pulumi-vault 7.2.0a1752907825__py3-none-any.whl → 7.2.0a1753398491__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -1
- pulumi_vault/_inputs.py +672 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +409 -410
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +273 -274
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +239 -240
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +379 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +299 -300
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +353 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +222 -223
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +384 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +673 -674
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +333 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +256 -257
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +81 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +137 -138
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +29 -30
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +207 -208
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +120 -121
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +138 -139
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +336 -337
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0a1753398491.dist-info/RECORD +268 -0
- pulumi_vault-7.2.0a1752907825.dist-info/RECORD +0 -268
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/top_level.txt +0 -0
@@ -2,8 +2,7 @@
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
4
4
|
|
5
|
-
import builtins
|
6
|
-
import copy
|
5
|
+
import builtins as _builtins
|
7
6
|
import warnings
|
8
7
|
import sys
|
9
8
|
import pulumi
|
@@ -20,42 +19,42 @@ __all__ = ['SecretBackendCrlConfigArgs', 'SecretBackendCrlConfig']
|
|
20
19
|
@pulumi.input_type
|
21
20
|
class SecretBackendCrlConfigArgs:
|
22
21
|
def __init__(__self__, *,
|
23
|
-
backend: pulumi.Input[
|
24
|
-
auto_rebuild: Optional[pulumi.Input[
|
25
|
-
auto_rebuild_grace_period: Optional[pulumi.Input[
|
26
|
-
cross_cluster_revocation: Optional[pulumi.Input[
|
27
|
-
delta_rebuild_interval: Optional[pulumi.Input[
|
28
|
-
disable: Optional[pulumi.Input[
|
29
|
-
enable_delta: Optional[pulumi.Input[
|
30
|
-
expiry: Optional[pulumi.Input[
|
31
|
-
max_crl_entries: Optional[pulumi.Input[
|
32
|
-
namespace: Optional[pulumi.Input[
|
33
|
-
ocsp_disable: Optional[pulumi.Input[
|
34
|
-
ocsp_expiry: Optional[pulumi.Input[
|
35
|
-
unified_crl: Optional[pulumi.Input[
|
36
|
-
unified_crl_on_existing_paths: Optional[pulumi.Input[
|
22
|
+
backend: pulumi.Input[_builtins.str],
|
23
|
+
auto_rebuild: Optional[pulumi.Input[_builtins.bool]] = None,
|
24
|
+
auto_rebuild_grace_period: Optional[pulumi.Input[_builtins.str]] = None,
|
25
|
+
cross_cluster_revocation: Optional[pulumi.Input[_builtins.bool]] = None,
|
26
|
+
delta_rebuild_interval: Optional[pulumi.Input[_builtins.str]] = None,
|
27
|
+
disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
28
|
+
enable_delta: Optional[pulumi.Input[_builtins.bool]] = None,
|
29
|
+
expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
30
|
+
max_crl_entries: Optional[pulumi.Input[_builtins.int]] = None,
|
31
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
32
|
+
ocsp_disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
33
|
+
ocsp_expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
34
|
+
unified_crl: Optional[pulumi.Input[_builtins.bool]] = None,
|
35
|
+
unified_crl_on_existing_paths: Optional[pulumi.Input[_builtins.bool]] = None):
|
37
36
|
"""
|
38
37
|
The set of arguments for constructing a SecretBackendCrlConfig resource.
|
39
|
-
:param pulumi.Input[
|
40
|
-
:param pulumi.Input[
|
41
|
-
:param pulumi.Input[
|
42
|
-
:param pulumi.Input[
|
43
|
-
:param pulumi.Input[
|
44
|
-
:param pulumi.Input[
|
45
|
-
:param pulumi.Input[
|
38
|
+
:param pulumi.Input[_builtins.str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
|
39
|
+
:param pulumi.Input[_builtins.bool] auto_rebuild: Enables periodic rebuilding of the CRL upon expiry. **Vault 1.12+**
|
40
|
+
:param pulumi.Input[_builtins.str] auto_rebuild_grace_period: Grace period before CRL expiry to attempt rebuild of CRL. **Vault 1.12+**
|
41
|
+
:param pulumi.Input[_builtins.bool] cross_cluster_revocation: Enable cross-cluster revocation request queues. **Vault 1.13+**
|
42
|
+
:param pulumi.Input[_builtins.str] delta_rebuild_interval: Interval to check for new revocations on, to regenerate the delta CRL.
|
43
|
+
:param pulumi.Input[_builtins.bool] disable: Disables or enables CRL building.
|
44
|
+
:param pulumi.Input[_builtins.bool] enable_delta: Enables building of delta CRLs with up-to-date revocation information,
|
46
45
|
augmenting the last complete CRL. **Vault 1.12+**
|
47
|
-
:param pulumi.Input[
|
48
|
-
:param pulumi.Input[
|
46
|
+
:param pulumi.Input[_builtins.str] expiry: Specifies the time until expiration.
|
47
|
+
:param pulumi.Input[_builtins.int] max_crl_entries: The maximum number of entries a CRL can contain. This option exists to prevent
|
49
48
|
accidental runaway issuance/revocation from overloading Vault. If set to -1, the limit is disabled. **Vault 1.19**
|
50
|
-
:param pulumi.Input[
|
49
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
51
50
|
The value should not contain leading or trailing forward slashes.
|
52
51
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
53
52
|
*Available only for Vault Enterprise*.
|
54
|
-
:param pulumi.Input[
|
55
|
-
:param pulumi.Input[
|
53
|
+
:param pulumi.Input[_builtins.bool] ocsp_disable: Disables the OCSP responder in Vault. **Vault 1.12+**
|
54
|
+
:param pulumi.Input[_builtins.str] ocsp_expiry: The amount of time an OCSP response can be cached for, useful for OCSP stapling
|
56
55
|
refresh durations. **Vault 1.12+**
|
57
|
-
:param pulumi.Input[
|
58
|
-
:param pulumi.Input[
|
56
|
+
:param pulumi.Input[_builtins.bool] unified_crl: Enables unified CRL and OCSP building. **Vault 1.13+**
|
57
|
+
:param pulumi.Input[_builtins.bool] unified_crl_on_existing_paths: Enables serving the unified CRL and OCSP on the existing, previously
|
59
58
|
cluster-local paths. **Vault 1.13+**
|
60
59
|
"""
|
61
60
|
pulumi.set(__self__, "backend", backend)
|
@@ -86,81 +85,81 @@ class SecretBackendCrlConfigArgs:
|
|
86
85
|
if unified_crl_on_existing_paths is not None:
|
87
86
|
pulumi.set(__self__, "unified_crl_on_existing_paths", unified_crl_on_existing_paths)
|
88
87
|
|
89
|
-
@property
|
88
|
+
@_builtins.property
|
90
89
|
@pulumi.getter
|
91
|
-
def backend(self) -> pulumi.Input[
|
90
|
+
def backend(self) -> pulumi.Input[_builtins.str]:
|
92
91
|
"""
|
93
92
|
The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
|
94
93
|
"""
|
95
94
|
return pulumi.get(self, "backend")
|
96
95
|
|
97
96
|
@backend.setter
|
98
|
-
def backend(self, value: pulumi.Input[
|
97
|
+
def backend(self, value: pulumi.Input[_builtins.str]):
|
99
98
|
pulumi.set(self, "backend", value)
|
100
99
|
|
101
|
-
@property
|
100
|
+
@_builtins.property
|
102
101
|
@pulumi.getter(name="autoRebuild")
|
103
|
-
def auto_rebuild(self) -> Optional[pulumi.Input[
|
102
|
+
def auto_rebuild(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
104
103
|
"""
|
105
104
|
Enables periodic rebuilding of the CRL upon expiry. **Vault 1.12+**
|
106
105
|
"""
|
107
106
|
return pulumi.get(self, "auto_rebuild")
|
108
107
|
|
109
108
|
@auto_rebuild.setter
|
110
|
-
def auto_rebuild(self, value: Optional[pulumi.Input[
|
109
|
+
def auto_rebuild(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
111
110
|
pulumi.set(self, "auto_rebuild", value)
|
112
111
|
|
113
|
-
@property
|
112
|
+
@_builtins.property
|
114
113
|
@pulumi.getter(name="autoRebuildGracePeriod")
|
115
|
-
def auto_rebuild_grace_period(self) -> Optional[pulumi.Input[
|
114
|
+
def auto_rebuild_grace_period(self) -> Optional[pulumi.Input[_builtins.str]]:
|
116
115
|
"""
|
117
116
|
Grace period before CRL expiry to attempt rebuild of CRL. **Vault 1.12+**
|
118
117
|
"""
|
119
118
|
return pulumi.get(self, "auto_rebuild_grace_period")
|
120
119
|
|
121
120
|
@auto_rebuild_grace_period.setter
|
122
|
-
def auto_rebuild_grace_period(self, value: Optional[pulumi.Input[
|
121
|
+
def auto_rebuild_grace_period(self, value: Optional[pulumi.Input[_builtins.str]]):
|
123
122
|
pulumi.set(self, "auto_rebuild_grace_period", value)
|
124
123
|
|
125
|
-
@property
|
124
|
+
@_builtins.property
|
126
125
|
@pulumi.getter(name="crossClusterRevocation")
|
127
|
-
def cross_cluster_revocation(self) -> Optional[pulumi.Input[
|
126
|
+
def cross_cluster_revocation(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
128
127
|
"""
|
129
128
|
Enable cross-cluster revocation request queues. **Vault 1.13+**
|
130
129
|
"""
|
131
130
|
return pulumi.get(self, "cross_cluster_revocation")
|
132
131
|
|
133
132
|
@cross_cluster_revocation.setter
|
134
|
-
def cross_cluster_revocation(self, value: Optional[pulumi.Input[
|
133
|
+
def cross_cluster_revocation(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
135
134
|
pulumi.set(self, "cross_cluster_revocation", value)
|
136
135
|
|
137
|
-
@property
|
136
|
+
@_builtins.property
|
138
137
|
@pulumi.getter(name="deltaRebuildInterval")
|
139
|
-
def delta_rebuild_interval(self) -> Optional[pulumi.Input[
|
138
|
+
def delta_rebuild_interval(self) -> Optional[pulumi.Input[_builtins.str]]:
|
140
139
|
"""
|
141
140
|
Interval to check for new revocations on, to regenerate the delta CRL.
|
142
141
|
"""
|
143
142
|
return pulumi.get(self, "delta_rebuild_interval")
|
144
143
|
|
145
144
|
@delta_rebuild_interval.setter
|
146
|
-
def delta_rebuild_interval(self, value: Optional[pulumi.Input[
|
145
|
+
def delta_rebuild_interval(self, value: Optional[pulumi.Input[_builtins.str]]):
|
147
146
|
pulumi.set(self, "delta_rebuild_interval", value)
|
148
147
|
|
149
|
-
@property
|
148
|
+
@_builtins.property
|
150
149
|
@pulumi.getter
|
151
|
-
def disable(self) -> Optional[pulumi.Input[
|
150
|
+
def disable(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
152
151
|
"""
|
153
152
|
Disables or enables CRL building.
|
154
153
|
"""
|
155
154
|
return pulumi.get(self, "disable")
|
156
155
|
|
157
156
|
@disable.setter
|
158
|
-
def disable(self, value: Optional[pulumi.Input[
|
157
|
+
def disable(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
159
158
|
pulumi.set(self, "disable", value)
|
160
159
|
|
161
|
-
@property
|
160
|
+
@_builtins.property
|
162
161
|
@pulumi.getter(name="enableDelta")
|
163
|
-
def enable_delta(self) -> Optional[pulumi.Input[
|
162
|
+
def enable_delta(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
164
163
|
"""
|
165
164
|
Enables building of delta CRLs with up-to-date revocation information,
|
166
165
|
augmenting the last complete CRL. **Vault 1.12+**
|
@@ -168,24 +167,24 @@ class SecretBackendCrlConfigArgs:
|
|
168
167
|
return pulumi.get(self, "enable_delta")
|
169
168
|
|
170
169
|
@enable_delta.setter
|
171
|
-
def enable_delta(self, value: Optional[pulumi.Input[
|
170
|
+
def enable_delta(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
172
171
|
pulumi.set(self, "enable_delta", value)
|
173
172
|
|
174
|
-
@property
|
173
|
+
@_builtins.property
|
175
174
|
@pulumi.getter
|
176
|
-
def expiry(self) -> Optional[pulumi.Input[
|
175
|
+
def expiry(self) -> Optional[pulumi.Input[_builtins.str]]:
|
177
176
|
"""
|
178
177
|
Specifies the time until expiration.
|
179
178
|
"""
|
180
179
|
return pulumi.get(self, "expiry")
|
181
180
|
|
182
181
|
@expiry.setter
|
183
|
-
def expiry(self, value: Optional[pulumi.Input[
|
182
|
+
def expiry(self, value: Optional[pulumi.Input[_builtins.str]]):
|
184
183
|
pulumi.set(self, "expiry", value)
|
185
184
|
|
186
|
-
@property
|
185
|
+
@_builtins.property
|
187
186
|
@pulumi.getter(name="maxCrlEntries")
|
188
|
-
def max_crl_entries(self) -> Optional[pulumi.Input[
|
187
|
+
def max_crl_entries(self) -> Optional[pulumi.Input[_builtins.int]]:
|
189
188
|
"""
|
190
189
|
The maximum number of entries a CRL can contain. This option exists to prevent
|
191
190
|
accidental runaway issuance/revocation from overloading Vault. If set to -1, the limit is disabled. **Vault 1.19**
|
@@ -193,12 +192,12 @@ class SecretBackendCrlConfigArgs:
|
|
193
192
|
return pulumi.get(self, "max_crl_entries")
|
194
193
|
|
195
194
|
@max_crl_entries.setter
|
196
|
-
def max_crl_entries(self, value: Optional[pulumi.Input[
|
195
|
+
def max_crl_entries(self, value: Optional[pulumi.Input[_builtins.int]]):
|
197
196
|
pulumi.set(self, "max_crl_entries", value)
|
198
197
|
|
199
|
-
@property
|
198
|
+
@_builtins.property
|
200
199
|
@pulumi.getter
|
201
|
-
def namespace(self) -> Optional[pulumi.Input[
|
200
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
202
201
|
"""
|
203
202
|
The namespace to provision the resource in.
|
204
203
|
The value should not contain leading or trailing forward slashes.
|
@@ -208,24 +207,24 @@ class SecretBackendCrlConfigArgs:
|
|
208
207
|
return pulumi.get(self, "namespace")
|
209
208
|
|
210
209
|
@namespace.setter
|
211
|
-
def namespace(self, value: Optional[pulumi.Input[
|
210
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
212
211
|
pulumi.set(self, "namespace", value)
|
213
212
|
|
214
|
-
@property
|
213
|
+
@_builtins.property
|
215
214
|
@pulumi.getter(name="ocspDisable")
|
216
|
-
def ocsp_disable(self) -> Optional[pulumi.Input[
|
215
|
+
def ocsp_disable(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
217
216
|
"""
|
218
217
|
Disables the OCSP responder in Vault. **Vault 1.12+**
|
219
218
|
"""
|
220
219
|
return pulumi.get(self, "ocsp_disable")
|
221
220
|
|
222
221
|
@ocsp_disable.setter
|
223
|
-
def ocsp_disable(self, value: Optional[pulumi.Input[
|
222
|
+
def ocsp_disable(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
224
223
|
pulumi.set(self, "ocsp_disable", value)
|
225
224
|
|
226
|
-
@property
|
225
|
+
@_builtins.property
|
227
226
|
@pulumi.getter(name="ocspExpiry")
|
228
|
-
def ocsp_expiry(self) -> Optional[pulumi.Input[
|
227
|
+
def ocsp_expiry(self) -> Optional[pulumi.Input[_builtins.str]]:
|
229
228
|
"""
|
230
229
|
The amount of time an OCSP response can be cached for, useful for OCSP stapling
|
231
230
|
refresh durations. **Vault 1.12+**
|
@@ -233,24 +232,24 @@ class SecretBackendCrlConfigArgs:
|
|
233
232
|
return pulumi.get(self, "ocsp_expiry")
|
234
233
|
|
235
234
|
@ocsp_expiry.setter
|
236
|
-
def ocsp_expiry(self, value: Optional[pulumi.Input[
|
235
|
+
def ocsp_expiry(self, value: Optional[pulumi.Input[_builtins.str]]):
|
237
236
|
pulumi.set(self, "ocsp_expiry", value)
|
238
237
|
|
239
|
-
@property
|
238
|
+
@_builtins.property
|
240
239
|
@pulumi.getter(name="unifiedCrl")
|
241
|
-
def unified_crl(self) -> Optional[pulumi.Input[
|
240
|
+
def unified_crl(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
242
241
|
"""
|
243
242
|
Enables unified CRL and OCSP building. **Vault 1.13+**
|
244
243
|
"""
|
245
244
|
return pulumi.get(self, "unified_crl")
|
246
245
|
|
247
246
|
@unified_crl.setter
|
248
|
-
def unified_crl(self, value: Optional[pulumi.Input[
|
247
|
+
def unified_crl(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
249
248
|
pulumi.set(self, "unified_crl", value)
|
250
249
|
|
251
|
-
@property
|
250
|
+
@_builtins.property
|
252
251
|
@pulumi.getter(name="unifiedCrlOnExistingPaths")
|
253
|
-
def unified_crl_on_existing_paths(self) -> Optional[pulumi.Input[
|
252
|
+
def unified_crl_on_existing_paths(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
254
253
|
"""
|
255
254
|
Enables serving the unified CRL and OCSP on the existing, previously
|
256
255
|
cluster-local paths. **Vault 1.13+**
|
@@ -258,49 +257,49 @@ class SecretBackendCrlConfigArgs:
|
|
258
257
|
return pulumi.get(self, "unified_crl_on_existing_paths")
|
259
258
|
|
260
259
|
@unified_crl_on_existing_paths.setter
|
261
|
-
def unified_crl_on_existing_paths(self, value: Optional[pulumi.Input[
|
260
|
+
def unified_crl_on_existing_paths(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
262
261
|
pulumi.set(self, "unified_crl_on_existing_paths", value)
|
263
262
|
|
264
263
|
|
265
264
|
@pulumi.input_type
|
266
265
|
class _SecretBackendCrlConfigState:
|
267
266
|
def __init__(__self__, *,
|
268
|
-
auto_rebuild: Optional[pulumi.Input[
|
269
|
-
auto_rebuild_grace_period: Optional[pulumi.Input[
|
270
|
-
backend: Optional[pulumi.Input[
|
271
|
-
cross_cluster_revocation: Optional[pulumi.Input[
|
272
|
-
delta_rebuild_interval: Optional[pulumi.Input[
|
273
|
-
disable: Optional[pulumi.Input[
|
274
|
-
enable_delta: Optional[pulumi.Input[
|
275
|
-
expiry: Optional[pulumi.Input[
|
276
|
-
max_crl_entries: Optional[pulumi.Input[
|
277
|
-
namespace: Optional[pulumi.Input[
|
278
|
-
ocsp_disable: Optional[pulumi.Input[
|
279
|
-
ocsp_expiry: Optional[pulumi.Input[
|
280
|
-
unified_crl: Optional[pulumi.Input[
|
281
|
-
unified_crl_on_existing_paths: Optional[pulumi.Input[
|
267
|
+
auto_rebuild: Optional[pulumi.Input[_builtins.bool]] = None,
|
268
|
+
auto_rebuild_grace_period: Optional[pulumi.Input[_builtins.str]] = None,
|
269
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
270
|
+
cross_cluster_revocation: Optional[pulumi.Input[_builtins.bool]] = None,
|
271
|
+
delta_rebuild_interval: Optional[pulumi.Input[_builtins.str]] = None,
|
272
|
+
disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
273
|
+
enable_delta: Optional[pulumi.Input[_builtins.bool]] = None,
|
274
|
+
expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
275
|
+
max_crl_entries: Optional[pulumi.Input[_builtins.int]] = None,
|
276
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
277
|
+
ocsp_disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
278
|
+
ocsp_expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
279
|
+
unified_crl: Optional[pulumi.Input[_builtins.bool]] = None,
|
280
|
+
unified_crl_on_existing_paths: Optional[pulumi.Input[_builtins.bool]] = None):
|
282
281
|
"""
|
283
282
|
Input properties used for looking up and filtering SecretBackendCrlConfig resources.
|
284
|
-
:param pulumi.Input[
|
285
|
-
:param pulumi.Input[
|
286
|
-
:param pulumi.Input[
|
287
|
-
:param pulumi.Input[
|
288
|
-
:param pulumi.Input[
|
289
|
-
:param pulumi.Input[
|
290
|
-
:param pulumi.Input[
|
283
|
+
:param pulumi.Input[_builtins.bool] auto_rebuild: Enables periodic rebuilding of the CRL upon expiry. **Vault 1.12+**
|
284
|
+
:param pulumi.Input[_builtins.str] auto_rebuild_grace_period: Grace period before CRL expiry to attempt rebuild of CRL. **Vault 1.12+**
|
285
|
+
:param pulumi.Input[_builtins.str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
|
286
|
+
:param pulumi.Input[_builtins.bool] cross_cluster_revocation: Enable cross-cluster revocation request queues. **Vault 1.13+**
|
287
|
+
:param pulumi.Input[_builtins.str] delta_rebuild_interval: Interval to check for new revocations on, to regenerate the delta CRL.
|
288
|
+
:param pulumi.Input[_builtins.bool] disable: Disables or enables CRL building.
|
289
|
+
:param pulumi.Input[_builtins.bool] enable_delta: Enables building of delta CRLs with up-to-date revocation information,
|
291
290
|
augmenting the last complete CRL. **Vault 1.12+**
|
292
|
-
:param pulumi.Input[
|
293
|
-
:param pulumi.Input[
|
291
|
+
:param pulumi.Input[_builtins.str] expiry: Specifies the time until expiration.
|
292
|
+
:param pulumi.Input[_builtins.int] max_crl_entries: The maximum number of entries a CRL can contain. This option exists to prevent
|
294
293
|
accidental runaway issuance/revocation from overloading Vault. If set to -1, the limit is disabled. **Vault 1.19**
|
295
|
-
:param pulumi.Input[
|
294
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
296
295
|
The value should not contain leading or trailing forward slashes.
|
297
296
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
298
297
|
*Available only for Vault Enterprise*.
|
299
|
-
:param pulumi.Input[
|
300
|
-
:param pulumi.Input[
|
298
|
+
:param pulumi.Input[_builtins.bool] ocsp_disable: Disables the OCSP responder in Vault. **Vault 1.12+**
|
299
|
+
:param pulumi.Input[_builtins.str] ocsp_expiry: The amount of time an OCSP response can be cached for, useful for OCSP stapling
|
301
300
|
refresh durations. **Vault 1.12+**
|
302
|
-
:param pulumi.Input[
|
303
|
-
:param pulumi.Input[
|
301
|
+
:param pulumi.Input[_builtins.bool] unified_crl: Enables unified CRL and OCSP building. **Vault 1.13+**
|
302
|
+
:param pulumi.Input[_builtins.bool] unified_crl_on_existing_paths: Enables serving the unified CRL and OCSP on the existing, previously
|
304
303
|
cluster-local paths. **Vault 1.13+**
|
305
304
|
"""
|
306
305
|
if auto_rebuild is not None:
|
@@ -332,81 +331,81 @@ class _SecretBackendCrlConfigState:
|
|
332
331
|
if unified_crl_on_existing_paths is not None:
|
333
332
|
pulumi.set(__self__, "unified_crl_on_existing_paths", unified_crl_on_existing_paths)
|
334
333
|
|
335
|
-
@property
|
334
|
+
@_builtins.property
|
336
335
|
@pulumi.getter(name="autoRebuild")
|
337
|
-
def auto_rebuild(self) -> Optional[pulumi.Input[
|
336
|
+
def auto_rebuild(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
338
337
|
"""
|
339
338
|
Enables periodic rebuilding of the CRL upon expiry. **Vault 1.12+**
|
340
339
|
"""
|
341
340
|
return pulumi.get(self, "auto_rebuild")
|
342
341
|
|
343
342
|
@auto_rebuild.setter
|
344
|
-
def auto_rebuild(self, value: Optional[pulumi.Input[
|
343
|
+
def auto_rebuild(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
345
344
|
pulumi.set(self, "auto_rebuild", value)
|
346
345
|
|
347
|
-
@property
|
346
|
+
@_builtins.property
|
348
347
|
@pulumi.getter(name="autoRebuildGracePeriod")
|
349
|
-
def auto_rebuild_grace_period(self) -> Optional[pulumi.Input[
|
348
|
+
def auto_rebuild_grace_period(self) -> Optional[pulumi.Input[_builtins.str]]:
|
350
349
|
"""
|
351
350
|
Grace period before CRL expiry to attempt rebuild of CRL. **Vault 1.12+**
|
352
351
|
"""
|
353
352
|
return pulumi.get(self, "auto_rebuild_grace_period")
|
354
353
|
|
355
354
|
@auto_rebuild_grace_period.setter
|
356
|
-
def auto_rebuild_grace_period(self, value: Optional[pulumi.Input[
|
355
|
+
def auto_rebuild_grace_period(self, value: Optional[pulumi.Input[_builtins.str]]):
|
357
356
|
pulumi.set(self, "auto_rebuild_grace_period", value)
|
358
357
|
|
359
|
-
@property
|
358
|
+
@_builtins.property
|
360
359
|
@pulumi.getter
|
361
|
-
def backend(self) -> Optional[pulumi.Input[
|
360
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
362
361
|
"""
|
363
362
|
The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
|
364
363
|
"""
|
365
364
|
return pulumi.get(self, "backend")
|
366
365
|
|
367
366
|
@backend.setter
|
368
|
-
def backend(self, value: Optional[pulumi.Input[
|
367
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
369
368
|
pulumi.set(self, "backend", value)
|
370
369
|
|
371
|
-
@property
|
370
|
+
@_builtins.property
|
372
371
|
@pulumi.getter(name="crossClusterRevocation")
|
373
|
-
def cross_cluster_revocation(self) -> Optional[pulumi.Input[
|
372
|
+
def cross_cluster_revocation(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
374
373
|
"""
|
375
374
|
Enable cross-cluster revocation request queues. **Vault 1.13+**
|
376
375
|
"""
|
377
376
|
return pulumi.get(self, "cross_cluster_revocation")
|
378
377
|
|
379
378
|
@cross_cluster_revocation.setter
|
380
|
-
def cross_cluster_revocation(self, value: Optional[pulumi.Input[
|
379
|
+
def cross_cluster_revocation(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
381
380
|
pulumi.set(self, "cross_cluster_revocation", value)
|
382
381
|
|
383
|
-
@property
|
382
|
+
@_builtins.property
|
384
383
|
@pulumi.getter(name="deltaRebuildInterval")
|
385
|
-
def delta_rebuild_interval(self) -> Optional[pulumi.Input[
|
384
|
+
def delta_rebuild_interval(self) -> Optional[pulumi.Input[_builtins.str]]:
|
386
385
|
"""
|
387
386
|
Interval to check for new revocations on, to regenerate the delta CRL.
|
388
387
|
"""
|
389
388
|
return pulumi.get(self, "delta_rebuild_interval")
|
390
389
|
|
391
390
|
@delta_rebuild_interval.setter
|
392
|
-
def delta_rebuild_interval(self, value: Optional[pulumi.Input[
|
391
|
+
def delta_rebuild_interval(self, value: Optional[pulumi.Input[_builtins.str]]):
|
393
392
|
pulumi.set(self, "delta_rebuild_interval", value)
|
394
393
|
|
395
|
-
@property
|
394
|
+
@_builtins.property
|
396
395
|
@pulumi.getter
|
397
|
-
def disable(self) -> Optional[pulumi.Input[
|
396
|
+
def disable(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
398
397
|
"""
|
399
398
|
Disables or enables CRL building.
|
400
399
|
"""
|
401
400
|
return pulumi.get(self, "disable")
|
402
401
|
|
403
402
|
@disable.setter
|
404
|
-
def disable(self, value: Optional[pulumi.Input[
|
403
|
+
def disable(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
405
404
|
pulumi.set(self, "disable", value)
|
406
405
|
|
407
|
-
@property
|
406
|
+
@_builtins.property
|
408
407
|
@pulumi.getter(name="enableDelta")
|
409
|
-
def enable_delta(self) -> Optional[pulumi.Input[
|
408
|
+
def enable_delta(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
410
409
|
"""
|
411
410
|
Enables building of delta CRLs with up-to-date revocation information,
|
412
411
|
augmenting the last complete CRL. **Vault 1.12+**
|
@@ -414,24 +413,24 @@ class _SecretBackendCrlConfigState:
|
|
414
413
|
return pulumi.get(self, "enable_delta")
|
415
414
|
|
416
415
|
@enable_delta.setter
|
417
|
-
def enable_delta(self, value: Optional[pulumi.Input[
|
416
|
+
def enable_delta(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
418
417
|
pulumi.set(self, "enable_delta", value)
|
419
418
|
|
420
|
-
@property
|
419
|
+
@_builtins.property
|
421
420
|
@pulumi.getter
|
422
|
-
def expiry(self) -> Optional[pulumi.Input[
|
421
|
+
def expiry(self) -> Optional[pulumi.Input[_builtins.str]]:
|
423
422
|
"""
|
424
423
|
Specifies the time until expiration.
|
425
424
|
"""
|
426
425
|
return pulumi.get(self, "expiry")
|
427
426
|
|
428
427
|
@expiry.setter
|
429
|
-
def expiry(self, value: Optional[pulumi.Input[
|
428
|
+
def expiry(self, value: Optional[pulumi.Input[_builtins.str]]):
|
430
429
|
pulumi.set(self, "expiry", value)
|
431
430
|
|
432
|
-
@property
|
431
|
+
@_builtins.property
|
433
432
|
@pulumi.getter(name="maxCrlEntries")
|
434
|
-
def max_crl_entries(self) -> Optional[pulumi.Input[
|
433
|
+
def max_crl_entries(self) -> Optional[pulumi.Input[_builtins.int]]:
|
435
434
|
"""
|
436
435
|
The maximum number of entries a CRL can contain. This option exists to prevent
|
437
436
|
accidental runaway issuance/revocation from overloading Vault. If set to -1, the limit is disabled. **Vault 1.19**
|
@@ -439,12 +438,12 @@ class _SecretBackendCrlConfigState:
|
|
439
438
|
return pulumi.get(self, "max_crl_entries")
|
440
439
|
|
441
440
|
@max_crl_entries.setter
|
442
|
-
def max_crl_entries(self, value: Optional[pulumi.Input[
|
441
|
+
def max_crl_entries(self, value: Optional[pulumi.Input[_builtins.int]]):
|
443
442
|
pulumi.set(self, "max_crl_entries", value)
|
444
443
|
|
445
|
-
@property
|
444
|
+
@_builtins.property
|
446
445
|
@pulumi.getter
|
447
|
-
def namespace(self) -> Optional[pulumi.Input[
|
446
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
448
447
|
"""
|
449
448
|
The namespace to provision the resource in.
|
450
449
|
The value should not contain leading or trailing forward slashes.
|
@@ -454,24 +453,24 @@ class _SecretBackendCrlConfigState:
|
|
454
453
|
return pulumi.get(self, "namespace")
|
455
454
|
|
456
455
|
@namespace.setter
|
457
|
-
def namespace(self, value: Optional[pulumi.Input[
|
456
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
458
457
|
pulumi.set(self, "namespace", value)
|
459
458
|
|
460
|
-
@property
|
459
|
+
@_builtins.property
|
461
460
|
@pulumi.getter(name="ocspDisable")
|
462
|
-
def ocsp_disable(self) -> Optional[pulumi.Input[
|
461
|
+
def ocsp_disable(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
463
462
|
"""
|
464
463
|
Disables the OCSP responder in Vault. **Vault 1.12+**
|
465
464
|
"""
|
466
465
|
return pulumi.get(self, "ocsp_disable")
|
467
466
|
|
468
467
|
@ocsp_disable.setter
|
469
|
-
def ocsp_disable(self, value: Optional[pulumi.Input[
|
468
|
+
def ocsp_disable(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
470
469
|
pulumi.set(self, "ocsp_disable", value)
|
471
470
|
|
472
|
-
@property
|
471
|
+
@_builtins.property
|
473
472
|
@pulumi.getter(name="ocspExpiry")
|
474
|
-
def ocsp_expiry(self) -> Optional[pulumi.Input[
|
473
|
+
def ocsp_expiry(self) -> Optional[pulumi.Input[_builtins.str]]:
|
475
474
|
"""
|
476
475
|
The amount of time an OCSP response can be cached for, useful for OCSP stapling
|
477
476
|
refresh durations. **Vault 1.12+**
|
@@ -479,24 +478,24 @@ class _SecretBackendCrlConfigState:
|
|
479
478
|
return pulumi.get(self, "ocsp_expiry")
|
480
479
|
|
481
480
|
@ocsp_expiry.setter
|
482
|
-
def ocsp_expiry(self, value: Optional[pulumi.Input[
|
481
|
+
def ocsp_expiry(self, value: Optional[pulumi.Input[_builtins.str]]):
|
483
482
|
pulumi.set(self, "ocsp_expiry", value)
|
484
483
|
|
485
|
-
@property
|
484
|
+
@_builtins.property
|
486
485
|
@pulumi.getter(name="unifiedCrl")
|
487
|
-
def unified_crl(self) -> Optional[pulumi.Input[
|
486
|
+
def unified_crl(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
488
487
|
"""
|
489
488
|
Enables unified CRL and OCSP building. **Vault 1.13+**
|
490
489
|
"""
|
491
490
|
return pulumi.get(self, "unified_crl")
|
492
491
|
|
493
492
|
@unified_crl.setter
|
494
|
-
def unified_crl(self, value: Optional[pulumi.Input[
|
493
|
+
def unified_crl(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
495
494
|
pulumi.set(self, "unified_crl", value)
|
496
495
|
|
497
|
-
@property
|
496
|
+
@_builtins.property
|
498
497
|
@pulumi.getter(name="unifiedCrlOnExistingPaths")
|
499
|
-
def unified_crl_on_existing_paths(self) -> Optional[pulumi.Input[
|
498
|
+
def unified_crl_on_existing_paths(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
500
499
|
"""
|
501
500
|
Enables serving the unified CRL and OCSP on the existing, previously
|
502
501
|
cluster-local paths. **Vault 1.13+**
|
@@ -504,7 +503,7 @@ class _SecretBackendCrlConfigState:
|
|
504
503
|
return pulumi.get(self, "unified_crl_on_existing_paths")
|
505
504
|
|
506
505
|
@unified_crl_on_existing_paths.setter
|
507
|
-
def unified_crl_on_existing_paths(self, value: Optional[pulumi.Input[
|
506
|
+
def unified_crl_on_existing_paths(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
508
507
|
pulumi.set(self, "unified_crl_on_existing_paths", value)
|
509
508
|
|
510
509
|
|
@@ -514,20 +513,20 @@ class SecretBackendCrlConfig(pulumi.CustomResource):
|
|
514
513
|
def __init__(__self__,
|
515
514
|
resource_name: str,
|
516
515
|
opts: Optional[pulumi.ResourceOptions] = None,
|
517
|
-
auto_rebuild: Optional[pulumi.Input[
|
518
|
-
auto_rebuild_grace_period: Optional[pulumi.Input[
|
519
|
-
backend: Optional[pulumi.Input[
|
520
|
-
cross_cluster_revocation: Optional[pulumi.Input[
|
521
|
-
delta_rebuild_interval: Optional[pulumi.Input[
|
522
|
-
disable: Optional[pulumi.Input[
|
523
|
-
enable_delta: Optional[pulumi.Input[
|
524
|
-
expiry: Optional[pulumi.Input[
|
525
|
-
max_crl_entries: Optional[pulumi.Input[
|
526
|
-
namespace: Optional[pulumi.Input[
|
527
|
-
ocsp_disable: Optional[pulumi.Input[
|
528
|
-
ocsp_expiry: Optional[pulumi.Input[
|
529
|
-
unified_crl: Optional[pulumi.Input[
|
530
|
-
unified_crl_on_existing_paths: Optional[pulumi.Input[
|
516
|
+
auto_rebuild: Optional[pulumi.Input[_builtins.bool]] = None,
|
517
|
+
auto_rebuild_grace_period: Optional[pulumi.Input[_builtins.str]] = None,
|
518
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
519
|
+
cross_cluster_revocation: Optional[pulumi.Input[_builtins.bool]] = None,
|
520
|
+
delta_rebuild_interval: Optional[pulumi.Input[_builtins.str]] = None,
|
521
|
+
disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
522
|
+
enable_delta: Optional[pulumi.Input[_builtins.bool]] = None,
|
523
|
+
expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
524
|
+
max_crl_entries: Optional[pulumi.Input[_builtins.int]] = None,
|
525
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
526
|
+
ocsp_disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
527
|
+
ocsp_expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
528
|
+
unified_crl: Optional[pulumi.Input[_builtins.bool]] = None,
|
529
|
+
unified_crl_on_existing_paths: Optional[pulumi.Input[_builtins.bool]] = None,
|
531
530
|
__props__=None):
|
532
531
|
"""
|
533
532
|
Allows setting the duration for which the generated CRL should be marked valid. If the CRL is disabled, it will return a signed but zero-length CRL for any request. If enabled, it will re-build the CRL.
|
@@ -543,7 +542,7 @@ class SecretBackendCrlConfig(pulumi.CustomResource):
|
|
543
542
|
type="pki",
|
544
543
|
default_lease_ttl_seconds=3600,
|
545
544
|
max_lease_ttl_seconds=86400)
|
546
|
-
crl_config = vault.
|
545
|
+
crl_config = vault.pkisecret.SecretBackendCrlConfig("crl_config",
|
547
546
|
backend=pki.path,
|
548
547
|
expiry="72h",
|
549
548
|
disable=False)
|
@@ -551,26 +550,26 @@ class SecretBackendCrlConfig(pulumi.CustomResource):
|
|
551
550
|
|
552
551
|
:param str resource_name: The name of the resource.
|
553
552
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
554
|
-
:param pulumi.Input[
|
555
|
-
:param pulumi.Input[
|
556
|
-
:param pulumi.Input[
|
557
|
-
:param pulumi.Input[
|
558
|
-
:param pulumi.Input[
|
559
|
-
:param pulumi.Input[
|
560
|
-
:param pulumi.Input[
|
553
|
+
:param pulumi.Input[_builtins.bool] auto_rebuild: Enables periodic rebuilding of the CRL upon expiry. **Vault 1.12+**
|
554
|
+
:param pulumi.Input[_builtins.str] auto_rebuild_grace_period: Grace period before CRL expiry to attempt rebuild of CRL. **Vault 1.12+**
|
555
|
+
:param pulumi.Input[_builtins.str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
|
556
|
+
:param pulumi.Input[_builtins.bool] cross_cluster_revocation: Enable cross-cluster revocation request queues. **Vault 1.13+**
|
557
|
+
:param pulumi.Input[_builtins.str] delta_rebuild_interval: Interval to check for new revocations on, to regenerate the delta CRL.
|
558
|
+
:param pulumi.Input[_builtins.bool] disable: Disables or enables CRL building.
|
559
|
+
:param pulumi.Input[_builtins.bool] enable_delta: Enables building of delta CRLs with up-to-date revocation information,
|
561
560
|
augmenting the last complete CRL. **Vault 1.12+**
|
562
|
-
:param pulumi.Input[
|
563
|
-
:param pulumi.Input[
|
561
|
+
:param pulumi.Input[_builtins.str] expiry: Specifies the time until expiration.
|
562
|
+
:param pulumi.Input[_builtins.int] max_crl_entries: The maximum number of entries a CRL can contain. This option exists to prevent
|
564
563
|
accidental runaway issuance/revocation from overloading Vault. If set to -1, the limit is disabled. **Vault 1.19**
|
565
|
-
:param pulumi.Input[
|
564
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
566
565
|
The value should not contain leading or trailing forward slashes.
|
567
566
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
568
567
|
*Available only for Vault Enterprise*.
|
569
|
-
:param pulumi.Input[
|
570
|
-
:param pulumi.Input[
|
568
|
+
:param pulumi.Input[_builtins.bool] ocsp_disable: Disables the OCSP responder in Vault. **Vault 1.12+**
|
569
|
+
:param pulumi.Input[_builtins.str] ocsp_expiry: The amount of time an OCSP response can be cached for, useful for OCSP stapling
|
571
570
|
refresh durations. **Vault 1.12+**
|
572
|
-
:param pulumi.Input[
|
573
|
-
:param pulumi.Input[
|
571
|
+
:param pulumi.Input[_builtins.bool] unified_crl: Enables unified CRL and OCSP building. **Vault 1.13+**
|
572
|
+
:param pulumi.Input[_builtins.bool] unified_crl_on_existing_paths: Enables serving the unified CRL and OCSP on the existing, previously
|
574
573
|
cluster-local paths. **Vault 1.13+**
|
575
574
|
"""
|
576
575
|
...
|
@@ -593,7 +592,7 @@ class SecretBackendCrlConfig(pulumi.CustomResource):
|
|
593
592
|
type="pki",
|
594
593
|
default_lease_ttl_seconds=3600,
|
595
594
|
max_lease_ttl_seconds=86400)
|
596
|
-
crl_config = vault.
|
595
|
+
crl_config = vault.pkisecret.SecretBackendCrlConfig("crl_config",
|
597
596
|
backend=pki.path,
|
598
597
|
expiry="72h",
|
599
598
|
disable=False)
|
@@ -614,20 +613,20 @@ class SecretBackendCrlConfig(pulumi.CustomResource):
|
|
614
613
|
def _internal_init(__self__,
|
615
614
|
resource_name: str,
|
616
615
|
opts: Optional[pulumi.ResourceOptions] = None,
|
617
|
-
auto_rebuild: Optional[pulumi.Input[
|
618
|
-
auto_rebuild_grace_period: Optional[pulumi.Input[
|
619
|
-
backend: Optional[pulumi.Input[
|
620
|
-
cross_cluster_revocation: Optional[pulumi.Input[
|
621
|
-
delta_rebuild_interval: Optional[pulumi.Input[
|
622
|
-
disable: Optional[pulumi.Input[
|
623
|
-
enable_delta: Optional[pulumi.Input[
|
624
|
-
expiry: Optional[pulumi.Input[
|
625
|
-
max_crl_entries: Optional[pulumi.Input[
|
626
|
-
namespace: Optional[pulumi.Input[
|
627
|
-
ocsp_disable: Optional[pulumi.Input[
|
628
|
-
ocsp_expiry: Optional[pulumi.Input[
|
629
|
-
unified_crl: Optional[pulumi.Input[
|
630
|
-
unified_crl_on_existing_paths: Optional[pulumi.Input[
|
616
|
+
auto_rebuild: Optional[pulumi.Input[_builtins.bool]] = None,
|
617
|
+
auto_rebuild_grace_period: Optional[pulumi.Input[_builtins.str]] = None,
|
618
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
619
|
+
cross_cluster_revocation: Optional[pulumi.Input[_builtins.bool]] = None,
|
620
|
+
delta_rebuild_interval: Optional[pulumi.Input[_builtins.str]] = None,
|
621
|
+
disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
622
|
+
enable_delta: Optional[pulumi.Input[_builtins.bool]] = None,
|
623
|
+
expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
624
|
+
max_crl_entries: Optional[pulumi.Input[_builtins.int]] = None,
|
625
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
626
|
+
ocsp_disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
627
|
+
ocsp_expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
628
|
+
unified_crl: Optional[pulumi.Input[_builtins.bool]] = None,
|
629
|
+
unified_crl_on_existing_paths: Optional[pulumi.Input[_builtins.bool]] = None,
|
631
630
|
__props__=None):
|
632
631
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
633
632
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -663,20 +662,20 @@ class SecretBackendCrlConfig(pulumi.CustomResource):
|
|
663
662
|
def get(resource_name: str,
|
664
663
|
id: pulumi.Input[str],
|
665
664
|
opts: Optional[pulumi.ResourceOptions] = None,
|
666
|
-
auto_rebuild: Optional[pulumi.Input[
|
667
|
-
auto_rebuild_grace_period: Optional[pulumi.Input[
|
668
|
-
backend: Optional[pulumi.Input[
|
669
|
-
cross_cluster_revocation: Optional[pulumi.Input[
|
670
|
-
delta_rebuild_interval: Optional[pulumi.Input[
|
671
|
-
disable: Optional[pulumi.Input[
|
672
|
-
enable_delta: Optional[pulumi.Input[
|
673
|
-
expiry: Optional[pulumi.Input[
|
674
|
-
max_crl_entries: Optional[pulumi.Input[
|
675
|
-
namespace: Optional[pulumi.Input[
|
676
|
-
ocsp_disable: Optional[pulumi.Input[
|
677
|
-
ocsp_expiry: Optional[pulumi.Input[
|
678
|
-
unified_crl: Optional[pulumi.Input[
|
679
|
-
unified_crl_on_existing_paths: Optional[pulumi.Input[
|
665
|
+
auto_rebuild: Optional[pulumi.Input[_builtins.bool]] = None,
|
666
|
+
auto_rebuild_grace_period: Optional[pulumi.Input[_builtins.str]] = None,
|
667
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
668
|
+
cross_cluster_revocation: Optional[pulumi.Input[_builtins.bool]] = None,
|
669
|
+
delta_rebuild_interval: Optional[pulumi.Input[_builtins.str]] = None,
|
670
|
+
disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
671
|
+
enable_delta: Optional[pulumi.Input[_builtins.bool]] = None,
|
672
|
+
expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
673
|
+
max_crl_entries: Optional[pulumi.Input[_builtins.int]] = None,
|
674
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
675
|
+
ocsp_disable: Optional[pulumi.Input[_builtins.bool]] = None,
|
676
|
+
ocsp_expiry: Optional[pulumi.Input[_builtins.str]] = None,
|
677
|
+
unified_crl: Optional[pulumi.Input[_builtins.bool]] = None,
|
678
|
+
unified_crl_on_existing_paths: Optional[pulumi.Input[_builtins.bool]] = None) -> 'SecretBackendCrlConfig':
|
680
679
|
"""
|
681
680
|
Get an existing SecretBackendCrlConfig resource's state with the given name, id, and optional extra
|
682
681
|
properties used to qualify the lookup.
|
@@ -684,26 +683,26 @@ class SecretBackendCrlConfig(pulumi.CustomResource):
|
|
684
683
|
:param str resource_name: The unique name of the resulting resource.
|
685
684
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
686
685
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
687
|
-
:param pulumi.Input[
|
688
|
-
:param pulumi.Input[
|
689
|
-
:param pulumi.Input[
|
690
|
-
:param pulumi.Input[
|
691
|
-
:param pulumi.Input[
|
692
|
-
:param pulumi.Input[
|
693
|
-
:param pulumi.Input[
|
686
|
+
:param pulumi.Input[_builtins.bool] auto_rebuild: Enables periodic rebuilding of the CRL upon expiry. **Vault 1.12+**
|
687
|
+
:param pulumi.Input[_builtins.str] auto_rebuild_grace_period: Grace period before CRL expiry to attempt rebuild of CRL. **Vault 1.12+**
|
688
|
+
:param pulumi.Input[_builtins.str] backend: The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
|
689
|
+
:param pulumi.Input[_builtins.bool] cross_cluster_revocation: Enable cross-cluster revocation request queues. **Vault 1.13+**
|
690
|
+
:param pulumi.Input[_builtins.str] delta_rebuild_interval: Interval to check for new revocations on, to regenerate the delta CRL.
|
691
|
+
:param pulumi.Input[_builtins.bool] disable: Disables or enables CRL building.
|
692
|
+
:param pulumi.Input[_builtins.bool] enable_delta: Enables building of delta CRLs with up-to-date revocation information,
|
694
693
|
augmenting the last complete CRL. **Vault 1.12+**
|
695
|
-
:param pulumi.Input[
|
696
|
-
:param pulumi.Input[
|
694
|
+
:param pulumi.Input[_builtins.str] expiry: Specifies the time until expiration.
|
695
|
+
:param pulumi.Input[_builtins.int] max_crl_entries: The maximum number of entries a CRL can contain. This option exists to prevent
|
697
696
|
accidental runaway issuance/revocation from overloading Vault. If set to -1, the limit is disabled. **Vault 1.19**
|
698
|
-
:param pulumi.Input[
|
697
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
699
698
|
The value should not contain leading or trailing forward slashes.
|
700
699
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
701
700
|
*Available only for Vault Enterprise*.
|
702
|
-
:param pulumi.Input[
|
703
|
-
:param pulumi.Input[
|
701
|
+
:param pulumi.Input[_builtins.bool] ocsp_disable: Disables the OCSP responder in Vault. **Vault 1.12+**
|
702
|
+
:param pulumi.Input[_builtins.str] ocsp_expiry: The amount of time an OCSP response can be cached for, useful for OCSP stapling
|
704
703
|
refresh durations. **Vault 1.12+**
|
705
|
-
:param pulumi.Input[
|
706
|
-
:param pulumi.Input[
|
704
|
+
:param pulumi.Input[_builtins.bool] unified_crl: Enables unified CRL and OCSP building. **Vault 1.13+**
|
705
|
+
:param pulumi.Input[_builtins.bool] unified_crl_on_existing_paths: Enables serving the unified CRL and OCSP on the existing, previously
|
707
706
|
cluster-local paths. **Vault 1.13+**
|
708
707
|
"""
|
709
708
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
@@ -726,83 +725,83 @@ class SecretBackendCrlConfig(pulumi.CustomResource):
|
|
726
725
|
__props__.__dict__["unified_crl_on_existing_paths"] = unified_crl_on_existing_paths
|
727
726
|
return SecretBackendCrlConfig(resource_name, opts=opts, __props__=__props__)
|
728
727
|
|
729
|
-
@property
|
728
|
+
@_builtins.property
|
730
729
|
@pulumi.getter(name="autoRebuild")
|
731
|
-
def auto_rebuild(self) -> pulumi.Output[Optional[
|
730
|
+
def auto_rebuild(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
732
731
|
"""
|
733
732
|
Enables periodic rebuilding of the CRL upon expiry. **Vault 1.12+**
|
734
733
|
"""
|
735
734
|
return pulumi.get(self, "auto_rebuild")
|
736
735
|
|
737
|
-
@property
|
736
|
+
@_builtins.property
|
738
737
|
@pulumi.getter(name="autoRebuildGracePeriod")
|
739
|
-
def auto_rebuild_grace_period(self) -> pulumi.Output[
|
738
|
+
def auto_rebuild_grace_period(self) -> pulumi.Output[_builtins.str]:
|
740
739
|
"""
|
741
740
|
Grace period before CRL expiry to attempt rebuild of CRL. **Vault 1.12+**
|
742
741
|
"""
|
743
742
|
return pulumi.get(self, "auto_rebuild_grace_period")
|
744
743
|
|
745
|
-
@property
|
744
|
+
@_builtins.property
|
746
745
|
@pulumi.getter
|
747
|
-
def backend(self) -> pulumi.Output[
|
746
|
+
def backend(self) -> pulumi.Output[_builtins.str]:
|
748
747
|
"""
|
749
748
|
The path the PKI secret backend is mounted at, with no leading or trailing `/`s.
|
750
749
|
"""
|
751
750
|
return pulumi.get(self, "backend")
|
752
751
|
|
753
|
-
@property
|
752
|
+
@_builtins.property
|
754
753
|
@pulumi.getter(name="crossClusterRevocation")
|
755
|
-
def cross_cluster_revocation(self) -> pulumi.Output[
|
754
|
+
def cross_cluster_revocation(self) -> pulumi.Output[_builtins.bool]:
|
756
755
|
"""
|
757
756
|
Enable cross-cluster revocation request queues. **Vault 1.13+**
|
758
757
|
"""
|
759
758
|
return pulumi.get(self, "cross_cluster_revocation")
|
760
759
|
|
761
|
-
@property
|
760
|
+
@_builtins.property
|
762
761
|
@pulumi.getter(name="deltaRebuildInterval")
|
763
|
-
def delta_rebuild_interval(self) -> pulumi.Output[
|
762
|
+
def delta_rebuild_interval(self) -> pulumi.Output[_builtins.str]:
|
764
763
|
"""
|
765
764
|
Interval to check for new revocations on, to regenerate the delta CRL.
|
766
765
|
"""
|
767
766
|
return pulumi.get(self, "delta_rebuild_interval")
|
768
767
|
|
769
|
-
@property
|
768
|
+
@_builtins.property
|
770
769
|
@pulumi.getter
|
771
|
-
def disable(self) -> pulumi.Output[Optional[
|
770
|
+
def disable(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
772
771
|
"""
|
773
772
|
Disables or enables CRL building.
|
774
773
|
"""
|
775
774
|
return pulumi.get(self, "disable")
|
776
775
|
|
777
|
-
@property
|
776
|
+
@_builtins.property
|
778
777
|
@pulumi.getter(name="enableDelta")
|
779
|
-
def enable_delta(self) -> pulumi.Output[Optional[
|
778
|
+
def enable_delta(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
780
779
|
"""
|
781
780
|
Enables building of delta CRLs with up-to-date revocation information,
|
782
781
|
augmenting the last complete CRL. **Vault 1.12+**
|
783
782
|
"""
|
784
783
|
return pulumi.get(self, "enable_delta")
|
785
784
|
|
786
|
-
@property
|
785
|
+
@_builtins.property
|
787
786
|
@pulumi.getter
|
788
|
-
def expiry(self) -> pulumi.Output[Optional[
|
787
|
+
def expiry(self) -> pulumi.Output[Optional[_builtins.str]]:
|
789
788
|
"""
|
790
789
|
Specifies the time until expiration.
|
791
790
|
"""
|
792
791
|
return pulumi.get(self, "expiry")
|
793
792
|
|
794
|
-
@property
|
793
|
+
@_builtins.property
|
795
794
|
@pulumi.getter(name="maxCrlEntries")
|
796
|
-
def max_crl_entries(self) -> pulumi.Output[
|
795
|
+
def max_crl_entries(self) -> pulumi.Output[_builtins.int]:
|
797
796
|
"""
|
798
797
|
The maximum number of entries a CRL can contain. This option exists to prevent
|
799
798
|
accidental runaway issuance/revocation from overloading Vault. If set to -1, the limit is disabled. **Vault 1.19**
|
800
799
|
"""
|
801
800
|
return pulumi.get(self, "max_crl_entries")
|
802
801
|
|
803
|
-
@property
|
802
|
+
@_builtins.property
|
804
803
|
@pulumi.getter
|
805
|
-
def namespace(self) -> pulumi.Output[Optional[
|
804
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
806
805
|
"""
|
807
806
|
The namespace to provision the resource in.
|
808
807
|
The value should not contain leading or trailing forward slashes.
|
@@ -811,34 +810,34 @@ class SecretBackendCrlConfig(pulumi.CustomResource):
|
|
811
810
|
"""
|
812
811
|
return pulumi.get(self, "namespace")
|
813
812
|
|
814
|
-
@property
|
813
|
+
@_builtins.property
|
815
814
|
@pulumi.getter(name="ocspDisable")
|
816
|
-
def ocsp_disable(self) -> pulumi.Output[Optional[
|
815
|
+
def ocsp_disable(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
817
816
|
"""
|
818
817
|
Disables the OCSP responder in Vault. **Vault 1.12+**
|
819
818
|
"""
|
820
819
|
return pulumi.get(self, "ocsp_disable")
|
821
820
|
|
822
|
-
@property
|
821
|
+
@_builtins.property
|
823
822
|
@pulumi.getter(name="ocspExpiry")
|
824
|
-
def ocsp_expiry(self) -> pulumi.Output[
|
823
|
+
def ocsp_expiry(self) -> pulumi.Output[_builtins.str]:
|
825
824
|
"""
|
826
825
|
The amount of time an OCSP response can be cached for, useful for OCSP stapling
|
827
826
|
refresh durations. **Vault 1.12+**
|
828
827
|
"""
|
829
828
|
return pulumi.get(self, "ocsp_expiry")
|
830
829
|
|
831
|
-
@property
|
830
|
+
@_builtins.property
|
832
831
|
@pulumi.getter(name="unifiedCrl")
|
833
|
-
def unified_crl(self) -> pulumi.Output[
|
832
|
+
def unified_crl(self) -> pulumi.Output[_builtins.bool]:
|
834
833
|
"""
|
835
834
|
Enables unified CRL and OCSP building. **Vault 1.13+**
|
836
835
|
"""
|
837
836
|
return pulumi.get(self, "unified_crl")
|
838
837
|
|
839
|
-
@property
|
838
|
+
@_builtins.property
|
840
839
|
@pulumi.getter(name="unifiedCrlOnExistingPaths")
|
841
|
-
def unified_crl_on_existing_paths(self) -> pulumi.Output[
|
840
|
+
def unified_crl_on_existing_paths(self) -> pulumi.Output[_builtins.bool]:
|
842
841
|
"""
|
843
842
|
Enables serving the unified CRL and OCSP on the existing, previously
|
844
843
|
cluster-local paths. **Vault 1.13+**
|