pulumi-vault 7.1.0__py3-none-any.whl → 7.2.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +19 -1
- pulumi_vault/_inputs.py +873 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +1016 -439
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +1057 -285
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +887 -256
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +426 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +878 -336
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +400 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +1006 -227
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +431 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +732 -693
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +380 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +909 -271
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/oci_auth_backend.py +683 -0
- pulumi_vault/oci_auth_backend_role.py +798 -0
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +234 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +205 -159
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +50 -31
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +902 -231
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +217 -124
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +833 -155
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +377 -350
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0.dist-info/RECORD +270 -0
- pulumi_vault-7.1.0.dist-info/RECORD +0 -268
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/top_level.txt +0 -0
pulumi_vault/kmip/secret_role.py
CHANGED
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,54 +19,54 @@ __all__ = ['SecretRoleArgs', 'SecretRole']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class SecretRoleArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
path: pulumi.Input[
|
|
24
|
-
role: pulumi.Input[
|
|
25
|
-
scope: pulumi.Input[
|
|
26
|
-
namespace: Optional[pulumi.Input[
|
|
27
|
-
operation_activate: Optional[pulumi.Input[
|
|
28
|
-
operation_add_attribute: Optional[pulumi.Input[
|
|
29
|
-
operation_all: Optional[pulumi.Input[
|
|
30
|
-
operation_create: Optional[pulumi.Input[
|
|
31
|
-
operation_destroy: Optional[pulumi.Input[
|
|
32
|
-
operation_discover_versions: Optional[pulumi.Input[
|
|
33
|
-
operation_get: Optional[pulumi.Input[
|
|
34
|
-
operation_get_attribute_list: Optional[pulumi.Input[
|
|
35
|
-
operation_get_attributes: Optional[pulumi.Input[
|
|
36
|
-
operation_locate: Optional[pulumi.Input[
|
|
37
|
-
operation_none: Optional[pulumi.Input[
|
|
38
|
-
operation_register: Optional[pulumi.Input[
|
|
39
|
-
operation_rekey: Optional[pulumi.Input[
|
|
40
|
-
operation_revoke: Optional[pulumi.Input[
|
|
41
|
-
tls_client_key_bits: Optional[pulumi.Input[
|
|
42
|
-
tls_client_key_type: Optional[pulumi.Input[
|
|
43
|
-
tls_client_ttl: Optional[pulumi.Input[
|
|
22
|
+
path: pulumi.Input[_builtins.str],
|
|
23
|
+
role: pulumi.Input[_builtins.str],
|
|
24
|
+
scope: pulumi.Input[_builtins.str],
|
|
25
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
|
+
operation_activate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
27
|
+
operation_add_attribute: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
28
|
+
operation_all: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
29
|
+
operation_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
30
|
+
operation_destroy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
31
|
+
operation_discover_versions: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
32
|
+
operation_get: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
33
|
+
operation_get_attribute_list: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
34
|
+
operation_get_attributes: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
35
|
+
operation_locate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
36
|
+
operation_none: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
37
|
+
operation_register: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
38
|
+
operation_rekey: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
39
|
+
operation_revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
40
|
+
tls_client_key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
41
|
+
tls_client_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
42
|
+
tls_client_ttl: Optional[pulumi.Input[_builtins.int]] = None):
|
|
44
43
|
"""
|
|
45
44
|
The set of arguments for constructing a SecretRole resource.
|
|
46
|
-
:param pulumi.Input[
|
|
45
|
+
:param pulumi.Input[_builtins.str] path: The unique path this backend should be mounted at. Must
|
|
47
46
|
not begin or end with a `/`. Defaults to `kmip`.
|
|
48
|
-
:param pulumi.Input[
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[
|
|
47
|
+
:param pulumi.Input[_builtins.str] role: Name of the role.
|
|
48
|
+
:param pulumi.Input[_builtins.str] scope: Name of the scope.
|
|
49
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
51
50
|
The value should not contain leading or trailing forward slashes.
|
|
52
51
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
53
52
|
*Available only for Vault Enterprise*.
|
|
54
|
-
:param pulumi.Input[
|
|
55
|
-
:param pulumi.Input[
|
|
56
|
-
:param pulumi.Input[
|
|
57
|
-
:param pulumi.Input[
|
|
58
|
-
:param pulumi.Input[
|
|
59
|
-
:param pulumi.Input[
|
|
60
|
-
:param pulumi.Input[
|
|
61
|
-
:param pulumi.Input[
|
|
62
|
-
:param pulumi.Input[
|
|
63
|
-
:param pulumi.Input[
|
|
64
|
-
:param pulumi.Input[
|
|
65
|
-
:param pulumi.Input[
|
|
66
|
-
:param pulumi.Input[
|
|
67
|
-
:param pulumi.Input[
|
|
68
|
-
:param pulumi.Input[
|
|
69
|
-
:param pulumi.Input[
|
|
70
|
-
:param pulumi.Input[
|
|
53
|
+
:param pulumi.Input[_builtins.bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
|
54
|
+
:param pulumi.Input[_builtins.bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
|
55
|
+
:param pulumi.Input[_builtins.bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
|
56
|
+
:param pulumi.Input[_builtins.bool] operation_create: Grant permission to use the KMIP Create operation.
|
|
57
|
+
:param pulumi.Input[_builtins.bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
|
58
|
+
:param pulumi.Input[_builtins.bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
|
59
|
+
:param pulumi.Input[_builtins.bool] operation_get: Grant permission to use the KMIP Get operation.
|
|
60
|
+
:param pulumi.Input[_builtins.bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
|
61
|
+
:param pulumi.Input[_builtins.bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
|
62
|
+
:param pulumi.Input[_builtins.bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
|
63
|
+
:param pulumi.Input[_builtins.bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
|
64
|
+
:param pulumi.Input[_builtins.bool] operation_register: Grant permission to use the KMIP Register operation.
|
|
65
|
+
:param pulumi.Input[_builtins.bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
|
66
|
+
:param pulumi.Input[_builtins.bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
|
67
|
+
:param pulumi.Input[_builtins.int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
|
68
|
+
:param pulumi.Input[_builtins.str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
|
69
|
+
:param pulumi.Input[_builtins.int] tls_client_ttl: Client certificate TTL in seconds.
|
|
71
70
|
"""
|
|
72
71
|
pulumi.set(__self__, "path", path)
|
|
73
72
|
pulumi.set(__self__, "role", role)
|
|
@@ -109,9 +108,9 @@ class SecretRoleArgs:
|
|
|
109
108
|
if tls_client_ttl is not None:
|
|
110
109
|
pulumi.set(__self__, "tls_client_ttl", tls_client_ttl)
|
|
111
110
|
|
|
112
|
-
@property
|
|
111
|
+
@_builtins.property
|
|
113
112
|
@pulumi.getter
|
|
114
|
-
def path(self) -> pulumi.Input[
|
|
113
|
+
def path(self) -> pulumi.Input[_builtins.str]:
|
|
115
114
|
"""
|
|
116
115
|
The unique path this backend should be mounted at. Must
|
|
117
116
|
not begin or end with a `/`. Defaults to `kmip`.
|
|
@@ -119,36 +118,36 @@ class SecretRoleArgs:
|
|
|
119
118
|
return pulumi.get(self, "path")
|
|
120
119
|
|
|
121
120
|
@path.setter
|
|
122
|
-
def path(self, value: pulumi.Input[
|
|
121
|
+
def path(self, value: pulumi.Input[_builtins.str]):
|
|
123
122
|
pulumi.set(self, "path", value)
|
|
124
123
|
|
|
125
|
-
@property
|
|
124
|
+
@_builtins.property
|
|
126
125
|
@pulumi.getter
|
|
127
|
-
def role(self) -> pulumi.Input[
|
|
126
|
+
def role(self) -> pulumi.Input[_builtins.str]:
|
|
128
127
|
"""
|
|
129
128
|
Name of the role.
|
|
130
129
|
"""
|
|
131
130
|
return pulumi.get(self, "role")
|
|
132
131
|
|
|
133
132
|
@role.setter
|
|
134
|
-
def role(self, value: pulumi.Input[
|
|
133
|
+
def role(self, value: pulumi.Input[_builtins.str]):
|
|
135
134
|
pulumi.set(self, "role", value)
|
|
136
135
|
|
|
137
|
-
@property
|
|
136
|
+
@_builtins.property
|
|
138
137
|
@pulumi.getter
|
|
139
|
-
def scope(self) -> pulumi.Input[
|
|
138
|
+
def scope(self) -> pulumi.Input[_builtins.str]:
|
|
140
139
|
"""
|
|
141
140
|
Name of the scope.
|
|
142
141
|
"""
|
|
143
142
|
return pulumi.get(self, "scope")
|
|
144
143
|
|
|
145
144
|
@scope.setter
|
|
146
|
-
def scope(self, value: pulumi.Input[
|
|
145
|
+
def scope(self, value: pulumi.Input[_builtins.str]):
|
|
147
146
|
pulumi.set(self, "scope", value)
|
|
148
147
|
|
|
149
|
-
@property
|
|
148
|
+
@_builtins.property
|
|
150
149
|
@pulumi.getter
|
|
151
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
150
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
152
151
|
"""
|
|
153
152
|
The namespace to provision the resource in.
|
|
154
153
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -158,265 +157,265 @@ class SecretRoleArgs:
|
|
|
158
157
|
return pulumi.get(self, "namespace")
|
|
159
158
|
|
|
160
159
|
@namespace.setter
|
|
161
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
160
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
162
161
|
pulumi.set(self, "namespace", value)
|
|
163
162
|
|
|
164
|
-
@property
|
|
163
|
+
@_builtins.property
|
|
165
164
|
@pulumi.getter(name="operationActivate")
|
|
166
|
-
def operation_activate(self) -> Optional[pulumi.Input[
|
|
165
|
+
def operation_activate(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
167
166
|
"""
|
|
168
167
|
Grant permission to use the KMIP Activate operation.
|
|
169
168
|
"""
|
|
170
169
|
return pulumi.get(self, "operation_activate")
|
|
171
170
|
|
|
172
171
|
@operation_activate.setter
|
|
173
|
-
def operation_activate(self, value: Optional[pulumi.Input[
|
|
172
|
+
def operation_activate(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
174
173
|
pulumi.set(self, "operation_activate", value)
|
|
175
174
|
|
|
176
|
-
@property
|
|
175
|
+
@_builtins.property
|
|
177
176
|
@pulumi.getter(name="operationAddAttribute")
|
|
178
|
-
def operation_add_attribute(self) -> Optional[pulumi.Input[
|
|
177
|
+
def operation_add_attribute(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
179
178
|
"""
|
|
180
179
|
Grant permission to use the KMIP Add Attribute operation.
|
|
181
180
|
"""
|
|
182
181
|
return pulumi.get(self, "operation_add_attribute")
|
|
183
182
|
|
|
184
183
|
@operation_add_attribute.setter
|
|
185
|
-
def operation_add_attribute(self, value: Optional[pulumi.Input[
|
|
184
|
+
def operation_add_attribute(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
186
185
|
pulumi.set(self, "operation_add_attribute", value)
|
|
187
186
|
|
|
188
|
-
@property
|
|
187
|
+
@_builtins.property
|
|
189
188
|
@pulumi.getter(name="operationAll")
|
|
190
|
-
def operation_all(self) -> Optional[pulumi.Input[
|
|
189
|
+
def operation_all(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
191
190
|
"""
|
|
192
191
|
Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
|
193
192
|
"""
|
|
194
193
|
return pulumi.get(self, "operation_all")
|
|
195
194
|
|
|
196
195
|
@operation_all.setter
|
|
197
|
-
def operation_all(self, value: Optional[pulumi.Input[
|
|
196
|
+
def operation_all(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
198
197
|
pulumi.set(self, "operation_all", value)
|
|
199
198
|
|
|
200
|
-
@property
|
|
199
|
+
@_builtins.property
|
|
201
200
|
@pulumi.getter(name="operationCreate")
|
|
202
|
-
def operation_create(self) -> Optional[pulumi.Input[
|
|
201
|
+
def operation_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
203
202
|
"""
|
|
204
203
|
Grant permission to use the KMIP Create operation.
|
|
205
204
|
"""
|
|
206
205
|
return pulumi.get(self, "operation_create")
|
|
207
206
|
|
|
208
207
|
@operation_create.setter
|
|
209
|
-
def operation_create(self, value: Optional[pulumi.Input[
|
|
208
|
+
def operation_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
210
209
|
pulumi.set(self, "operation_create", value)
|
|
211
210
|
|
|
212
|
-
@property
|
|
211
|
+
@_builtins.property
|
|
213
212
|
@pulumi.getter(name="operationDestroy")
|
|
214
|
-
def operation_destroy(self) -> Optional[pulumi.Input[
|
|
213
|
+
def operation_destroy(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
215
214
|
"""
|
|
216
215
|
Grant permission to use the KMIP Destroy operation.
|
|
217
216
|
"""
|
|
218
217
|
return pulumi.get(self, "operation_destroy")
|
|
219
218
|
|
|
220
219
|
@operation_destroy.setter
|
|
221
|
-
def operation_destroy(self, value: Optional[pulumi.Input[
|
|
220
|
+
def operation_destroy(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
222
221
|
pulumi.set(self, "operation_destroy", value)
|
|
223
222
|
|
|
224
|
-
@property
|
|
223
|
+
@_builtins.property
|
|
225
224
|
@pulumi.getter(name="operationDiscoverVersions")
|
|
226
|
-
def operation_discover_versions(self) -> Optional[pulumi.Input[
|
|
225
|
+
def operation_discover_versions(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
227
226
|
"""
|
|
228
227
|
Grant permission to use the KMIP Discover Version operation.
|
|
229
228
|
"""
|
|
230
229
|
return pulumi.get(self, "operation_discover_versions")
|
|
231
230
|
|
|
232
231
|
@operation_discover_versions.setter
|
|
233
|
-
def operation_discover_versions(self, value: Optional[pulumi.Input[
|
|
232
|
+
def operation_discover_versions(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
234
233
|
pulumi.set(self, "operation_discover_versions", value)
|
|
235
234
|
|
|
236
|
-
@property
|
|
235
|
+
@_builtins.property
|
|
237
236
|
@pulumi.getter(name="operationGet")
|
|
238
|
-
def operation_get(self) -> Optional[pulumi.Input[
|
|
237
|
+
def operation_get(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
239
238
|
"""
|
|
240
239
|
Grant permission to use the KMIP Get operation.
|
|
241
240
|
"""
|
|
242
241
|
return pulumi.get(self, "operation_get")
|
|
243
242
|
|
|
244
243
|
@operation_get.setter
|
|
245
|
-
def operation_get(self, value: Optional[pulumi.Input[
|
|
244
|
+
def operation_get(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
246
245
|
pulumi.set(self, "operation_get", value)
|
|
247
246
|
|
|
248
|
-
@property
|
|
247
|
+
@_builtins.property
|
|
249
248
|
@pulumi.getter(name="operationGetAttributeList")
|
|
250
|
-
def operation_get_attribute_list(self) -> Optional[pulumi.Input[
|
|
249
|
+
def operation_get_attribute_list(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
251
250
|
"""
|
|
252
251
|
Grant permission to use the KMIP Get Atrribute List operation.
|
|
253
252
|
"""
|
|
254
253
|
return pulumi.get(self, "operation_get_attribute_list")
|
|
255
254
|
|
|
256
255
|
@operation_get_attribute_list.setter
|
|
257
|
-
def operation_get_attribute_list(self, value: Optional[pulumi.Input[
|
|
256
|
+
def operation_get_attribute_list(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
258
257
|
pulumi.set(self, "operation_get_attribute_list", value)
|
|
259
258
|
|
|
260
|
-
@property
|
|
259
|
+
@_builtins.property
|
|
261
260
|
@pulumi.getter(name="operationGetAttributes")
|
|
262
|
-
def operation_get_attributes(self) -> Optional[pulumi.Input[
|
|
261
|
+
def operation_get_attributes(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
263
262
|
"""
|
|
264
263
|
Grant permission to use the KMIP Get Atrributes operation.
|
|
265
264
|
"""
|
|
266
265
|
return pulumi.get(self, "operation_get_attributes")
|
|
267
266
|
|
|
268
267
|
@operation_get_attributes.setter
|
|
269
|
-
def operation_get_attributes(self, value: Optional[pulumi.Input[
|
|
268
|
+
def operation_get_attributes(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
270
269
|
pulumi.set(self, "operation_get_attributes", value)
|
|
271
270
|
|
|
272
|
-
@property
|
|
271
|
+
@_builtins.property
|
|
273
272
|
@pulumi.getter(name="operationLocate")
|
|
274
|
-
def operation_locate(self) -> Optional[pulumi.Input[
|
|
273
|
+
def operation_locate(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
275
274
|
"""
|
|
276
275
|
Grant permission to use the KMIP Get Locate operation.
|
|
277
276
|
"""
|
|
278
277
|
return pulumi.get(self, "operation_locate")
|
|
279
278
|
|
|
280
279
|
@operation_locate.setter
|
|
281
|
-
def operation_locate(self, value: Optional[pulumi.Input[
|
|
280
|
+
def operation_locate(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
282
281
|
pulumi.set(self, "operation_locate", value)
|
|
283
282
|
|
|
284
|
-
@property
|
|
283
|
+
@_builtins.property
|
|
285
284
|
@pulumi.getter(name="operationNone")
|
|
286
|
-
def operation_none(self) -> Optional[pulumi.Input[
|
|
285
|
+
def operation_none(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
287
286
|
"""
|
|
288
287
|
Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
|
289
288
|
"""
|
|
290
289
|
return pulumi.get(self, "operation_none")
|
|
291
290
|
|
|
292
291
|
@operation_none.setter
|
|
293
|
-
def operation_none(self, value: Optional[pulumi.Input[
|
|
292
|
+
def operation_none(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
294
293
|
pulumi.set(self, "operation_none", value)
|
|
295
294
|
|
|
296
|
-
@property
|
|
295
|
+
@_builtins.property
|
|
297
296
|
@pulumi.getter(name="operationRegister")
|
|
298
|
-
def operation_register(self) -> Optional[pulumi.Input[
|
|
297
|
+
def operation_register(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
299
298
|
"""
|
|
300
299
|
Grant permission to use the KMIP Register operation.
|
|
301
300
|
"""
|
|
302
301
|
return pulumi.get(self, "operation_register")
|
|
303
302
|
|
|
304
303
|
@operation_register.setter
|
|
305
|
-
def operation_register(self, value: Optional[pulumi.Input[
|
|
304
|
+
def operation_register(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
306
305
|
pulumi.set(self, "operation_register", value)
|
|
307
306
|
|
|
308
|
-
@property
|
|
307
|
+
@_builtins.property
|
|
309
308
|
@pulumi.getter(name="operationRekey")
|
|
310
|
-
def operation_rekey(self) -> Optional[pulumi.Input[
|
|
309
|
+
def operation_rekey(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
311
310
|
"""
|
|
312
311
|
Grant permission to use the KMIP Rekey operation.
|
|
313
312
|
"""
|
|
314
313
|
return pulumi.get(self, "operation_rekey")
|
|
315
314
|
|
|
316
315
|
@operation_rekey.setter
|
|
317
|
-
def operation_rekey(self, value: Optional[pulumi.Input[
|
|
316
|
+
def operation_rekey(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
318
317
|
pulumi.set(self, "operation_rekey", value)
|
|
319
318
|
|
|
320
|
-
@property
|
|
319
|
+
@_builtins.property
|
|
321
320
|
@pulumi.getter(name="operationRevoke")
|
|
322
|
-
def operation_revoke(self) -> Optional[pulumi.Input[
|
|
321
|
+
def operation_revoke(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
323
322
|
"""
|
|
324
323
|
Grant permission to use the KMIP Revoke operation.
|
|
325
324
|
"""
|
|
326
325
|
return pulumi.get(self, "operation_revoke")
|
|
327
326
|
|
|
328
327
|
@operation_revoke.setter
|
|
329
|
-
def operation_revoke(self, value: Optional[pulumi.Input[
|
|
328
|
+
def operation_revoke(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
330
329
|
pulumi.set(self, "operation_revoke", value)
|
|
331
330
|
|
|
332
|
-
@property
|
|
331
|
+
@_builtins.property
|
|
333
332
|
@pulumi.getter(name="tlsClientKeyBits")
|
|
334
|
-
def tls_client_key_bits(self) -> Optional[pulumi.Input[
|
|
333
|
+
def tls_client_key_bits(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
335
334
|
"""
|
|
336
335
|
Client certificate key bits, valid values depend on key type.
|
|
337
336
|
"""
|
|
338
337
|
return pulumi.get(self, "tls_client_key_bits")
|
|
339
338
|
|
|
340
339
|
@tls_client_key_bits.setter
|
|
341
|
-
def tls_client_key_bits(self, value: Optional[pulumi.Input[
|
|
340
|
+
def tls_client_key_bits(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
342
341
|
pulumi.set(self, "tls_client_key_bits", value)
|
|
343
342
|
|
|
344
|
-
@property
|
|
343
|
+
@_builtins.property
|
|
345
344
|
@pulumi.getter(name="tlsClientKeyType")
|
|
346
|
-
def tls_client_key_type(self) -> Optional[pulumi.Input[
|
|
345
|
+
def tls_client_key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
347
346
|
"""
|
|
348
347
|
Client certificate key type, `rsa` or `ec`.
|
|
349
348
|
"""
|
|
350
349
|
return pulumi.get(self, "tls_client_key_type")
|
|
351
350
|
|
|
352
351
|
@tls_client_key_type.setter
|
|
353
|
-
def tls_client_key_type(self, value: Optional[pulumi.Input[
|
|
352
|
+
def tls_client_key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
354
353
|
pulumi.set(self, "tls_client_key_type", value)
|
|
355
354
|
|
|
356
|
-
@property
|
|
355
|
+
@_builtins.property
|
|
357
356
|
@pulumi.getter(name="tlsClientTtl")
|
|
358
|
-
def tls_client_ttl(self) -> Optional[pulumi.Input[
|
|
357
|
+
def tls_client_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
359
358
|
"""
|
|
360
359
|
Client certificate TTL in seconds.
|
|
361
360
|
"""
|
|
362
361
|
return pulumi.get(self, "tls_client_ttl")
|
|
363
362
|
|
|
364
363
|
@tls_client_ttl.setter
|
|
365
|
-
def tls_client_ttl(self, value: Optional[pulumi.Input[
|
|
364
|
+
def tls_client_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
366
365
|
pulumi.set(self, "tls_client_ttl", value)
|
|
367
366
|
|
|
368
367
|
|
|
369
368
|
@pulumi.input_type
|
|
370
369
|
class _SecretRoleState:
|
|
371
370
|
def __init__(__self__, *,
|
|
372
|
-
namespace: Optional[pulumi.Input[
|
|
373
|
-
operation_activate: Optional[pulumi.Input[
|
|
374
|
-
operation_add_attribute: Optional[pulumi.Input[
|
|
375
|
-
operation_all: Optional[pulumi.Input[
|
|
376
|
-
operation_create: Optional[pulumi.Input[
|
|
377
|
-
operation_destroy: Optional[pulumi.Input[
|
|
378
|
-
operation_discover_versions: Optional[pulumi.Input[
|
|
379
|
-
operation_get: Optional[pulumi.Input[
|
|
380
|
-
operation_get_attribute_list: Optional[pulumi.Input[
|
|
381
|
-
operation_get_attributes: Optional[pulumi.Input[
|
|
382
|
-
operation_locate: Optional[pulumi.Input[
|
|
383
|
-
operation_none: Optional[pulumi.Input[
|
|
384
|
-
operation_register: Optional[pulumi.Input[
|
|
385
|
-
operation_rekey: Optional[pulumi.Input[
|
|
386
|
-
operation_revoke: Optional[pulumi.Input[
|
|
387
|
-
path: Optional[pulumi.Input[
|
|
388
|
-
role: Optional[pulumi.Input[
|
|
389
|
-
scope: Optional[pulumi.Input[
|
|
390
|
-
tls_client_key_bits: Optional[pulumi.Input[
|
|
391
|
-
tls_client_key_type: Optional[pulumi.Input[
|
|
392
|
-
tls_client_ttl: Optional[pulumi.Input[
|
|
371
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
372
|
+
operation_activate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
373
|
+
operation_add_attribute: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
374
|
+
operation_all: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
375
|
+
operation_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
376
|
+
operation_destroy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
377
|
+
operation_discover_versions: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
378
|
+
operation_get: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
379
|
+
operation_get_attribute_list: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
380
|
+
operation_get_attributes: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
381
|
+
operation_locate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
382
|
+
operation_none: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
383
|
+
operation_register: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
384
|
+
operation_rekey: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
385
|
+
operation_revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
386
|
+
path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
387
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
388
|
+
scope: Optional[pulumi.Input[_builtins.str]] = None,
|
|
389
|
+
tls_client_key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
390
|
+
tls_client_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
391
|
+
tls_client_ttl: Optional[pulumi.Input[_builtins.int]] = None):
|
|
393
392
|
"""
|
|
394
393
|
Input properties used for looking up and filtering SecretRole resources.
|
|
395
|
-
:param pulumi.Input[
|
|
394
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
396
395
|
The value should not contain leading or trailing forward slashes.
|
|
397
396
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
398
397
|
*Available only for Vault Enterprise*.
|
|
399
|
-
:param pulumi.Input[
|
|
400
|
-
:param pulumi.Input[
|
|
401
|
-
:param pulumi.Input[
|
|
402
|
-
:param pulumi.Input[
|
|
403
|
-
:param pulumi.Input[
|
|
404
|
-
:param pulumi.Input[
|
|
405
|
-
:param pulumi.Input[
|
|
406
|
-
:param pulumi.Input[
|
|
407
|
-
:param pulumi.Input[
|
|
408
|
-
:param pulumi.Input[
|
|
409
|
-
:param pulumi.Input[
|
|
410
|
-
:param pulumi.Input[
|
|
411
|
-
:param pulumi.Input[
|
|
412
|
-
:param pulumi.Input[
|
|
413
|
-
:param pulumi.Input[
|
|
398
|
+
:param pulumi.Input[_builtins.bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
|
399
|
+
:param pulumi.Input[_builtins.bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
|
400
|
+
:param pulumi.Input[_builtins.bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
|
401
|
+
:param pulumi.Input[_builtins.bool] operation_create: Grant permission to use the KMIP Create operation.
|
|
402
|
+
:param pulumi.Input[_builtins.bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
|
403
|
+
:param pulumi.Input[_builtins.bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
|
404
|
+
:param pulumi.Input[_builtins.bool] operation_get: Grant permission to use the KMIP Get operation.
|
|
405
|
+
:param pulumi.Input[_builtins.bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
|
406
|
+
:param pulumi.Input[_builtins.bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
|
407
|
+
:param pulumi.Input[_builtins.bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
|
408
|
+
:param pulumi.Input[_builtins.bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
|
409
|
+
:param pulumi.Input[_builtins.bool] operation_register: Grant permission to use the KMIP Register operation.
|
|
410
|
+
:param pulumi.Input[_builtins.bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
|
411
|
+
:param pulumi.Input[_builtins.bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
|
412
|
+
:param pulumi.Input[_builtins.str] path: The unique path this backend should be mounted at. Must
|
|
414
413
|
not begin or end with a `/`. Defaults to `kmip`.
|
|
415
|
-
:param pulumi.Input[
|
|
416
|
-
:param pulumi.Input[
|
|
417
|
-
:param pulumi.Input[
|
|
418
|
-
:param pulumi.Input[
|
|
419
|
-
:param pulumi.Input[
|
|
414
|
+
:param pulumi.Input[_builtins.str] role: Name of the role.
|
|
415
|
+
:param pulumi.Input[_builtins.str] scope: Name of the scope.
|
|
416
|
+
:param pulumi.Input[_builtins.int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
|
417
|
+
:param pulumi.Input[_builtins.str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
|
418
|
+
:param pulumi.Input[_builtins.int] tls_client_ttl: Client certificate TTL in seconds.
|
|
420
419
|
"""
|
|
421
420
|
if namespace is not None:
|
|
422
421
|
pulumi.set(__self__, "namespace", namespace)
|
|
@@ -461,9 +460,9 @@ class _SecretRoleState:
|
|
|
461
460
|
if tls_client_ttl is not None:
|
|
462
461
|
pulumi.set(__self__, "tls_client_ttl", tls_client_ttl)
|
|
463
462
|
|
|
464
|
-
@property
|
|
463
|
+
@_builtins.property
|
|
465
464
|
@pulumi.getter
|
|
466
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
465
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
467
466
|
"""
|
|
468
467
|
The namespace to provision the resource in.
|
|
469
468
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -473,180 +472,180 @@ class _SecretRoleState:
|
|
|
473
472
|
return pulumi.get(self, "namespace")
|
|
474
473
|
|
|
475
474
|
@namespace.setter
|
|
476
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
475
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
477
476
|
pulumi.set(self, "namespace", value)
|
|
478
477
|
|
|
479
|
-
@property
|
|
478
|
+
@_builtins.property
|
|
480
479
|
@pulumi.getter(name="operationActivate")
|
|
481
|
-
def operation_activate(self) -> Optional[pulumi.Input[
|
|
480
|
+
def operation_activate(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
482
481
|
"""
|
|
483
482
|
Grant permission to use the KMIP Activate operation.
|
|
484
483
|
"""
|
|
485
484
|
return pulumi.get(self, "operation_activate")
|
|
486
485
|
|
|
487
486
|
@operation_activate.setter
|
|
488
|
-
def operation_activate(self, value: Optional[pulumi.Input[
|
|
487
|
+
def operation_activate(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
489
488
|
pulumi.set(self, "operation_activate", value)
|
|
490
489
|
|
|
491
|
-
@property
|
|
490
|
+
@_builtins.property
|
|
492
491
|
@pulumi.getter(name="operationAddAttribute")
|
|
493
|
-
def operation_add_attribute(self) -> Optional[pulumi.Input[
|
|
492
|
+
def operation_add_attribute(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
494
493
|
"""
|
|
495
494
|
Grant permission to use the KMIP Add Attribute operation.
|
|
496
495
|
"""
|
|
497
496
|
return pulumi.get(self, "operation_add_attribute")
|
|
498
497
|
|
|
499
498
|
@operation_add_attribute.setter
|
|
500
|
-
def operation_add_attribute(self, value: Optional[pulumi.Input[
|
|
499
|
+
def operation_add_attribute(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
501
500
|
pulumi.set(self, "operation_add_attribute", value)
|
|
502
501
|
|
|
503
|
-
@property
|
|
502
|
+
@_builtins.property
|
|
504
503
|
@pulumi.getter(name="operationAll")
|
|
505
|
-
def operation_all(self) -> Optional[pulumi.Input[
|
|
504
|
+
def operation_all(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
506
505
|
"""
|
|
507
506
|
Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
|
508
507
|
"""
|
|
509
508
|
return pulumi.get(self, "operation_all")
|
|
510
509
|
|
|
511
510
|
@operation_all.setter
|
|
512
|
-
def operation_all(self, value: Optional[pulumi.Input[
|
|
511
|
+
def operation_all(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
513
512
|
pulumi.set(self, "operation_all", value)
|
|
514
513
|
|
|
515
|
-
@property
|
|
514
|
+
@_builtins.property
|
|
516
515
|
@pulumi.getter(name="operationCreate")
|
|
517
|
-
def operation_create(self) -> Optional[pulumi.Input[
|
|
516
|
+
def operation_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
518
517
|
"""
|
|
519
518
|
Grant permission to use the KMIP Create operation.
|
|
520
519
|
"""
|
|
521
520
|
return pulumi.get(self, "operation_create")
|
|
522
521
|
|
|
523
522
|
@operation_create.setter
|
|
524
|
-
def operation_create(self, value: Optional[pulumi.Input[
|
|
523
|
+
def operation_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
525
524
|
pulumi.set(self, "operation_create", value)
|
|
526
525
|
|
|
527
|
-
@property
|
|
526
|
+
@_builtins.property
|
|
528
527
|
@pulumi.getter(name="operationDestroy")
|
|
529
|
-
def operation_destroy(self) -> Optional[pulumi.Input[
|
|
528
|
+
def operation_destroy(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
530
529
|
"""
|
|
531
530
|
Grant permission to use the KMIP Destroy operation.
|
|
532
531
|
"""
|
|
533
532
|
return pulumi.get(self, "operation_destroy")
|
|
534
533
|
|
|
535
534
|
@operation_destroy.setter
|
|
536
|
-
def operation_destroy(self, value: Optional[pulumi.Input[
|
|
535
|
+
def operation_destroy(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
537
536
|
pulumi.set(self, "operation_destroy", value)
|
|
538
537
|
|
|
539
|
-
@property
|
|
538
|
+
@_builtins.property
|
|
540
539
|
@pulumi.getter(name="operationDiscoverVersions")
|
|
541
|
-
def operation_discover_versions(self) -> Optional[pulumi.Input[
|
|
540
|
+
def operation_discover_versions(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
542
541
|
"""
|
|
543
542
|
Grant permission to use the KMIP Discover Version operation.
|
|
544
543
|
"""
|
|
545
544
|
return pulumi.get(self, "operation_discover_versions")
|
|
546
545
|
|
|
547
546
|
@operation_discover_versions.setter
|
|
548
|
-
def operation_discover_versions(self, value: Optional[pulumi.Input[
|
|
547
|
+
def operation_discover_versions(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
549
548
|
pulumi.set(self, "operation_discover_versions", value)
|
|
550
549
|
|
|
551
|
-
@property
|
|
550
|
+
@_builtins.property
|
|
552
551
|
@pulumi.getter(name="operationGet")
|
|
553
|
-
def operation_get(self) -> Optional[pulumi.Input[
|
|
552
|
+
def operation_get(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
554
553
|
"""
|
|
555
554
|
Grant permission to use the KMIP Get operation.
|
|
556
555
|
"""
|
|
557
556
|
return pulumi.get(self, "operation_get")
|
|
558
557
|
|
|
559
558
|
@operation_get.setter
|
|
560
|
-
def operation_get(self, value: Optional[pulumi.Input[
|
|
559
|
+
def operation_get(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
561
560
|
pulumi.set(self, "operation_get", value)
|
|
562
561
|
|
|
563
|
-
@property
|
|
562
|
+
@_builtins.property
|
|
564
563
|
@pulumi.getter(name="operationGetAttributeList")
|
|
565
|
-
def operation_get_attribute_list(self) -> Optional[pulumi.Input[
|
|
564
|
+
def operation_get_attribute_list(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
566
565
|
"""
|
|
567
566
|
Grant permission to use the KMIP Get Atrribute List operation.
|
|
568
567
|
"""
|
|
569
568
|
return pulumi.get(self, "operation_get_attribute_list")
|
|
570
569
|
|
|
571
570
|
@operation_get_attribute_list.setter
|
|
572
|
-
def operation_get_attribute_list(self, value: Optional[pulumi.Input[
|
|
571
|
+
def operation_get_attribute_list(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
573
572
|
pulumi.set(self, "operation_get_attribute_list", value)
|
|
574
573
|
|
|
575
|
-
@property
|
|
574
|
+
@_builtins.property
|
|
576
575
|
@pulumi.getter(name="operationGetAttributes")
|
|
577
|
-
def operation_get_attributes(self) -> Optional[pulumi.Input[
|
|
576
|
+
def operation_get_attributes(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
578
577
|
"""
|
|
579
578
|
Grant permission to use the KMIP Get Atrributes operation.
|
|
580
579
|
"""
|
|
581
580
|
return pulumi.get(self, "operation_get_attributes")
|
|
582
581
|
|
|
583
582
|
@operation_get_attributes.setter
|
|
584
|
-
def operation_get_attributes(self, value: Optional[pulumi.Input[
|
|
583
|
+
def operation_get_attributes(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
585
584
|
pulumi.set(self, "operation_get_attributes", value)
|
|
586
585
|
|
|
587
|
-
@property
|
|
586
|
+
@_builtins.property
|
|
588
587
|
@pulumi.getter(name="operationLocate")
|
|
589
|
-
def operation_locate(self) -> Optional[pulumi.Input[
|
|
588
|
+
def operation_locate(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
590
589
|
"""
|
|
591
590
|
Grant permission to use the KMIP Get Locate operation.
|
|
592
591
|
"""
|
|
593
592
|
return pulumi.get(self, "operation_locate")
|
|
594
593
|
|
|
595
594
|
@operation_locate.setter
|
|
596
|
-
def operation_locate(self, value: Optional[pulumi.Input[
|
|
595
|
+
def operation_locate(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
597
596
|
pulumi.set(self, "operation_locate", value)
|
|
598
597
|
|
|
599
|
-
@property
|
|
598
|
+
@_builtins.property
|
|
600
599
|
@pulumi.getter(name="operationNone")
|
|
601
|
-
def operation_none(self) -> Optional[pulumi.Input[
|
|
600
|
+
def operation_none(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
602
601
|
"""
|
|
603
602
|
Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
|
604
603
|
"""
|
|
605
604
|
return pulumi.get(self, "operation_none")
|
|
606
605
|
|
|
607
606
|
@operation_none.setter
|
|
608
|
-
def operation_none(self, value: Optional[pulumi.Input[
|
|
607
|
+
def operation_none(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
609
608
|
pulumi.set(self, "operation_none", value)
|
|
610
609
|
|
|
611
|
-
@property
|
|
610
|
+
@_builtins.property
|
|
612
611
|
@pulumi.getter(name="operationRegister")
|
|
613
|
-
def operation_register(self) -> Optional[pulumi.Input[
|
|
612
|
+
def operation_register(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
614
613
|
"""
|
|
615
614
|
Grant permission to use the KMIP Register operation.
|
|
616
615
|
"""
|
|
617
616
|
return pulumi.get(self, "operation_register")
|
|
618
617
|
|
|
619
618
|
@operation_register.setter
|
|
620
|
-
def operation_register(self, value: Optional[pulumi.Input[
|
|
619
|
+
def operation_register(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
621
620
|
pulumi.set(self, "operation_register", value)
|
|
622
621
|
|
|
623
|
-
@property
|
|
622
|
+
@_builtins.property
|
|
624
623
|
@pulumi.getter(name="operationRekey")
|
|
625
|
-
def operation_rekey(self) -> Optional[pulumi.Input[
|
|
624
|
+
def operation_rekey(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
626
625
|
"""
|
|
627
626
|
Grant permission to use the KMIP Rekey operation.
|
|
628
627
|
"""
|
|
629
628
|
return pulumi.get(self, "operation_rekey")
|
|
630
629
|
|
|
631
630
|
@operation_rekey.setter
|
|
632
|
-
def operation_rekey(self, value: Optional[pulumi.Input[
|
|
631
|
+
def operation_rekey(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
633
632
|
pulumi.set(self, "operation_rekey", value)
|
|
634
633
|
|
|
635
|
-
@property
|
|
634
|
+
@_builtins.property
|
|
636
635
|
@pulumi.getter(name="operationRevoke")
|
|
637
|
-
def operation_revoke(self) -> Optional[pulumi.Input[
|
|
636
|
+
def operation_revoke(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
638
637
|
"""
|
|
639
638
|
Grant permission to use the KMIP Revoke operation.
|
|
640
639
|
"""
|
|
641
640
|
return pulumi.get(self, "operation_revoke")
|
|
642
641
|
|
|
643
642
|
@operation_revoke.setter
|
|
644
|
-
def operation_revoke(self, value: Optional[pulumi.Input[
|
|
643
|
+
def operation_revoke(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
645
644
|
pulumi.set(self, "operation_revoke", value)
|
|
646
645
|
|
|
647
|
-
@property
|
|
646
|
+
@_builtins.property
|
|
648
647
|
@pulumi.getter
|
|
649
|
-
def path(self) -> Optional[pulumi.Input[
|
|
648
|
+
def path(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
650
649
|
"""
|
|
651
650
|
The unique path this backend should be mounted at. Must
|
|
652
651
|
not begin or end with a `/`. Defaults to `kmip`.
|
|
@@ -654,67 +653,67 @@ class _SecretRoleState:
|
|
|
654
653
|
return pulumi.get(self, "path")
|
|
655
654
|
|
|
656
655
|
@path.setter
|
|
657
|
-
def path(self, value: Optional[pulumi.Input[
|
|
656
|
+
def path(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
658
657
|
pulumi.set(self, "path", value)
|
|
659
658
|
|
|
660
|
-
@property
|
|
659
|
+
@_builtins.property
|
|
661
660
|
@pulumi.getter
|
|
662
|
-
def role(self) -> Optional[pulumi.Input[
|
|
661
|
+
def role(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
663
662
|
"""
|
|
664
663
|
Name of the role.
|
|
665
664
|
"""
|
|
666
665
|
return pulumi.get(self, "role")
|
|
667
666
|
|
|
668
667
|
@role.setter
|
|
669
|
-
def role(self, value: Optional[pulumi.Input[
|
|
668
|
+
def role(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
670
669
|
pulumi.set(self, "role", value)
|
|
671
670
|
|
|
672
|
-
@property
|
|
671
|
+
@_builtins.property
|
|
673
672
|
@pulumi.getter
|
|
674
|
-
def scope(self) -> Optional[pulumi.Input[
|
|
673
|
+
def scope(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
675
674
|
"""
|
|
676
675
|
Name of the scope.
|
|
677
676
|
"""
|
|
678
677
|
return pulumi.get(self, "scope")
|
|
679
678
|
|
|
680
679
|
@scope.setter
|
|
681
|
-
def scope(self, value: Optional[pulumi.Input[
|
|
680
|
+
def scope(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
682
681
|
pulumi.set(self, "scope", value)
|
|
683
682
|
|
|
684
|
-
@property
|
|
683
|
+
@_builtins.property
|
|
685
684
|
@pulumi.getter(name="tlsClientKeyBits")
|
|
686
|
-
def tls_client_key_bits(self) -> Optional[pulumi.Input[
|
|
685
|
+
def tls_client_key_bits(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
687
686
|
"""
|
|
688
687
|
Client certificate key bits, valid values depend on key type.
|
|
689
688
|
"""
|
|
690
689
|
return pulumi.get(self, "tls_client_key_bits")
|
|
691
690
|
|
|
692
691
|
@tls_client_key_bits.setter
|
|
693
|
-
def tls_client_key_bits(self, value: Optional[pulumi.Input[
|
|
692
|
+
def tls_client_key_bits(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
694
693
|
pulumi.set(self, "tls_client_key_bits", value)
|
|
695
694
|
|
|
696
|
-
@property
|
|
695
|
+
@_builtins.property
|
|
697
696
|
@pulumi.getter(name="tlsClientKeyType")
|
|
698
|
-
def tls_client_key_type(self) -> Optional[pulumi.Input[
|
|
697
|
+
def tls_client_key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
699
698
|
"""
|
|
700
699
|
Client certificate key type, `rsa` or `ec`.
|
|
701
700
|
"""
|
|
702
701
|
return pulumi.get(self, "tls_client_key_type")
|
|
703
702
|
|
|
704
703
|
@tls_client_key_type.setter
|
|
705
|
-
def tls_client_key_type(self, value: Optional[pulumi.Input[
|
|
704
|
+
def tls_client_key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
706
705
|
pulumi.set(self, "tls_client_key_type", value)
|
|
707
706
|
|
|
708
|
-
@property
|
|
707
|
+
@_builtins.property
|
|
709
708
|
@pulumi.getter(name="tlsClientTtl")
|
|
710
|
-
def tls_client_ttl(self) -> Optional[pulumi.Input[
|
|
709
|
+
def tls_client_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
711
710
|
"""
|
|
712
711
|
Client certificate TTL in seconds.
|
|
713
712
|
"""
|
|
714
713
|
return pulumi.get(self, "tls_client_ttl")
|
|
715
714
|
|
|
716
715
|
@tls_client_ttl.setter
|
|
717
|
-
def tls_client_ttl(self, value: Optional[pulumi.Input[
|
|
716
|
+
def tls_client_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
718
717
|
pulumi.set(self, "tls_client_ttl", value)
|
|
719
718
|
|
|
720
719
|
|
|
@@ -724,27 +723,27 @@ class SecretRole(pulumi.CustomResource):
|
|
|
724
723
|
def __init__(__self__,
|
|
725
724
|
resource_name: str,
|
|
726
725
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
727
|
-
namespace: Optional[pulumi.Input[
|
|
728
|
-
operation_activate: Optional[pulumi.Input[
|
|
729
|
-
operation_add_attribute: Optional[pulumi.Input[
|
|
730
|
-
operation_all: Optional[pulumi.Input[
|
|
731
|
-
operation_create: Optional[pulumi.Input[
|
|
732
|
-
operation_destroy: Optional[pulumi.Input[
|
|
733
|
-
operation_discover_versions: Optional[pulumi.Input[
|
|
734
|
-
operation_get: Optional[pulumi.Input[
|
|
735
|
-
operation_get_attribute_list: Optional[pulumi.Input[
|
|
736
|
-
operation_get_attributes: Optional[pulumi.Input[
|
|
737
|
-
operation_locate: Optional[pulumi.Input[
|
|
738
|
-
operation_none: Optional[pulumi.Input[
|
|
739
|
-
operation_register: Optional[pulumi.Input[
|
|
740
|
-
operation_rekey: Optional[pulumi.Input[
|
|
741
|
-
operation_revoke: Optional[pulumi.Input[
|
|
742
|
-
path: Optional[pulumi.Input[
|
|
743
|
-
role: Optional[pulumi.Input[
|
|
744
|
-
scope: Optional[pulumi.Input[
|
|
745
|
-
tls_client_key_bits: Optional[pulumi.Input[
|
|
746
|
-
tls_client_key_type: Optional[pulumi.Input[
|
|
747
|
-
tls_client_ttl: Optional[pulumi.Input[
|
|
726
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
727
|
+
operation_activate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
728
|
+
operation_add_attribute: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
729
|
+
operation_all: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
730
|
+
operation_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
731
|
+
operation_destroy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
732
|
+
operation_discover_versions: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
733
|
+
operation_get: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
734
|
+
operation_get_attribute_list: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
735
|
+
operation_get_attributes: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
736
|
+
operation_locate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
737
|
+
operation_none: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
738
|
+
operation_register: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
739
|
+
operation_rekey: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
740
|
+
operation_revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
741
|
+
path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
742
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
743
|
+
scope: Optional[pulumi.Input[_builtins.str]] = None,
|
|
744
|
+
tls_client_key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
745
|
+
tls_client_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
746
|
+
tls_client_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
748
747
|
__props__=None):
|
|
749
748
|
"""
|
|
750
749
|
Manages KMIP Secret roles in a Vault server. This feature requires
|
|
@@ -787,31 +786,31 @@ class SecretRole(pulumi.CustomResource):
|
|
|
787
786
|
|
|
788
787
|
:param str resource_name: The name of the resource.
|
|
789
788
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
790
|
-
:param pulumi.Input[
|
|
789
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
791
790
|
The value should not contain leading or trailing forward slashes.
|
|
792
791
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
793
792
|
*Available only for Vault Enterprise*.
|
|
794
|
-
:param pulumi.Input[
|
|
795
|
-
:param pulumi.Input[
|
|
796
|
-
:param pulumi.Input[
|
|
797
|
-
:param pulumi.Input[
|
|
798
|
-
:param pulumi.Input[
|
|
799
|
-
:param pulumi.Input[
|
|
800
|
-
:param pulumi.Input[
|
|
801
|
-
:param pulumi.Input[
|
|
802
|
-
:param pulumi.Input[
|
|
803
|
-
:param pulumi.Input[
|
|
804
|
-
:param pulumi.Input[
|
|
805
|
-
:param pulumi.Input[
|
|
806
|
-
:param pulumi.Input[
|
|
807
|
-
:param pulumi.Input[
|
|
808
|
-
:param pulumi.Input[
|
|
793
|
+
:param pulumi.Input[_builtins.bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
|
794
|
+
:param pulumi.Input[_builtins.bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
|
795
|
+
:param pulumi.Input[_builtins.bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
|
796
|
+
:param pulumi.Input[_builtins.bool] operation_create: Grant permission to use the KMIP Create operation.
|
|
797
|
+
:param pulumi.Input[_builtins.bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
|
798
|
+
:param pulumi.Input[_builtins.bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
|
799
|
+
:param pulumi.Input[_builtins.bool] operation_get: Grant permission to use the KMIP Get operation.
|
|
800
|
+
:param pulumi.Input[_builtins.bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
|
801
|
+
:param pulumi.Input[_builtins.bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
|
802
|
+
:param pulumi.Input[_builtins.bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
|
803
|
+
:param pulumi.Input[_builtins.bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
|
804
|
+
:param pulumi.Input[_builtins.bool] operation_register: Grant permission to use the KMIP Register operation.
|
|
805
|
+
:param pulumi.Input[_builtins.bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
|
806
|
+
:param pulumi.Input[_builtins.bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
|
807
|
+
:param pulumi.Input[_builtins.str] path: The unique path this backend should be mounted at. Must
|
|
809
808
|
not begin or end with a `/`. Defaults to `kmip`.
|
|
810
|
-
:param pulumi.Input[
|
|
811
|
-
:param pulumi.Input[
|
|
812
|
-
:param pulumi.Input[
|
|
813
|
-
:param pulumi.Input[
|
|
814
|
-
:param pulumi.Input[
|
|
809
|
+
:param pulumi.Input[_builtins.str] role: Name of the role.
|
|
810
|
+
:param pulumi.Input[_builtins.str] scope: Name of the scope.
|
|
811
|
+
:param pulumi.Input[_builtins.int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
|
812
|
+
:param pulumi.Input[_builtins.str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
|
813
|
+
:param pulumi.Input[_builtins.int] tls_client_ttl: Client certificate TTL in seconds.
|
|
815
814
|
"""
|
|
816
815
|
...
|
|
817
816
|
@overload
|
|
@@ -873,27 +872,27 @@ class SecretRole(pulumi.CustomResource):
|
|
|
873
872
|
def _internal_init(__self__,
|
|
874
873
|
resource_name: str,
|
|
875
874
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
876
|
-
namespace: Optional[pulumi.Input[
|
|
877
|
-
operation_activate: Optional[pulumi.Input[
|
|
878
|
-
operation_add_attribute: Optional[pulumi.Input[
|
|
879
|
-
operation_all: Optional[pulumi.Input[
|
|
880
|
-
operation_create: Optional[pulumi.Input[
|
|
881
|
-
operation_destroy: Optional[pulumi.Input[
|
|
882
|
-
operation_discover_versions: Optional[pulumi.Input[
|
|
883
|
-
operation_get: Optional[pulumi.Input[
|
|
884
|
-
operation_get_attribute_list: Optional[pulumi.Input[
|
|
885
|
-
operation_get_attributes: Optional[pulumi.Input[
|
|
886
|
-
operation_locate: Optional[pulumi.Input[
|
|
887
|
-
operation_none: Optional[pulumi.Input[
|
|
888
|
-
operation_register: Optional[pulumi.Input[
|
|
889
|
-
operation_rekey: Optional[pulumi.Input[
|
|
890
|
-
operation_revoke: Optional[pulumi.Input[
|
|
891
|
-
path: Optional[pulumi.Input[
|
|
892
|
-
role: Optional[pulumi.Input[
|
|
893
|
-
scope: Optional[pulumi.Input[
|
|
894
|
-
tls_client_key_bits: Optional[pulumi.Input[
|
|
895
|
-
tls_client_key_type: Optional[pulumi.Input[
|
|
896
|
-
tls_client_ttl: Optional[pulumi.Input[
|
|
875
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
876
|
+
operation_activate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
877
|
+
operation_add_attribute: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
878
|
+
operation_all: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
879
|
+
operation_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
880
|
+
operation_destroy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
881
|
+
operation_discover_versions: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
882
|
+
operation_get: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
883
|
+
operation_get_attribute_list: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
884
|
+
operation_get_attributes: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
885
|
+
operation_locate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
886
|
+
operation_none: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
887
|
+
operation_register: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
888
|
+
operation_rekey: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
889
|
+
operation_revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
890
|
+
path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
891
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
892
|
+
scope: Optional[pulumi.Input[_builtins.str]] = None,
|
|
893
|
+
tls_client_key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
894
|
+
tls_client_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
895
|
+
tls_client_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
897
896
|
__props__=None):
|
|
898
897
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
899
898
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -940,27 +939,27 @@ class SecretRole(pulumi.CustomResource):
|
|
|
940
939
|
def get(resource_name: str,
|
|
941
940
|
id: pulumi.Input[str],
|
|
942
941
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
943
|
-
namespace: Optional[pulumi.Input[
|
|
944
|
-
operation_activate: Optional[pulumi.Input[
|
|
945
|
-
operation_add_attribute: Optional[pulumi.Input[
|
|
946
|
-
operation_all: Optional[pulumi.Input[
|
|
947
|
-
operation_create: Optional[pulumi.Input[
|
|
948
|
-
operation_destroy: Optional[pulumi.Input[
|
|
949
|
-
operation_discover_versions: Optional[pulumi.Input[
|
|
950
|
-
operation_get: Optional[pulumi.Input[
|
|
951
|
-
operation_get_attribute_list: Optional[pulumi.Input[
|
|
952
|
-
operation_get_attributes: Optional[pulumi.Input[
|
|
953
|
-
operation_locate: Optional[pulumi.Input[
|
|
954
|
-
operation_none: Optional[pulumi.Input[
|
|
955
|
-
operation_register: Optional[pulumi.Input[
|
|
956
|
-
operation_rekey: Optional[pulumi.Input[
|
|
957
|
-
operation_revoke: Optional[pulumi.Input[
|
|
958
|
-
path: Optional[pulumi.Input[
|
|
959
|
-
role: Optional[pulumi.Input[
|
|
960
|
-
scope: Optional[pulumi.Input[
|
|
961
|
-
tls_client_key_bits: Optional[pulumi.Input[
|
|
962
|
-
tls_client_key_type: Optional[pulumi.Input[
|
|
963
|
-
tls_client_ttl: Optional[pulumi.Input[
|
|
942
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
943
|
+
operation_activate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
944
|
+
operation_add_attribute: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
945
|
+
operation_all: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
946
|
+
operation_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
947
|
+
operation_destroy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
948
|
+
operation_discover_versions: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
949
|
+
operation_get: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
950
|
+
operation_get_attribute_list: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
951
|
+
operation_get_attributes: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
952
|
+
operation_locate: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
953
|
+
operation_none: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
954
|
+
operation_register: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
955
|
+
operation_rekey: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
956
|
+
operation_revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
957
|
+
path: Optional[pulumi.Input[_builtins.str]] = None,
|
|
958
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
959
|
+
scope: Optional[pulumi.Input[_builtins.str]] = None,
|
|
960
|
+
tls_client_key_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
961
|
+
tls_client_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
962
|
+
tls_client_ttl: Optional[pulumi.Input[_builtins.int]] = None) -> 'SecretRole':
|
|
964
963
|
"""
|
|
965
964
|
Get an existing SecretRole resource's state with the given name, id, and optional extra
|
|
966
965
|
properties used to qualify the lookup.
|
|
@@ -968,31 +967,31 @@ class SecretRole(pulumi.CustomResource):
|
|
|
968
967
|
:param str resource_name: The unique name of the resulting resource.
|
|
969
968
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
970
969
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
971
|
-
:param pulumi.Input[
|
|
970
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
972
971
|
The value should not contain leading or trailing forward slashes.
|
|
973
972
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
974
973
|
*Available only for Vault Enterprise*.
|
|
975
|
-
:param pulumi.Input[
|
|
976
|
-
:param pulumi.Input[
|
|
977
|
-
:param pulumi.Input[
|
|
978
|
-
:param pulumi.Input[
|
|
979
|
-
:param pulumi.Input[
|
|
980
|
-
:param pulumi.Input[
|
|
981
|
-
:param pulumi.Input[
|
|
982
|
-
:param pulumi.Input[
|
|
983
|
-
:param pulumi.Input[
|
|
984
|
-
:param pulumi.Input[
|
|
985
|
-
:param pulumi.Input[
|
|
986
|
-
:param pulumi.Input[
|
|
987
|
-
:param pulumi.Input[
|
|
988
|
-
:param pulumi.Input[
|
|
989
|
-
:param pulumi.Input[
|
|
974
|
+
:param pulumi.Input[_builtins.bool] operation_activate: Grant permission to use the KMIP Activate operation.
|
|
975
|
+
:param pulumi.Input[_builtins.bool] operation_add_attribute: Grant permission to use the KMIP Add Attribute operation.
|
|
976
|
+
:param pulumi.Input[_builtins.bool] operation_all: Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
|
977
|
+
:param pulumi.Input[_builtins.bool] operation_create: Grant permission to use the KMIP Create operation.
|
|
978
|
+
:param pulumi.Input[_builtins.bool] operation_destroy: Grant permission to use the KMIP Destroy operation.
|
|
979
|
+
:param pulumi.Input[_builtins.bool] operation_discover_versions: Grant permission to use the KMIP Discover Version operation.
|
|
980
|
+
:param pulumi.Input[_builtins.bool] operation_get: Grant permission to use the KMIP Get operation.
|
|
981
|
+
:param pulumi.Input[_builtins.bool] operation_get_attribute_list: Grant permission to use the KMIP Get Atrribute List operation.
|
|
982
|
+
:param pulumi.Input[_builtins.bool] operation_get_attributes: Grant permission to use the KMIP Get Atrributes operation.
|
|
983
|
+
:param pulumi.Input[_builtins.bool] operation_locate: Grant permission to use the KMIP Get Locate operation.
|
|
984
|
+
:param pulumi.Input[_builtins.bool] operation_none: Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
|
985
|
+
:param pulumi.Input[_builtins.bool] operation_register: Grant permission to use the KMIP Register operation.
|
|
986
|
+
:param pulumi.Input[_builtins.bool] operation_rekey: Grant permission to use the KMIP Rekey operation.
|
|
987
|
+
:param pulumi.Input[_builtins.bool] operation_revoke: Grant permission to use the KMIP Revoke operation.
|
|
988
|
+
:param pulumi.Input[_builtins.str] path: The unique path this backend should be mounted at. Must
|
|
990
989
|
not begin or end with a `/`. Defaults to `kmip`.
|
|
991
|
-
:param pulumi.Input[
|
|
992
|
-
:param pulumi.Input[
|
|
993
|
-
:param pulumi.Input[
|
|
994
|
-
:param pulumi.Input[
|
|
995
|
-
:param pulumi.Input[
|
|
990
|
+
:param pulumi.Input[_builtins.str] role: Name of the role.
|
|
991
|
+
:param pulumi.Input[_builtins.str] scope: Name of the scope.
|
|
992
|
+
:param pulumi.Input[_builtins.int] tls_client_key_bits: Client certificate key bits, valid values depend on key type.
|
|
993
|
+
:param pulumi.Input[_builtins.str] tls_client_key_type: Client certificate key type, `rsa` or `ec`.
|
|
994
|
+
:param pulumi.Input[_builtins.int] tls_client_ttl: Client certificate TTL in seconds.
|
|
996
995
|
"""
|
|
997
996
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
998
997
|
|
|
@@ -1021,9 +1020,9 @@ class SecretRole(pulumi.CustomResource):
|
|
|
1021
1020
|
__props__.__dict__["tls_client_ttl"] = tls_client_ttl
|
|
1022
1021
|
return SecretRole(resource_name, opts=opts, __props__=__props__)
|
|
1023
1022
|
|
|
1024
|
-
@property
|
|
1023
|
+
@_builtins.property
|
|
1025
1024
|
@pulumi.getter
|
|
1026
|
-
def namespace(self) -> pulumi.Output[Optional[
|
|
1025
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1027
1026
|
"""
|
|
1028
1027
|
The namespace to provision the resource in.
|
|
1029
1028
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1032,162 +1031,162 @@ class SecretRole(pulumi.CustomResource):
|
|
|
1032
1031
|
"""
|
|
1033
1032
|
return pulumi.get(self, "namespace")
|
|
1034
1033
|
|
|
1035
|
-
@property
|
|
1034
|
+
@_builtins.property
|
|
1036
1035
|
@pulumi.getter(name="operationActivate")
|
|
1037
|
-
def operation_activate(self) -> pulumi.Output[
|
|
1036
|
+
def operation_activate(self) -> pulumi.Output[_builtins.bool]:
|
|
1038
1037
|
"""
|
|
1039
1038
|
Grant permission to use the KMIP Activate operation.
|
|
1040
1039
|
"""
|
|
1041
1040
|
return pulumi.get(self, "operation_activate")
|
|
1042
1041
|
|
|
1043
|
-
@property
|
|
1042
|
+
@_builtins.property
|
|
1044
1043
|
@pulumi.getter(name="operationAddAttribute")
|
|
1045
|
-
def operation_add_attribute(self) -> pulumi.Output[
|
|
1044
|
+
def operation_add_attribute(self) -> pulumi.Output[_builtins.bool]:
|
|
1046
1045
|
"""
|
|
1047
1046
|
Grant permission to use the KMIP Add Attribute operation.
|
|
1048
1047
|
"""
|
|
1049
1048
|
return pulumi.get(self, "operation_add_attribute")
|
|
1050
1049
|
|
|
1051
|
-
@property
|
|
1050
|
+
@_builtins.property
|
|
1052
1051
|
@pulumi.getter(name="operationAll")
|
|
1053
|
-
def operation_all(self) -> pulumi.Output[
|
|
1052
|
+
def operation_all(self) -> pulumi.Output[_builtins.bool]:
|
|
1054
1053
|
"""
|
|
1055
1054
|
Grant all permissions to this role. May not be specified with any other `operation_*` params.
|
|
1056
1055
|
"""
|
|
1057
1056
|
return pulumi.get(self, "operation_all")
|
|
1058
1057
|
|
|
1059
|
-
@property
|
|
1058
|
+
@_builtins.property
|
|
1060
1059
|
@pulumi.getter(name="operationCreate")
|
|
1061
|
-
def operation_create(self) -> pulumi.Output[
|
|
1060
|
+
def operation_create(self) -> pulumi.Output[_builtins.bool]:
|
|
1062
1061
|
"""
|
|
1063
1062
|
Grant permission to use the KMIP Create operation.
|
|
1064
1063
|
"""
|
|
1065
1064
|
return pulumi.get(self, "operation_create")
|
|
1066
1065
|
|
|
1067
|
-
@property
|
|
1066
|
+
@_builtins.property
|
|
1068
1067
|
@pulumi.getter(name="operationDestroy")
|
|
1069
|
-
def operation_destroy(self) -> pulumi.Output[
|
|
1068
|
+
def operation_destroy(self) -> pulumi.Output[_builtins.bool]:
|
|
1070
1069
|
"""
|
|
1071
1070
|
Grant permission to use the KMIP Destroy operation.
|
|
1072
1071
|
"""
|
|
1073
1072
|
return pulumi.get(self, "operation_destroy")
|
|
1074
1073
|
|
|
1075
|
-
@property
|
|
1074
|
+
@_builtins.property
|
|
1076
1075
|
@pulumi.getter(name="operationDiscoverVersions")
|
|
1077
|
-
def operation_discover_versions(self) -> pulumi.Output[
|
|
1076
|
+
def operation_discover_versions(self) -> pulumi.Output[_builtins.bool]:
|
|
1078
1077
|
"""
|
|
1079
1078
|
Grant permission to use the KMIP Discover Version operation.
|
|
1080
1079
|
"""
|
|
1081
1080
|
return pulumi.get(self, "operation_discover_versions")
|
|
1082
1081
|
|
|
1083
|
-
@property
|
|
1082
|
+
@_builtins.property
|
|
1084
1083
|
@pulumi.getter(name="operationGet")
|
|
1085
|
-
def operation_get(self) -> pulumi.Output[
|
|
1084
|
+
def operation_get(self) -> pulumi.Output[_builtins.bool]:
|
|
1086
1085
|
"""
|
|
1087
1086
|
Grant permission to use the KMIP Get operation.
|
|
1088
1087
|
"""
|
|
1089
1088
|
return pulumi.get(self, "operation_get")
|
|
1090
1089
|
|
|
1091
|
-
@property
|
|
1090
|
+
@_builtins.property
|
|
1092
1091
|
@pulumi.getter(name="operationGetAttributeList")
|
|
1093
|
-
def operation_get_attribute_list(self) -> pulumi.Output[
|
|
1092
|
+
def operation_get_attribute_list(self) -> pulumi.Output[_builtins.bool]:
|
|
1094
1093
|
"""
|
|
1095
1094
|
Grant permission to use the KMIP Get Atrribute List operation.
|
|
1096
1095
|
"""
|
|
1097
1096
|
return pulumi.get(self, "operation_get_attribute_list")
|
|
1098
1097
|
|
|
1099
|
-
@property
|
|
1098
|
+
@_builtins.property
|
|
1100
1099
|
@pulumi.getter(name="operationGetAttributes")
|
|
1101
|
-
def operation_get_attributes(self) -> pulumi.Output[
|
|
1100
|
+
def operation_get_attributes(self) -> pulumi.Output[_builtins.bool]:
|
|
1102
1101
|
"""
|
|
1103
1102
|
Grant permission to use the KMIP Get Atrributes operation.
|
|
1104
1103
|
"""
|
|
1105
1104
|
return pulumi.get(self, "operation_get_attributes")
|
|
1106
1105
|
|
|
1107
|
-
@property
|
|
1106
|
+
@_builtins.property
|
|
1108
1107
|
@pulumi.getter(name="operationLocate")
|
|
1109
|
-
def operation_locate(self) -> pulumi.Output[
|
|
1108
|
+
def operation_locate(self) -> pulumi.Output[_builtins.bool]:
|
|
1110
1109
|
"""
|
|
1111
1110
|
Grant permission to use the KMIP Get Locate operation.
|
|
1112
1111
|
"""
|
|
1113
1112
|
return pulumi.get(self, "operation_locate")
|
|
1114
1113
|
|
|
1115
|
-
@property
|
|
1114
|
+
@_builtins.property
|
|
1116
1115
|
@pulumi.getter(name="operationNone")
|
|
1117
|
-
def operation_none(self) -> pulumi.Output[
|
|
1116
|
+
def operation_none(self) -> pulumi.Output[_builtins.bool]:
|
|
1118
1117
|
"""
|
|
1119
1118
|
Remove all permissions from this role. May not be specified with any other `operation_*` params.
|
|
1120
1119
|
"""
|
|
1121
1120
|
return pulumi.get(self, "operation_none")
|
|
1122
1121
|
|
|
1123
|
-
@property
|
|
1122
|
+
@_builtins.property
|
|
1124
1123
|
@pulumi.getter(name="operationRegister")
|
|
1125
|
-
def operation_register(self) -> pulumi.Output[
|
|
1124
|
+
def operation_register(self) -> pulumi.Output[_builtins.bool]:
|
|
1126
1125
|
"""
|
|
1127
1126
|
Grant permission to use the KMIP Register operation.
|
|
1128
1127
|
"""
|
|
1129
1128
|
return pulumi.get(self, "operation_register")
|
|
1130
1129
|
|
|
1131
|
-
@property
|
|
1130
|
+
@_builtins.property
|
|
1132
1131
|
@pulumi.getter(name="operationRekey")
|
|
1133
|
-
def operation_rekey(self) -> pulumi.Output[
|
|
1132
|
+
def operation_rekey(self) -> pulumi.Output[_builtins.bool]:
|
|
1134
1133
|
"""
|
|
1135
1134
|
Grant permission to use the KMIP Rekey operation.
|
|
1136
1135
|
"""
|
|
1137
1136
|
return pulumi.get(self, "operation_rekey")
|
|
1138
1137
|
|
|
1139
|
-
@property
|
|
1138
|
+
@_builtins.property
|
|
1140
1139
|
@pulumi.getter(name="operationRevoke")
|
|
1141
|
-
def operation_revoke(self) -> pulumi.Output[
|
|
1140
|
+
def operation_revoke(self) -> pulumi.Output[_builtins.bool]:
|
|
1142
1141
|
"""
|
|
1143
1142
|
Grant permission to use the KMIP Revoke operation.
|
|
1144
1143
|
"""
|
|
1145
1144
|
return pulumi.get(self, "operation_revoke")
|
|
1146
1145
|
|
|
1147
|
-
@property
|
|
1146
|
+
@_builtins.property
|
|
1148
1147
|
@pulumi.getter
|
|
1149
|
-
def path(self) -> pulumi.Output[
|
|
1148
|
+
def path(self) -> pulumi.Output[_builtins.str]:
|
|
1150
1149
|
"""
|
|
1151
1150
|
The unique path this backend should be mounted at. Must
|
|
1152
1151
|
not begin or end with a `/`. Defaults to `kmip`.
|
|
1153
1152
|
"""
|
|
1154
1153
|
return pulumi.get(self, "path")
|
|
1155
1154
|
|
|
1156
|
-
@property
|
|
1155
|
+
@_builtins.property
|
|
1157
1156
|
@pulumi.getter
|
|
1158
|
-
def role(self) -> pulumi.Output[
|
|
1157
|
+
def role(self) -> pulumi.Output[_builtins.str]:
|
|
1159
1158
|
"""
|
|
1160
1159
|
Name of the role.
|
|
1161
1160
|
"""
|
|
1162
1161
|
return pulumi.get(self, "role")
|
|
1163
1162
|
|
|
1164
|
-
@property
|
|
1163
|
+
@_builtins.property
|
|
1165
1164
|
@pulumi.getter
|
|
1166
|
-
def scope(self) -> pulumi.Output[
|
|
1165
|
+
def scope(self) -> pulumi.Output[_builtins.str]:
|
|
1167
1166
|
"""
|
|
1168
1167
|
Name of the scope.
|
|
1169
1168
|
"""
|
|
1170
1169
|
return pulumi.get(self, "scope")
|
|
1171
1170
|
|
|
1172
|
-
@property
|
|
1171
|
+
@_builtins.property
|
|
1173
1172
|
@pulumi.getter(name="tlsClientKeyBits")
|
|
1174
|
-
def tls_client_key_bits(self) -> pulumi.Output[Optional[
|
|
1173
|
+
def tls_client_key_bits(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1175
1174
|
"""
|
|
1176
1175
|
Client certificate key bits, valid values depend on key type.
|
|
1177
1176
|
"""
|
|
1178
1177
|
return pulumi.get(self, "tls_client_key_bits")
|
|
1179
1178
|
|
|
1180
|
-
@property
|
|
1179
|
+
@_builtins.property
|
|
1181
1180
|
@pulumi.getter(name="tlsClientKeyType")
|
|
1182
|
-
def tls_client_key_type(self) -> pulumi.Output[Optional[
|
|
1181
|
+
def tls_client_key_type(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1183
1182
|
"""
|
|
1184
1183
|
Client certificate key type, `rsa` or `ec`.
|
|
1185
1184
|
"""
|
|
1186
1185
|
return pulumi.get(self, "tls_client_key_type")
|
|
1187
1186
|
|
|
1188
|
-
@property
|
|
1187
|
+
@_builtins.property
|
|
1189
1188
|
@pulumi.getter(name="tlsClientTtl")
|
|
1190
|
-
def tls_client_ttl(self) -> pulumi.Output[Optional[
|
|
1189
|
+
def tls_client_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1191
1190
|
"""
|
|
1192
1191
|
Client certificate TTL in seconds.
|
|
1193
1192
|
"""
|