pulumi-vault 7.2.0a1752907825__py3-none-any.whl → 7.2.0a1753398491__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -1
- pulumi_vault/_inputs.py +672 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +409 -410
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +273 -274
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +239 -240
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +379 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +299 -300
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +353 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +222 -223
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +384 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +673 -674
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +333 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +256 -257
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +81 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +137 -138
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +29 -30
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +207 -208
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +120 -121
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +138 -139
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +336 -337
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0a1753398491.dist-info/RECORD +268 -0
- pulumi_vault-7.2.0a1752907825.dist-info/RECORD +0 -268
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,51 +19,51 @@ __all__ = ['SecretBackendCertArgs', 'SecretBackendCert']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class SecretBackendCertArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
backend: pulumi.Input[
|
|
24
|
-
common_name: pulumi.Input[
|
|
25
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
26
|
-
auto_renew: Optional[pulumi.Input[
|
|
27
|
-
cert_metadata: Optional[pulumi.Input[
|
|
28
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
29
|
-
format: Optional[pulumi.Input[
|
|
30
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
31
|
-
issuer_ref: Optional[pulumi.Input[
|
|
32
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
33
|
-
name: Optional[pulumi.Input[
|
|
34
|
-
namespace: Optional[pulumi.Input[
|
|
35
|
-
not_after: Optional[pulumi.Input[
|
|
36
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
37
|
-
private_key_format: Optional[pulumi.Input[
|
|
38
|
-
revoke: Optional[pulumi.Input[
|
|
39
|
-
revoke_with_key: Optional[pulumi.Input[
|
|
40
|
-
ttl: Optional[pulumi.Input[
|
|
41
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
42
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
22
|
+
backend: pulumi.Input[_builtins.str],
|
|
23
|
+
common_name: pulumi.Input[_builtins.str],
|
|
24
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
25
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
26
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
28
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
30
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
32
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
36
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
38
|
+
revoke_with_key: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
39
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
40
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
41
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
43
42
|
"""
|
|
44
43
|
The set of arguments for constructing a SecretBackendCert resource.
|
|
45
|
-
:param pulumi.Input[
|
|
46
|
-
:param pulumi.Input[
|
|
47
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
48
|
-
:param pulumi.Input[
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
:param pulumi.Input[
|
|
52
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
53
|
-
:param pulumi.Input[
|
|
54
|
-
:param pulumi.Input[
|
|
55
|
-
:param pulumi.Input[
|
|
56
|
-
:param pulumi.Input[
|
|
44
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
45
|
+
:param pulumi.Input[_builtins.str] common_name: CN of certificate to create
|
|
46
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
47
|
+
:param pulumi.Input[_builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
48
|
+
:param pulumi.Input[_builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
49
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
50
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
51
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
52
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request.
|
|
53
|
+
:param pulumi.Input[_builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
54
|
+
:param pulumi.Input[_builtins.str] name: Name of the role to create the certificate against
|
|
55
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
57
56
|
The value should not contain leading or trailing forward slashes.
|
|
58
57
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
59
58
|
*Available only for Vault Enterprise*.
|
|
60
|
-
:param pulumi.Input[
|
|
61
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
62
|
-
:param pulumi.Input[
|
|
63
|
-
:param pulumi.Input[
|
|
64
|
-
:param pulumi.Input[
|
|
65
|
-
:param pulumi.Input[
|
|
66
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
67
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
59
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
60
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
61
|
+
:param pulumi.Input[_builtins.str] private_key_format: The private key format
|
|
62
|
+
:param pulumi.Input[_builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
63
|
+
:param pulumi.Input[_builtins.bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
64
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
65
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
66
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] user_ids: List of Subject User IDs
|
|
68
67
|
"""
|
|
69
68
|
pulumi.set(__self__, "backend", backend)
|
|
70
69
|
pulumi.set(__self__, "common_name", common_name)
|
|
@@ -105,141 +104,141 @@ class SecretBackendCertArgs:
|
|
|
105
104
|
if user_ids is not None:
|
|
106
105
|
pulumi.set(__self__, "user_ids", user_ids)
|
|
107
106
|
|
|
108
|
-
@property
|
|
107
|
+
@_builtins.property
|
|
109
108
|
@pulumi.getter
|
|
110
|
-
def backend(self) -> pulumi.Input[
|
|
109
|
+
def backend(self) -> pulumi.Input[_builtins.str]:
|
|
111
110
|
"""
|
|
112
111
|
The PKI secret backend the resource belongs to.
|
|
113
112
|
"""
|
|
114
113
|
return pulumi.get(self, "backend")
|
|
115
114
|
|
|
116
115
|
@backend.setter
|
|
117
|
-
def backend(self, value: pulumi.Input[
|
|
116
|
+
def backend(self, value: pulumi.Input[_builtins.str]):
|
|
118
117
|
pulumi.set(self, "backend", value)
|
|
119
118
|
|
|
120
|
-
@property
|
|
119
|
+
@_builtins.property
|
|
121
120
|
@pulumi.getter(name="commonName")
|
|
122
|
-
def common_name(self) -> pulumi.Input[
|
|
121
|
+
def common_name(self) -> pulumi.Input[_builtins.str]:
|
|
123
122
|
"""
|
|
124
123
|
CN of certificate to create
|
|
125
124
|
"""
|
|
126
125
|
return pulumi.get(self, "common_name")
|
|
127
126
|
|
|
128
127
|
@common_name.setter
|
|
129
|
-
def common_name(self, value: pulumi.Input[
|
|
128
|
+
def common_name(self, value: pulumi.Input[_builtins.str]):
|
|
130
129
|
pulumi.set(self, "common_name", value)
|
|
131
130
|
|
|
132
|
-
@property
|
|
131
|
+
@_builtins.property
|
|
133
132
|
@pulumi.getter(name="altNames")
|
|
134
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
133
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
135
134
|
"""
|
|
136
135
|
List of alternative names
|
|
137
136
|
"""
|
|
138
137
|
return pulumi.get(self, "alt_names")
|
|
139
138
|
|
|
140
139
|
@alt_names.setter
|
|
141
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
140
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
142
141
|
pulumi.set(self, "alt_names", value)
|
|
143
142
|
|
|
144
|
-
@property
|
|
143
|
+
@_builtins.property
|
|
145
144
|
@pulumi.getter(name="autoRenew")
|
|
146
|
-
def auto_renew(self) -> Optional[pulumi.Input[
|
|
145
|
+
def auto_renew(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
147
146
|
"""
|
|
148
147
|
If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
149
148
|
"""
|
|
150
149
|
return pulumi.get(self, "auto_renew")
|
|
151
150
|
|
|
152
151
|
@auto_renew.setter
|
|
153
|
-
def auto_renew(self, value: Optional[pulumi.Input[
|
|
152
|
+
def auto_renew(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
154
153
|
pulumi.set(self, "auto_renew", value)
|
|
155
154
|
|
|
156
|
-
@property
|
|
155
|
+
@_builtins.property
|
|
157
156
|
@pulumi.getter(name="certMetadata")
|
|
158
|
-
def cert_metadata(self) -> Optional[pulumi.Input[
|
|
157
|
+
def cert_metadata(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
159
158
|
"""
|
|
160
159
|
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
161
160
|
"""
|
|
162
161
|
return pulumi.get(self, "cert_metadata")
|
|
163
162
|
|
|
164
163
|
@cert_metadata.setter
|
|
165
|
-
def cert_metadata(self, value: Optional[pulumi.Input[
|
|
164
|
+
def cert_metadata(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
166
165
|
pulumi.set(self, "cert_metadata", value)
|
|
167
166
|
|
|
168
|
-
@property
|
|
167
|
+
@_builtins.property
|
|
169
168
|
@pulumi.getter(name="excludeCnFromSans")
|
|
170
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[
|
|
169
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
171
170
|
"""
|
|
172
171
|
Flag to exclude CN from SANs
|
|
173
172
|
"""
|
|
174
173
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
175
174
|
|
|
176
175
|
@exclude_cn_from_sans.setter
|
|
177
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[
|
|
176
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
178
177
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
179
178
|
|
|
180
|
-
@property
|
|
179
|
+
@_builtins.property
|
|
181
180
|
@pulumi.getter
|
|
182
|
-
def format(self) -> Optional[pulumi.Input[
|
|
181
|
+
def format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
183
182
|
"""
|
|
184
183
|
The format of data
|
|
185
184
|
"""
|
|
186
185
|
return pulumi.get(self, "format")
|
|
187
186
|
|
|
188
187
|
@format.setter
|
|
189
|
-
def format(self, value: Optional[pulumi.Input[
|
|
188
|
+
def format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
190
189
|
pulumi.set(self, "format", value)
|
|
191
190
|
|
|
192
|
-
@property
|
|
191
|
+
@_builtins.property
|
|
193
192
|
@pulumi.getter(name="ipSans")
|
|
194
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
193
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
195
194
|
"""
|
|
196
195
|
List of alternative IPs
|
|
197
196
|
"""
|
|
198
197
|
return pulumi.get(self, "ip_sans")
|
|
199
198
|
|
|
200
199
|
@ip_sans.setter
|
|
201
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
200
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
202
201
|
pulumi.set(self, "ip_sans", value)
|
|
203
202
|
|
|
204
|
-
@property
|
|
203
|
+
@_builtins.property
|
|
205
204
|
@pulumi.getter(name="issuerRef")
|
|
206
|
-
def issuer_ref(self) -> Optional[pulumi.Input[
|
|
205
|
+
def issuer_ref(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
207
206
|
"""
|
|
208
207
|
Specifies the default issuer of this request.
|
|
209
208
|
"""
|
|
210
209
|
return pulumi.get(self, "issuer_ref")
|
|
211
210
|
|
|
212
211
|
@issuer_ref.setter
|
|
213
|
-
def issuer_ref(self, value: Optional[pulumi.Input[
|
|
212
|
+
def issuer_ref(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
214
213
|
pulumi.set(self, "issuer_ref", value)
|
|
215
214
|
|
|
216
|
-
@property
|
|
215
|
+
@_builtins.property
|
|
217
216
|
@pulumi.getter(name="minSecondsRemaining")
|
|
218
|
-
def min_seconds_remaining(self) -> Optional[pulumi.Input[
|
|
217
|
+
def min_seconds_remaining(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
219
218
|
"""
|
|
220
219
|
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
221
220
|
"""
|
|
222
221
|
return pulumi.get(self, "min_seconds_remaining")
|
|
223
222
|
|
|
224
223
|
@min_seconds_remaining.setter
|
|
225
|
-
def min_seconds_remaining(self, value: Optional[pulumi.Input[
|
|
224
|
+
def min_seconds_remaining(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
226
225
|
pulumi.set(self, "min_seconds_remaining", value)
|
|
227
226
|
|
|
228
|
-
@property
|
|
227
|
+
@_builtins.property
|
|
229
228
|
@pulumi.getter
|
|
230
|
-
def name(self) -> Optional[pulumi.Input[
|
|
229
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
231
230
|
"""
|
|
232
231
|
Name of the role to create the certificate against
|
|
233
232
|
"""
|
|
234
233
|
return pulumi.get(self, "name")
|
|
235
234
|
|
|
236
235
|
@name.setter
|
|
237
|
-
def name(self, value: Optional[pulumi.Input[
|
|
236
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
238
237
|
pulumi.set(self, "name", value)
|
|
239
238
|
|
|
240
|
-
@property
|
|
239
|
+
@_builtins.property
|
|
241
240
|
@pulumi.getter
|
|
242
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
241
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
243
242
|
"""
|
|
244
243
|
The namespace to provision the resource in.
|
|
245
244
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -249,170 +248,170 @@ class SecretBackendCertArgs:
|
|
|
249
248
|
return pulumi.get(self, "namespace")
|
|
250
249
|
|
|
251
250
|
@namespace.setter
|
|
252
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
251
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
253
252
|
pulumi.set(self, "namespace", value)
|
|
254
253
|
|
|
255
|
-
@property
|
|
254
|
+
@_builtins.property
|
|
256
255
|
@pulumi.getter(name="notAfter")
|
|
257
|
-
def not_after(self) -> Optional[pulumi.Input[
|
|
256
|
+
def not_after(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
258
257
|
"""
|
|
259
258
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
260
259
|
"""
|
|
261
260
|
return pulumi.get(self, "not_after")
|
|
262
261
|
|
|
263
262
|
@not_after.setter
|
|
264
|
-
def not_after(self, value: Optional[pulumi.Input[
|
|
263
|
+
def not_after(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
265
264
|
pulumi.set(self, "not_after", value)
|
|
266
265
|
|
|
267
|
-
@property
|
|
266
|
+
@_builtins.property
|
|
268
267
|
@pulumi.getter(name="otherSans")
|
|
269
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
268
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
270
269
|
"""
|
|
271
270
|
List of other SANs
|
|
272
271
|
"""
|
|
273
272
|
return pulumi.get(self, "other_sans")
|
|
274
273
|
|
|
275
274
|
@other_sans.setter
|
|
276
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
275
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
277
276
|
pulumi.set(self, "other_sans", value)
|
|
278
277
|
|
|
279
|
-
@property
|
|
278
|
+
@_builtins.property
|
|
280
279
|
@pulumi.getter(name="privateKeyFormat")
|
|
281
|
-
def private_key_format(self) -> Optional[pulumi.Input[
|
|
280
|
+
def private_key_format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
282
281
|
"""
|
|
283
282
|
The private key format
|
|
284
283
|
"""
|
|
285
284
|
return pulumi.get(self, "private_key_format")
|
|
286
285
|
|
|
287
286
|
@private_key_format.setter
|
|
288
|
-
def private_key_format(self, value: Optional[pulumi.Input[
|
|
287
|
+
def private_key_format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
289
288
|
pulumi.set(self, "private_key_format", value)
|
|
290
289
|
|
|
291
|
-
@property
|
|
290
|
+
@_builtins.property
|
|
292
291
|
@pulumi.getter
|
|
293
|
-
def revoke(self) -> Optional[pulumi.Input[
|
|
292
|
+
def revoke(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
294
293
|
"""
|
|
295
294
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
296
295
|
"""
|
|
297
296
|
return pulumi.get(self, "revoke")
|
|
298
297
|
|
|
299
298
|
@revoke.setter
|
|
300
|
-
def revoke(self, value: Optional[pulumi.Input[
|
|
299
|
+
def revoke(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
301
300
|
pulumi.set(self, "revoke", value)
|
|
302
301
|
|
|
303
|
-
@property
|
|
302
|
+
@_builtins.property
|
|
304
303
|
@pulumi.getter(name="revokeWithKey")
|
|
305
|
-
def revoke_with_key(self) -> Optional[pulumi.Input[
|
|
304
|
+
def revoke_with_key(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
306
305
|
"""
|
|
307
306
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
308
307
|
"""
|
|
309
308
|
return pulumi.get(self, "revoke_with_key")
|
|
310
309
|
|
|
311
310
|
@revoke_with_key.setter
|
|
312
|
-
def revoke_with_key(self, value: Optional[pulumi.Input[
|
|
311
|
+
def revoke_with_key(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
313
312
|
pulumi.set(self, "revoke_with_key", value)
|
|
314
313
|
|
|
315
|
-
@property
|
|
314
|
+
@_builtins.property
|
|
316
315
|
@pulumi.getter
|
|
317
|
-
def ttl(self) -> Optional[pulumi.Input[
|
|
316
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
318
317
|
"""
|
|
319
318
|
Time to live
|
|
320
319
|
"""
|
|
321
320
|
return pulumi.get(self, "ttl")
|
|
322
321
|
|
|
323
322
|
@ttl.setter
|
|
324
|
-
def ttl(self, value: Optional[pulumi.Input[
|
|
323
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
325
324
|
pulumi.set(self, "ttl", value)
|
|
326
325
|
|
|
327
|
-
@property
|
|
326
|
+
@_builtins.property
|
|
328
327
|
@pulumi.getter(name="uriSans")
|
|
329
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
328
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
330
329
|
"""
|
|
331
330
|
List of alternative URIs
|
|
332
331
|
"""
|
|
333
332
|
return pulumi.get(self, "uri_sans")
|
|
334
333
|
|
|
335
334
|
@uri_sans.setter
|
|
336
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
335
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
337
336
|
pulumi.set(self, "uri_sans", value)
|
|
338
337
|
|
|
339
|
-
@property
|
|
338
|
+
@_builtins.property
|
|
340
339
|
@pulumi.getter(name="userIds")
|
|
341
|
-
def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
340
|
+
def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
342
341
|
"""
|
|
343
342
|
List of Subject User IDs
|
|
344
343
|
"""
|
|
345
344
|
return pulumi.get(self, "user_ids")
|
|
346
345
|
|
|
347
346
|
@user_ids.setter
|
|
348
|
-
def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
347
|
+
def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
349
348
|
pulumi.set(self, "user_ids", value)
|
|
350
349
|
|
|
351
350
|
|
|
352
351
|
@pulumi.input_type
|
|
353
352
|
class _SecretBackendCertState:
|
|
354
353
|
def __init__(__self__, *,
|
|
355
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
356
|
-
auto_renew: Optional[pulumi.Input[
|
|
357
|
-
backend: Optional[pulumi.Input[
|
|
358
|
-
ca_chain: Optional[pulumi.Input[
|
|
359
|
-
cert_metadata: Optional[pulumi.Input[
|
|
360
|
-
certificate: Optional[pulumi.Input[
|
|
361
|
-
common_name: Optional[pulumi.Input[
|
|
362
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
363
|
-
expiration: Optional[pulumi.Input[
|
|
364
|
-
format: Optional[pulumi.Input[
|
|
365
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
366
|
-
issuer_ref: Optional[pulumi.Input[
|
|
367
|
-
issuing_ca: Optional[pulumi.Input[
|
|
368
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
369
|
-
name: Optional[pulumi.Input[
|
|
370
|
-
namespace: Optional[pulumi.Input[
|
|
371
|
-
not_after: Optional[pulumi.Input[
|
|
372
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
373
|
-
private_key: Optional[pulumi.Input[
|
|
374
|
-
private_key_format: Optional[pulumi.Input[
|
|
375
|
-
private_key_type: Optional[pulumi.Input[
|
|
376
|
-
renew_pending: Optional[pulumi.Input[
|
|
377
|
-
revoke: Optional[pulumi.Input[
|
|
378
|
-
revoke_with_key: Optional[pulumi.Input[
|
|
379
|
-
serial_number: Optional[pulumi.Input[
|
|
380
|
-
ttl: Optional[pulumi.Input[
|
|
381
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
382
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
354
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
355
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
356
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
357
|
+
ca_chain: Optional[pulumi.Input[_builtins.str]] = None,
|
|
358
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
359
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
360
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
361
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
362
|
+
expiration: Optional[pulumi.Input[_builtins.int]] = None,
|
|
363
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
364
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
365
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
366
|
+
issuing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
367
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
368
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
369
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
370
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
371
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
372
|
+
private_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
373
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
374
|
+
private_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
375
|
+
renew_pending: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
376
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
377
|
+
revoke_with_key: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
378
|
+
serial_number: Optional[pulumi.Input[_builtins.str]] = None,
|
|
379
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
380
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
381
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None):
|
|
383
382
|
"""
|
|
384
383
|
Input properties used for looking up and filtering SecretBackendCert resources.
|
|
385
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
386
|
-
:param pulumi.Input[
|
|
387
|
-
:param pulumi.Input[
|
|
388
|
-
:param pulumi.Input[
|
|
389
|
-
:param pulumi.Input[
|
|
390
|
-
:param pulumi.Input[
|
|
391
|
-
:param pulumi.Input[
|
|
392
|
-
:param pulumi.Input[
|
|
393
|
-
:param pulumi.Input[
|
|
394
|
-
:param pulumi.Input[
|
|
395
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
396
|
-
:param pulumi.Input[
|
|
397
|
-
:param pulumi.Input[
|
|
398
|
-
:param pulumi.Input[
|
|
399
|
-
:param pulumi.Input[
|
|
400
|
-
:param pulumi.Input[
|
|
384
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
385
|
+
:param pulumi.Input[_builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
386
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
387
|
+
:param pulumi.Input[_builtins.str] ca_chain: The CA chain
|
|
388
|
+
:param pulumi.Input[_builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
389
|
+
:param pulumi.Input[_builtins.str] certificate: The certificate
|
|
390
|
+
:param pulumi.Input[_builtins.str] common_name: CN of certificate to create
|
|
391
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
392
|
+
:param pulumi.Input[_builtins.int] expiration: The expiration date of the certificate in unix epoch format
|
|
393
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
394
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
395
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request.
|
|
396
|
+
:param pulumi.Input[_builtins.str] issuing_ca: The issuing CA
|
|
397
|
+
:param pulumi.Input[_builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
398
|
+
:param pulumi.Input[_builtins.str] name: Name of the role to create the certificate against
|
|
399
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
401
400
|
The value should not contain leading or trailing forward slashes.
|
|
402
401
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
403
402
|
*Available only for Vault Enterprise*.
|
|
404
|
-
:param pulumi.Input[
|
|
405
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
406
|
-
:param pulumi.Input[
|
|
407
|
-
:param pulumi.Input[
|
|
408
|
-
:param pulumi.Input[
|
|
409
|
-
:param pulumi.Input[
|
|
410
|
-
:param pulumi.Input[
|
|
411
|
-
:param pulumi.Input[
|
|
412
|
-
:param pulumi.Input[
|
|
413
|
-
:param pulumi.Input[
|
|
414
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
415
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
403
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
404
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
405
|
+
:param pulumi.Input[_builtins.str] private_key: The private key
|
|
406
|
+
:param pulumi.Input[_builtins.str] private_key_format: The private key format
|
|
407
|
+
:param pulumi.Input[_builtins.str] private_key_type: The private key type
|
|
408
|
+
:param pulumi.Input[_builtins.bool] renew_pending: `true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
409
|
+
:param pulumi.Input[_builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
410
|
+
:param pulumi.Input[_builtins.bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
411
|
+
:param pulumi.Input[_builtins.str] serial_number: The serial number
|
|
412
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
413
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
414
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] user_ids: List of Subject User IDs
|
|
416
415
|
"""
|
|
417
416
|
if alt_names is not None:
|
|
418
417
|
pulumi.set(__self__, "alt_names", alt_names)
|
|
@@ -471,189 +470,189 @@ class _SecretBackendCertState:
|
|
|
471
470
|
if user_ids is not None:
|
|
472
471
|
pulumi.set(__self__, "user_ids", user_ids)
|
|
473
472
|
|
|
474
|
-
@property
|
|
473
|
+
@_builtins.property
|
|
475
474
|
@pulumi.getter(name="altNames")
|
|
476
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
475
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
477
476
|
"""
|
|
478
477
|
List of alternative names
|
|
479
478
|
"""
|
|
480
479
|
return pulumi.get(self, "alt_names")
|
|
481
480
|
|
|
482
481
|
@alt_names.setter
|
|
483
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
482
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
484
483
|
pulumi.set(self, "alt_names", value)
|
|
485
484
|
|
|
486
|
-
@property
|
|
485
|
+
@_builtins.property
|
|
487
486
|
@pulumi.getter(name="autoRenew")
|
|
488
|
-
def auto_renew(self) -> Optional[pulumi.Input[
|
|
487
|
+
def auto_renew(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
489
488
|
"""
|
|
490
489
|
If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
491
490
|
"""
|
|
492
491
|
return pulumi.get(self, "auto_renew")
|
|
493
492
|
|
|
494
493
|
@auto_renew.setter
|
|
495
|
-
def auto_renew(self, value: Optional[pulumi.Input[
|
|
494
|
+
def auto_renew(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
496
495
|
pulumi.set(self, "auto_renew", value)
|
|
497
496
|
|
|
498
|
-
@property
|
|
497
|
+
@_builtins.property
|
|
499
498
|
@pulumi.getter
|
|
500
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
499
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
501
500
|
"""
|
|
502
501
|
The PKI secret backend the resource belongs to.
|
|
503
502
|
"""
|
|
504
503
|
return pulumi.get(self, "backend")
|
|
505
504
|
|
|
506
505
|
@backend.setter
|
|
507
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
506
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
508
507
|
pulumi.set(self, "backend", value)
|
|
509
508
|
|
|
510
|
-
@property
|
|
509
|
+
@_builtins.property
|
|
511
510
|
@pulumi.getter(name="caChain")
|
|
512
|
-
def ca_chain(self) -> Optional[pulumi.Input[
|
|
511
|
+
def ca_chain(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
513
512
|
"""
|
|
514
513
|
The CA chain
|
|
515
514
|
"""
|
|
516
515
|
return pulumi.get(self, "ca_chain")
|
|
517
516
|
|
|
518
517
|
@ca_chain.setter
|
|
519
|
-
def ca_chain(self, value: Optional[pulumi.Input[
|
|
518
|
+
def ca_chain(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
520
519
|
pulumi.set(self, "ca_chain", value)
|
|
521
520
|
|
|
522
|
-
@property
|
|
521
|
+
@_builtins.property
|
|
523
522
|
@pulumi.getter(name="certMetadata")
|
|
524
|
-
def cert_metadata(self) -> Optional[pulumi.Input[
|
|
523
|
+
def cert_metadata(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
525
524
|
"""
|
|
526
525
|
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
527
526
|
"""
|
|
528
527
|
return pulumi.get(self, "cert_metadata")
|
|
529
528
|
|
|
530
529
|
@cert_metadata.setter
|
|
531
|
-
def cert_metadata(self, value: Optional[pulumi.Input[
|
|
530
|
+
def cert_metadata(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
532
531
|
pulumi.set(self, "cert_metadata", value)
|
|
533
532
|
|
|
534
|
-
@property
|
|
533
|
+
@_builtins.property
|
|
535
534
|
@pulumi.getter
|
|
536
|
-
def certificate(self) -> Optional[pulumi.Input[
|
|
535
|
+
def certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
537
536
|
"""
|
|
538
537
|
The certificate
|
|
539
538
|
"""
|
|
540
539
|
return pulumi.get(self, "certificate")
|
|
541
540
|
|
|
542
541
|
@certificate.setter
|
|
543
|
-
def certificate(self, value: Optional[pulumi.Input[
|
|
542
|
+
def certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
544
543
|
pulumi.set(self, "certificate", value)
|
|
545
544
|
|
|
546
|
-
@property
|
|
545
|
+
@_builtins.property
|
|
547
546
|
@pulumi.getter(name="commonName")
|
|
548
|
-
def common_name(self) -> Optional[pulumi.Input[
|
|
547
|
+
def common_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
549
548
|
"""
|
|
550
549
|
CN of certificate to create
|
|
551
550
|
"""
|
|
552
551
|
return pulumi.get(self, "common_name")
|
|
553
552
|
|
|
554
553
|
@common_name.setter
|
|
555
|
-
def common_name(self, value: Optional[pulumi.Input[
|
|
554
|
+
def common_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
556
555
|
pulumi.set(self, "common_name", value)
|
|
557
556
|
|
|
558
|
-
@property
|
|
557
|
+
@_builtins.property
|
|
559
558
|
@pulumi.getter(name="excludeCnFromSans")
|
|
560
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[
|
|
559
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
561
560
|
"""
|
|
562
561
|
Flag to exclude CN from SANs
|
|
563
562
|
"""
|
|
564
563
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
565
564
|
|
|
566
565
|
@exclude_cn_from_sans.setter
|
|
567
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[
|
|
566
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
568
567
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
569
568
|
|
|
570
|
-
@property
|
|
569
|
+
@_builtins.property
|
|
571
570
|
@pulumi.getter
|
|
572
|
-
def expiration(self) -> Optional[pulumi.Input[
|
|
571
|
+
def expiration(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
573
572
|
"""
|
|
574
573
|
The expiration date of the certificate in unix epoch format
|
|
575
574
|
"""
|
|
576
575
|
return pulumi.get(self, "expiration")
|
|
577
576
|
|
|
578
577
|
@expiration.setter
|
|
579
|
-
def expiration(self, value: Optional[pulumi.Input[
|
|
578
|
+
def expiration(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
580
579
|
pulumi.set(self, "expiration", value)
|
|
581
580
|
|
|
582
|
-
@property
|
|
581
|
+
@_builtins.property
|
|
583
582
|
@pulumi.getter
|
|
584
|
-
def format(self) -> Optional[pulumi.Input[
|
|
583
|
+
def format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
585
584
|
"""
|
|
586
585
|
The format of data
|
|
587
586
|
"""
|
|
588
587
|
return pulumi.get(self, "format")
|
|
589
588
|
|
|
590
589
|
@format.setter
|
|
591
|
-
def format(self, value: Optional[pulumi.Input[
|
|
590
|
+
def format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
592
591
|
pulumi.set(self, "format", value)
|
|
593
592
|
|
|
594
|
-
@property
|
|
593
|
+
@_builtins.property
|
|
595
594
|
@pulumi.getter(name="ipSans")
|
|
596
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
595
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
597
596
|
"""
|
|
598
597
|
List of alternative IPs
|
|
599
598
|
"""
|
|
600
599
|
return pulumi.get(self, "ip_sans")
|
|
601
600
|
|
|
602
601
|
@ip_sans.setter
|
|
603
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
602
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
604
603
|
pulumi.set(self, "ip_sans", value)
|
|
605
604
|
|
|
606
|
-
@property
|
|
605
|
+
@_builtins.property
|
|
607
606
|
@pulumi.getter(name="issuerRef")
|
|
608
|
-
def issuer_ref(self) -> Optional[pulumi.Input[
|
|
607
|
+
def issuer_ref(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
609
608
|
"""
|
|
610
609
|
Specifies the default issuer of this request.
|
|
611
610
|
"""
|
|
612
611
|
return pulumi.get(self, "issuer_ref")
|
|
613
612
|
|
|
614
613
|
@issuer_ref.setter
|
|
615
|
-
def issuer_ref(self, value: Optional[pulumi.Input[
|
|
614
|
+
def issuer_ref(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
616
615
|
pulumi.set(self, "issuer_ref", value)
|
|
617
616
|
|
|
618
|
-
@property
|
|
617
|
+
@_builtins.property
|
|
619
618
|
@pulumi.getter(name="issuingCa")
|
|
620
|
-
def issuing_ca(self) -> Optional[pulumi.Input[
|
|
619
|
+
def issuing_ca(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
621
620
|
"""
|
|
622
621
|
The issuing CA
|
|
623
622
|
"""
|
|
624
623
|
return pulumi.get(self, "issuing_ca")
|
|
625
624
|
|
|
626
625
|
@issuing_ca.setter
|
|
627
|
-
def issuing_ca(self, value: Optional[pulumi.Input[
|
|
626
|
+
def issuing_ca(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
628
627
|
pulumi.set(self, "issuing_ca", value)
|
|
629
628
|
|
|
630
|
-
@property
|
|
629
|
+
@_builtins.property
|
|
631
630
|
@pulumi.getter(name="minSecondsRemaining")
|
|
632
|
-
def min_seconds_remaining(self) -> Optional[pulumi.Input[
|
|
631
|
+
def min_seconds_remaining(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
633
632
|
"""
|
|
634
633
|
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
635
634
|
"""
|
|
636
635
|
return pulumi.get(self, "min_seconds_remaining")
|
|
637
636
|
|
|
638
637
|
@min_seconds_remaining.setter
|
|
639
|
-
def min_seconds_remaining(self, value: Optional[pulumi.Input[
|
|
638
|
+
def min_seconds_remaining(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
640
639
|
pulumi.set(self, "min_seconds_remaining", value)
|
|
641
640
|
|
|
642
|
-
@property
|
|
641
|
+
@_builtins.property
|
|
643
642
|
@pulumi.getter
|
|
644
|
-
def name(self) -> Optional[pulumi.Input[
|
|
643
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
645
644
|
"""
|
|
646
645
|
Name of the role to create the certificate against
|
|
647
646
|
"""
|
|
648
647
|
return pulumi.get(self, "name")
|
|
649
648
|
|
|
650
649
|
@name.setter
|
|
651
|
-
def name(self, value: Optional[pulumi.Input[
|
|
650
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
652
651
|
pulumi.set(self, "name", value)
|
|
653
652
|
|
|
654
|
-
@property
|
|
653
|
+
@_builtins.property
|
|
655
654
|
@pulumi.getter
|
|
656
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
655
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
657
656
|
"""
|
|
658
657
|
The namespace to provision the resource in.
|
|
659
658
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -663,151 +662,151 @@ class _SecretBackendCertState:
|
|
|
663
662
|
return pulumi.get(self, "namespace")
|
|
664
663
|
|
|
665
664
|
@namespace.setter
|
|
666
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
665
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
667
666
|
pulumi.set(self, "namespace", value)
|
|
668
667
|
|
|
669
|
-
@property
|
|
668
|
+
@_builtins.property
|
|
670
669
|
@pulumi.getter(name="notAfter")
|
|
671
|
-
def not_after(self) -> Optional[pulumi.Input[
|
|
670
|
+
def not_after(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
672
671
|
"""
|
|
673
672
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
674
673
|
"""
|
|
675
674
|
return pulumi.get(self, "not_after")
|
|
676
675
|
|
|
677
676
|
@not_after.setter
|
|
678
|
-
def not_after(self, value: Optional[pulumi.Input[
|
|
677
|
+
def not_after(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
679
678
|
pulumi.set(self, "not_after", value)
|
|
680
679
|
|
|
681
|
-
@property
|
|
680
|
+
@_builtins.property
|
|
682
681
|
@pulumi.getter(name="otherSans")
|
|
683
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
682
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
684
683
|
"""
|
|
685
684
|
List of other SANs
|
|
686
685
|
"""
|
|
687
686
|
return pulumi.get(self, "other_sans")
|
|
688
687
|
|
|
689
688
|
@other_sans.setter
|
|
690
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
689
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
691
690
|
pulumi.set(self, "other_sans", value)
|
|
692
691
|
|
|
693
|
-
@property
|
|
692
|
+
@_builtins.property
|
|
694
693
|
@pulumi.getter(name="privateKey")
|
|
695
|
-
def private_key(self) -> Optional[pulumi.Input[
|
|
694
|
+
def private_key(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
696
695
|
"""
|
|
697
696
|
The private key
|
|
698
697
|
"""
|
|
699
698
|
return pulumi.get(self, "private_key")
|
|
700
699
|
|
|
701
700
|
@private_key.setter
|
|
702
|
-
def private_key(self, value: Optional[pulumi.Input[
|
|
701
|
+
def private_key(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
703
702
|
pulumi.set(self, "private_key", value)
|
|
704
703
|
|
|
705
|
-
@property
|
|
704
|
+
@_builtins.property
|
|
706
705
|
@pulumi.getter(name="privateKeyFormat")
|
|
707
|
-
def private_key_format(self) -> Optional[pulumi.Input[
|
|
706
|
+
def private_key_format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
708
707
|
"""
|
|
709
708
|
The private key format
|
|
710
709
|
"""
|
|
711
710
|
return pulumi.get(self, "private_key_format")
|
|
712
711
|
|
|
713
712
|
@private_key_format.setter
|
|
714
|
-
def private_key_format(self, value: Optional[pulumi.Input[
|
|
713
|
+
def private_key_format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
715
714
|
pulumi.set(self, "private_key_format", value)
|
|
716
715
|
|
|
717
|
-
@property
|
|
716
|
+
@_builtins.property
|
|
718
717
|
@pulumi.getter(name="privateKeyType")
|
|
719
|
-
def private_key_type(self) -> Optional[pulumi.Input[
|
|
718
|
+
def private_key_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
720
719
|
"""
|
|
721
720
|
The private key type
|
|
722
721
|
"""
|
|
723
722
|
return pulumi.get(self, "private_key_type")
|
|
724
723
|
|
|
725
724
|
@private_key_type.setter
|
|
726
|
-
def private_key_type(self, value: Optional[pulumi.Input[
|
|
725
|
+
def private_key_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
727
726
|
pulumi.set(self, "private_key_type", value)
|
|
728
727
|
|
|
729
|
-
@property
|
|
728
|
+
@_builtins.property
|
|
730
729
|
@pulumi.getter(name="renewPending")
|
|
731
|
-
def renew_pending(self) -> Optional[pulumi.Input[
|
|
730
|
+
def renew_pending(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
732
731
|
"""
|
|
733
732
|
`true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
734
733
|
"""
|
|
735
734
|
return pulumi.get(self, "renew_pending")
|
|
736
735
|
|
|
737
736
|
@renew_pending.setter
|
|
738
|
-
def renew_pending(self, value: Optional[pulumi.Input[
|
|
737
|
+
def renew_pending(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
739
738
|
pulumi.set(self, "renew_pending", value)
|
|
740
739
|
|
|
741
|
-
@property
|
|
740
|
+
@_builtins.property
|
|
742
741
|
@pulumi.getter
|
|
743
|
-
def revoke(self) -> Optional[pulumi.Input[
|
|
742
|
+
def revoke(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
744
743
|
"""
|
|
745
744
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
746
745
|
"""
|
|
747
746
|
return pulumi.get(self, "revoke")
|
|
748
747
|
|
|
749
748
|
@revoke.setter
|
|
750
|
-
def revoke(self, value: Optional[pulumi.Input[
|
|
749
|
+
def revoke(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
751
750
|
pulumi.set(self, "revoke", value)
|
|
752
751
|
|
|
753
|
-
@property
|
|
752
|
+
@_builtins.property
|
|
754
753
|
@pulumi.getter(name="revokeWithKey")
|
|
755
|
-
def revoke_with_key(self) -> Optional[pulumi.Input[
|
|
754
|
+
def revoke_with_key(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
756
755
|
"""
|
|
757
756
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
758
757
|
"""
|
|
759
758
|
return pulumi.get(self, "revoke_with_key")
|
|
760
759
|
|
|
761
760
|
@revoke_with_key.setter
|
|
762
|
-
def revoke_with_key(self, value: Optional[pulumi.Input[
|
|
761
|
+
def revoke_with_key(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
763
762
|
pulumi.set(self, "revoke_with_key", value)
|
|
764
763
|
|
|
765
|
-
@property
|
|
764
|
+
@_builtins.property
|
|
766
765
|
@pulumi.getter(name="serialNumber")
|
|
767
|
-
def serial_number(self) -> Optional[pulumi.Input[
|
|
766
|
+
def serial_number(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
768
767
|
"""
|
|
769
768
|
The serial number
|
|
770
769
|
"""
|
|
771
770
|
return pulumi.get(self, "serial_number")
|
|
772
771
|
|
|
773
772
|
@serial_number.setter
|
|
774
|
-
def serial_number(self, value: Optional[pulumi.Input[
|
|
773
|
+
def serial_number(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
775
774
|
pulumi.set(self, "serial_number", value)
|
|
776
775
|
|
|
777
|
-
@property
|
|
776
|
+
@_builtins.property
|
|
778
777
|
@pulumi.getter
|
|
779
|
-
def ttl(self) -> Optional[pulumi.Input[
|
|
778
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
780
779
|
"""
|
|
781
780
|
Time to live
|
|
782
781
|
"""
|
|
783
782
|
return pulumi.get(self, "ttl")
|
|
784
783
|
|
|
785
784
|
@ttl.setter
|
|
786
|
-
def ttl(self, value: Optional[pulumi.Input[
|
|
785
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
787
786
|
pulumi.set(self, "ttl", value)
|
|
788
787
|
|
|
789
|
-
@property
|
|
788
|
+
@_builtins.property
|
|
790
789
|
@pulumi.getter(name="uriSans")
|
|
791
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
790
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
792
791
|
"""
|
|
793
792
|
List of alternative URIs
|
|
794
793
|
"""
|
|
795
794
|
return pulumi.get(self, "uri_sans")
|
|
796
795
|
|
|
797
796
|
@uri_sans.setter
|
|
798
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
797
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
799
798
|
pulumi.set(self, "uri_sans", value)
|
|
800
799
|
|
|
801
|
-
@property
|
|
800
|
+
@_builtins.property
|
|
802
801
|
@pulumi.getter(name="userIds")
|
|
803
|
-
def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
802
|
+
def user_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
804
803
|
"""
|
|
805
804
|
List of Subject User IDs
|
|
806
805
|
"""
|
|
807
806
|
return pulumi.get(self, "user_ids")
|
|
808
807
|
|
|
809
808
|
@user_ids.setter
|
|
810
|
-
def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
809
|
+
def user_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
811
810
|
pulumi.set(self, "user_ids", value)
|
|
812
811
|
|
|
813
812
|
|
|
@@ -817,26 +816,26 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
817
816
|
def __init__(__self__,
|
|
818
817
|
resource_name: str,
|
|
819
818
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
820
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
821
|
-
auto_renew: Optional[pulumi.Input[
|
|
822
|
-
backend: Optional[pulumi.Input[
|
|
823
|
-
cert_metadata: Optional[pulumi.Input[
|
|
824
|
-
common_name: Optional[pulumi.Input[
|
|
825
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
826
|
-
format: Optional[pulumi.Input[
|
|
827
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
828
|
-
issuer_ref: Optional[pulumi.Input[
|
|
829
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
830
|
-
name: Optional[pulumi.Input[
|
|
831
|
-
namespace: Optional[pulumi.Input[
|
|
832
|
-
not_after: Optional[pulumi.Input[
|
|
833
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
834
|
-
private_key_format: Optional[pulumi.Input[
|
|
835
|
-
revoke: Optional[pulumi.Input[
|
|
836
|
-
revoke_with_key: Optional[pulumi.Input[
|
|
837
|
-
ttl: Optional[pulumi.Input[
|
|
838
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
839
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
819
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
820
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
821
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
822
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
823
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
824
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
825
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
826
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
827
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
828
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
829
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
830
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
831
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
832
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
833
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
834
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
835
|
+
revoke_with_key: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
836
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
837
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
838
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
840
839
|
__props__=None):
|
|
841
840
|
"""
|
|
842
841
|
## Example Usage
|
|
@@ -845,7 +844,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
845
844
|
import pulumi
|
|
846
845
|
import pulumi_vault as vault
|
|
847
846
|
|
|
848
|
-
app = vault.
|
|
847
|
+
app = vault.pkisecret.SecretBackendCert("app",
|
|
849
848
|
backend=intermediate["path"],
|
|
850
849
|
name=test["name"],
|
|
851
850
|
common_name="app.my.domain",
|
|
@@ -854,29 +853,29 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
854
853
|
|
|
855
854
|
:param str resource_name: The name of the resource.
|
|
856
855
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
857
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
858
|
-
:param pulumi.Input[
|
|
859
|
-
:param pulumi.Input[
|
|
860
|
-
:param pulumi.Input[
|
|
861
|
-
:param pulumi.Input[
|
|
862
|
-
:param pulumi.Input[
|
|
863
|
-
:param pulumi.Input[
|
|
864
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
865
|
-
:param pulumi.Input[
|
|
866
|
-
:param pulumi.Input[
|
|
867
|
-
:param pulumi.Input[
|
|
868
|
-
:param pulumi.Input[
|
|
856
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
857
|
+
:param pulumi.Input[_builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
858
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
859
|
+
:param pulumi.Input[_builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
860
|
+
:param pulumi.Input[_builtins.str] common_name: CN of certificate to create
|
|
861
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
862
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
863
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
864
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request.
|
|
865
|
+
:param pulumi.Input[_builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
866
|
+
:param pulumi.Input[_builtins.str] name: Name of the role to create the certificate against
|
|
867
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
869
868
|
The value should not contain leading or trailing forward slashes.
|
|
870
869
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
871
870
|
*Available only for Vault Enterprise*.
|
|
872
|
-
:param pulumi.Input[
|
|
873
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
874
|
-
:param pulumi.Input[
|
|
875
|
-
:param pulumi.Input[
|
|
876
|
-
:param pulumi.Input[
|
|
877
|
-
:param pulumi.Input[
|
|
878
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
879
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
871
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
872
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
873
|
+
:param pulumi.Input[_builtins.str] private_key_format: The private key format
|
|
874
|
+
:param pulumi.Input[_builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
875
|
+
:param pulumi.Input[_builtins.bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
876
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
877
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
878
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] user_ids: List of Subject User IDs
|
|
880
879
|
"""
|
|
881
880
|
...
|
|
882
881
|
@overload
|
|
@@ -891,7 +890,7 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
891
890
|
import pulumi
|
|
892
891
|
import pulumi_vault as vault
|
|
893
892
|
|
|
894
|
-
app = vault.
|
|
893
|
+
app = vault.pkisecret.SecretBackendCert("app",
|
|
895
894
|
backend=intermediate["path"],
|
|
896
895
|
name=test["name"],
|
|
897
896
|
common_name="app.my.domain",
|
|
@@ -913,26 +912,26 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
913
912
|
def _internal_init(__self__,
|
|
914
913
|
resource_name: str,
|
|
915
914
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
916
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
917
|
-
auto_renew: Optional[pulumi.Input[
|
|
918
|
-
backend: Optional[pulumi.Input[
|
|
919
|
-
cert_metadata: Optional[pulumi.Input[
|
|
920
|
-
common_name: Optional[pulumi.Input[
|
|
921
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
922
|
-
format: Optional[pulumi.Input[
|
|
923
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
924
|
-
issuer_ref: Optional[pulumi.Input[
|
|
925
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
926
|
-
name: Optional[pulumi.Input[
|
|
927
|
-
namespace: Optional[pulumi.Input[
|
|
928
|
-
not_after: Optional[pulumi.Input[
|
|
929
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
930
|
-
private_key_format: Optional[pulumi.Input[
|
|
931
|
-
revoke: Optional[pulumi.Input[
|
|
932
|
-
revoke_with_key: Optional[pulumi.Input[
|
|
933
|
-
ttl: Optional[pulumi.Input[
|
|
934
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
935
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
915
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
916
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
917
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
918
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
919
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
920
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
921
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
922
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
923
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
924
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
925
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
926
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
927
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
928
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
929
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
930
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
931
|
+
revoke_with_key: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
932
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
933
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
934
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
936
935
|
__props__=None):
|
|
937
936
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
938
937
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -986,34 +985,34 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
986
985
|
def get(resource_name: str,
|
|
987
986
|
id: pulumi.Input[str],
|
|
988
987
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
989
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
990
|
-
auto_renew: Optional[pulumi.Input[
|
|
991
|
-
backend: Optional[pulumi.Input[
|
|
992
|
-
ca_chain: Optional[pulumi.Input[
|
|
993
|
-
cert_metadata: Optional[pulumi.Input[
|
|
994
|
-
certificate: Optional[pulumi.Input[
|
|
995
|
-
common_name: Optional[pulumi.Input[
|
|
996
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
997
|
-
expiration: Optional[pulumi.Input[
|
|
998
|
-
format: Optional[pulumi.Input[
|
|
999
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1000
|
-
issuer_ref: Optional[pulumi.Input[
|
|
1001
|
-
issuing_ca: Optional[pulumi.Input[
|
|
1002
|
-
min_seconds_remaining: Optional[pulumi.Input[
|
|
1003
|
-
name: Optional[pulumi.Input[
|
|
1004
|
-
namespace: Optional[pulumi.Input[
|
|
1005
|
-
not_after: Optional[pulumi.Input[
|
|
1006
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1007
|
-
private_key: Optional[pulumi.Input[
|
|
1008
|
-
private_key_format: Optional[pulumi.Input[
|
|
1009
|
-
private_key_type: Optional[pulumi.Input[
|
|
1010
|
-
renew_pending: Optional[pulumi.Input[
|
|
1011
|
-
revoke: Optional[pulumi.Input[
|
|
1012
|
-
revoke_with_key: Optional[pulumi.Input[
|
|
1013
|
-
serial_number: Optional[pulumi.Input[
|
|
1014
|
-
ttl: Optional[pulumi.Input[
|
|
1015
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1016
|
-
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
988
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
989
|
+
auto_renew: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
990
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
991
|
+
ca_chain: Optional[pulumi.Input[_builtins.str]] = None,
|
|
992
|
+
cert_metadata: Optional[pulumi.Input[_builtins.str]] = None,
|
|
993
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
994
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
995
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
996
|
+
expiration: Optional[pulumi.Input[_builtins.int]] = None,
|
|
997
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
998
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
999
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1000
|
+
issuing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1001
|
+
min_seconds_remaining: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1002
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1003
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1004
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1005
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1006
|
+
private_key: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1007
|
+
private_key_format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1008
|
+
private_key_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1009
|
+
renew_pending: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1010
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1011
|
+
revoke_with_key: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1012
|
+
serial_number: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1013
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1014
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1015
|
+
user_ids: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None) -> 'SecretBackendCert':
|
|
1017
1016
|
"""
|
|
1018
1017
|
Get an existing SecretBackendCert resource's state with the given name, id, and optional extra
|
|
1019
1018
|
properties used to qualify the lookup.
|
|
@@ -1021,37 +1020,37 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1021
1020
|
:param str resource_name: The unique name of the resulting resource.
|
|
1022
1021
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
1023
1022
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1024
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1025
|
-
:param pulumi.Input[
|
|
1026
|
-
:param pulumi.Input[
|
|
1027
|
-
:param pulumi.Input[
|
|
1028
|
-
:param pulumi.Input[
|
|
1029
|
-
:param pulumi.Input[
|
|
1030
|
-
:param pulumi.Input[
|
|
1031
|
-
:param pulumi.Input[
|
|
1032
|
-
:param pulumi.Input[
|
|
1033
|
-
:param pulumi.Input[
|
|
1034
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1035
|
-
:param pulumi.Input[
|
|
1036
|
-
:param pulumi.Input[
|
|
1037
|
-
:param pulumi.Input[
|
|
1038
|
-
:param pulumi.Input[
|
|
1039
|
-
:param pulumi.Input[
|
|
1023
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
1024
|
+
:param pulumi.Input[_builtins.bool] auto_renew: If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
1025
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
1026
|
+
:param pulumi.Input[_builtins.str] ca_chain: The CA chain
|
|
1027
|
+
:param pulumi.Input[_builtins.str] cert_metadata: A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
1028
|
+
:param pulumi.Input[_builtins.str] certificate: The certificate
|
|
1029
|
+
:param pulumi.Input[_builtins.str] common_name: CN of certificate to create
|
|
1030
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
1031
|
+
:param pulumi.Input[_builtins.int] expiration: The expiration date of the certificate in unix epoch format
|
|
1032
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
1033
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
1034
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request.
|
|
1035
|
+
:param pulumi.Input[_builtins.str] issuing_ca: The issuing CA
|
|
1036
|
+
:param pulumi.Input[_builtins.int] min_seconds_remaining: Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
1037
|
+
:param pulumi.Input[_builtins.str] name: Name of the role to create the certificate against
|
|
1038
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
1040
1039
|
The value should not contain leading or trailing forward slashes.
|
|
1041
1040
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
1042
1041
|
*Available only for Vault Enterprise*.
|
|
1043
|
-
:param pulumi.Input[
|
|
1044
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1045
|
-
:param pulumi.Input[
|
|
1046
|
-
:param pulumi.Input[
|
|
1047
|
-
:param pulumi.Input[
|
|
1048
|
-
:param pulumi.Input[
|
|
1049
|
-
:param pulumi.Input[
|
|
1050
|
-
:param pulumi.Input[
|
|
1051
|
-
:param pulumi.Input[
|
|
1052
|
-
:param pulumi.Input[
|
|
1053
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1054
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1042
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1043
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
1044
|
+
:param pulumi.Input[_builtins.str] private_key: The private key
|
|
1045
|
+
:param pulumi.Input[_builtins.str] private_key_format: The private key format
|
|
1046
|
+
:param pulumi.Input[_builtins.str] private_key_type: The private key type
|
|
1047
|
+
:param pulumi.Input[_builtins.bool] renew_pending: `true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
1048
|
+
:param pulumi.Input[_builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
1049
|
+
:param pulumi.Input[_builtins.bool] revoke_with_key: If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
1050
|
+
:param pulumi.Input[_builtins.str] serial_number: The serial number
|
|
1051
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
1052
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
1053
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] user_ids: List of Subject User IDs
|
|
1055
1054
|
"""
|
|
1056
1055
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
1057
1056
|
|
|
@@ -1087,129 +1086,129 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1087
1086
|
__props__.__dict__["user_ids"] = user_ids
|
|
1088
1087
|
return SecretBackendCert(resource_name, opts=opts, __props__=__props__)
|
|
1089
1088
|
|
|
1090
|
-
@property
|
|
1089
|
+
@_builtins.property
|
|
1091
1090
|
@pulumi.getter(name="altNames")
|
|
1092
|
-
def alt_names(self) -> pulumi.Output[Optional[Sequence[
|
|
1091
|
+
def alt_names(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1093
1092
|
"""
|
|
1094
1093
|
List of alternative names
|
|
1095
1094
|
"""
|
|
1096
1095
|
return pulumi.get(self, "alt_names")
|
|
1097
1096
|
|
|
1098
|
-
@property
|
|
1097
|
+
@_builtins.property
|
|
1099
1098
|
@pulumi.getter(name="autoRenew")
|
|
1100
|
-
def auto_renew(self) -> pulumi.Output[Optional[
|
|
1099
|
+
def auto_renew(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1101
1100
|
"""
|
|
1102
1101
|
If set to `true`, certs will be renewed if the expiration is within `min_seconds_remaining`. Default `false`
|
|
1103
1102
|
"""
|
|
1104
1103
|
return pulumi.get(self, "auto_renew")
|
|
1105
1104
|
|
|
1106
|
-
@property
|
|
1105
|
+
@_builtins.property
|
|
1107
1106
|
@pulumi.getter
|
|
1108
|
-
def backend(self) -> pulumi.Output[
|
|
1107
|
+
def backend(self) -> pulumi.Output[_builtins.str]:
|
|
1109
1108
|
"""
|
|
1110
1109
|
The PKI secret backend the resource belongs to.
|
|
1111
1110
|
"""
|
|
1112
1111
|
return pulumi.get(self, "backend")
|
|
1113
1112
|
|
|
1114
|
-
@property
|
|
1113
|
+
@_builtins.property
|
|
1115
1114
|
@pulumi.getter(name="caChain")
|
|
1116
|
-
def ca_chain(self) -> pulumi.Output[
|
|
1115
|
+
def ca_chain(self) -> pulumi.Output[_builtins.str]:
|
|
1117
1116
|
"""
|
|
1118
1117
|
The CA chain
|
|
1119
1118
|
"""
|
|
1120
1119
|
return pulumi.get(self, "ca_chain")
|
|
1121
1120
|
|
|
1122
|
-
@property
|
|
1121
|
+
@_builtins.property
|
|
1123
1122
|
@pulumi.getter(name="certMetadata")
|
|
1124
|
-
def cert_metadata(self) -> pulumi.Output[Optional[
|
|
1123
|
+
def cert_metadata(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1125
1124
|
"""
|
|
1126
1125
|
A base 64 encoded value or an empty string to associate with the certificate's serial number. The role's no_store_metadata must be set to false, otherwise an error is returned when specified.
|
|
1127
1126
|
"""
|
|
1128
1127
|
return pulumi.get(self, "cert_metadata")
|
|
1129
1128
|
|
|
1130
|
-
@property
|
|
1129
|
+
@_builtins.property
|
|
1131
1130
|
@pulumi.getter
|
|
1132
|
-
def certificate(self) -> pulumi.Output[
|
|
1131
|
+
def certificate(self) -> pulumi.Output[_builtins.str]:
|
|
1133
1132
|
"""
|
|
1134
1133
|
The certificate
|
|
1135
1134
|
"""
|
|
1136
1135
|
return pulumi.get(self, "certificate")
|
|
1137
1136
|
|
|
1138
|
-
@property
|
|
1137
|
+
@_builtins.property
|
|
1139
1138
|
@pulumi.getter(name="commonName")
|
|
1140
|
-
def common_name(self) -> pulumi.Output[
|
|
1139
|
+
def common_name(self) -> pulumi.Output[_builtins.str]:
|
|
1141
1140
|
"""
|
|
1142
1141
|
CN of certificate to create
|
|
1143
1142
|
"""
|
|
1144
1143
|
return pulumi.get(self, "common_name")
|
|
1145
1144
|
|
|
1146
|
-
@property
|
|
1145
|
+
@_builtins.property
|
|
1147
1146
|
@pulumi.getter(name="excludeCnFromSans")
|
|
1148
|
-
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[
|
|
1147
|
+
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1149
1148
|
"""
|
|
1150
1149
|
Flag to exclude CN from SANs
|
|
1151
1150
|
"""
|
|
1152
1151
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
1153
1152
|
|
|
1154
|
-
@property
|
|
1153
|
+
@_builtins.property
|
|
1155
1154
|
@pulumi.getter
|
|
1156
|
-
def expiration(self) -> pulumi.Output[
|
|
1155
|
+
def expiration(self) -> pulumi.Output[_builtins.int]:
|
|
1157
1156
|
"""
|
|
1158
1157
|
The expiration date of the certificate in unix epoch format
|
|
1159
1158
|
"""
|
|
1160
1159
|
return pulumi.get(self, "expiration")
|
|
1161
1160
|
|
|
1162
|
-
@property
|
|
1161
|
+
@_builtins.property
|
|
1163
1162
|
@pulumi.getter
|
|
1164
|
-
def format(self) -> pulumi.Output[Optional[
|
|
1163
|
+
def format(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1165
1164
|
"""
|
|
1166
1165
|
The format of data
|
|
1167
1166
|
"""
|
|
1168
1167
|
return pulumi.get(self, "format")
|
|
1169
1168
|
|
|
1170
|
-
@property
|
|
1169
|
+
@_builtins.property
|
|
1171
1170
|
@pulumi.getter(name="ipSans")
|
|
1172
|
-
def ip_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1171
|
+
def ip_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1173
1172
|
"""
|
|
1174
1173
|
List of alternative IPs
|
|
1175
1174
|
"""
|
|
1176
1175
|
return pulumi.get(self, "ip_sans")
|
|
1177
1176
|
|
|
1178
|
-
@property
|
|
1177
|
+
@_builtins.property
|
|
1179
1178
|
@pulumi.getter(name="issuerRef")
|
|
1180
|
-
def issuer_ref(self) -> pulumi.Output[Optional[
|
|
1179
|
+
def issuer_ref(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1181
1180
|
"""
|
|
1182
1181
|
Specifies the default issuer of this request.
|
|
1183
1182
|
"""
|
|
1184
1183
|
return pulumi.get(self, "issuer_ref")
|
|
1185
1184
|
|
|
1186
|
-
@property
|
|
1185
|
+
@_builtins.property
|
|
1187
1186
|
@pulumi.getter(name="issuingCa")
|
|
1188
|
-
def issuing_ca(self) -> pulumi.Output[
|
|
1187
|
+
def issuing_ca(self) -> pulumi.Output[_builtins.str]:
|
|
1189
1188
|
"""
|
|
1190
1189
|
The issuing CA
|
|
1191
1190
|
"""
|
|
1192
1191
|
return pulumi.get(self, "issuing_ca")
|
|
1193
1192
|
|
|
1194
|
-
@property
|
|
1193
|
+
@_builtins.property
|
|
1195
1194
|
@pulumi.getter(name="minSecondsRemaining")
|
|
1196
|
-
def min_seconds_remaining(self) -> pulumi.Output[Optional[
|
|
1195
|
+
def min_seconds_remaining(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1197
1196
|
"""
|
|
1198
1197
|
Generate a new certificate when the expiration is within this number of seconds, default is 604800 (7 days)
|
|
1199
1198
|
"""
|
|
1200
1199
|
return pulumi.get(self, "min_seconds_remaining")
|
|
1201
1200
|
|
|
1202
|
-
@property
|
|
1201
|
+
@_builtins.property
|
|
1203
1202
|
@pulumi.getter
|
|
1204
|
-
def name(self) -> pulumi.Output[
|
|
1203
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
|
1205
1204
|
"""
|
|
1206
1205
|
Name of the role to create the certificate against
|
|
1207
1206
|
"""
|
|
1208
1207
|
return pulumi.get(self, "name")
|
|
1209
1208
|
|
|
1210
|
-
@property
|
|
1209
|
+
@_builtins.property
|
|
1211
1210
|
@pulumi.getter
|
|
1212
|
-
def namespace(self) -> pulumi.Output[Optional[
|
|
1211
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1213
1212
|
"""
|
|
1214
1213
|
The namespace to provision the resource in.
|
|
1215
1214
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1218,97 +1217,97 @@ class SecretBackendCert(pulumi.CustomResource):
|
|
|
1218
1217
|
"""
|
|
1219
1218
|
return pulumi.get(self, "namespace")
|
|
1220
1219
|
|
|
1221
|
-
@property
|
|
1220
|
+
@_builtins.property
|
|
1222
1221
|
@pulumi.getter(name="notAfter")
|
|
1223
|
-
def not_after(self) -> pulumi.Output[Optional[
|
|
1222
|
+
def not_after(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1224
1223
|
"""
|
|
1225
1224
|
Set the Not After field of the certificate with specified date value. The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1226
1225
|
"""
|
|
1227
1226
|
return pulumi.get(self, "not_after")
|
|
1228
1227
|
|
|
1229
|
-
@property
|
|
1228
|
+
@_builtins.property
|
|
1230
1229
|
@pulumi.getter(name="otherSans")
|
|
1231
|
-
def other_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1230
|
+
def other_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1232
1231
|
"""
|
|
1233
1232
|
List of other SANs
|
|
1234
1233
|
"""
|
|
1235
1234
|
return pulumi.get(self, "other_sans")
|
|
1236
1235
|
|
|
1237
|
-
@property
|
|
1236
|
+
@_builtins.property
|
|
1238
1237
|
@pulumi.getter(name="privateKey")
|
|
1239
|
-
def private_key(self) -> pulumi.Output[
|
|
1238
|
+
def private_key(self) -> pulumi.Output[_builtins.str]:
|
|
1240
1239
|
"""
|
|
1241
1240
|
The private key
|
|
1242
1241
|
"""
|
|
1243
1242
|
return pulumi.get(self, "private_key")
|
|
1244
1243
|
|
|
1245
|
-
@property
|
|
1244
|
+
@_builtins.property
|
|
1246
1245
|
@pulumi.getter(name="privateKeyFormat")
|
|
1247
|
-
def private_key_format(self) -> pulumi.Output[Optional[
|
|
1246
|
+
def private_key_format(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1248
1247
|
"""
|
|
1249
1248
|
The private key format
|
|
1250
1249
|
"""
|
|
1251
1250
|
return pulumi.get(self, "private_key_format")
|
|
1252
1251
|
|
|
1253
|
-
@property
|
|
1252
|
+
@_builtins.property
|
|
1254
1253
|
@pulumi.getter(name="privateKeyType")
|
|
1255
|
-
def private_key_type(self) -> pulumi.Output[
|
|
1254
|
+
def private_key_type(self) -> pulumi.Output[_builtins.str]:
|
|
1256
1255
|
"""
|
|
1257
1256
|
The private key type
|
|
1258
1257
|
"""
|
|
1259
1258
|
return pulumi.get(self, "private_key_type")
|
|
1260
1259
|
|
|
1261
|
-
@property
|
|
1260
|
+
@_builtins.property
|
|
1262
1261
|
@pulumi.getter(name="renewPending")
|
|
1263
|
-
def renew_pending(self) -> pulumi.Output[
|
|
1262
|
+
def renew_pending(self) -> pulumi.Output[_builtins.bool]:
|
|
1264
1263
|
"""
|
|
1265
1264
|
`true` if the current time (during refresh) is after the start of the early renewal window declared by `min_seconds_remaining`, and `false` otherwise; if `auto_renew` is set to `true` then the provider will plan to replace the certificate once renewal is pending.
|
|
1266
1265
|
"""
|
|
1267
1266
|
return pulumi.get(self, "renew_pending")
|
|
1268
1267
|
|
|
1269
|
-
@property
|
|
1268
|
+
@_builtins.property
|
|
1270
1269
|
@pulumi.getter
|
|
1271
|
-
def revoke(self) -> pulumi.Output[Optional[
|
|
1270
|
+
def revoke(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1272
1271
|
"""
|
|
1273
1272
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke` PKI API. Conflicts with `revoke_with_key`. Default `false`.
|
|
1274
1273
|
"""
|
|
1275
1274
|
return pulumi.get(self, "revoke")
|
|
1276
1275
|
|
|
1277
|
-
@property
|
|
1276
|
+
@_builtins.property
|
|
1278
1277
|
@pulumi.getter(name="revokeWithKey")
|
|
1279
|
-
def revoke_with_key(self) -> pulumi.Output[Optional[
|
|
1278
|
+
def revoke_with_key(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1280
1279
|
"""
|
|
1281
1280
|
If set to `true`, the certificate will be revoked on resource destruction using the `revoke-with-key` PKI API. Conflicts with `revoke`. Default `false`
|
|
1282
1281
|
"""
|
|
1283
1282
|
return pulumi.get(self, "revoke_with_key")
|
|
1284
1283
|
|
|
1285
|
-
@property
|
|
1284
|
+
@_builtins.property
|
|
1286
1285
|
@pulumi.getter(name="serialNumber")
|
|
1287
|
-
def serial_number(self) -> pulumi.Output[
|
|
1286
|
+
def serial_number(self) -> pulumi.Output[_builtins.str]:
|
|
1288
1287
|
"""
|
|
1289
1288
|
The serial number
|
|
1290
1289
|
"""
|
|
1291
1290
|
return pulumi.get(self, "serial_number")
|
|
1292
1291
|
|
|
1293
|
-
@property
|
|
1292
|
+
@_builtins.property
|
|
1294
1293
|
@pulumi.getter
|
|
1295
|
-
def ttl(self) -> pulumi.Output[Optional[
|
|
1294
|
+
def ttl(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1296
1295
|
"""
|
|
1297
1296
|
Time to live
|
|
1298
1297
|
"""
|
|
1299
1298
|
return pulumi.get(self, "ttl")
|
|
1300
1299
|
|
|
1301
|
-
@property
|
|
1300
|
+
@_builtins.property
|
|
1302
1301
|
@pulumi.getter(name="uriSans")
|
|
1303
|
-
def uri_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1302
|
+
def uri_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1304
1303
|
"""
|
|
1305
1304
|
List of alternative URIs
|
|
1306
1305
|
"""
|
|
1307
1306
|
return pulumi.get(self, "uri_sans")
|
|
1308
1307
|
|
|
1309
|
-
@property
|
|
1308
|
+
@_builtins.property
|
|
1310
1309
|
@pulumi.getter(name="userIds")
|
|
1311
|
-
def user_ids(self) -> pulumi.Output[Optional[Sequence[
|
|
1310
|
+
def user_ids(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1312
1311
|
"""
|
|
1313
1312
|
List of Subject User IDs
|
|
1314
1313
|
"""
|