pulumi-vault 7.1.0__py3-none-any.whl → 7.2.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +19 -1
- pulumi_vault/_inputs.py +873 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +1016 -439
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +1057 -285
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +887 -256
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +426 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +878 -336
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +400 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +1006 -227
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +431 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +732 -693
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +380 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +909 -271
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/oci_auth_backend.py +683 -0
- pulumi_vault/oci_auth_backend_role.py +798 -0
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +234 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +205 -159
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +50 -31
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +902 -231
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +217 -124
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +833 -155
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +377 -350
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0.dist-info/RECORD +270 -0
- pulumi_vault-7.1.0.dist-info/RECORD +0 -268
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/top_level.txt +0 -0
@@ -2,8 +2,7 @@
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
4
4
|
|
5
|
-
import builtins
|
6
|
-
import copy
|
5
|
+
import builtins as _builtins
|
7
6
|
import warnings
|
8
7
|
import sys
|
9
8
|
import pulumi
|
@@ -20,31 +19,31 @@ __all__ = ['OidcClientArgs', 'OidcClient']
|
|
20
19
|
@pulumi.input_type
|
21
20
|
class OidcClientArgs:
|
22
21
|
def __init__(__self__, *,
|
23
|
-
access_token_ttl: Optional[pulumi.Input[
|
24
|
-
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[
|
25
|
-
client_type: Optional[pulumi.Input[
|
26
|
-
id_token_ttl: Optional[pulumi.Input[
|
27
|
-
key: Optional[pulumi.Input[
|
28
|
-
name: Optional[pulumi.Input[
|
29
|
-
namespace: Optional[pulumi.Input[
|
30
|
-
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[
|
22
|
+
access_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
23
|
+
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
24
|
+
client_type: Optional[pulumi.Input[_builtins.str]] = None,
|
25
|
+
id_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
26
|
+
key: Optional[pulumi.Input[_builtins.str]] = None,
|
27
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
28
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
29
|
+
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
31
30
|
"""
|
32
31
|
The set of arguments for constructing a OidcClient resource.
|
33
|
-
:param pulumi.Input[
|
34
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
35
|
-
:param pulumi.Input[
|
32
|
+
:param pulumi.Input[_builtins.int] access_token_ttl: The time-to-live for access tokens obtained by the client.
|
33
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] assignments: A list of assignment resources associated with the client.
|
34
|
+
:param pulumi.Input[_builtins.str] client_type: The client type based on its ability to maintain confidentiality of credentials.
|
36
35
|
The following client types are supported: `confidential`, `public`. Defaults to `confidential`.
|
37
|
-
:param pulumi.Input[
|
36
|
+
:param pulumi.Input[_builtins.int] id_token_ttl: The time-to-live for ID tokens obtained by the client.
|
38
37
|
The value should be less than the `verification_ttl` on the key.
|
39
|
-
:param pulumi.Input[
|
38
|
+
:param pulumi.Input[_builtins.str] key: A reference to a named key resource in Vault.
|
40
39
|
This cannot be modified after creation. If not provided, the `default`
|
41
40
|
key is used.
|
42
|
-
:param pulumi.Input[
|
43
|
-
:param pulumi.Input[
|
41
|
+
:param pulumi.Input[_builtins.str] name: The name of the client.
|
42
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
44
43
|
The value should not contain leading or trailing forward slashes.
|
45
44
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
46
45
|
*Available only for Vault Enterprise*.
|
47
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
46
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] redirect_uris: Redirection URI values used by the client.
|
48
47
|
One of these values must exactly match the `redirect_uri` parameter value
|
49
48
|
used in each authentication request.
|
50
49
|
"""
|
@@ -65,33 +64,33 @@ class OidcClientArgs:
|
|
65
64
|
if redirect_uris is not None:
|
66
65
|
pulumi.set(__self__, "redirect_uris", redirect_uris)
|
67
66
|
|
68
|
-
@property
|
67
|
+
@_builtins.property
|
69
68
|
@pulumi.getter(name="accessTokenTtl")
|
70
|
-
def access_token_ttl(self) -> Optional[pulumi.Input[
|
69
|
+
def access_token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
71
70
|
"""
|
72
71
|
The time-to-live for access tokens obtained by the client.
|
73
72
|
"""
|
74
73
|
return pulumi.get(self, "access_token_ttl")
|
75
74
|
|
76
75
|
@access_token_ttl.setter
|
77
|
-
def access_token_ttl(self, value: Optional[pulumi.Input[
|
76
|
+
def access_token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
78
77
|
pulumi.set(self, "access_token_ttl", value)
|
79
78
|
|
80
|
-
@property
|
79
|
+
@_builtins.property
|
81
80
|
@pulumi.getter
|
82
|
-
def assignments(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
81
|
+
def assignments(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
83
82
|
"""
|
84
83
|
A list of assignment resources associated with the client.
|
85
84
|
"""
|
86
85
|
return pulumi.get(self, "assignments")
|
87
86
|
|
88
87
|
@assignments.setter
|
89
|
-
def assignments(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
88
|
+
def assignments(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
90
89
|
pulumi.set(self, "assignments", value)
|
91
90
|
|
92
|
-
@property
|
91
|
+
@_builtins.property
|
93
92
|
@pulumi.getter(name="clientType")
|
94
|
-
def client_type(self) -> Optional[pulumi.Input[
|
93
|
+
def client_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
95
94
|
"""
|
96
95
|
The client type based on its ability to maintain confidentiality of credentials.
|
97
96
|
The following client types are supported: `confidential`, `public`. Defaults to `confidential`.
|
@@ -99,12 +98,12 @@ class OidcClientArgs:
|
|
99
98
|
return pulumi.get(self, "client_type")
|
100
99
|
|
101
100
|
@client_type.setter
|
102
|
-
def client_type(self, value: Optional[pulumi.Input[
|
101
|
+
def client_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
103
102
|
pulumi.set(self, "client_type", value)
|
104
103
|
|
105
|
-
@property
|
104
|
+
@_builtins.property
|
106
105
|
@pulumi.getter(name="idTokenTtl")
|
107
|
-
def id_token_ttl(self) -> Optional[pulumi.Input[
|
106
|
+
def id_token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
108
107
|
"""
|
109
108
|
The time-to-live for ID tokens obtained by the client.
|
110
109
|
The value should be less than the `verification_ttl` on the key.
|
@@ -112,12 +111,12 @@ class OidcClientArgs:
|
|
112
111
|
return pulumi.get(self, "id_token_ttl")
|
113
112
|
|
114
113
|
@id_token_ttl.setter
|
115
|
-
def id_token_ttl(self, value: Optional[pulumi.Input[
|
114
|
+
def id_token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
116
115
|
pulumi.set(self, "id_token_ttl", value)
|
117
116
|
|
118
|
-
@property
|
117
|
+
@_builtins.property
|
119
118
|
@pulumi.getter
|
120
|
-
def key(self) -> Optional[pulumi.Input[
|
119
|
+
def key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
121
120
|
"""
|
122
121
|
A reference to a named key resource in Vault.
|
123
122
|
This cannot be modified after creation. If not provided, the `default`
|
@@ -126,24 +125,24 @@ class OidcClientArgs:
|
|
126
125
|
return pulumi.get(self, "key")
|
127
126
|
|
128
127
|
@key.setter
|
129
|
-
def key(self, value: Optional[pulumi.Input[
|
128
|
+
def key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
130
129
|
pulumi.set(self, "key", value)
|
131
130
|
|
132
|
-
@property
|
131
|
+
@_builtins.property
|
133
132
|
@pulumi.getter
|
134
|
-
def name(self) -> Optional[pulumi.Input[
|
133
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
135
134
|
"""
|
136
135
|
The name of the client.
|
137
136
|
"""
|
138
137
|
return pulumi.get(self, "name")
|
139
138
|
|
140
139
|
@name.setter
|
141
|
-
def name(self, value: Optional[pulumi.Input[
|
140
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
142
141
|
pulumi.set(self, "name", value)
|
143
142
|
|
144
|
-
@property
|
143
|
+
@_builtins.property
|
145
144
|
@pulumi.getter
|
146
|
-
def namespace(self) -> Optional[pulumi.Input[
|
145
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
147
146
|
"""
|
148
147
|
The namespace to provision the resource in.
|
149
148
|
The value should not contain leading or trailing forward slashes.
|
@@ -153,12 +152,12 @@ class OidcClientArgs:
|
|
153
152
|
return pulumi.get(self, "namespace")
|
154
153
|
|
155
154
|
@namespace.setter
|
156
|
-
def namespace(self, value: Optional[pulumi.Input[
|
155
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
157
156
|
pulumi.set(self, "namespace", value)
|
158
157
|
|
159
|
-
@property
|
158
|
+
@_builtins.property
|
160
159
|
@pulumi.getter(name="redirectUris")
|
161
|
-
def redirect_uris(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
160
|
+
def redirect_uris(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
162
161
|
"""
|
163
162
|
Redirection URI values used by the client.
|
164
163
|
One of these values must exactly match the `redirect_uri` parameter value
|
@@ -167,43 +166,43 @@ class OidcClientArgs:
|
|
167
166
|
return pulumi.get(self, "redirect_uris")
|
168
167
|
|
169
168
|
@redirect_uris.setter
|
170
|
-
def redirect_uris(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
169
|
+
def redirect_uris(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
171
170
|
pulumi.set(self, "redirect_uris", value)
|
172
171
|
|
173
172
|
|
174
173
|
@pulumi.input_type
|
175
174
|
class _OidcClientState:
|
176
175
|
def __init__(__self__, *,
|
177
|
-
access_token_ttl: Optional[pulumi.Input[
|
178
|
-
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[
|
179
|
-
client_id: Optional[pulumi.Input[
|
180
|
-
client_secret: Optional[pulumi.Input[
|
181
|
-
client_type: Optional[pulumi.Input[
|
182
|
-
id_token_ttl: Optional[pulumi.Input[
|
183
|
-
key: Optional[pulumi.Input[
|
184
|
-
name: Optional[pulumi.Input[
|
185
|
-
namespace: Optional[pulumi.Input[
|
186
|
-
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[
|
176
|
+
access_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
177
|
+
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
178
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
179
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
180
|
+
client_type: Optional[pulumi.Input[_builtins.str]] = None,
|
181
|
+
id_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
182
|
+
key: Optional[pulumi.Input[_builtins.str]] = None,
|
183
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
184
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
185
|
+
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
187
186
|
"""
|
188
187
|
Input properties used for looking up and filtering OidcClient resources.
|
189
|
-
:param pulumi.Input[
|
190
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
191
|
-
:param pulumi.Input[
|
192
|
-
:param pulumi.Input[
|
188
|
+
:param pulumi.Input[_builtins.int] access_token_ttl: The time-to-live for access tokens obtained by the client.
|
189
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] assignments: A list of assignment resources associated with the client.
|
190
|
+
:param pulumi.Input[_builtins.str] client_id: The Client ID returned by Vault.
|
191
|
+
:param pulumi.Input[_builtins.str] client_secret: The Client Secret Key returned by Vault.
|
193
192
|
For public OpenID Clients `client_secret` is set to an empty string `""`
|
194
|
-
:param pulumi.Input[
|
193
|
+
:param pulumi.Input[_builtins.str] client_type: The client type based on its ability to maintain confidentiality of credentials.
|
195
194
|
The following client types are supported: `confidential`, `public`. Defaults to `confidential`.
|
196
|
-
:param pulumi.Input[
|
195
|
+
:param pulumi.Input[_builtins.int] id_token_ttl: The time-to-live for ID tokens obtained by the client.
|
197
196
|
The value should be less than the `verification_ttl` on the key.
|
198
|
-
:param pulumi.Input[
|
197
|
+
:param pulumi.Input[_builtins.str] key: A reference to a named key resource in Vault.
|
199
198
|
This cannot be modified after creation. If not provided, the `default`
|
200
199
|
key is used.
|
201
|
-
:param pulumi.Input[
|
202
|
-
:param pulumi.Input[
|
200
|
+
:param pulumi.Input[_builtins.str] name: The name of the client.
|
201
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
203
202
|
The value should not contain leading or trailing forward slashes.
|
204
203
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
205
204
|
*Available only for Vault Enterprise*.
|
206
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
205
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] redirect_uris: Redirection URI values used by the client.
|
207
206
|
One of these values must exactly match the `redirect_uri` parameter value
|
208
207
|
used in each authentication request.
|
209
208
|
"""
|
@@ -228,45 +227,45 @@ class _OidcClientState:
|
|
228
227
|
if redirect_uris is not None:
|
229
228
|
pulumi.set(__self__, "redirect_uris", redirect_uris)
|
230
229
|
|
231
|
-
@property
|
230
|
+
@_builtins.property
|
232
231
|
@pulumi.getter(name="accessTokenTtl")
|
233
|
-
def access_token_ttl(self) -> Optional[pulumi.Input[
|
232
|
+
def access_token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
234
233
|
"""
|
235
234
|
The time-to-live for access tokens obtained by the client.
|
236
235
|
"""
|
237
236
|
return pulumi.get(self, "access_token_ttl")
|
238
237
|
|
239
238
|
@access_token_ttl.setter
|
240
|
-
def access_token_ttl(self, value: Optional[pulumi.Input[
|
239
|
+
def access_token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
241
240
|
pulumi.set(self, "access_token_ttl", value)
|
242
241
|
|
243
|
-
@property
|
242
|
+
@_builtins.property
|
244
243
|
@pulumi.getter
|
245
|
-
def assignments(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
244
|
+
def assignments(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
246
245
|
"""
|
247
246
|
A list of assignment resources associated with the client.
|
248
247
|
"""
|
249
248
|
return pulumi.get(self, "assignments")
|
250
249
|
|
251
250
|
@assignments.setter
|
252
|
-
def assignments(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
251
|
+
def assignments(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
253
252
|
pulumi.set(self, "assignments", value)
|
254
253
|
|
255
|
-
@property
|
254
|
+
@_builtins.property
|
256
255
|
@pulumi.getter(name="clientId")
|
257
|
-
def client_id(self) -> Optional[pulumi.Input[
|
256
|
+
def client_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
258
257
|
"""
|
259
258
|
The Client ID returned by Vault.
|
260
259
|
"""
|
261
260
|
return pulumi.get(self, "client_id")
|
262
261
|
|
263
262
|
@client_id.setter
|
264
|
-
def client_id(self, value: Optional[pulumi.Input[
|
263
|
+
def client_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
265
264
|
pulumi.set(self, "client_id", value)
|
266
265
|
|
267
|
-
@property
|
266
|
+
@_builtins.property
|
268
267
|
@pulumi.getter(name="clientSecret")
|
269
|
-
def client_secret(self) -> Optional[pulumi.Input[
|
268
|
+
def client_secret(self) -> Optional[pulumi.Input[_builtins.str]]:
|
270
269
|
"""
|
271
270
|
The Client Secret Key returned by Vault.
|
272
271
|
For public OpenID Clients `client_secret` is set to an empty string `""`
|
@@ -274,12 +273,12 @@ class _OidcClientState:
|
|
274
273
|
return pulumi.get(self, "client_secret")
|
275
274
|
|
276
275
|
@client_secret.setter
|
277
|
-
def client_secret(self, value: Optional[pulumi.Input[
|
276
|
+
def client_secret(self, value: Optional[pulumi.Input[_builtins.str]]):
|
278
277
|
pulumi.set(self, "client_secret", value)
|
279
278
|
|
280
|
-
@property
|
279
|
+
@_builtins.property
|
281
280
|
@pulumi.getter(name="clientType")
|
282
|
-
def client_type(self) -> Optional[pulumi.Input[
|
281
|
+
def client_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
283
282
|
"""
|
284
283
|
The client type based on its ability to maintain confidentiality of credentials.
|
285
284
|
The following client types are supported: `confidential`, `public`. Defaults to `confidential`.
|
@@ -287,12 +286,12 @@ class _OidcClientState:
|
|
287
286
|
return pulumi.get(self, "client_type")
|
288
287
|
|
289
288
|
@client_type.setter
|
290
|
-
def client_type(self, value: Optional[pulumi.Input[
|
289
|
+
def client_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
291
290
|
pulumi.set(self, "client_type", value)
|
292
291
|
|
293
|
-
@property
|
292
|
+
@_builtins.property
|
294
293
|
@pulumi.getter(name="idTokenTtl")
|
295
|
-
def id_token_ttl(self) -> Optional[pulumi.Input[
|
294
|
+
def id_token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
296
295
|
"""
|
297
296
|
The time-to-live for ID tokens obtained by the client.
|
298
297
|
The value should be less than the `verification_ttl` on the key.
|
@@ -300,12 +299,12 @@ class _OidcClientState:
|
|
300
299
|
return pulumi.get(self, "id_token_ttl")
|
301
300
|
|
302
301
|
@id_token_ttl.setter
|
303
|
-
def id_token_ttl(self, value: Optional[pulumi.Input[
|
302
|
+
def id_token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
304
303
|
pulumi.set(self, "id_token_ttl", value)
|
305
304
|
|
306
|
-
@property
|
305
|
+
@_builtins.property
|
307
306
|
@pulumi.getter
|
308
|
-
def key(self) -> Optional[pulumi.Input[
|
307
|
+
def key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
309
308
|
"""
|
310
309
|
A reference to a named key resource in Vault.
|
311
310
|
This cannot be modified after creation. If not provided, the `default`
|
@@ -314,24 +313,24 @@ class _OidcClientState:
|
|
314
313
|
return pulumi.get(self, "key")
|
315
314
|
|
316
315
|
@key.setter
|
317
|
-
def key(self, value: Optional[pulumi.Input[
|
316
|
+
def key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
318
317
|
pulumi.set(self, "key", value)
|
319
318
|
|
320
|
-
@property
|
319
|
+
@_builtins.property
|
321
320
|
@pulumi.getter
|
322
|
-
def name(self) -> Optional[pulumi.Input[
|
321
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
323
322
|
"""
|
324
323
|
The name of the client.
|
325
324
|
"""
|
326
325
|
return pulumi.get(self, "name")
|
327
326
|
|
328
327
|
@name.setter
|
329
|
-
def name(self, value: Optional[pulumi.Input[
|
328
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
330
329
|
pulumi.set(self, "name", value)
|
331
330
|
|
332
|
-
@property
|
331
|
+
@_builtins.property
|
333
332
|
@pulumi.getter
|
334
|
-
def namespace(self) -> Optional[pulumi.Input[
|
333
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
335
334
|
"""
|
336
335
|
The namespace to provision the resource in.
|
337
336
|
The value should not contain leading or trailing forward slashes.
|
@@ -341,12 +340,12 @@ class _OidcClientState:
|
|
341
340
|
return pulumi.get(self, "namespace")
|
342
341
|
|
343
342
|
@namespace.setter
|
344
|
-
def namespace(self, value: Optional[pulumi.Input[
|
343
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
345
344
|
pulumi.set(self, "namespace", value)
|
346
345
|
|
347
|
-
@property
|
346
|
+
@_builtins.property
|
348
347
|
@pulumi.getter(name="redirectUris")
|
349
|
-
def redirect_uris(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
348
|
+
def redirect_uris(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
350
349
|
"""
|
351
350
|
Redirection URI values used by the client.
|
352
351
|
One of these values must exactly match the `redirect_uri` parameter value
|
@@ -355,7 +354,7 @@ class _OidcClientState:
|
|
355
354
|
return pulumi.get(self, "redirect_uris")
|
356
355
|
|
357
356
|
@redirect_uris.setter
|
358
|
-
def redirect_uris(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
357
|
+
def redirect_uris(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
359
358
|
pulumi.set(self, "redirect_uris", value)
|
360
359
|
|
361
360
|
|
@@ -365,14 +364,14 @@ class OidcClient(pulumi.CustomResource):
|
|
365
364
|
def __init__(__self__,
|
366
365
|
resource_name: str,
|
367
366
|
opts: Optional[pulumi.ResourceOptions] = None,
|
368
|
-
access_token_ttl: Optional[pulumi.Input[
|
369
|
-
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[
|
370
|
-
client_type: Optional[pulumi.Input[
|
371
|
-
id_token_ttl: Optional[pulumi.Input[
|
372
|
-
key: Optional[pulumi.Input[
|
373
|
-
name: Optional[pulumi.Input[
|
374
|
-
namespace: Optional[pulumi.Input[
|
375
|
-
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[
|
367
|
+
access_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
368
|
+
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
369
|
+
client_type: Optional[pulumi.Input[_builtins.str]] = None,
|
370
|
+
id_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
371
|
+
key: Optional[pulumi.Input[_builtins.str]] = None,
|
372
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
373
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
374
|
+
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
376
375
|
__props__=None):
|
377
376
|
"""
|
378
377
|
Manages OIDC Clients in a Vault server. See the [Vault documentation](https://www.vaultproject.io/api-docs/secret/identity/oidc-provider#create-or-update-an-assignment)
|
@@ -410,21 +409,21 @@ class OidcClient(pulumi.CustomResource):
|
|
410
409
|
|
411
410
|
:param str resource_name: The name of the resource.
|
412
411
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
413
|
-
:param pulumi.Input[
|
414
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
415
|
-
:param pulumi.Input[
|
412
|
+
:param pulumi.Input[_builtins.int] access_token_ttl: The time-to-live for access tokens obtained by the client.
|
413
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] assignments: A list of assignment resources associated with the client.
|
414
|
+
:param pulumi.Input[_builtins.str] client_type: The client type based on its ability to maintain confidentiality of credentials.
|
416
415
|
The following client types are supported: `confidential`, `public`. Defaults to `confidential`.
|
417
|
-
:param pulumi.Input[
|
416
|
+
:param pulumi.Input[_builtins.int] id_token_ttl: The time-to-live for ID tokens obtained by the client.
|
418
417
|
The value should be less than the `verification_ttl` on the key.
|
419
|
-
:param pulumi.Input[
|
418
|
+
:param pulumi.Input[_builtins.str] key: A reference to a named key resource in Vault.
|
420
419
|
This cannot be modified after creation. If not provided, the `default`
|
421
420
|
key is used.
|
422
|
-
:param pulumi.Input[
|
423
|
-
:param pulumi.Input[
|
421
|
+
:param pulumi.Input[_builtins.str] name: The name of the client.
|
422
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
424
423
|
The value should not contain leading or trailing forward slashes.
|
425
424
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
426
425
|
*Available only for Vault Enterprise*.
|
427
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
426
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] redirect_uris: Redirection URI values used by the client.
|
428
427
|
One of these values must exactly match the `redirect_uri` parameter value
|
429
428
|
used in each authentication request.
|
430
429
|
"""
|
@@ -483,14 +482,14 @@ class OidcClient(pulumi.CustomResource):
|
|
483
482
|
def _internal_init(__self__,
|
484
483
|
resource_name: str,
|
485
484
|
opts: Optional[pulumi.ResourceOptions] = None,
|
486
|
-
access_token_ttl: Optional[pulumi.Input[
|
487
|
-
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[
|
488
|
-
client_type: Optional[pulumi.Input[
|
489
|
-
id_token_ttl: Optional[pulumi.Input[
|
490
|
-
key: Optional[pulumi.Input[
|
491
|
-
name: Optional[pulumi.Input[
|
492
|
-
namespace: Optional[pulumi.Input[
|
493
|
-
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[
|
485
|
+
access_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
486
|
+
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
487
|
+
client_type: Optional[pulumi.Input[_builtins.str]] = None,
|
488
|
+
id_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
489
|
+
key: Optional[pulumi.Input[_builtins.str]] = None,
|
490
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
491
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
492
|
+
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
494
493
|
__props__=None):
|
495
494
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
496
495
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -522,16 +521,16 @@ class OidcClient(pulumi.CustomResource):
|
|
522
521
|
def get(resource_name: str,
|
523
522
|
id: pulumi.Input[str],
|
524
523
|
opts: Optional[pulumi.ResourceOptions] = None,
|
525
|
-
access_token_ttl: Optional[pulumi.Input[
|
526
|
-
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[
|
527
|
-
client_id: Optional[pulumi.Input[
|
528
|
-
client_secret: Optional[pulumi.Input[
|
529
|
-
client_type: Optional[pulumi.Input[
|
530
|
-
id_token_ttl: Optional[pulumi.Input[
|
531
|
-
key: Optional[pulumi.Input[
|
532
|
-
name: Optional[pulumi.Input[
|
533
|
-
namespace: Optional[pulumi.Input[
|
534
|
-
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[
|
524
|
+
access_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
525
|
+
assignments: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
526
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
527
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
528
|
+
client_type: Optional[pulumi.Input[_builtins.str]] = None,
|
529
|
+
id_token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
530
|
+
key: Optional[pulumi.Input[_builtins.str]] = None,
|
531
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
532
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
533
|
+
redirect_uris: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None) -> 'OidcClient':
|
535
534
|
"""
|
536
535
|
Get an existing OidcClient resource's state with the given name, id, and optional extra
|
537
536
|
properties used to qualify the lookup.
|
@@ -539,24 +538,24 @@ class OidcClient(pulumi.CustomResource):
|
|
539
538
|
:param str resource_name: The unique name of the resulting resource.
|
540
539
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
541
540
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
542
|
-
:param pulumi.Input[
|
543
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
544
|
-
:param pulumi.Input[
|
545
|
-
:param pulumi.Input[
|
541
|
+
:param pulumi.Input[_builtins.int] access_token_ttl: The time-to-live for access tokens obtained by the client.
|
542
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] assignments: A list of assignment resources associated with the client.
|
543
|
+
:param pulumi.Input[_builtins.str] client_id: The Client ID returned by Vault.
|
544
|
+
:param pulumi.Input[_builtins.str] client_secret: The Client Secret Key returned by Vault.
|
546
545
|
For public OpenID Clients `client_secret` is set to an empty string `""`
|
547
|
-
:param pulumi.Input[
|
546
|
+
:param pulumi.Input[_builtins.str] client_type: The client type based on its ability to maintain confidentiality of credentials.
|
548
547
|
The following client types are supported: `confidential`, `public`. Defaults to `confidential`.
|
549
|
-
:param pulumi.Input[
|
548
|
+
:param pulumi.Input[_builtins.int] id_token_ttl: The time-to-live for ID tokens obtained by the client.
|
550
549
|
The value should be less than the `verification_ttl` on the key.
|
551
|
-
:param pulumi.Input[
|
550
|
+
:param pulumi.Input[_builtins.str] key: A reference to a named key resource in Vault.
|
552
551
|
This cannot be modified after creation. If not provided, the `default`
|
553
552
|
key is used.
|
554
|
-
:param pulumi.Input[
|
555
|
-
:param pulumi.Input[
|
553
|
+
:param pulumi.Input[_builtins.str] name: The name of the client.
|
554
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
556
555
|
The value should not contain leading or trailing forward slashes.
|
557
556
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
558
557
|
*Available only for Vault Enterprise*.
|
559
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
558
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] redirect_uris: Redirection URI values used by the client.
|
560
559
|
One of these values must exactly match the `redirect_uri` parameter value
|
561
560
|
used in each authentication request.
|
562
561
|
"""
|
@@ -576,60 +575,60 @@ class OidcClient(pulumi.CustomResource):
|
|
576
575
|
__props__.__dict__["redirect_uris"] = redirect_uris
|
577
576
|
return OidcClient(resource_name, opts=opts, __props__=__props__)
|
578
577
|
|
579
|
-
@property
|
578
|
+
@_builtins.property
|
580
579
|
@pulumi.getter(name="accessTokenTtl")
|
581
|
-
def access_token_ttl(self) -> pulumi.Output[
|
580
|
+
def access_token_ttl(self) -> pulumi.Output[_builtins.int]:
|
582
581
|
"""
|
583
582
|
The time-to-live for access tokens obtained by the client.
|
584
583
|
"""
|
585
584
|
return pulumi.get(self, "access_token_ttl")
|
586
585
|
|
587
|
-
@property
|
586
|
+
@_builtins.property
|
588
587
|
@pulumi.getter
|
589
|
-
def assignments(self) -> pulumi.Output[Optional[Sequence[
|
588
|
+
def assignments(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
590
589
|
"""
|
591
590
|
A list of assignment resources associated with the client.
|
592
591
|
"""
|
593
592
|
return pulumi.get(self, "assignments")
|
594
593
|
|
595
|
-
@property
|
594
|
+
@_builtins.property
|
596
595
|
@pulumi.getter(name="clientId")
|
597
|
-
def client_id(self) -> pulumi.Output[
|
596
|
+
def client_id(self) -> pulumi.Output[_builtins.str]:
|
598
597
|
"""
|
599
598
|
The Client ID returned by Vault.
|
600
599
|
"""
|
601
600
|
return pulumi.get(self, "client_id")
|
602
601
|
|
603
|
-
@property
|
602
|
+
@_builtins.property
|
604
603
|
@pulumi.getter(name="clientSecret")
|
605
|
-
def client_secret(self) -> pulumi.Output[
|
604
|
+
def client_secret(self) -> pulumi.Output[_builtins.str]:
|
606
605
|
"""
|
607
606
|
The Client Secret Key returned by Vault.
|
608
607
|
For public OpenID Clients `client_secret` is set to an empty string `""`
|
609
608
|
"""
|
610
609
|
return pulumi.get(self, "client_secret")
|
611
610
|
|
612
|
-
@property
|
611
|
+
@_builtins.property
|
613
612
|
@pulumi.getter(name="clientType")
|
614
|
-
def client_type(self) -> pulumi.Output[
|
613
|
+
def client_type(self) -> pulumi.Output[_builtins.str]:
|
615
614
|
"""
|
616
615
|
The client type based on its ability to maintain confidentiality of credentials.
|
617
616
|
The following client types are supported: `confidential`, `public`. Defaults to `confidential`.
|
618
617
|
"""
|
619
618
|
return pulumi.get(self, "client_type")
|
620
619
|
|
621
|
-
@property
|
620
|
+
@_builtins.property
|
622
621
|
@pulumi.getter(name="idTokenTtl")
|
623
|
-
def id_token_ttl(self) -> pulumi.Output[
|
622
|
+
def id_token_ttl(self) -> pulumi.Output[_builtins.int]:
|
624
623
|
"""
|
625
624
|
The time-to-live for ID tokens obtained by the client.
|
626
625
|
The value should be less than the `verification_ttl` on the key.
|
627
626
|
"""
|
628
627
|
return pulumi.get(self, "id_token_ttl")
|
629
628
|
|
630
|
-
@property
|
629
|
+
@_builtins.property
|
631
630
|
@pulumi.getter
|
632
|
-
def key(self) -> pulumi.Output[
|
631
|
+
def key(self) -> pulumi.Output[_builtins.str]:
|
633
632
|
"""
|
634
633
|
A reference to a named key resource in Vault.
|
635
634
|
This cannot be modified after creation. If not provided, the `default`
|
@@ -637,17 +636,17 @@ class OidcClient(pulumi.CustomResource):
|
|
637
636
|
"""
|
638
637
|
return pulumi.get(self, "key")
|
639
638
|
|
640
|
-
@property
|
639
|
+
@_builtins.property
|
641
640
|
@pulumi.getter
|
642
|
-
def name(self) -> pulumi.Output[
|
641
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
643
642
|
"""
|
644
643
|
The name of the client.
|
645
644
|
"""
|
646
645
|
return pulumi.get(self, "name")
|
647
646
|
|
648
|
-
@property
|
647
|
+
@_builtins.property
|
649
648
|
@pulumi.getter
|
650
|
-
def namespace(self) -> pulumi.Output[Optional[
|
649
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
651
650
|
"""
|
652
651
|
The namespace to provision the resource in.
|
653
652
|
The value should not contain leading or trailing forward slashes.
|
@@ -656,9 +655,9 @@ class OidcClient(pulumi.CustomResource):
|
|
656
655
|
"""
|
657
656
|
return pulumi.get(self, "namespace")
|
658
657
|
|
659
|
-
@property
|
658
|
+
@_builtins.property
|
660
659
|
@pulumi.getter(name="redirectUris")
|
661
|
-
def redirect_uris(self) -> pulumi.Output[Optional[Sequence[
|
660
|
+
def redirect_uris(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
662
661
|
"""
|
663
662
|
Redirection URI values used by the client.
|
664
663
|
One of these values must exactly match the `redirect_uri` parameter value
|