pulumi-vault 7.1.0__py3-none-any.whl → 7.2.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +19 -1
- pulumi_vault/_inputs.py +873 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +1016 -439
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +1057 -285
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +887 -256
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +426 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +878 -336
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +400 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +1006 -227
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +431 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +732 -693
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +380 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +909 -271
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/oci_auth_backend.py +683 -0
- pulumi_vault/oci_auth_backend_role.py +798 -0
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +234 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +205 -159
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +50 -31
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +902 -231
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +217 -124
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +833 -155
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +377 -350
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0.dist-info/RECORD +270 -0
- pulumi_vault-7.1.0.dist-info/RECORD +0 -268
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,59 +19,59 @@ __all__ = ['AuthBackendRoleArgs', 'AuthBackendRole']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class AuthBackendRoleArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
role: pulumi.Input[
|
|
24
|
-
backend: Optional[pulumi.Input[
|
|
25
|
-
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
26
|
-
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
27
|
-
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
28
|
-
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
29
|
-
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
30
|
-
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
31
|
-
namespace: Optional[pulumi.Input[
|
|
32
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
33
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
34
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
35
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
36
|
-
token_num_uses: Optional[pulumi.Input[
|
|
37
|
-
token_period: Optional[pulumi.Input[
|
|
38
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
39
|
-
token_ttl: Optional[pulumi.Input[
|
|
40
|
-
token_type: Optional[pulumi.Input[
|
|
22
|
+
role: pulumi.Input[_builtins.str],
|
|
23
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
24
|
+
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
25
|
+
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
26
|
+
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
27
|
+
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
28
|
+
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
29
|
+
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
30
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
32
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
33
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
34
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
35
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
36
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
37
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
38
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
39
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None):
|
|
41
40
|
"""
|
|
42
41
|
The set of arguments for constructing a AuthBackendRole resource.
|
|
43
|
-
:param pulumi.Input[
|
|
44
|
-
:param pulumi.Input[
|
|
45
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
42
|
+
:param pulumi.Input[_builtins.str] role: The name of the role.
|
|
43
|
+
:param pulumi.Input[_builtins.str] backend: Unique name of the auth backend to configure.
|
|
44
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_group_ids: If set, defines a constraint on the groups
|
|
46
45
|
that can perform the login operation that they should be using the group
|
|
47
46
|
ID specified by this field.
|
|
48
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
47
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_locations: If set, defines a constraint on the virtual machines
|
|
49
48
|
that can perform the login operation that the location in their identity
|
|
50
49
|
document must match the one specified by this field.
|
|
51
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
50
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_resource_groups: If set, defines a constraint on the virtual
|
|
52
51
|
machines that can perform the login operation that they be associated with
|
|
53
52
|
the resource group that matches the value specified by this field.
|
|
54
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
53
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_scale_sets: If set, defines a constraint on the virtual
|
|
55
54
|
machines that can perform the login operation that they must match the scale set
|
|
56
55
|
specified by this field.
|
|
57
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
56
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_service_principal_ids: If set, defines a constraint on the
|
|
58
57
|
service principals that can perform the login operation that they should be possess
|
|
59
58
|
the ids specified by this field.
|
|
60
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
59
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_subscription_ids: If set, defines a constraint on the subscriptions
|
|
61
60
|
that can perform the login operation to ones which matches the value specified by this
|
|
62
61
|
field.
|
|
63
|
-
:param pulumi.Input[
|
|
62
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
64
63
|
The value should not contain leading or trailing forward slashes.
|
|
65
64
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
66
65
|
*Available only for Vault Enterprise*.
|
|
67
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
68
|
-
:param pulumi.Input[
|
|
69
|
-
:param pulumi.Input[
|
|
70
|
-
:param pulumi.Input[
|
|
71
|
-
:param pulumi.Input[
|
|
72
|
-
:param pulumi.Input[
|
|
73
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
74
|
-
:param pulumi.Input[
|
|
75
|
-
:param pulumi.Input[
|
|
66
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
67
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
68
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
69
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
70
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
71
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
72
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
73
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
74
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
76
75
|
"""
|
|
77
76
|
pulumi.set(__self__, "role", role)
|
|
78
77
|
if backend is not None:
|
|
@@ -110,33 +109,33 @@ class AuthBackendRoleArgs:
|
|
|
110
109
|
if token_type is not None:
|
|
111
110
|
pulumi.set(__self__, "token_type", token_type)
|
|
112
111
|
|
|
113
|
-
@property
|
|
112
|
+
@_builtins.property
|
|
114
113
|
@pulumi.getter
|
|
115
|
-
def role(self) -> pulumi.Input[
|
|
114
|
+
def role(self) -> pulumi.Input[_builtins.str]:
|
|
116
115
|
"""
|
|
117
116
|
The name of the role.
|
|
118
117
|
"""
|
|
119
118
|
return pulumi.get(self, "role")
|
|
120
119
|
|
|
121
120
|
@role.setter
|
|
122
|
-
def role(self, value: pulumi.Input[
|
|
121
|
+
def role(self, value: pulumi.Input[_builtins.str]):
|
|
123
122
|
pulumi.set(self, "role", value)
|
|
124
123
|
|
|
125
|
-
@property
|
|
124
|
+
@_builtins.property
|
|
126
125
|
@pulumi.getter
|
|
127
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
126
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
128
127
|
"""
|
|
129
128
|
Unique name of the auth backend to configure.
|
|
130
129
|
"""
|
|
131
130
|
return pulumi.get(self, "backend")
|
|
132
131
|
|
|
133
132
|
@backend.setter
|
|
134
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
133
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
135
134
|
pulumi.set(self, "backend", value)
|
|
136
135
|
|
|
137
|
-
@property
|
|
136
|
+
@_builtins.property
|
|
138
137
|
@pulumi.getter(name="boundGroupIds")
|
|
139
|
-
def bound_group_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
138
|
+
def bound_group_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
140
139
|
"""
|
|
141
140
|
If set, defines a constraint on the groups
|
|
142
141
|
that can perform the login operation that they should be using the group
|
|
@@ -145,12 +144,12 @@ class AuthBackendRoleArgs:
|
|
|
145
144
|
return pulumi.get(self, "bound_group_ids")
|
|
146
145
|
|
|
147
146
|
@bound_group_ids.setter
|
|
148
|
-
def bound_group_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
147
|
+
def bound_group_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
149
148
|
pulumi.set(self, "bound_group_ids", value)
|
|
150
149
|
|
|
151
|
-
@property
|
|
150
|
+
@_builtins.property
|
|
152
151
|
@pulumi.getter(name="boundLocations")
|
|
153
|
-
def bound_locations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
152
|
+
def bound_locations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
154
153
|
"""
|
|
155
154
|
If set, defines a constraint on the virtual machines
|
|
156
155
|
that can perform the login operation that the location in their identity
|
|
@@ -159,12 +158,12 @@ class AuthBackendRoleArgs:
|
|
|
159
158
|
return pulumi.get(self, "bound_locations")
|
|
160
159
|
|
|
161
160
|
@bound_locations.setter
|
|
162
|
-
def bound_locations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
161
|
+
def bound_locations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
163
162
|
pulumi.set(self, "bound_locations", value)
|
|
164
163
|
|
|
165
|
-
@property
|
|
164
|
+
@_builtins.property
|
|
166
165
|
@pulumi.getter(name="boundResourceGroups")
|
|
167
|
-
def bound_resource_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
166
|
+
def bound_resource_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
168
167
|
"""
|
|
169
168
|
If set, defines a constraint on the virtual
|
|
170
169
|
machines that can perform the login operation that they be associated with
|
|
@@ -173,12 +172,12 @@ class AuthBackendRoleArgs:
|
|
|
173
172
|
return pulumi.get(self, "bound_resource_groups")
|
|
174
173
|
|
|
175
174
|
@bound_resource_groups.setter
|
|
176
|
-
def bound_resource_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
175
|
+
def bound_resource_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
177
176
|
pulumi.set(self, "bound_resource_groups", value)
|
|
178
177
|
|
|
179
|
-
@property
|
|
178
|
+
@_builtins.property
|
|
180
179
|
@pulumi.getter(name="boundScaleSets")
|
|
181
|
-
def bound_scale_sets(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
180
|
+
def bound_scale_sets(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
182
181
|
"""
|
|
183
182
|
If set, defines a constraint on the virtual
|
|
184
183
|
machines that can perform the login operation that they must match the scale set
|
|
@@ -187,12 +186,12 @@ class AuthBackendRoleArgs:
|
|
|
187
186
|
return pulumi.get(self, "bound_scale_sets")
|
|
188
187
|
|
|
189
188
|
@bound_scale_sets.setter
|
|
190
|
-
def bound_scale_sets(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
189
|
+
def bound_scale_sets(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
191
190
|
pulumi.set(self, "bound_scale_sets", value)
|
|
192
191
|
|
|
193
|
-
@property
|
|
192
|
+
@_builtins.property
|
|
194
193
|
@pulumi.getter(name="boundServicePrincipalIds")
|
|
195
|
-
def bound_service_principal_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
194
|
+
def bound_service_principal_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
196
195
|
"""
|
|
197
196
|
If set, defines a constraint on the
|
|
198
197
|
service principals that can perform the login operation that they should be possess
|
|
@@ -201,12 +200,12 @@ class AuthBackendRoleArgs:
|
|
|
201
200
|
return pulumi.get(self, "bound_service_principal_ids")
|
|
202
201
|
|
|
203
202
|
@bound_service_principal_ids.setter
|
|
204
|
-
def bound_service_principal_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
203
|
+
def bound_service_principal_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
205
204
|
pulumi.set(self, "bound_service_principal_ids", value)
|
|
206
205
|
|
|
207
|
-
@property
|
|
206
|
+
@_builtins.property
|
|
208
207
|
@pulumi.getter(name="boundSubscriptionIds")
|
|
209
|
-
def bound_subscription_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
208
|
+
def bound_subscription_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
210
209
|
"""
|
|
211
210
|
If set, defines a constraint on the subscriptions
|
|
212
211
|
that can perform the login operation to ones which matches the value specified by this
|
|
@@ -215,12 +214,12 @@ class AuthBackendRoleArgs:
|
|
|
215
214
|
return pulumi.get(self, "bound_subscription_ids")
|
|
216
215
|
|
|
217
216
|
@bound_subscription_ids.setter
|
|
218
|
-
def bound_subscription_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
217
|
+
def bound_subscription_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
219
218
|
pulumi.set(self, "bound_subscription_ids", value)
|
|
220
219
|
|
|
221
|
-
@property
|
|
220
|
+
@_builtins.property
|
|
222
221
|
@pulumi.getter
|
|
223
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
222
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
224
223
|
"""
|
|
225
224
|
The namespace to provision the resource in.
|
|
226
225
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -230,174 +229,174 @@ class AuthBackendRoleArgs:
|
|
|
230
229
|
return pulumi.get(self, "namespace")
|
|
231
230
|
|
|
232
231
|
@namespace.setter
|
|
233
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
232
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
234
233
|
pulumi.set(self, "namespace", value)
|
|
235
234
|
|
|
236
|
-
@property
|
|
235
|
+
@_builtins.property
|
|
237
236
|
@pulumi.getter(name="tokenBoundCidrs")
|
|
238
|
-
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
237
|
+
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
239
238
|
"""
|
|
240
239
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
241
240
|
"""
|
|
242
241
|
return pulumi.get(self, "token_bound_cidrs")
|
|
243
242
|
|
|
244
243
|
@token_bound_cidrs.setter
|
|
245
|
-
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
244
|
+
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
246
245
|
pulumi.set(self, "token_bound_cidrs", value)
|
|
247
246
|
|
|
248
|
-
@property
|
|
247
|
+
@_builtins.property
|
|
249
248
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
|
250
|
-
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[
|
|
249
|
+
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
251
250
|
"""
|
|
252
251
|
Generated Token's Explicit Maximum TTL in seconds
|
|
253
252
|
"""
|
|
254
253
|
return pulumi.get(self, "token_explicit_max_ttl")
|
|
255
254
|
|
|
256
255
|
@token_explicit_max_ttl.setter
|
|
257
|
-
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[
|
|
256
|
+
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
258
257
|
pulumi.set(self, "token_explicit_max_ttl", value)
|
|
259
258
|
|
|
260
|
-
@property
|
|
259
|
+
@_builtins.property
|
|
261
260
|
@pulumi.getter(name="tokenMaxTtl")
|
|
262
|
-
def token_max_ttl(self) -> Optional[pulumi.Input[
|
|
261
|
+
def token_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
263
262
|
"""
|
|
264
263
|
The maximum lifetime of the generated token
|
|
265
264
|
"""
|
|
266
265
|
return pulumi.get(self, "token_max_ttl")
|
|
267
266
|
|
|
268
267
|
@token_max_ttl.setter
|
|
269
|
-
def token_max_ttl(self, value: Optional[pulumi.Input[
|
|
268
|
+
def token_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
270
269
|
pulumi.set(self, "token_max_ttl", value)
|
|
271
270
|
|
|
272
|
-
@property
|
|
271
|
+
@_builtins.property
|
|
273
272
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
|
274
|
-
def token_no_default_policy(self) -> Optional[pulumi.Input[
|
|
273
|
+
def token_no_default_policy(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
275
274
|
"""
|
|
276
275
|
If true, the 'default' policy will not automatically be added to generated tokens
|
|
277
276
|
"""
|
|
278
277
|
return pulumi.get(self, "token_no_default_policy")
|
|
279
278
|
|
|
280
279
|
@token_no_default_policy.setter
|
|
281
|
-
def token_no_default_policy(self, value: Optional[pulumi.Input[
|
|
280
|
+
def token_no_default_policy(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
282
281
|
pulumi.set(self, "token_no_default_policy", value)
|
|
283
282
|
|
|
284
|
-
@property
|
|
283
|
+
@_builtins.property
|
|
285
284
|
@pulumi.getter(name="tokenNumUses")
|
|
286
|
-
def token_num_uses(self) -> Optional[pulumi.Input[
|
|
285
|
+
def token_num_uses(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
287
286
|
"""
|
|
288
287
|
The maximum number of times a token may be used, a value of zero means unlimited
|
|
289
288
|
"""
|
|
290
289
|
return pulumi.get(self, "token_num_uses")
|
|
291
290
|
|
|
292
291
|
@token_num_uses.setter
|
|
293
|
-
def token_num_uses(self, value: Optional[pulumi.Input[
|
|
292
|
+
def token_num_uses(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
294
293
|
pulumi.set(self, "token_num_uses", value)
|
|
295
294
|
|
|
296
|
-
@property
|
|
295
|
+
@_builtins.property
|
|
297
296
|
@pulumi.getter(name="tokenPeriod")
|
|
298
|
-
def token_period(self) -> Optional[pulumi.Input[
|
|
297
|
+
def token_period(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
299
298
|
"""
|
|
300
299
|
Generated Token's Period
|
|
301
300
|
"""
|
|
302
301
|
return pulumi.get(self, "token_period")
|
|
303
302
|
|
|
304
303
|
@token_period.setter
|
|
305
|
-
def token_period(self, value: Optional[pulumi.Input[
|
|
304
|
+
def token_period(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
306
305
|
pulumi.set(self, "token_period", value)
|
|
307
306
|
|
|
308
|
-
@property
|
|
307
|
+
@_builtins.property
|
|
309
308
|
@pulumi.getter(name="tokenPolicies")
|
|
310
|
-
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
309
|
+
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
311
310
|
"""
|
|
312
311
|
Generated Token's Policies
|
|
313
312
|
"""
|
|
314
313
|
return pulumi.get(self, "token_policies")
|
|
315
314
|
|
|
316
315
|
@token_policies.setter
|
|
317
|
-
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
316
|
+
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
318
317
|
pulumi.set(self, "token_policies", value)
|
|
319
318
|
|
|
320
|
-
@property
|
|
319
|
+
@_builtins.property
|
|
321
320
|
@pulumi.getter(name="tokenTtl")
|
|
322
|
-
def token_ttl(self) -> Optional[pulumi.Input[
|
|
321
|
+
def token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
323
322
|
"""
|
|
324
323
|
The initial ttl of the token to generate in seconds
|
|
325
324
|
"""
|
|
326
325
|
return pulumi.get(self, "token_ttl")
|
|
327
326
|
|
|
328
327
|
@token_ttl.setter
|
|
329
|
-
def token_ttl(self, value: Optional[pulumi.Input[
|
|
328
|
+
def token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
330
329
|
pulumi.set(self, "token_ttl", value)
|
|
331
330
|
|
|
332
|
-
@property
|
|
331
|
+
@_builtins.property
|
|
333
332
|
@pulumi.getter(name="tokenType")
|
|
334
|
-
def token_type(self) -> Optional[pulumi.Input[
|
|
333
|
+
def token_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
335
334
|
"""
|
|
336
335
|
The type of token to generate, service or batch
|
|
337
336
|
"""
|
|
338
337
|
return pulumi.get(self, "token_type")
|
|
339
338
|
|
|
340
339
|
@token_type.setter
|
|
341
|
-
def token_type(self, value: Optional[pulumi.Input[
|
|
340
|
+
def token_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
342
341
|
pulumi.set(self, "token_type", value)
|
|
343
342
|
|
|
344
343
|
|
|
345
344
|
@pulumi.input_type
|
|
346
345
|
class _AuthBackendRoleState:
|
|
347
346
|
def __init__(__self__, *,
|
|
348
|
-
backend: Optional[pulumi.Input[
|
|
349
|
-
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
350
|
-
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
351
|
-
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
352
|
-
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
353
|
-
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
354
|
-
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
355
|
-
namespace: Optional[pulumi.Input[
|
|
356
|
-
role: Optional[pulumi.Input[
|
|
357
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
358
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
359
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
360
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
361
|
-
token_num_uses: Optional[pulumi.Input[
|
|
362
|
-
token_period: Optional[pulumi.Input[
|
|
363
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
364
|
-
token_ttl: Optional[pulumi.Input[
|
|
365
|
-
token_type: Optional[pulumi.Input[
|
|
347
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
348
|
+
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
349
|
+
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
350
|
+
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
351
|
+
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
352
|
+
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
353
|
+
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
354
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
355
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
356
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
357
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
358
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
359
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
360
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
361
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
362
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
363
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
364
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None):
|
|
366
365
|
"""
|
|
367
366
|
Input properties used for looking up and filtering AuthBackendRole resources.
|
|
368
|
-
:param pulumi.Input[
|
|
369
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
367
|
+
:param pulumi.Input[_builtins.str] backend: Unique name of the auth backend to configure.
|
|
368
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_group_ids: If set, defines a constraint on the groups
|
|
370
369
|
that can perform the login operation that they should be using the group
|
|
371
370
|
ID specified by this field.
|
|
372
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
371
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_locations: If set, defines a constraint on the virtual machines
|
|
373
372
|
that can perform the login operation that the location in their identity
|
|
374
373
|
document must match the one specified by this field.
|
|
375
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
374
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_resource_groups: If set, defines a constraint on the virtual
|
|
376
375
|
machines that can perform the login operation that they be associated with
|
|
377
376
|
the resource group that matches the value specified by this field.
|
|
378
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
377
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_scale_sets: If set, defines a constraint on the virtual
|
|
379
378
|
machines that can perform the login operation that they must match the scale set
|
|
380
379
|
specified by this field.
|
|
381
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
380
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_service_principal_ids: If set, defines a constraint on the
|
|
382
381
|
service principals that can perform the login operation that they should be possess
|
|
383
382
|
the ids specified by this field.
|
|
384
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
383
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_subscription_ids: If set, defines a constraint on the subscriptions
|
|
385
384
|
that can perform the login operation to ones which matches the value specified by this
|
|
386
385
|
field.
|
|
387
|
-
:param pulumi.Input[
|
|
386
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
388
387
|
The value should not contain leading or trailing forward slashes.
|
|
389
388
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
390
389
|
*Available only for Vault Enterprise*.
|
|
391
|
-
:param pulumi.Input[
|
|
392
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
393
|
-
:param pulumi.Input[
|
|
394
|
-
:param pulumi.Input[
|
|
395
|
-
:param pulumi.Input[
|
|
396
|
-
:param pulumi.Input[
|
|
397
|
-
:param pulumi.Input[
|
|
398
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
399
|
-
:param pulumi.Input[
|
|
400
|
-
:param pulumi.Input[
|
|
390
|
+
:param pulumi.Input[_builtins.str] role: The name of the role.
|
|
391
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
392
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
393
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
394
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
395
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
396
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
397
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
398
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
399
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
401
400
|
"""
|
|
402
401
|
if backend is not None:
|
|
403
402
|
pulumi.set(__self__, "backend", backend)
|
|
@@ -436,21 +435,21 @@ class _AuthBackendRoleState:
|
|
|
436
435
|
if token_type is not None:
|
|
437
436
|
pulumi.set(__self__, "token_type", token_type)
|
|
438
437
|
|
|
439
|
-
@property
|
|
438
|
+
@_builtins.property
|
|
440
439
|
@pulumi.getter
|
|
441
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
440
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
442
441
|
"""
|
|
443
442
|
Unique name of the auth backend to configure.
|
|
444
443
|
"""
|
|
445
444
|
return pulumi.get(self, "backend")
|
|
446
445
|
|
|
447
446
|
@backend.setter
|
|
448
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
447
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
449
448
|
pulumi.set(self, "backend", value)
|
|
450
449
|
|
|
451
|
-
@property
|
|
450
|
+
@_builtins.property
|
|
452
451
|
@pulumi.getter(name="boundGroupIds")
|
|
453
|
-
def bound_group_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
452
|
+
def bound_group_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
454
453
|
"""
|
|
455
454
|
If set, defines a constraint on the groups
|
|
456
455
|
that can perform the login operation that they should be using the group
|
|
@@ -459,12 +458,12 @@ class _AuthBackendRoleState:
|
|
|
459
458
|
return pulumi.get(self, "bound_group_ids")
|
|
460
459
|
|
|
461
460
|
@bound_group_ids.setter
|
|
462
|
-
def bound_group_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
461
|
+
def bound_group_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
463
462
|
pulumi.set(self, "bound_group_ids", value)
|
|
464
463
|
|
|
465
|
-
@property
|
|
464
|
+
@_builtins.property
|
|
466
465
|
@pulumi.getter(name="boundLocations")
|
|
467
|
-
def bound_locations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
466
|
+
def bound_locations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
468
467
|
"""
|
|
469
468
|
If set, defines a constraint on the virtual machines
|
|
470
469
|
that can perform the login operation that the location in their identity
|
|
@@ -473,12 +472,12 @@ class _AuthBackendRoleState:
|
|
|
473
472
|
return pulumi.get(self, "bound_locations")
|
|
474
473
|
|
|
475
474
|
@bound_locations.setter
|
|
476
|
-
def bound_locations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
475
|
+
def bound_locations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
477
476
|
pulumi.set(self, "bound_locations", value)
|
|
478
477
|
|
|
479
|
-
@property
|
|
478
|
+
@_builtins.property
|
|
480
479
|
@pulumi.getter(name="boundResourceGroups")
|
|
481
|
-
def bound_resource_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
480
|
+
def bound_resource_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
482
481
|
"""
|
|
483
482
|
If set, defines a constraint on the virtual
|
|
484
483
|
machines that can perform the login operation that they be associated with
|
|
@@ -487,12 +486,12 @@ class _AuthBackendRoleState:
|
|
|
487
486
|
return pulumi.get(self, "bound_resource_groups")
|
|
488
487
|
|
|
489
488
|
@bound_resource_groups.setter
|
|
490
|
-
def bound_resource_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
489
|
+
def bound_resource_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
491
490
|
pulumi.set(self, "bound_resource_groups", value)
|
|
492
491
|
|
|
493
|
-
@property
|
|
492
|
+
@_builtins.property
|
|
494
493
|
@pulumi.getter(name="boundScaleSets")
|
|
495
|
-
def bound_scale_sets(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
494
|
+
def bound_scale_sets(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
496
495
|
"""
|
|
497
496
|
If set, defines a constraint on the virtual
|
|
498
497
|
machines that can perform the login operation that they must match the scale set
|
|
@@ -501,12 +500,12 @@ class _AuthBackendRoleState:
|
|
|
501
500
|
return pulumi.get(self, "bound_scale_sets")
|
|
502
501
|
|
|
503
502
|
@bound_scale_sets.setter
|
|
504
|
-
def bound_scale_sets(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
503
|
+
def bound_scale_sets(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
505
504
|
pulumi.set(self, "bound_scale_sets", value)
|
|
506
505
|
|
|
507
|
-
@property
|
|
506
|
+
@_builtins.property
|
|
508
507
|
@pulumi.getter(name="boundServicePrincipalIds")
|
|
509
|
-
def bound_service_principal_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
508
|
+
def bound_service_principal_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
510
509
|
"""
|
|
511
510
|
If set, defines a constraint on the
|
|
512
511
|
service principals that can perform the login operation that they should be possess
|
|
@@ -515,12 +514,12 @@ class _AuthBackendRoleState:
|
|
|
515
514
|
return pulumi.get(self, "bound_service_principal_ids")
|
|
516
515
|
|
|
517
516
|
@bound_service_principal_ids.setter
|
|
518
|
-
def bound_service_principal_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
517
|
+
def bound_service_principal_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
519
518
|
pulumi.set(self, "bound_service_principal_ids", value)
|
|
520
519
|
|
|
521
|
-
@property
|
|
520
|
+
@_builtins.property
|
|
522
521
|
@pulumi.getter(name="boundSubscriptionIds")
|
|
523
|
-
def bound_subscription_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
522
|
+
def bound_subscription_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
524
523
|
"""
|
|
525
524
|
If set, defines a constraint on the subscriptions
|
|
526
525
|
that can perform the login operation to ones which matches the value specified by this
|
|
@@ -529,12 +528,12 @@ class _AuthBackendRoleState:
|
|
|
529
528
|
return pulumi.get(self, "bound_subscription_ids")
|
|
530
529
|
|
|
531
530
|
@bound_subscription_ids.setter
|
|
532
|
-
def bound_subscription_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
531
|
+
def bound_subscription_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
533
532
|
pulumi.set(self, "bound_subscription_ids", value)
|
|
534
533
|
|
|
535
|
-
@property
|
|
534
|
+
@_builtins.property
|
|
536
535
|
@pulumi.getter
|
|
537
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
536
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
538
537
|
"""
|
|
539
538
|
The namespace to provision the resource in.
|
|
540
539
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -544,127 +543,127 @@ class _AuthBackendRoleState:
|
|
|
544
543
|
return pulumi.get(self, "namespace")
|
|
545
544
|
|
|
546
545
|
@namespace.setter
|
|
547
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
546
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
548
547
|
pulumi.set(self, "namespace", value)
|
|
549
548
|
|
|
550
|
-
@property
|
|
549
|
+
@_builtins.property
|
|
551
550
|
@pulumi.getter
|
|
552
|
-
def role(self) -> Optional[pulumi.Input[
|
|
551
|
+
def role(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
553
552
|
"""
|
|
554
553
|
The name of the role.
|
|
555
554
|
"""
|
|
556
555
|
return pulumi.get(self, "role")
|
|
557
556
|
|
|
558
557
|
@role.setter
|
|
559
|
-
def role(self, value: Optional[pulumi.Input[
|
|
558
|
+
def role(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
560
559
|
pulumi.set(self, "role", value)
|
|
561
560
|
|
|
562
|
-
@property
|
|
561
|
+
@_builtins.property
|
|
563
562
|
@pulumi.getter(name="tokenBoundCidrs")
|
|
564
|
-
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
563
|
+
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
565
564
|
"""
|
|
566
565
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
567
566
|
"""
|
|
568
567
|
return pulumi.get(self, "token_bound_cidrs")
|
|
569
568
|
|
|
570
569
|
@token_bound_cidrs.setter
|
|
571
|
-
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
570
|
+
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
572
571
|
pulumi.set(self, "token_bound_cidrs", value)
|
|
573
572
|
|
|
574
|
-
@property
|
|
573
|
+
@_builtins.property
|
|
575
574
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
|
576
|
-
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[
|
|
575
|
+
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
577
576
|
"""
|
|
578
577
|
Generated Token's Explicit Maximum TTL in seconds
|
|
579
578
|
"""
|
|
580
579
|
return pulumi.get(self, "token_explicit_max_ttl")
|
|
581
580
|
|
|
582
581
|
@token_explicit_max_ttl.setter
|
|
583
|
-
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[
|
|
582
|
+
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
584
583
|
pulumi.set(self, "token_explicit_max_ttl", value)
|
|
585
584
|
|
|
586
|
-
@property
|
|
585
|
+
@_builtins.property
|
|
587
586
|
@pulumi.getter(name="tokenMaxTtl")
|
|
588
|
-
def token_max_ttl(self) -> Optional[pulumi.Input[
|
|
587
|
+
def token_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
589
588
|
"""
|
|
590
589
|
The maximum lifetime of the generated token
|
|
591
590
|
"""
|
|
592
591
|
return pulumi.get(self, "token_max_ttl")
|
|
593
592
|
|
|
594
593
|
@token_max_ttl.setter
|
|
595
|
-
def token_max_ttl(self, value: Optional[pulumi.Input[
|
|
594
|
+
def token_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
596
595
|
pulumi.set(self, "token_max_ttl", value)
|
|
597
596
|
|
|
598
|
-
@property
|
|
597
|
+
@_builtins.property
|
|
599
598
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
|
600
|
-
def token_no_default_policy(self) -> Optional[pulumi.Input[
|
|
599
|
+
def token_no_default_policy(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
601
600
|
"""
|
|
602
601
|
If true, the 'default' policy will not automatically be added to generated tokens
|
|
603
602
|
"""
|
|
604
603
|
return pulumi.get(self, "token_no_default_policy")
|
|
605
604
|
|
|
606
605
|
@token_no_default_policy.setter
|
|
607
|
-
def token_no_default_policy(self, value: Optional[pulumi.Input[
|
|
606
|
+
def token_no_default_policy(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
608
607
|
pulumi.set(self, "token_no_default_policy", value)
|
|
609
608
|
|
|
610
|
-
@property
|
|
609
|
+
@_builtins.property
|
|
611
610
|
@pulumi.getter(name="tokenNumUses")
|
|
612
|
-
def token_num_uses(self) -> Optional[pulumi.Input[
|
|
611
|
+
def token_num_uses(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
613
612
|
"""
|
|
614
613
|
The maximum number of times a token may be used, a value of zero means unlimited
|
|
615
614
|
"""
|
|
616
615
|
return pulumi.get(self, "token_num_uses")
|
|
617
616
|
|
|
618
617
|
@token_num_uses.setter
|
|
619
|
-
def token_num_uses(self, value: Optional[pulumi.Input[
|
|
618
|
+
def token_num_uses(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
620
619
|
pulumi.set(self, "token_num_uses", value)
|
|
621
620
|
|
|
622
|
-
@property
|
|
621
|
+
@_builtins.property
|
|
623
622
|
@pulumi.getter(name="tokenPeriod")
|
|
624
|
-
def token_period(self) -> Optional[pulumi.Input[
|
|
623
|
+
def token_period(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
625
624
|
"""
|
|
626
625
|
Generated Token's Period
|
|
627
626
|
"""
|
|
628
627
|
return pulumi.get(self, "token_period")
|
|
629
628
|
|
|
630
629
|
@token_period.setter
|
|
631
|
-
def token_period(self, value: Optional[pulumi.Input[
|
|
630
|
+
def token_period(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
632
631
|
pulumi.set(self, "token_period", value)
|
|
633
632
|
|
|
634
|
-
@property
|
|
633
|
+
@_builtins.property
|
|
635
634
|
@pulumi.getter(name="tokenPolicies")
|
|
636
|
-
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
635
|
+
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
637
636
|
"""
|
|
638
637
|
Generated Token's Policies
|
|
639
638
|
"""
|
|
640
639
|
return pulumi.get(self, "token_policies")
|
|
641
640
|
|
|
642
641
|
@token_policies.setter
|
|
643
|
-
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
642
|
+
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
644
643
|
pulumi.set(self, "token_policies", value)
|
|
645
644
|
|
|
646
|
-
@property
|
|
645
|
+
@_builtins.property
|
|
647
646
|
@pulumi.getter(name="tokenTtl")
|
|
648
|
-
def token_ttl(self) -> Optional[pulumi.Input[
|
|
647
|
+
def token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
649
648
|
"""
|
|
650
649
|
The initial ttl of the token to generate in seconds
|
|
651
650
|
"""
|
|
652
651
|
return pulumi.get(self, "token_ttl")
|
|
653
652
|
|
|
654
653
|
@token_ttl.setter
|
|
655
|
-
def token_ttl(self, value: Optional[pulumi.Input[
|
|
654
|
+
def token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
656
655
|
pulumi.set(self, "token_ttl", value)
|
|
657
656
|
|
|
658
|
-
@property
|
|
657
|
+
@_builtins.property
|
|
659
658
|
@pulumi.getter(name="tokenType")
|
|
660
|
-
def token_type(self) -> Optional[pulumi.Input[
|
|
659
|
+
def token_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
661
660
|
"""
|
|
662
661
|
The type of token to generate, service or batch
|
|
663
662
|
"""
|
|
664
663
|
return pulumi.get(self, "token_type")
|
|
665
664
|
|
|
666
665
|
@token_type.setter
|
|
667
|
-
def token_type(self, value: Optional[pulumi.Input[
|
|
666
|
+
def token_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
668
667
|
pulumi.set(self, "token_type", value)
|
|
669
668
|
|
|
670
669
|
|
|
@@ -674,24 +673,24 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
674
673
|
def __init__(__self__,
|
|
675
674
|
resource_name: str,
|
|
676
675
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
677
|
-
backend: Optional[pulumi.Input[
|
|
678
|
-
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
679
|
-
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
680
|
-
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
681
|
-
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
682
|
-
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
683
|
-
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
684
|
-
namespace: Optional[pulumi.Input[
|
|
685
|
-
role: Optional[pulumi.Input[
|
|
686
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
687
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
688
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
689
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
690
|
-
token_num_uses: Optional[pulumi.Input[
|
|
691
|
-
token_period: Optional[pulumi.Input[
|
|
692
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
693
|
-
token_ttl: Optional[pulumi.Input[
|
|
694
|
-
token_type: Optional[pulumi.Input[
|
|
676
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
677
|
+
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
678
|
+
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
679
|
+
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
680
|
+
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
681
|
+
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
682
|
+
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
683
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
684
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
685
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
686
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
687
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
688
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
689
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
690
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
691
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
692
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
693
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
695
694
|
__props__=None):
|
|
696
695
|
"""
|
|
697
696
|
Manages an Azure auth backend role in a Vault server. Roles constrain the
|
|
@@ -731,39 +730,39 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
731
730
|
|
|
732
731
|
:param str resource_name: The name of the resource.
|
|
733
732
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
734
|
-
:param pulumi.Input[
|
|
735
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
733
|
+
:param pulumi.Input[_builtins.str] backend: Unique name of the auth backend to configure.
|
|
734
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_group_ids: If set, defines a constraint on the groups
|
|
736
735
|
that can perform the login operation that they should be using the group
|
|
737
736
|
ID specified by this field.
|
|
738
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
737
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_locations: If set, defines a constraint on the virtual machines
|
|
739
738
|
that can perform the login operation that the location in their identity
|
|
740
739
|
document must match the one specified by this field.
|
|
741
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
740
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_resource_groups: If set, defines a constraint on the virtual
|
|
742
741
|
machines that can perform the login operation that they be associated with
|
|
743
742
|
the resource group that matches the value specified by this field.
|
|
744
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
743
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_scale_sets: If set, defines a constraint on the virtual
|
|
745
744
|
machines that can perform the login operation that they must match the scale set
|
|
746
745
|
specified by this field.
|
|
747
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
746
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_service_principal_ids: If set, defines a constraint on the
|
|
748
747
|
service principals that can perform the login operation that they should be possess
|
|
749
748
|
the ids specified by this field.
|
|
750
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
749
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_subscription_ids: If set, defines a constraint on the subscriptions
|
|
751
750
|
that can perform the login operation to ones which matches the value specified by this
|
|
752
751
|
field.
|
|
753
|
-
:param pulumi.Input[
|
|
752
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
754
753
|
The value should not contain leading or trailing forward slashes.
|
|
755
754
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
756
755
|
*Available only for Vault Enterprise*.
|
|
757
|
-
:param pulumi.Input[
|
|
758
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
759
|
-
:param pulumi.Input[
|
|
760
|
-
:param pulumi.Input[
|
|
761
|
-
:param pulumi.Input[
|
|
762
|
-
:param pulumi.Input[
|
|
763
|
-
:param pulumi.Input[
|
|
764
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
765
|
-
:param pulumi.Input[
|
|
766
|
-
:param pulumi.Input[
|
|
756
|
+
:param pulumi.Input[_builtins.str] role: The name of the role.
|
|
757
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
758
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
759
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
760
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
761
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
762
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
763
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
764
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
765
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
767
766
|
"""
|
|
768
767
|
...
|
|
769
768
|
@overload
|
|
@@ -822,24 +821,24 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
822
821
|
def _internal_init(__self__,
|
|
823
822
|
resource_name: str,
|
|
824
823
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
825
|
-
backend: Optional[pulumi.Input[
|
|
826
|
-
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
827
|
-
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
828
|
-
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
829
|
-
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
830
|
-
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
831
|
-
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
832
|
-
namespace: Optional[pulumi.Input[
|
|
833
|
-
role: Optional[pulumi.Input[
|
|
834
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
835
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
836
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
837
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
838
|
-
token_num_uses: Optional[pulumi.Input[
|
|
839
|
-
token_period: Optional[pulumi.Input[
|
|
840
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
841
|
-
token_ttl: Optional[pulumi.Input[
|
|
842
|
-
token_type: Optional[pulumi.Input[
|
|
824
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
825
|
+
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
826
|
+
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
827
|
+
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
828
|
+
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
829
|
+
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
830
|
+
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
831
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
832
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
833
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
834
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
835
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
836
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
837
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
838
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
839
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
840
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
841
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
843
842
|
__props__=None):
|
|
844
843
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
845
844
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -879,24 +878,24 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
879
878
|
def get(resource_name: str,
|
|
880
879
|
id: pulumi.Input[str],
|
|
881
880
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
882
|
-
backend: Optional[pulumi.Input[
|
|
883
|
-
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
884
|
-
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
885
|
-
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
886
|
-
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
887
|
-
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
888
|
-
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
889
|
-
namespace: Optional[pulumi.Input[
|
|
890
|
-
role: Optional[pulumi.Input[
|
|
891
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
892
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
893
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
894
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
895
|
-
token_num_uses: Optional[pulumi.Input[
|
|
896
|
-
token_period: Optional[pulumi.Input[
|
|
897
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
898
|
-
token_ttl: Optional[pulumi.Input[
|
|
899
|
-
token_type: Optional[pulumi.Input[
|
|
881
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
882
|
+
bound_group_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
883
|
+
bound_locations: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
884
|
+
bound_resource_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
885
|
+
bound_scale_sets: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
886
|
+
bound_service_principal_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
887
|
+
bound_subscription_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
888
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
889
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
890
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
891
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
892
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
893
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
894
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
895
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
896
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
897
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
898
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None) -> 'AuthBackendRole':
|
|
900
899
|
"""
|
|
901
900
|
Get an existing AuthBackendRole resource's state with the given name, id, and optional extra
|
|
902
901
|
properties used to qualify the lookup.
|
|
@@ -904,39 +903,39 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
904
903
|
:param str resource_name: The unique name of the resulting resource.
|
|
905
904
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
906
905
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
907
|
-
:param pulumi.Input[
|
|
908
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
906
|
+
:param pulumi.Input[_builtins.str] backend: Unique name of the auth backend to configure.
|
|
907
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_group_ids: If set, defines a constraint on the groups
|
|
909
908
|
that can perform the login operation that they should be using the group
|
|
910
909
|
ID specified by this field.
|
|
911
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
910
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_locations: If set, defines a constraint on the virtual machines
|
|
912
911
|
that can perform the login operation that the location in their identity
|
|
913
912
|
document must match the one specified by this field.
|
|
914
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
913
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_resource_groups: If set, defines a constraint on the virtual
|
|
915
914
|
machines that can perform the login operation that they be associated with
|
|
916
915
|
the resource group that matches the value specified by this field.
|
|
917
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
916
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_scale_sets: If set, defines a constraint on the virtual
|
|
918
917
|
machines that can perform the login operation that they must match the scale set
|
|
919
918
|
specified by this field.
|
|
920
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
919
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_service_principal_ids: If set, defines a constraint on the
|
|
921
920
|
service principals that can perform the login operation that they should be possess
|
|
922
921
|
the ids specified by this field.
|
|
923
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
922
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_subscription_ids: If set, defines a constraint on the subscriptions
|
|
924
923
|
that can perform the login operation to ones which matches the value specified by this
|
|
925
924
|
field.
|
|
926
|
-
:param pulumi.Input[
|
|
925
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
927
926
|
The value should not contain leading or trailing forward slashes.
|
|
928
927
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
929
928
|
*Available only for Vault Enterprise*.
|
|
930
|
-
:param pulumi.Input[
|
|
931
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
932
|
-
:param pulumi.Input[
|
|
933
|
-
:param pulumi.Input[
|
|
934
|
-
:param pulumi.Input[
|
|
935
|
-
:param pulumi.Input[
|
|
936
|
-
:param pulumi.Input[
|
|
937
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
938
|
-
:param pulumi.Input[
|
|
939
|
-
:param pulumi.Input[
|
|
929
|
+
:param pulumi.Input[_builtins.str] role: The name of the role.
|
|
930
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
931
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
932
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
933
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
934
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
935
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
936
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
937
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
938
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
940
939
|
"""
|
|
941
940
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
942
941
|
|
|
@@ -962,17 +961,17 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
962
961
|
__props__.__dict__["token_type"] = token_type
|
|
963
962
|
return AuthBackendRole(resource_name, opts=opts, __props__=__props__)
|
|
964
963
|
|
|
965
|
-
@property
|
|
964
|
+
@_builtins.property
|
|
966
965
|
@pulumi.getter
|
|
967
|
-
def backend(self) -> pulumi.Output[Optional[
|
|
966
|
+
def backend(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
968
967
|
"""
|
|
969
968
|
Unique name of the auth backend to configure.
|
|
970
969
|
"""
|
|
971
970
|
return pulumi.get(self, "backend")
|
|
972
971
|
|
|
973
|
-
@property
|
|
972
|
+
@_builtins.property
|
|
974
973
|
@pulumi.getter(name="boundGroupIds")
|
|
975
|
-
def bound_group_ids(self) -> pulumi.Output[Optional[Sequence[
|
|
974
|
+
def bound_group_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
976
975
|
"""
|
|
977
976
|
If set, defines a constraint on the groups
|
|
978
977
|
that can perform the login operation that they should be using the group
|
|
@@ -980,9 +979,9 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
980
979
|
"""
|
|
981
980
|
return pulumi.get(self, "bound_group_ids")
|
|
982
981
|
|
|
983
|
-
@property
|
|
982
|
+
@_builtins.property
|
|
984
983
|
@pulumi.getter(name="boundLocations")
|
|
985
|
-
def bound_locations(self) -> pulumi.Output[Optional[Sequence[
|
|
984
|
+
def bound_locations(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
986
985
|
"""
|
|
987
986
|
If set, defines a constraint on the virtual machines
|
|
988
987
|
that can perform the login operation that the location in their identity
|
|
@@ -990,9 +989,9 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
990
989
|
"""
|
|
991
990
|
return pulumi.get(self, "bound_locations")
|
|
992
991
|
|
|
993
|
-
@property
|
|
992
|
+
@_builtins.property
|
|
994
993
|
@pulumi.getter(name="boundResourceGroups")
|
|
995
|
-
def bound_resource_groups(self) -> pulumi.Output[Optional[Sequence[
|
|
994
|
+
def bound_resource_groups(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
996
995
|
"""
|
|
997
996
|
If set, defines a constraint on the virtual
|
|
998
997
|
machines that can perform the login operation that they be associated with
|
|
@@ -1000,9 +999,9 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
1000
999
|
"""
|
|
1001
1000
|
return pulumi.get(self, "bound_resource_groups")
|
|
1002
1001
|
|
|
1003
|
-
@property
|
|
1002
|
+
@_builtins.property
|
|
1004
1003
|
@pulumi.getter(name="boundScaleSets")
|
|
1005
|
-
def bound_scale_sets(self) -> pulumi.Output[Optional[Sequence[
|
|
1004
|
+
def bound_scale_sets(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1006
1005
|
"""
|
|
1007
1006
|
If set, defines a constraint on the virtual
|
|
1008
1007
|
machines that can perform the login operation that they must match the scale set
|
|
@@ -1010,9 +1009,9 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
1010
1009
|
"""
|
|
1011
1010
|
return pulumi.get(self, "bound_scale_sets")
|
|
1012
1011
|
|
|
1013
|
-
@property
|
|
1012
|
+
@_builtins.property
|
|
1014
1013
|
@pulumi.getter(name="boundServicePrincipalIds")
|
|
1015
|
-
def bound_service_principal_ids(self) -> pulumi.Output[Optional[Sequence[
|
|
1014
|
+
def bound_service_principal_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1016
1015
|
"""
|
|
1017
1016
|
If set, defines a constraint on the
|
|
1018
1017
|
service principals that can perform the login operation that they should be possess
|
|
@@ -1020,9 +1019,9 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
1020
1019
|
"""
|
|
1021
1020
|
return pulumi.get(self, "bound_service_principal_ids")
|
|
1022
1021
|
|
|
1023
|
-
@property
|
|
1022
|
+
@_builtins.property
|
|
1024
1023
|
@pulumi.getter(name="boundSubscriptionIds")
|
|
1025
|
-
def bound_subscription_ids(self) -> pulumi.Output[Optional[Sequence[
|
|
1024
|
+
def bound_subscription_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1026
1025
|
"""
|
|
1027
1026
|
If set, defines a constraint on the subscriptions
|
|
1028
1027
|
that can perform the login operation to ones which matches the value specified by this
|
|
@@ -1030,9 +1029,9 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
1030
1029
|
"""
|
|
1031
1030
|
return pulumi.get(self, "bound_subscription_ids")
|
|
1032
1031
|
|
|
1033
|
-
@property
|
|
1032
|
+
@_builtins.property
|
|
1034
1033
|
@pulumi.getter
|
|
1035
|
-
def namespace(self) -> pulumi.Output[Optional[
|
|
1034
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1036
1035
|
"""
|
|
1037
1036
|
The namespace to provision the resource in.
|
|
1038
1037
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1041,81 +1040,81 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
1041
1040
|
"""
|
|
1042
1041
|
return pulumi.get(self, "namespace")
|
|
1043
1042
|
|
|
1044
|
-
@property
|
|
1043
|
+
@_builtins.property
|
|
1045
1044
|
@pulumi.getter
|
|
1046
|
-
def role(self) -> pulumi.Output[
|
|
1045
|
+
def role(self) -> pulumi.Output[_builtins.str]:
|
|
1047
1046
|
"""
|
|
1048
1047
|
The name of the role.
|
|
1049
1048
|
"""
|
|
1050
1049
|
return pulumi.get(self, "role")
|
|
1051
1050
|
|
|
1052
|
-
@property
|
|
1051
|
+
@_builtins.property
|
|
1053
1052
|
@pulumi.getter(name="tokenBoundCidrs")
|
|
1054
|
-
def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[
|
|
1053
|
+
def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1055
1054
|
"""
|
|
1056
1055
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
1057
1056
|
"""
|
|
1058
1057
|
return pulumi.get(self, "token_bound_cidrs")
|
|
1059
1058
|
|
|
1060
|
-
@property
|
|
1059
|
+
@_builtins.property
|
|
1061
1060
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
|
1062
|
-
def token_explicit_max_ttl(self) -> pulumi.Output[Optional[
|
|
1061
|
+
def token_explicit_max_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1063
1062
|
"""
|
|
1064
1063
|
Generated Token's Explicit Maximum TTL in seconds
|
|
1065
1064
|
"""
|
|
1066
1065
|
return pulumi.get(self, "token_explicit_max_ttl")
|
|
1067
1066
|
|
|
1068
|
-
@property
|
|
1067
|
+
@_builtins.property
|
|
1069
1068
|
@pulumi.getter(name="tokenMaxTtl")
|
|
1070
|
-
def token_max_ttl(self) -> pulumi.Output[Optional[
|
|
1069
|
+
def token_max_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1071
1070
|
"""
|
|
1072
1071
|
The maximum lifetime of the generated token
|
|
1073
1072
|
"""
|
|
1074
1073
|
return pulumi.get(self, "token_max_ttl")
|
|
1075
1074
|
|
|
1076
|
-
@property
|
|
1075
|
+
@_builtins.property
|
|
1077
1076
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
|
1078
|
-
def token_no_default_policy(self) -> pulumi.Output[Optional[
|
|
1077
|
+
def token_no_default_policy(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1079
1078
|
"""
|
|
1080
1079
|
If true, the 'default' policy will not automatically be added to generated tokens
|
|
1081
1080
|
"""
|
|
1082
1081
|
return pulumi.get(self, "token_no_default_policy")
|
|
1083
1082
|
|
|
1084
|
-
@property
|
|
1083
|
+
@_builtins.property
|
|
1085
1084
|
@pulumi.getter(name="tokenNumUses")
|
|
1086
|
-
def token_num_uses(self) -> pulumi.Output[Optional[
|
|
1085
|
+
def token_num_uses(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1087
1086
|
"""
|
|
1088
1087
|
The maximum number of times a token may be used, a value of zero means unlimited
|
|
1089
1088
|
"""
|
|
1090
1089
|
return pulumi.get(self, "token_num_uses")
|
|
1091
1090
|
|
|
1092
|
-
@property
|
|
1091
|
+
@_builtins.property
|
|
1093
1092
|
@pulumi.getter(name="tokenPeriod")
|
|
1094
|
-
def token_period(self) -> pulumi.Output[Optional[
|
|
1093
|
+
def token_period(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1095
1094
|
"""
|
|
1096
1095
|
Generated Token's Period
|
|
1097
1096
|
"""
|
|
1098
1097
|
return pulumi.get(self, "token_period")
|
|
1099
1098
|
|
|
1100
|
-
@property
|
|
1099
|
+
@_builtins.property
|
|
1101
1100
|
@pulumi.getter(name="tokenPolicies")
|
|
1102
|
-
def token_policies(self) -> pulumi.Output[Optional[Sequence[
|
|
1101
|
+
def token_policies(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1103
1102
|
"""
|
|
1104
1103
|
Generated Token's Policies
|
|
1105
1104
|
"""
|
|
1106
1105
|
return pulumi.get(self, "token_policies")
|
|
1107
1106
|
|
|
1108
|
-
@property
|
|
1107
|
+
@_builtins.property
|
|
1109
1108
|
@pulumi.getter(name="tokenTtl")
|
|
1110
|
-
def token_ttl(self) -> pulumi.Output[Optional[
|
|
1109
|
+
def token_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1111
1110
|
"""
|
|
1112
1111
|
The initial ttl of the token to generate in seconds
|
|
1113
1112
|
"""
|
|
1114
1113
|
return pulumi.get(self, "token_ttl")
|
|
1115
1114
|
|
|
1116
|
-
@property
|
|
1115
|
+
@_builtins.property
|
|
1117
1116
|
@pulumi.getter(name="tokenType")
|
|
1118
|
-
def token_type(self) -> pulumi.Output[Optional[
|
|
1117
|
+
def token_type(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1119
1118
|
"""
|
|
1120
1119
|
The type of token to generate, service or batch
|
|
1121
1120
|
"""
|