional[pulumi.Input[
|
|
29
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
30
|
-
format: Optional[pulumi.Input[
|
|
31
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
32
|
-
issuer_ref: Optional[pulumi.Input[
|
|
33
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
34
|
-
name: Optional[pulumi.Input[
|
|
35
|
-
namespace: Optional[pulumi.Input[
|
|
36
|
-
not_after: Optional[pulumi.Input[
|
|
37
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
38
|
-
ttl: Optional[pulumi.Input[
|
|
39
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
22
|
+
backend: pulumi.Input[_builtins.str],
|
|
23
|
+
common_name: pulumi.Input[_builtins.str],
|
|
24
|
+
csr: pulumi.Input[_builtins.str],
|
|
25
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
26
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
27
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
28
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
29
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
31
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
33
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
37
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
38
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
40
39
|
"""
|
|
41
40
|
The set of arguments for constructing a SecretBackendSign resource.
|
|
42
|
-
:param pulumi.Input[
|
|
43
|
-
:param pulumi.Input[
|
|
44
|
-
:param pulumi.Input[
|
|
45
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
46
|
-
:param pulumi.Input[
|
|
47
|
-
:param pulumi.Input[
|
|
48
|
-
:param pulumi.Input[
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
51
|
-
:param pulumi.Input[
|
|
41
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
42
|
+
:param pulumi.Input[_builtins.str] common_name: CN of certificate to create
|
|
43
|
+
:param pulumi.Input[_builtins.str] csr: The CSR
|
|
44
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
45
|
+
:param pulumi.Input[_builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
46
|
+
:param pulumi.Input[_builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
47
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
48
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
49
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
50
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request. Can
|
|
52
51
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
53
52
|
the `/pki/issuer/:issuer_ref/{issue,sign}/:name` paths to prevent users
|
|
54
53
|
overriding the role's `issuer_ref` value.
|
|
55
|
-
:param pulumi.Input[
|
|
56
|
-
:param pulumi.Input[
|
|
57
|
-
:param pulumi.Input[
|
|
54
|
+
:param pulumi.Input[_builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
55
|
+
:param pulumi.Input[_builtins.str] name: Name of the role to create the certificate against
|
|
56
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
58
57
|
The value should not contain leading or trailing forward slashes.
|
|
59
58
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
60
59
|
*Available only for Vault Enterprise*.
|
|
61
|
-
:param pulumi.Input[
|
|
62
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
63
|
-
:param pulumi.Input[
|
|
64
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
60
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
61
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
62
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
63
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
65
64
|
"""
|
|
66
65
|
pulumi.set(__self__, "backend", backend)
|
|
67
66
|
pulumi.set(__self__, "common_name", common_name)
|
|
@@ -95,117 +94,117 @@ class SecretBackendSignArgs:
|
|
|
95
94
|
if uri_sans is not None:
|
|
96
95
|
pulumi.set(__self__, "uri_sans", uri_sans)
|
|
97
96
|
|
|
98
|
-
@property
|
|
97
|
+
@_builtins.property
|
|
99
98
|
@pulumi.getter
|
|
100
|
-
def backend(self) -> pulumi.Input[
|
|
99
|
+
def backend(self) -> pulumi.Input[_builtins.str]:
|
|
101
100
|
"""
|
|
102
101
|
The PKI secret backend the resource belongs to.
|
|
103
102
|
"""
|
|
104
103
|
return pulumi.get(self, "backend")
|
|
105
104
|
|
|
106
105
|
@backend.setter
|
|
107
|
-
def backend(self, value: pulumi.Input[
|
|
106
|
+
def backend(self, value: pulumi.Input[_builtins.str]):
|
|
108
107
|
pulumi.set(self, "backend", value)
|
|
109
108
|
|
|
110
|
-
@property
|
|
109
|
+
@_builtins.property
|
|
111
110
|
@pulumi.getter(name="commonName")
|
|
112
|
-
def common_name(self) -> pulumi.Input[
|
|
111
|
+
def common_name(self) -> pulumi.Input[_builtins.str]:
|
|
113
112
|
"""
|
|
114
113
|
CN of certificate to create
|
|
115
114
|
"""
|
|
116
115
|
return pulumi.get(self, "common_name")
|
|
117
116
|
|
|
118
117
|
@common_name.setter
|
|
119
|
-
def common_name(self, value: pulumi.Input[
|
|
118
|
+
def common_name(self, value: pulumi.Input[_builtins.str]):
|
|
120
119
|
pulumi.set(self, "common_name", value)
|
|
121
120
|
|
|
122
|
-
@property
|
|
121
|
+
@_builtins.property
|
|
123
122
|
@pulumi.getter
|
|
124
|
-
def csr(self) -> pulumi.Input[
|
|
123
|
+
def csr(self) -> pulumi.Input[_builtins.str]:
|
|
125
124
|
"""
|
|
126
125
|
The CSR
|
|
127
126
|
"""
|
|
128
127
|
return pulumi.get(self, "csr")
|
|
129
128
|
|
|
130
129
|
@csr.setter
|
|
131
|
-
def csr(self, value: pulumi.Input[
|
|
130
|
+
def csr(self, value: pulumi.Input[_builtins.str]):
|
|
132
131
|
pulumi.set(self, "csr", value)
|
|
133
132
|
|
|
134
|
-
@property
|
|
133
|
+
@_builtins.property
|
|
135
134
|
@pulumi.getter(name="altNames")
|
|
136
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
135
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
137
136
|
"""
|
|
138
137
|
List of alternative names
|
|
139
138
|
"""
|
|
140
139
|
return pulumi.get(self, "alt_names")
|
|
141
140
|
|
|
142
141
|
@alt_names.setter
|
|
143
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
142
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
144
143
|
pulumi.set(self, "alt_names", value)
|
|
145
144
|
|
|
146
|
-
@property
|
|
145
|
+
@_builtins.property
|
|
147
146
|
@pulumi.getter(name="autoRenew")
|
|
148
|
-
def auto_renew(self) -> Optional[pulumi.Input[
|
|
147
|
+
def auto_renew(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
149
148
|
"""
|
|
150
149
|
If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
151
150
|
"""
|
|
152
151
|
return pulumi.get(self, "auto_renew")
|
|
153
152
|
|
|
154
153
|
@auto_renew.setter
|
|
155
|
-
def auto_renew(self, value: Optional[pulumi.Input[
|
|
154
|
+
def auto_renew(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
156
155
|
pulumi.set(self, "auto_renew", value)
|
|
157
156
|
|
|
158
|
-
@property
|
|
157
|
+
@_builtins.property
|
|
159
158
|
@pulumi.getter(name="certMetadata")
|
|
160
|
-
def cert_metadata(self) -> Optional[pulumi.Input[
|
|
159
|
+
def cert_metadata(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
161
160
|
"""
|
|
162
161
|
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
163
162
|
"""
|
|
164
163
|
return pulumi.get(self, "cert_metadata")
|
|
165
164
|
|
|
166
165
|
@cert_metadata.setter
|
|
167
|
-
def cert_metadata(self, value: Optional[pulumi.Input[
|
|
166
|
+
def cert_metadata(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
168
167
|
pulumi.set(self, "cert_metadata", value)
|
|
169
168
|
|
|
170
|
-
@property
|
|
169
|
+
@_builtins.property
|
|
171
170
|
@pulumi.getter(name="excludeCnFromSans")
|
|
172
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[
|
|
171
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
173
172
|
"""
|
|
174
173
|
Flag to exclude CN from SANs
|
|
175
174
|
"""
|
|
176
175
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
177
176
|
|
|
178
177
|
@exclude_cn_from_sans.setter
|
|
179
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[
|
|
178
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
180
179
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
181
180
|
|
|
182
|
-
@property
|
|
181
|
+
@_builtins.property
|
|
183
182
|
@pulumi.getter
|
|
184
|
-
def format(self) -> Optional[pulumi.Input[
|
|
183
|
+
def format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
185
184
|
"""
|
|
186
185
|
The format of data
|
|
187
186
|
"""
|
|
188
187
|
return pulumi.get(self, "format")
|
|
189
188
|
|
|
190
189
|
@format.setter
|
|
191
|
-
def format(self, value: Optional[pulumi.Input[
|
|
190
|
+
def format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
192
191
|
pulumi.set(self, "format", value)
|
|
193
192
|
|
|
194
|
-
@property
|
|
193
|
+
@_builtins.property
|
|
195
194
|
@pulumi.getter(name="ipSans")
|
|
196
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
195
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
197
196
|
"""
|
|
198
197
|
List of alternative IPs
|
|
199
198
|
"""
|
|
200
199
|
return pulumi.get(self, "ip_sans")
|
|
201
200
|
|
|
202
201
|
@ip_sans.setter
|
|
203
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
202
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
204
203
|
pulumi.set(self, "ip_sans", value)
|
|
205
204
|
|
|
206
|
-
@property
|
|
205
|
+
@_builtins.property
|
|
207
206
|
@pulumi.getter(name="issuerRef")
|
|
208
|
-
def issuer_ref(self) -> Optional[pulumi.Input[
|
|
207
|
+
def issuer_ref(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
209
208
|
"""
|
|
210
209
|
Specifies the default issuer of this request. Can
|
|
211
210
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
@@ -215,36 +214,36 @@ class SecretBackendSignArgs:
|
|
|
215
214
|
return pulumi.get(self, "issuer_ref")
|
|
216
215
|
|
|
217
216
|
@issuer_ref.setter
|
|
218
|
-
def issuer_ref(self, value: Optional[pulumi.Input[
|
|
217
|
+
def issuer_ref(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
219
218
|
pulumi.set(self, "issuer_ref", value)
|
|
220
219
|
|
|
221
|
-
@property
|
|
220
|
+
@_builtins.property
|
|
222
221
|
@pulumi.getter(name="minSecondsRemaining")
|
|
223
|
-
def min_seconds_remaining(self) -> Optional[pulumi.Input[
|
|
222
|
+
def min_seconds_remaining(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
224
223
|
"""
|
|
225
224
|
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
226
225
|
"""
|
|
227
226
|
return pulumi.get(self, "min_seconds_remaining")
|
|
228
227
|
|
|
229
228
|
@min_seconds_remaining.setter
|
|
230
|
-
def min_seconds_remaining(self, value: Optional[pulumi.Input[
|
|
229
|
+
def min_seconds_remaining(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
231
230
|
pulumi.set(self, "min_seconds_remaining", value)
|
|
232
231
|
|
|
233
|
-
@property
|
|
232
|
+
@_builtins.property
|
|
234
233
|
@pulumi.getter
|
|
235
|
-
def name(self) -> Optional[pulumi.Input[
|
|
234
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
236
235
|
"""
|
|
237
236
|
Name of the role to create the certificate against
|
|
238
237
|
"""
|
|
239
238
|
return pulumi.get(self, "name")
|
|
240
239
|
|
|
241
240
|
@name.setter
|
|
242
|
-
def name(self, value: Optional[pulumi.Input[
|
|
241
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
243
242
|
pulumi.set(self, "name", value)
|
|
244
243
|
|
|
245
|
-
@property
|
|
244
|
+
@_builtins.property
|
|
246
245
|
@pulumi.getter
|
|
247
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
246
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
248
247
|
"""
|
|
249
248
|
The namespace to provision the resource in.
|
|
250
249
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -254,115 +253,115 @@ class SecretBackendSignArgs:
|
|
|
254
253
|
return pulumi.get(self, "namespace")
|
|
255
254
|
|
|
256
255
|
@namespace.setter
|
|
257
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
256
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
258
257
|
pulumi.set(self, "namespace", value)
|
|
259
258
|
|
|
260
|
-
@property
|
|
259
|
+
@_builtins.property
|
|
261
260
|
@pulumi.getter(name="notAfter")
|
|
262
|
-
def not_after(self) -> Optional[pulumi.Input[
|
|
261
|
+
def not_after(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
263
262
|
"""
|
|
264
263
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
265
264
|
"""
|
|
266
265
|
return pulumi.get(self, "not_after")
|
|
267
266
|
|
|
268
267
|
@not_after.setter
|
|
269
|
-
def not_after(self, value: Optional[pulumi.Input[
|
|
268
|
+
def not_after(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
270
269
|
pulumi.set(self, "not_after", value)
|
|
271
270
|
|
|
272
|
-
@property
|
|
271
|
+
@_builtins.property
|
|
273
272
|
@pulumi.getter(name="otherSans")
|
|
274
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
273
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
275
274
|
"""
|
|
276
275
|
List of other SANs
|
|
277
276
|
"""
|
|
278
277
|
return pulumi.get(self, "other_sans")
|
|
279
278
|
|
|
280
279
|
@other_sans.setter
|
|
281
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
280
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
282
281
|
pulumi.set(self, "other_sans", value)
|
|
283
282
|
|
|
284
|
-
@property
|
|
283
|
+
@_builtins.property
|
|
285
284
|
@pulumi.getter
|
|
286
|
-
def ttl(self) -> Optional[pulumi.Input[
|
|
285
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
287
286
|
"""
|
|
288
287
|
Time to live
|
|
289
288
|
"""
|
|
290
289
|
return pulumi.get(self, "ttl")
|
|
291
290
|
|
|
292
291
|
@ttl.setter
|
|
293
|
-
def ttl(self, value: Optional[pulumi.Input[
|
|
292
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
294
293
|
pulumi.set(self, "ttl", value)
|
|
295
294
|
|
|
296
|
-
@property
|
|
295
|
+
@_builtins.property
|
|
297
296
|
@pulumi.getter(name="uriSans")
|
|
298
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
297
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
299
298
|
"""
|
|
300
299
|
List of alternative URIs
|
|
301
300
|
"""
|
|
302
301
|
return pulumi.get(self, "uri_sans")
|
|
303
302
|
|
|
304
303
|
@uri_sans.setter
|
|
305
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
304
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
306
305
|
pulumi.set(self, "uri_sans", value)
|
|
307
306
|
|
|
308
307
|
|
|
309
308
|
@pulumi.input_type
|
|
310
309
|
class _SecretBackendSignState:
|
|
311
310
|
def __init__(__self__, *,
|
|
312
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
313
|
-
auto_renew: Optional[pulumi.Input[
|
|
314
|
-
backend: Optional[pulumi.Input[
|
|
315
|
-
ca_chains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
316
|
-
cert_metadata: Optional[pulumi.Input[
|
|
317
|
-
certificate: Optional[pulumi.Input[
|
|
318
|
-
common_name: Optional[pulumi.Input[
|
|
319
|
-
csr: Optional[pulumi.Input[
|
|
320
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
321
|
-
expiration: Optional[pulumi.Input[
|
|
322
|
-
format: Optional[pulumi.Input[
|
|
323
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
324
|
-
issuer_ref: Optional[pulumi.Input[
|
|
325
|
-
issuing_ca: Optional[pulumi.Input[
|
|
326
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
327
|
-
name: Optional[pulumi.Input[
|
|
328
|
-
namespace: Optional[pulumi.Input[
|
|
329
|
-
not_after: Optional[pulumi.Input[
|
|
330
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
331
|
-
renew_pending: Optional[pulumi.Input[
|
|
332
|
-
serial_number: Optional[pulumi.Input[
|
|
333
|
-
ttl: Optional[pulumi.Input[
|
|
334
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
311
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
312
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
313
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
314
|
+
ca_chains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
315
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
316
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
317
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
318
|
+
csr: Optional[pulumi.Input[_builtins.str]] = None,
|
|
319
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
320
|
+
expiration: Optional[pulumi.Input[_builtins.int]] = None,
|
|
321
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
322
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
323
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
324
|
+
issuing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
325
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
326
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
327
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
328
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
329
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
330
|
+
renew_pending: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
331
|
+
serial_number: Optional[pulumi.Input[_builtins.str]] = None,
|
|
332
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
333
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
335
334
|
"""
|
|
336
335
|
Input properties used for looking up and filtering SecretBackendSign resources.
|
|
337
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
338
|
-
:param pulumi.Input[
|
|
339
|
-
:param pulumi.Input[
|
|
340
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
341
|
-
:param pulumi.Input[
|
|
342
|
-
:param pulumi.Input[
|
|
343
|
-
:param pulumi.Input[
|
|
344
|
-
:param pulumi.Input[
|
|
345
|
-
:param pulumi.Input[
|
|
346
|
-
:param pulumi.Input[
|
|
347
|
-
:param pulumi.Input[
|
|
348
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
349
|
-
:param pulumi.Input[
|
|
336
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
337
|
+
:param pulumi.Input[_builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
338
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
339
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ca_chains: The CA chain
|
|
340
|
+
:param pulumi.Input[_builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
341
|
+
:param pulumi.Input[_builtins.str] certificate: The certificate
|
|
342
|
+
:param pulumi.Input[_builtins.str] common_name: CN of certificate to create
|
|
343
|
+
:param pulumi.Input[_builtins.str] csr: The CSR
|
|
344
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
345
|
+
:param pulumi.Input[_builtins.int] expiration: The expiration date of the certificate in unix epoch format
|
|
346
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
347
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
348
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request. Can
|
|
350
349
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
351
350
|
the `/pki/issuer/:issuer_ref/{issue,sign}/:name` paths to prevent users
|
|
352
351
|
overriding the role's `issuer_ref` value.
|
|
353
|
-
:param pulumi.Input[
|
|
354
|
-
:param pulumi.Input[
|
|
355
|
-
:param pulumi.Input[
|
|
356
|
-
:param pulumi.Input[
|
|
352
|
+
:param pulumi.Input[_builtins.str] issuing_ca: The issuing CA
|
|
353
|
+
:param pulumi.Input[_builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
354
|
+
:param pulumi.Input[_builtins.str] name: Name of the role to create the certificate against
|
|
355
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
357
356
|
The value should not contain leading or trailing forward slashes.
|
|
358
357
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
359
358
|
*Available only for Vault Enterprise*.
|
|
360
|
-
:param pulumi.Input[
|
|
361
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
362
|
-
:param pulumi.Input[
|
|
363
|
-
:param pulumi.Input[
|
|
364
|
-
:param pulumi.Input[
|
|
365
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
359
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
360
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
361
|
+
:param pulumi.Input[_builtins.bool] renew_pending: `true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
362
|
+
:param pulumi.Input[_builtins.str] serial_number: The certificate's serial number, hex formatted.
|
|
363
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
364
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
366
365
|
"""
|
|
367
366
|
if alt_names is not None:
|
|
368
367
|
pulumi.set(__self__, "alt_names", alt_names)
|
|
@@ -411,153 +410,153 @@ class _SecretBackendSignState:
|
|
|
411
410
|
if uri_sans is not None:
|
|
412
411
|
pulumi.set(__self__, "uri_sans", uri_sans)
|
|
413
412
|
|
|
414
|
-
@property
|
|
413
|
+
@_builtins.property
|
|
415
414
|
@pulumi.getter(name="altNames")
|
|
416
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
415
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
417
416
|
"""
|
|
418
417
|
List of alternative names
|
|
419
418
|
"""
|
|
420
419
|
return pulumi.get(self, "alt_names")
|
|
421
420
|
|
|
422
421
|
@alt_names.setter
|
|
423
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
422
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
424
423
|
pulumi.set(self, "alt_names", value)
|
|
425
424
|
|
|
426
|
-
@property
|
|
425
|
+
@_builtins.property
|
|
427
426
|
@pulumi.getter(name="autoRenew")
|
|
428
|
-
def auto_renew(self) -> Optional[pulumi.Input[
|
|
427
|
+
def auto_renew(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
429
428
|
"""
|
|
430
429
|
If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
431
430
|
"""
|
|
432
431
|
return pulumi.get(self, "auto_renew")
|
|
433
432
|
|
|
434
433
|
@auto_renew.setter
|
|
435
|
-
def auto_renew(self, value: Optional[pulumi.Input[
|
|
434
|
+
def auto_renew(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
436
435
|
pulumi.set(self, "auto_renew", value)
|
|
437
436
|
|
|
438
|
-
@property
|
|
437
|
+
@_builtins.property
|
|
439
438
|
@pulumi.getter
|
|
440
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
439
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
441
440
|
"""
|
|
442
441
|
The PKI secret backend the resource belongs to.
|
|
443
442
|
"""
|
|
444
443
|
return pulumi.get(self, "backend")
|
|
445
444
|
|
|
446
445
|
@backend.setter
|
|
447
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
446
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
448
447
|
pulumi.set(self, "backend", value)
|
|
449
448
|
|
|
450
|
-
@property
|
|
449
|
+
@_builtins.property
|
|
451
450
|
@pulumi.getter(name="caChains")
|
|
452
|
-
def ca_chains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
451
|
+
def ca_chains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
453
452
|
"""
|
|
454
453
|
The CA chain
|
|
455
454
|
"""
|
|
456
455
|
return pulumi.get(self, "ca_chains")
|
|
457
456
|
|
|
458
457
|
@ca_chains.setter
|
|
459
|
-
def ca_chains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
458
|
+
def ca_chains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
460
459
|
pulumi.set(self, "ca_chains", value)
|
|
461
460
|
|
|
462
|
-
@property
|
|
461
|
+
@_builtins.property
|
|
463
462
|
@pulumi.getter(name="certMetadata")
|
|
464
|
-
def cert_metadata(self) -> Optional[pulumi.Input[
|
|
463
|
+
def cert_metadata(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
465
464
|
"""
|
|
466
465
|
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
467
466
|
"""
|
|
468
467
|
return pulumi.get(self, "cert_metadata")
|
|
469
468
|
|
|
470
469
|
@cert_metadata.setter
|
|
471
|
-
def cert_metadata(self, value: Optional[pulumi.Input[
|
|
470
|
+
def cert_metadata(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
472
471
|
pulumi.set(self, "cert_metadata", value)
|
|
473
472
|
|
|
474
|
-
@property
|
|
473
|
+
@_builtins.property
|
|
475
474
|
@pulumi.getter
|
|
476
|
-
def certificate(self) -> Optional[pulumi.Input[
|
|
475
|
+
def certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
477
476
|
"""
|
|
478
477
|
The certificate
|
|
479
478
|
"""
|
|
480
479
|
return pulumi.get(self, "certificate")
|
|
481
480
|
|
|
482
481
|
@certificate.setter
|
|
483
|
-
def certificate(self, value: Optional[pulumi.Input[
|
|
482
|
+
def certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
484
483
|
pulumi.set(self, "certificate", value)
|
|
485
484
|
|
|
486
|
-
@property
|
|
485
|
+
@_builtins.property
|
|
487
486
|
@pulumi.getter(name="commonName")
|
|
488
|
-
def common_name(self) -> Optional[pulumi.Input[
|
|
487
|
+
def common_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
489
488
|
"""
|
|
490
489
|
CN of certificate to create
|
|
491
490
|
"""
|
|
492
491
|
return pulumi.get(self, "common_name")
|
|
493
492
|
|
|
494
493
|
@common_name.setter
|
|
495
|
-
def common_name(self, value: Optional[pulumi.Input[
|
|
494
|
+
def common_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
496
495
|
pulumi.set(self, "common_name", value)
|
|
497
496
|
|
|
498
|
-
@property
|
|
497
|
+
@_builtins.property
|
|
499
498
|
@pulumi.getter
|
|
500
|
-
def csr(self) -> Optional[pulumi.Input[
|
|
499
|
+
def csr(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
501
500
|
"""
|
|
502
501
|
The CSR
|
|
503
502
|
"""
|
|
504
503
|
return pulumi.get(self, "csr")
|
|
505
504
|
|
|
506
505
|
@csr.setter
|
|
507
|
-
def csr(self, value: Optional[pulumi.Input[
|
|
506
|
+
def csr(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
508
507
|
pulumi.set(self, "csr", value)
|
|
509
508
|
|
|
510
|
-
@property
|
|
509
|
+
@_builtins.property
|
|
511
510
|
@pulumi.getter(name="excludeCnFromSans")
|
|
512
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[
|
|
511
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
513
512
|
"""
|
|
514
513
|
Flag to exclude CN from SANs
|
|
515
514
|
"""
|
|
516
515
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
517
516
|
|
|
518
517
|
@exclude_cn_from_sans.setter
|
|
519
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[
|
|
518
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
520
519
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
521
520
|
|
|
522
|
-
@property
|
|
521
|
+
@_builtins.property
|
|
523
522
|
@pulumi.getter
|
|
524
|
-
def expiration(self) -> Optional[pulumi.Input[
|
|
523
|
+
def expiration(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
525
524
|
"""
|
|
526
525
|
The expiration date of the certificate in unix epoch format
|
|
527
526
|
"""
|
|
528
527
|
return pulumi.get(self, "expiration")
|
|
529
528
|
|
|
530
529
|
@expiration.setter
|
|
531
|
-
def expiration(self, value: Optional[pulumi.Input[
|
|
530
|
+
def expiration(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
532
531
|
pulumi.set(self, "expiration", value)
|
|
533
532
|
|
|
534
|
-
@property
|
|
533
|
+
@_builtins.property
|
|
535
534
|
@pulumi.getter
|
|
536
|
-
def format(self) -> Optional[pulumi.Input[
|
|
535
|
+
def format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
537
536
|
"""
|
|
538
537
|
The format of data
|
|
539
538
|
"""
|
|
540
539
|
return pulumi.get(self, "format")
|
|
541
540
|
|
|
542
541
|
@format.setter
|
|
543
|
-
def format(self, value: Optional[pulumi.Input[
|
|
542
|
+
def format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
544
543
|
pulumi.set(self, "format", value)
|
|
545
544
|
|
|
546
|
-
@property
|
|
545
|
+
@_builtins.property
|
|
547
546
|
@pulumi.getter(name="ipSans")
|
|
548
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
547
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
549
548
|
"""
|
|
550
549
|
List of alternative IPs
|
|
551
550
|
"""
|
|
552
551
|
return pulumi.get(self, "ip_sans")
|
|
553
552
|
|
|
554
553
|
@ip_sans.setter
|
|
555
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
554
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
556
555
|
pulumi.set(self, "ip_sans", value)
|
|
557
556
|
|
|
558
|
-
@property
|
|
557
|
+
@_builtins.property
|
|
559
558
|
@pulumi.getter(name="issuerRef")
|
|
560
|
-
def issuer_ref(self) -> Optional[pulumi.Input[
|
|
559
|
+
def issuer_ref(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
561
560
|
"""
|
|
562
561
|
Specifies the default issuer of this request. Can
|
|
563
562
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
@@ -567,48 +566,48 @@ class _SecretBackendSignState:
|
|
|
567
566
|
return pulumi.get(self, "issuer_ref")
|
|
568
567
|
|
|
569
568
|
@issuer_ref.setter
|
|
570
|
-
def issuer_ref(self, value: Optional[pulumi.Input[
|
|
569
|
+
def issuer_ref(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
571
570
|
pulumi.set(self, "issuer_ref", value)
|
|
572
571
|
|
|
573
|
-
@property
|
|
572
|
+
@_builtins.property
|
|
574
573
|
@pulumi.getter(name="issuingCa")
|
|
575
|
-
def issuing_ca(self) -> Optional[pulumi.Input[
|
|
574
|
+
def issuing_ca(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
576
575
|
"""
|
|
577
576
|
The issuing CA
|
|
578
577
|
"""
|
|
579
578
|
return pulumi.get(self, "issuing_ca")
|
|
580
579
|
|
|
581
580
|
@issuing_ca.setter
|
|
582
|
-
def issuing_ca(self, value: Optional[pulumi.Input[
|
|
581
|
+
def issuing_ca(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
583
582
|
pulumi.set(self, "issuing_ca", value)
|
|
584
583
|
|
|
585
|
-
@property
|
|
584
|
+
@_builtins.property
|
|
586
585
|
@pulumi.getter(name="minSecondsRemaining")
|
|
587
|
-
def min_seconds_remaining(self) -> Optional[pulumi.Input[
|
|
586
|
+
def min_seconds_remaining(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
588
587
|
"""
|
|
589
588
|
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
590
589
|
"""
|
|
591
590
|
return pulumi.get(self, "min_seconds_remaining")
|
|
592
591
|
|
|
593
592
|
@min_seconds_remaining.setter
|
|
594
|
-
def min_seconds_remaining(self, value: Optional[pulumi.Input[
|
|
593
|
+
def min_seconds_remaining(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
595
594
|
pulumi.set(self, "min_seconds_remaining", value)
|
|
596
595
|
|
|
597
|
-
@property
|
|
596
|
+
@_builtins.property
|
|
598
597
|
@pulumi.getter
|
|
599
|
-
def name(self) -> Optional[pulumi.Input[
|
|
598
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
600
599
|
"""
|
|
601
600
|
Name of the role to create the certificate against
|
|
602
601
|
"""
|
|
603
602
|
return pulumi.get(self, "name")
|
|
604
603
|
|
|
605
604
|
@name.setter
|
|
606
|
-
def name(self, value: Optional[pulumi.Input[
|
|
605
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
607
606
|
pulumi.set(self, "name", value)
|
|
608
607
|
|
|
609
|
-
@property
|
|
608
|
+
@_builtins.property
|
|
610
609
|
@pulumi.getter
|
|
611
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
610
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
612
611
|
"""
|
|
613
612
|
The namespace to provision the resource in.
|
|
614
613
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -618,79 +617,79 @@ class _SecretBackendSignState:
|
|
|
618
617
|
return pulumi.get(self, "namespace")
|
|
619
618
|
|
|
620
619
|
@namespace.setter
|
|
621
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
620
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
622
621
|
pulumi.set(self, "namespace", value)
|
|
623
622
|
|
|
624
|
-
@property
|
|
623
|
+
@_builtins.property
|
|
625
624
|
@pulumi.getter(name="notAfter")
|
|
626
|
-
def not_after(self) -> Optional[pulumi.Input[
|
|
625
|
+
def not_after(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
627
626
|
"""
|
|
628
627
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
629
628
|
"""
|
|
630
629
|
return pulumi.get(self, "not_after")
|
|
631
630
|
|
|
632
631
|
@not_after.setter
|
|
633
|
-
def not_after(self, value: Optional[pulumi.Input[
|
|
632
|
+
def not_after(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
634
633
|
pulumi.set(self, "not_after", value)
|
|
635
634
|
|
|
636
|
-
@property
|
|
635
|
+
@_builtins.property
|
|
637
636
|
@pulumi.getter(name="otherSans")
|
|
638
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
637
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
639
638
|
"""
|
|
640
639
|
List of other SANs
|
|
641
640
|
"""
|
|
642
641
|
return pulumi.get(self, "other_sans")
|
|
643
642
|
|
|
644
643
|
@other_sans.setter
|
|
645
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
644
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
646
645
|
pulumi.set(self, "other_sans", value)
|
|
647
646
|
|
|
648
|
-
@property
|
|
647
|
+
@_builtins.property
|
|
649
648
|
@pulumi.getter(name="renewPending")
|
|
650
|
-
def renew_pending(self) -> Optional[pulumi.Input[
|
|
649
|
+
def renew_pending(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
651
650
|
"""
|
|
652
651
|
`true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
653
652
|
"""
|
|
654
653
|
return pulumi.get(self, "renew_pending")
|
|
655
654
|
|
|
656
655
|
@renew_pending.setter
|
|
657
|
-
def renew_pending(self, value: Optional[pulumi.Input[
|
|
656
|
+
def renew_pending(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
658
657
|
pulumi.set(self, "renew_pending", value)
|
|
659
658
|
|
|
660
|
-
@property
|
|
659
|
+
@_builtins.property
|
|
661
660
|
@pulumi.getter(name="serialNumber")
|
|
662
|
-
def serial_number(self) -> Optional[pulumi.Input[
|
|
661
|
+
def serial_number(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
663
662
|
"""
|
|
664
663
|
The certificate's serial number, hex formatted.
|
|
665
664
|
"""
|
|
666
665
|
return pulumi.get(self, "serial_number")
|
|
667
666
|
|
|
668
667
|
@serial_number.setter
|
|
669
|
-
def serial_number(self, value: Optional[pulumi.Input[
|
|
668
|
+
def serial_number(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
670
669
|
pulumi.set(self, "serial_number", value)
|
|
671
670
|
|
|
672
|
-
@property
|
|
671
|
+
@_builtins.property
|
|
673
672
|
@pulumi.getter
|
|
674
|
-
def ttl(self) -> Optional[pulumi.Input[
|
|
673
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
675
674
|
"""
|
|
676
675
|
Time to live
|
|
677
676
|
"""
|
|
678
677
|
return pulumi.get(self, "ttl")
|
|
679
678
|
|
|
680
679
|
@ttl.setter
|
|
681
|
-
def ttl(self, value: Optional[pulumi.Input[
|
|
680
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
682
681
|
pulumi.set(self, "ttl", value)
|
|
683
682
|
|
|
684
|
-
@property
|
|
683
|
+
@_builtins.property
|
|
685
684
|
@pulumi.getter(name="uriSans")
|
|
686
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
685
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
687
686
|
"""
|
|
688
687
|
List of alternative URIs
|
|
689
688
|
"""
|
|
690
689
|
return pulumi.get(self, "uri_sans")
|
|
691
690
|
|
|
692
691
|
@uri_sans.setter
|
|
693
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
692
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
694
693
|
pulumi.set(self, "uri_sans", value)
|
|
695
694
|
|
|
696
695
|
|
|
@@ -700,23 +699,23 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
700
699
|
def __init__(__self__,
|
|
701
700
|
resource_name: str,
|
|
702
701
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
703
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
704
|
-
auto_renew: Optional[pulumi.Input[
|
|
705
|
-
backend: Optional[pulumi.Input[
|
|
706
|
-
cert_metadata: Optional[pulumi.Input[
|
|
707
|
-
common_name: Optional[pulumi.Input[
|
|
708
|
-
csr: Optional[pulumi.Input[
|
|
709
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
710
|
-
format: Optional[pulumi.Input[
|
|
711
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
712
|
-
issuer_ref: Optional[pulumi.Input[
|
|
713
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
714
|
-
name: Optional[pulumi.Input[
|
|
715
|
-
namespace: Optional[pulumi.Input[
|
|
716
|
-
not_after: Optional[pulumi.Input[
|
|
717
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
718
|
-
ttl: Optional[pulumi.Input[
|
|
719
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
702
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
703
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
704
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
705
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
706
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
707
|
+
csr: Optional[pulumi.Input[_builtins.str]] = None,
|
|
708
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
709
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
710
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
711
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
712
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
713
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
714
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
715
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
716
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
717
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
718
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
720
719
|
__props__=None):
|
|
721
720
|
"""
|
|
722
721
|
## Example Usage
|
|
@@ -725,7 +724,7 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
725
724
|
import pulumi
|
|
726
725
|
import pulumi_vault as vault
|
|
727
726
|
|
|
728
|
-
test = vault.
|
|
727
|
+
test = vault.pkisecret.SecretBackendSign("test",
|
|
729
728
|
backend=pki["path"],
|
|
730
729
|
name=admin["name"],
|
|
731
730
|
csr=\"\"\"-----BEGIN CERTIFICATE REQUEST-----
|
|
@@ -762,29 +761,29 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
762
761
|
|
|
763
762
|
:param str resource_name: The name of the resource.
|
|
764
763
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
765
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
766
|
-
:param pulumi.Input[
|
|
767
|
-
:param pulumi.Input[
|
|
768
|
-
:param pulumi.Input[
|
|
769
|
-
:param pulumi.Input[
|
|
770
|
-
:param pulumi.Input[
|
|
771
|
-
:param pulumi.Input[
|
|
772
|
-
:param pulumi.Input[
|
|
773
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
774
|
-
:param pulumi.Input[
|
|
764
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
765
|
+
:param pulumi.Input[_builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
766
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
767
|
+
:param pulumi.Input[_builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
768
|
+
:param pulumi.Input[_builtins.str] common_name: CN of certificate to create
|
|
769
|
+
:param pulumi.Input[_builtins.str] csr: The CSR
|
|
770
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
771
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
772
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
773
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request. Can
|
|
775
774
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
776
775
|
the `/pki/issuer/:issuer_ref/{issue,sign}/:name` paths to prevent users
|
|
777
776
|
overriding the role's `issuer_ref` value.
|
|
778
|
-
:param pulumi.Input[
|
|
779
|
-
:param pulumi.Input[
|
|
780
|
-
:param pulumi.Input[
|
|
777
|
+
:param pulumi.Input[_builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
778
|
+
:param pulumi.Input[_builtins.str] name: Name of the role to create the certificate against
|
|
779
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
781
780
|
The value should not contain leading or trailing forward slashes.
|
|
782
781
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
783
782
|
*Available only for Vault Enterprise*.
|
|
784
|
-
:param pulumi.Input[
|
|
785
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
786
|
-
:param pulumi.Input[
|
|
787
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
783
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
784
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
785
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
786
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
788
787
|
"""
|
|
789
788
|
...
|
|
790
789
|
@overload
|
|
@@ -799,7 +798,7 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
799
798
|
import pulumi
|
|
800
799
|
import pulumi_vault as vault
|
|
801
800
|
|
|
802
|
-
test = vault.
|
|
801
|
+
test = vault.pkisecret.SecretBackendSign("test",
|
|
803
802
|
backend=pki["path"],
|
|
804
803
|
name=admin["name"],
|
|
805
804
|
csr=\"\"\"-----BEGIN CERTIFICATE REQUEST-----
|
|
@@ -849,23 +848,23 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
849
848
|
def _internal_init(__self__,
|
|
850
849
|
resource_name: str,
|
|
851
850
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
852
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
853
|
-
auto_renew: Optional[pulumi.Input[
|
|
854
|
-
backend: Optional[pulumi.Input[
|
|
855
|
-
cert_metadata: Optional[pulumi.Input[
|
|
856
|
-
common_name: Optional[pulumi.Input[
|
|
857
|
-
csr: Optional[pulumi.Input[
|
|
858
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
859
|
-
format: Optional[pulumi.Input[
|
|
860
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
861
|
-
issuer_ref: Optional[pulumi.Input[
|
|
862
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
863
|
-
name: Optional[pulumi.Input[
|
|
864
|
-
namespace: Optional[pulumi.Input[
|
|
865
|
-
not_after: Optional[pulumi.Input[
|
|
866
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
867
|
-
ttl: Optional[pulumi.Input[
|
|
868
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
851
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
852
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
853
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
854
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
855
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
856
|
+
csr: Optional[pulumi.Input[_builtins.str]] = None,
|
|
857
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
858
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
859
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
860
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
861
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
862
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
863
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
864
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
865
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
866
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
867
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
869
868
|
__props__=None):
|
|
870
869
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
871
870
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -914,29 +913,29 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
914
913
|
def get(resource_name: str,
|
|
915
914
|
id: pulumi.Input[str],
|
|
916
915
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
917
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
918
|
-
auto_renew: Optional[pulumi.Input[
|
|
919
|
-
backend: Optional[pulumi.Input[
|
|
920
|
-
ca_chains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
921
|
-
cert_metadata: Optional[pulumi.Input[
|
|
922
|
-
certificate: Optional[pulumi.Input[
|
|
923
|
-
common_name: Optional[pulumi.Input[
|
|
924
|
-
csr: Optional[pulumi.Input[
|
|
925
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
926
|
-
expiration: Optional[pulumi.Input[
|
|
927
|
-
format: Optional[pulumi.Input[
|
|
928
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
929
|
-
issuer_ref: Optional[pulumi.Input[
|
|
930
|
-
issuing_ca: Optional[pulumi.Input[
|
|
931
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
932
|
-
name: Optional[pulumi.Input[
|
|
933
|
-
namespace: Optional[pulumi.Input[
|
|
934
|
-
not_after: Optional[pulumi.Input[
|
|
935
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
936
|
-
renew_pending: Optional[pulumi.Input[
|
|
937
|
-
serial_number: Optional[pulumi.Input[
|
|
938
|
-
ttl: Optional[pulumi.Input[
|
|
939
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
916
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
917
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
918
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
919
|
+
ca_chains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
920
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
921
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
922
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
923
|
+
csr: Optional[pulumi.Input[_builtins.str]] = None,
|
|
924
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
925
|
+
expiration: Optional[pulumi.Input[_builtins.int]] = None,
|
|
926
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
927
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
928
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
929
|
+
issuing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
930
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
931
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
932
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
933
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
934
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
935
|
+
renew_pending: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
936
|
+
serial_number: Optional[pulumi.Input[_builtins.str]] = None,
|
|
937
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
938
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None) -> 'SecretBackendSign':
|
|
940
939
|
"""
|
|
941
940
|
Get an existing SecretBackendSign resource's state with the given name, id, and optional extra
|
|
942
941
|
properties used to qualify the lookup.
|
|
@@ -944,35 +943,35 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
944
943
|
:param str resource_name: The unique name of the resulting resource.
|
|
945
944
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
946
945
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
947
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
948
|
-
:param pulumi.Input[
|
|
949
|
-
:param pulumi.Input[
|
|
950
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
951
|
-
:param pulumi.Input[
|
|
952
|
-
:param pulumi.Input[
|
|
953
|
-
:param pulumi.Input[
|
|
954
|
-
:param pulumi.Input[
|
|
955
|
-
:param pulumi.Input[
|
|
956
|
-
:param pulumi.Input[
|
|
957
|
-
:param pulumi.Input[
|
|
958
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
959
|
-
:param pulumi.Input[
|
|
946
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
947
|
+
:param pulumi.Input[_builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
948
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
949
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ca_chains: The CA chain
|
|
950
|
+
:param pulumi.Input[_builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
951
|
+
:param pulumi.Input[_builtins.str] certificate: The certificate
|
|
952
|
+
:param pulumi.Input[_builtins.str] common_name: CN of certificate to create
|
|
953
|
+
:param pulumi.Input[_builtins.str] csr: The CSR
|
|
954
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
955
|
+
:param pulumi.Input[_builtins.int] expiration: The expiration date of the certificate in unix epoch format
|
|
956
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
957
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
958
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request. Can
|
|
960
959
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
961
960
|
the `/pki/issuer/:issuer_ref/{issue,sign}/:name` paths to prevent users
|
|
962
961
|
overriding the role's `issuer_ref` value.
|
|
963
|
-
:param pulumi.Input[
|
|
964
|
-
:param pulumi.Input[
|
|
965
|
-
:param pulumi.Input[
|
|
966
|
-
:param pulumi.Input[
|
|
962
|
+
:param pulumi.Input[_builtins.str] issuing_ca: The issuing CA
|
|
963
|
+
:param pulumi.Input[_builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
964
|
+
:param pulumi.Input[_builtins.str] name: Name of the role to create the certificate against
|
|
965
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
967
966
|
The value should not contain leading or trailing forward slashes.
|
|
968
967
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
969
968
|
*Available only for Vault Enterprise*.
|
|
970
|
-
:param pulumi.Input[
|
|
971
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
972
|
-
:param pulumi.Input[
|
|
973
|
-
:param pulumi.Input[
|
|
974
|
-
:param pulumi.Input[
|
|
975
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
969
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
970
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
971
|
+
:param pulumi.Input[_builtins.bool] renew_pending: `true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
972
|
+
:param pulumi.Input[_builtins.str] serial_number: The certificate's serial number, hex formatted.
|
|
973
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
974
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
976
975
|
"""
|
|
977
976
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
978
977
|
|
|
@@ -1003,105 +1002,105 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
1003
1002
|
__props__.__dict__["uri_sans"] = uri_sans
|
|
1004
1003
|
return SecretBackendSign(resource_name, opts=opts, __props__=__props__)
|
|
1005
1004
|
|
|
1006
|
-
@property
|
|
1005
|
+
@_builtins.property
|
|
1007
1006
|
@pulumi.getter(name="altNames")
|
|
1008
|
-
def alt_names(self) -> pulumi.Output[Optional[Sequence[
|
|
1007
|
+
def alt_names(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1009
1008
|
"""
|
|
1010
1009
|
List of alternative names
|
|
1011
1010
|
"""
|
|
1012
1011
|
return pulumi.get(self, "alt_names")
|
|
1013
1012
|
|
|
1014
|
-
@property
|
|
1013
|
+
@_builtins.property
|
|
1015
1014
|
@pulumi.getter(name="autoRenew")
|
|
1016
|
-
def auto_renew(self) -> pulumi.Output[Optional[
|
|
1015
|
+
def auto_renew(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1017
1016
|
"""
|
|
1018
1017
|
If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
1019
1018
|
"""
|
|
1020
1019
|
return pulumi.get(self, "auto_renew")
|
|
1021
1020
|
|
|
1022
|
-
@property
|
|
1021
|
+
@_builtins.property
|
|
1023
1022
|
@pulumi.getter
|
|
1024
|
-
def backend(self) -> pulumi.Output[
|
|
1023
|
+
def backend(self) -> pulumi.Output[_builtins.str]:
|
|
1025
1024
|
"""
|
|
1026
1025
|
The PKI secret backend the resource belongs to.
|
|
1027
1026
|
"""
|
|
1028
1027
|
return pulumi.get(self, "backend")
|
|
1029
1028
|
|
|
1030
|
-
@property
|
|
1029
|
+
@_builtins.property
|
|
1031
1030
|
@pulumi.getter(name="caChains")
|
|
1032
|
-
def ca_chains(self) -> pulumi.Output[Sequence[
|
|
1031
|
+
def ca_chains(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
1033
1032
|
"""
|
|
1034
1033
|
The CA chain
|
|
1035
1034
|
"""
|
|
1036
1035
|
return pulumi.get(self, "ca_chains")
|
|
1037
1036
|
|
|
1038
|
-
@property
|
|
1037
|
+
@_builtins.property
|
|
1039
1038
|
@pulumi.getter(name="certMetadata")
|
|
1040
|
-
def cert_metadata(self) -> pulumi.Output[Optional[
|
|
1039
|
+
def cert_metadata(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1041
1040
|
"""
|
|
1042
1041
|
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
1043
1042
|
"""
|
|
1044
1043
|
return pulumi.get(self, "cert_metadata")
|
|
1045
1044
|
|
|
1046
|
-
@property
|
|
1045
|
+
@_builtins.property
|
|
1047
1046
|
@pulumi.getter
|
|
1048
|
-
def certificate(self) -> pulumi.Output[
|
|
1047
|
+
def certificate(self) -> pulumi.Output[_builtins.str]:
|
|
1049
1048
|
"""
|
|
1050
1049
|
The certificate
|
|
1051
1050
|
"""
|
|
1052
1051
|
return pulumi.get(self, "certificate")
|
|
1053
1052
|
|
|
1054
|
-
@property
|
|
1053
|
+
@_builtins.property
|
|
1055
1054
|
@pulumi.getter(name="commonName")
|
|
1056
|
-
def common_name(self) -> pulumi.Output[
|
|
1055
|
+
def common_name(self) -> pulumi.Output[_builtins.str]:
|
|
1057
1056
|
"""
|
|
1058
1057
|
CN of certificate to create
|
|
1059
1058
|
"""
|
|
1060
1059
|
return pulumi.get(self, "common_name")
|
|
1061
1060
|
|
|
1062
|
-
@property
|
|
1061
|
+
@_builtins.property
|
|
1063
1062
|
@pulumi.getter
|
|
1064
|
-
def csr(self) -> pulumi.Output[
|
|
1063
|
+
def csr(self) -> pulumi.Output[_builtins.str]:
|
|
1065
1064
|
"""
|
|
1066
1065
|
The CSR
|
|
1067
1066
|
"""
|
|
1068
1067
|
return pulumi.get(self, "csr")
|
|
1069
1068
|
|
|
1070
|
-
@property
|
|
1069
|
+
@_builtins.property
|
|
1071
1070
|
@pulumi.getter(name="excludeCnFromSans")
|
|
1072
|
-
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[
|
|
1071
|
+
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1073
1072
|
"""
|
|
1074
1073
|
Flag to exclude CN from SANs
|
|
1075
1074
|
"""
|
|
1076
1075
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
1077
1076
|
|
|
1078
|
-
@property
|
|
1077
|
+
@_builtins.property
|
|
1079
1078
|
@pulumi.getter
|
|
1080
|
-
def expiration(self) -> pulumi.Output[
|
|
1079
|
+
def expiration(self) -> pulumi.Output[_builtins.int]:
|
|
1081
1080
|
"""
|
|
1082
1081
|
The expiration date of the certificate in unix epoch format
|
|
1083
1082
|
"""
|
|
1084
1083
|
return pulumi.get(self, "expiration")
|
|
1085
1084
|
|
|
1086
|
-
@property
|
|
1085
|
+
@_builtins.property
|
|
1087
1086
|
@pulumi.getter
|
|
1088
|
-
def format(self) -> pulumi.Output[Optional[
|
|
1087
|
+
def format(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1089
1088
|
"""
|
|
1090
1089
|
The format of data
|
|
1091
1090
|
"""
|
|
1092
1091
|
return pulumi.get(self, "format")
|
|
1093
1092
|
|
|
1094
|
-
@property
|
|
1093
|
+
@_builtins.property
|
|
1095
1094
|
@pulumi.getter(name="ipSans")
|
|
1096
|
-
def ip_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1095
|
+
def ip_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1097
1096
|
"""
|
|
1098
1097
|
List of alternative IPs
|
|
1099
1098
|
"""
|
|
1100
1099
|
return pulumi.get(self, "ip_sans")
|
|
1101
1100
|
|
|
1102
|
-
@property
|
|
1101
|
+
@_builtins.property
|
|
1103
1102
|
@pulumi.getter(name="issuerRef")
|
|
1104
|
-
def issuer_ref(self) -> pulumi.Output[Optional[
|
|
1103
|
+
def issuer_ref(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1105
1104
|
"""
|
|
1106
1105
|
Specifies the default issuer of this request. Can
|
|
1107
1106
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
@@ -1110,33 +1109,33 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
1110
1109
|
"""
|
|
1111
1110
|
return pulumi.get(self, "issuer_ref")
|
|
1112
1111
|
|
|
1113
|
-
@property
|
|
1112
|
+
@_builtins.property
|
|
1114
1113
|
@pulumi.getter(name="issuingCa")
|
|
1115
|
-
def issuing_ca(self) -> pulumi.Output[
|
|
1114
|
+
def issuing_ca(self) -> pulumi.Output[_builtins.str]:
|
|
1116
1115
|
"""
|
|
1117
1116
|
The issuing CA
|
|
1118
1117
|
"""
|
|
1119
1118
|
return pulumi.get(self, "issuing_ca")
|
|
1120
1119
|
|
|
1121
|
-
@property
|
|
1120
|
+
@_builtins.property
|
|
1122
1121
|
@pulumi.getter(name="minSecondsRemaining")
|
|
1123
|
-
def min_seconds_remaining(self) -> pulumi.Output[Optional[
|
|
1122
|
+
def min_seconds_remaining(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1124
1123
|
"""
|
|
1125
1124
|
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
1126
1125
|
"""
|
|
1127
1126
|
return pulumi.get(self, "min_seconds_remaining")
|
|
1128
1127
|
|
|
1129
|
-
@property
|
|
1128
|
+
@_builtins.property
|
|
1130
1129
|
@pulumi.getter
|
|
1131
|
-
def name(self) -> pulumi.Output[
|
|
1130
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
1132
1131
|
"""
|
|
1133
1132
|
Name of the role to create the certificate against
|
|
1134
1133
|
"""
|
|
1135
1134
|
return pulumi.get(self, "name")
|
|
1136
1135
|
|
|
1137
|
-
@property
|
|
1136
|
+
@_builtins.property
|
|
1138
1137
|
@pulumi.getter
|
|
1139
|
-
def namespace(self) -> pulumi.Output[Optional[
|
|
1138
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1140
1139
|
"""
|
|
1141
1140
|
The namespace to provision the resource in.
|
|
1142
1141
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1145,49 +1144,49 @@ class SecretBackendSign(pulumi.CustomResource):
|
|
|
1145
1144
|
"""
|
|
1146
1145
|
return pulumi.get(self, "namespace")
|
|
1147
1146
|
|
|
1148
|
-
@property
|
|
1147
|
+
@_builtins.property
|
|
1149
1148
|
@pulumi.getter(name="notAfter")
|
|
1150
|
-
def not_after(self) -> pulumi.Output[Optional[
|
|
1149
|
+
def not_after(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1151
1150
|
"""
|
|
1152
1151
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1153
1152
|
"""
|
|
1154
1153
|
return pulumi.get(self, "not_after")
|
|
1155
1154
|
|
|
1156
|
-
@property
|
|
1155
|
+
@_builtins.property
|
|
1157
1156
|
@pulumi.getter(name="otherSans")
|
|
1158
|
-
def other_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1157
|
+
def other_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1159
1158
|
"""
|
|
1160
1159
|
List of other SANs
|
|
1161
1160
|
"""
|
|
1162
1161
|
return pulumi.get(self, "other_sans")
|
|
1163
1162
|
|
|
1164
|
-
@property
|
|
1163
|
+
@_builtins.property
|
|
1165
1164
|
@pulumi.getter(name="renewPending")
|
|
1166
|
-
def renew_pending(self) -> pulumi.Output[
|
|
1165
|
+
def renew_pending(self) -> pulumi.Output[_builtins.bool]:
|
|
1167
1166
|
"""
|
|
1168
1167
|
`true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
1169
1168
|
"""
|
|
1170
1169
|
return pulumi.get(self, "renew_pending")
|
|
1171
1170
|
|
|
1172
|
-
@property
|
|
1171
|
+
@_builtins.property
|
|
1173
1172
|
@pulumi.getter(name="serialNumber")
|
|
1174
|
-
def serial_number(self) -> pulumi.Output[
|
|
1173
|
+
def serial_number(self) -> pulumi.Output[_builtins.str]:
|
|
1175
1174
|
"""
|
|
1176
1175
|
The certificate's serial number, hex formatted.
|
|
1177
1176
|
"""
|
|
1178
1177
|
return pulumi.get(self, "serial_number")
|
|
1179
1178
|
|
|
1180
|
-
@property
|
|
1179
|
+
@_builtins.property
|
|
1181
1180
|
@pulumi.getter
|
|
1182
|
-
def ttl(self) -> pulumi.Output[Optional[
|
|
1181
|
+
def ttl(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1183
1182
|
"""
|
|
1184
1183
|
Time to live
|
|
1185
1184
|
"""
|
|
1186
1185
|
return pulumi.get(self, "ttl")
|
|
1187
1186
|
|
|
1188
|
-
@property
|
|
1187
|
+
@_builtins.property
|
|
1189
1188
|
@pulumi.getter(name="uriSans")
|
|
1190
|
-
def uri_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1189
|
+
def uri_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1191
1190
|
"""
|
|
1192
1191
|
List of alternative URIs
|
|
1193
1192
|
"""
|