pulumi-vault 7.2.0a1752907825__py3-none-any.whl → 7.2.0a1753398491__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -1
- pulumi_vault/_inputs.py +672 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +409 -410
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +273 -274
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +239 -240
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +379 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +299 -300
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +353 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +222 -223
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +384 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +673 -674
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +333 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +256 -257
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +81 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +137 -138
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +29 -30
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +207 -208
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +120 -121
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +138 -139
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +336 -337
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0a1753398491.dist-info/RECORD +268 -0
- pulumi_vault-7.2.0a1752907825.dist-info/RECORD +0 -268
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/top_level.txt +0 -0
@@ -2,8 +2,7 @@
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
4
4
|
|
5
|
-
import builtins
|
6
|
-
import copy
|
5
|
+
import builtins as _builtins
|
7
6
|
import warnings
|
8
7
|
import sys
|
9
8
|
import pulumi
|
@@ -20,45 +19,45 @@ __all__ = ['AuthBackendLoginArgs', 'AuthBackendLogin']
|
|
20
19
|
@pulumi.input_type
|
21
20
|
class AuthBackendLoginArgs:
|
22
21
|
def __init__(__self__, *,
|
23
|
-
backend: Optional[pulumi.Input[
|
24
|
-
iam_http_request_method: Optional[pulumi.Input[
|
25
|
-
iam_request_body: Optional[pulumi.Input[
|
26
|
-
iam_request_headers: Optional[pulumi.Input[
|
27
|
-
iam_request_url: Optional[pulumi.Input[
|
28
|
-
identity: Optional[pulumi.Input[
|
29
|
-
namespace: Optional[pulumi.Input[
|
30
|
-
nonce: Optional[pulumi.Input[
|
31
|
-
pkcs7: Optional[pulumi.Input[
|
32
|
-
role: Optional[pulumi.Input[
|
33
|
-
signature: Optional[pulumi.Input[
|
22
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
23
|
+
iam_http_request_method: Optional[pulumi.Input[_builtins.str]] = None,
|
24
|
+
iam_request_body: Optional[pulumi.Input[_builtins.str]] = None,
|
25
|
+
iam_request_headers: Optional[pulumi.Input[_builtins.str]] = None,
|
26
|
+
iam_request_url: Optional[pulumi.Input[_builtins.str]] = None,
|
27
|
+
identity: Optional[pulumi.Input[_builtins.str]] = None,
|
28
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
29
|
+
nonce: Optional[pulumi.Input[_builtins.str]] = None,
|
30
|
+
pkcs7: Optional[pulumi.Input[_builtins.str]] = None,
|
31
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
32
|
+
signature: Optional[pulumi.Input[_builtins.str]] = None):
|
34
33
|
"""
|
35
34
|
The set of arguments for constructing a AuthBackendLogin resource.
|
36
|
-
:param pulumi.Input[
|
35
|
+
:param pulumi.Input[_builtins.str] backend: The unique name of the AWS auth backend. Defaults to
|
37
36
|
'aws'.
|
38
|
-
:param pulumi.Input[
|
37
|
+
:param pulumi.Input[_builtins.str] iam_http_request_method: The HTTP method used in the signed IAM
|
39
38
|
request.
|
40
|
-
:param pulumi.Input[
|
39
|
+
:param pulumi.Input[_builtins.str] iam_request_body: The base64-encoded body of the signed
|
41
40
|
request.
|
42
|
-
:param pulumi.Input[
|
41
|
+
:param pulumi.Input[_builtins.str] iam_request_headers: The base64-encoded, JSON serialized
|
43
42
|
representation of the GetCallerIdentity HTTP request headers.
|
44
|
-
:param pulumi.Input[
|
43
|
+
:param pulumi.Input[_builtins.str] iam_request_url: The base64-encoded HTTP URL used in the signed
|
45
44
|
request.
|
46
|
-
:param pulumi.Input[
|
45
|
+
:param pulumi.Input[_builtins.str] identity: The base64-encoded EC2 instance identity document to
|
47
46
|
authenticate with. Can be retrieved from the EC2 metadata server.
|
48
|
-
:param pulumi.Input[
|
47
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
49
48
|
The value should not contain leading or trailing forward slashes.
|
50
49
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
51
50
|
*Available only for Vault Enterprise*.
|
52
|
-
:param pulumi.Input[
|
51
|
+
:param pulumi.Input[_builtins.str] nonce: The unique nonce to be used for login requests. Can be
|
53
52
|
set to a user-specified value, or will contain the server-generated value
|
54
53
|
once a token is issued. EC2 instances can only acquire a single token until
|
55
54
|
the whitelist is tidied again unless they keep track of this nonce.
|
56
|
-
:param pulumi.Input[
|
55
|
+
:param pulumi.Input[_builtins.str] pkcs7: The PKCS#7 signature of the identity document to
|
57
56
|
authenticate with, with all newline characters removed. Can be retrieved from
|
58
57
|
the EC2 metadata server.
|
59
|
-
:param pulumi.Input[
|
58
|
+
:param pulumi.Input[_builtins.str] role: The name of the AWS auth backend role to create tokens
|
60
59
|
against.
|
61
|
-
:param pulumi.Input[
|
60
|
+
:param pulumi.Input[_builtins.str] signature: The base64-encoded SHA256 RSA signature of the
|
62
61
|
instance identity document to authenticate with, with all newline characters
|
63
62
|
removed. Can be retrieved from the EC2 metadata server.
|
64
63
|
"""
|
@@ -85,9 +84,9 @@ class AuthBackendLoginArgs:
|
|
85
84
|
if signature is not None:
|
86
85
|
pulumi.set(__self__, "signature", signature)
|
87
86
|
|
88
|
-
@property
|
87
|
+
@_builtins.property
|
89
88
|
@pulumi.getter
|
90
|
-
def backend(self) -> Optional[pulumi.Input[
|
89
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
91
90
|
"""
|
92
91
|
The unique name of the AWS auth backend. Defaults to
|
93
92
|
'aws'.
|
@@ -95,12 +94,12 @@ class AuthBackendLoginArgs:
|
|
95
94
|
return pulumi.get(self, "backend")
|
96
95
|
|
97
96
|
@backend.setter
|
98
|
-
def backend(self, value: Optional[pulumi.Input[
|
97
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
99
98
|
pulumi.set(self, "backend", value)
|
100
99
|
|
101
|
-
@property
|
100
|
+
@_builtins.property
|
102
101
|
@pulumi.getter(name="iamHttpRequestMethod")
|
103
|
-
def iam_http_request_method(self) -> Optional[pulumi.Input[
|
102
|
+
def iam_http_request_method(self) -> Optional[pulumi.Input[_builtins.str]]:
|
104
103
|
"""
|
105
104
|
The HTTP method used in the signed IAM
|
106
105
|
request.
|
@@ -108,12 +107,12 @@ class AuthBackendLoginArgs:
|
|
108
107
|
return pulumi.get(self, "iam_http_request_method")
|
109
108
|
|
110
109
|
@iam_http_request_method.setter
|
111
|
-
def iam_http_request_method(self, value: Optional[pulumi.Input[
|
110
|
+
def iam_http_request_method(self, value: Optional[pulumi.Input[_builtins.str]]):
|
112
111
|
pulumi.set(self, "iam_http_request_method", value)
|
113
112
|
|
114
|
-
@property
|
113
|
+
@_builtins.property
|
115
114
|
@pulumi.getter(name="iamRequestBody")
|
116
|
-
def iam_request_body(self) -> Optional[pulumi.Input[
|
115
|
+
def iam_request_body(self) -> Optional[pulumi.Input[_builtins.str]]:
|
117
116
|
"""
|
118
117
|
The base64-encoded body of the signed
|
119
118
|
request.
|
@@ -121,12 +120,12 @@ class AuthBackendLoginArgs:
|
|
121
120
|
return pulumi.get(self, "iam_request_body")
|
122
121
|
|
123
122
|
@iam_request_body.setter
|
124
|
-
def iam_request_body(self, value: Optional[pulumi.Input[
|
123
|
+
def iam_request_body(self, value: Optional[pulumi.Input[_builtins.str]]):
|
125
124
|
pulumi.set(self, "iam_request_body", value)
|
126
125
|
|
127
|
-
@property
|
126
|
+
@_builtins.property
|
128
127
|
@pulumi.getter(name="iamRequestHeaders")
|
129
|
-
def iam_request_headers(self) -> Optional[pulumi.Input[
|
128
|
+
def iam_request_headers(self) -> Optional[pulumi.Input[_builtins.str]]:
|
130
129
|
"""
|
131
130
|
The base64-encoded, JSON serialized
|
132
131
|
representation of the GetCallerIdentity HTTP request headers.
|
@@ -134,12 +133,12 @@ class AuthBackendLoginArgs:
|
|
134
133
|
return pulumi.get(self, "iam_request_headers")
|
135
134
|
|
136
135
|
@iam_request_headers.setter
|
137
|
-
def iam_request_headers(self, value: Optional[pulumi.Input[
|
136
|
+
def iam_request_headers(self, value: Optional[pulumi.Input[_builtins.str]]):
|
138
137
|
pulumi.set(self, "iam_request_headers", value)
|
139
138
|
|
140
|
-
@property
|
139
|
+
@_builtins.property
|
141
140
|
@pulumi.getter(name="iamRequestUrl")
|
142
|
-
def iam_request_url(self) -> Optional[pulumi.Input[
|
141
|
+
def iam_request_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
143
142
|
"""
|
144
143
|
The base64-encoded HTTP URL used in the signed
|
145
144
|
request.
|
@@ -147,12 +146,12 @@ class AuthBackendLoginArgs:
|
|
147
146
|
return pulumi.get(self, "iam_request_url")
|
148
147
|
|
149
148
|
@iam_request_url.setter
|
150
|
-
def iam_request_url(self, value: Optional[pulumi.Input[
|
149
|
+
def iam_request_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
151
150
|
pulumi.set(self, "iam_request_url", value)
|
152
151
|
|
153
|
-
@property
|
152
|
+
@_builtins.property
|
154
153
|
@pulumi.getter
|
155
|
-
def identity(self) -> Optional[pulumi.Input[
|
154
|
+
def identity(self) -> Optional[pulumi.Input[_builtins.str]]:
|
156
155
|
"""
|
157
156
|
The base64-encoded EC2 instance identity document to
|
158
157
|
authenticate with. Can be retrieved from the EC2 metadata server.
|
@@ -160,12 +159,12 @@ class AuthBackendLoginArgs:
|
|
160
159
|
return pulumi.get(self, "identity")
|
161
160
|
|
162
161
|
@identity.setter
|
163
|
-
def identity(self, value: Optional[pulumi.Input[
|
162
|
+
def identity(self, value: Optional[pulumi.Input[_builtins.str]]):
|
164
163
|
pulumi.set(self, "identity", value)
|
165
164
|
|
166
|
-
@property
|
165
|
+
@_builtins.property
|
167
166
|
@pulumi.getter
|
168
|
-
def namespace(self) -> Optional[pulumi.Input[
|
167
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
169
168
|
"""
|
170
169
|
The namespace to provision the resource in.
|
171
170
|
The value should not contain leading or trailing forward slashes.
|
@@ -175,12 +174,12 @@ class AuthBackendLoginArgs:
|
|
175
174
|
return pulumi.get(self, "namespace")
|
176
175
|
|
177
176
|
@namespace.setter
|
178
|
-
def namespace(self, value: Optional[pulumi.Input[
|
177
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
179
178
|
pulumi.set(self, "namespace", value)
|
180
179
|
|
181
|
-
@property
|
180
|
+
@_builtins.property
|
182
181
|
@pulumi.getter
|
183
|
-
def nonce(self) -> Optional[pulumi.Input[
|
182
|
+
def nonce(self) -> Optional[pulumi.Input[_builtins.str]]:
|
184
183
|
"""
|
185
184
|
The unique nonce to be used for login requests. Can be
|
186
185
|
set to a user-specified value, or will contain the server-generated value
|
@@ -190,12 +189,12 @@ class AuthBackendLoginArgs:
|
|
190
189
|
return pulumi.get(self, "nonce")
|
191
190
|
|
192
191
|
@nonce.setter
|
193
|
-
def nonce(self, value: Optional[pulumi.Input[
|
192
|
+
def nonce(self, value: Optional[pulumi.Input[_builtins.str]]):
|
194
193
|
pulumi.set(self, "nonce", value)
|
195
194
|
|
196
|
-
@property
|
195
|
+
@_builtins.property
|
197
196
|
@pulumi.getter
|
198
|
-
def pkcs7(self) -> Optional[pulumi.Input[
|
197
|
+
def pkcs7(self) -> Optional[pulumi.Input[_builtins.str]]:
|
199
198
|
"""
|
200
199
|
The PKCS#7 signature of the identity document to
|
201
200
|
authenticate with, with all newline characters removed. Can be retrieved from
|
@@ -204,12 +203,12 @@ class AuthBackendLoginArgs:
|
|
204
203
|
return pulumi.get(self, "pkcs7")
|
205
204
|
|
206
205
|
@pkcs7.setter
|
207
|
-
def pkcs7(self, value: Optional[pulumi.Input[
|
206
|
+
def pkcs7(self, value: Optional[pulumi.Input[_builtins.str]]):
|
208
207
|
pulumi.set(self, "pkcs7", value)
|
209
208
|
|
210
|
-
@property
|
209
|
+
@_builtins.property
|
211
210
|
@pulumi.getter
|
212
|
-
def role(self) -> Optional[pulumi.Input[
|
211
|
+
def role(self) -> Optional[pulumi.Input[_builtins.str]]:
|
213
212
|
"""
|
214
213
|
The name of the AWS auth backend role to create tokens
|
215
214
|
against.
|
@@ -217,12 +216,12 @@ class AuthBackendLoginArgs:
|
|
217
216
|
return pulumi.get(self, "role")
|
218
217
|
|
219
218
|
@role.setter
|
220
|
-
def role(self, value: Optional[pulumi.Input[
|
219
|
+
def role(self, value: Optional[pulumi.Input[_builtins.str]]):
|
221
220
|
pulumi.set(self, "role", value)
|
222
221
|
|
223
|
-
@property
|
222
|
+
@_builtins.property
|
224
223
|
@pulumi.getter
|
225
|
-
def signature(self) -> Optional[pulumi.Input[
|
224
|
+
def signature(self) -> Optional[pulumi.Input[_builtins.str]]:
|
226
225
|
"""
|
227
226
|
The base64-encoded SHA256 RSA signature of the
|
228
227
|
instance identity document to authenticate with, with all newline characters
|
@@ -231,69 +230,69 @@ class AuthBackendLoginArgs:
|
|
231
230
|
return pulumi.get(self, "signature")
|
232
231
|
|
233
232
|
@signature.setter
|
234
|
-
def signature(self, value: Optional[pulumi.Input[
|
233
|
+
def signature(self, value: Optional[pulumi.Input[_builtins.str]]):
|
235
234
|
pulumi.set(self, "signature", value)
|
236
235
|
|
237
236
|
|
238
237
|
@pulumi.input_type
|
239
238
|
class _AuthBackendLoginState:
|
240
239
|
def __init__(__self__, *,
|
241
|
-
accessor: Optional[pulumi.Input[
|
242
|
-
auth_type: Optional[pulumi.Input[
|
243
|
-
backend: Optional[pulumi.Input[
|
244
|
-
client_token: Optional[pulumi.Input[
|
245
|
-
iam_http_request_method: Optional[pulumi.Input[
|
246
|
-
iam_request_body: Optional[pulumi.Input[
|
247
|
-
iam_request_headers: Optional[pulumi.Input[
|
248
|
-
iam_request_url: Optional[pulumi.Input[
|
249
|
-
identity: Optional[pulumi.Input[
|
250
|
-
lease_duration: Optional[pulumi.Input[
|
251
|
-
lease_start_time: Optional[pulumi.Input[
|
252
|
-
metadata: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
253
|
-
namespace: Optional[pulumi.Input[
|
254
|
-
nonce: Optional[pulumi.Input[
|
255
|
-
pkcs7: Optional[pulumi.Input[
|
256
|
-
policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
257
|
-
renewable: Optional[pulumi.Input[
|
258
|
-
role: Optional[pulumi.Input[
|
259
|
-
signature: Optional[pulumi.Input[
|
240
|
+
accessor: Optional[pulumi.Input[_builtins.str]] = None,
|
241
|
+
auth_type: Optional[pulumi.Input[_builtins.str]] = None,
|
242
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
243
|
+
client_token: Optional[pulumi.Input[_builtins.str]] = None,
|
244
|
+
iam_http_request_method: Optional[pulumi.Input[_builtins.str]] = None,
|
245
|
+
iam_request_body: Optional[pulumi.Input[_builtins.str]] = None,
|
246
|
+
iam_request_headers: Optional[pulumi.Input[_builtins.str]] = None,
|
247
|
+
iam_request_url: Optional[pulumi.Input[_builtins.str]] = None,
|
248
|
+
identity: Optional[pulumi.Input[_builtins.str]] = None,
|
249
|
+
lease_duration: Optional[pulumi.Input[_builtins.int]] = None,
|
250
|
+
lease_start_time: Optional[pulumi.Input[_builtins.str]] = None,
|
251
|
+
metadata: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
252
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
253
|
+
nonce: Optional[pulumi.Input[_builtins.str]] = None,
|
254
|
+
pkcs7: Optional[pulumi.Input[_builtins.str]] = None,
|
255
|
+
policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
256
|
+
renewable: Optional[pulumi.Input[_builtins.bool]] = None,
|
257
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
258
|
+
signature: Optional[pulumi.Input[_builtins.str]] = None):
|
260
259
|
"""
|
261
260
|
Input properties used for looking up and filtering AuthBackendLogin resources.
|
262
|
-
:param pulumi.Input[
|
263
|
-
:param pulumi.Input[
|
264
|
-
:param pulumi.Input[
|
261
|
+
:param pulumi.Input[_builtins.str] accessor: The token's accessor.
|
262
|
+
:param pulumi.Input[_builtins.str] auth_type: The authentication type used to generate this token.
|
263
|
+
:param pulumi.Input[_builtins.str] backend: The unique name of the AWS auth backend. Defaults to
|
265
264
|
'aws'.
|
266
|
-
:param pulumi.Input[
|
267
|
-
:param pulumi.Input[
|
265
|
+
:param pulumi.Input[_builtins.str] client_token: The token returned by Vault.
|
266
|
+
:param pulumi.Input[_builtins.str] iam_http_request_method: The HTTP method used in the signed IAM
|
268
267
|
request.
|
269
|
-
:param pulumi.Input[
|
268
|
+
:param pulumi.Input[_builtins.str] iam_request_body: The base64-encoded body of the signed
|
270
269
|
request.
|
271
|
-
:param pulumi.Input[
|
270
|
+
:param pulumi.Input[_builtins.str] iam_request_headers: The base64-encoded, JSON serialized
|
272
271
|
representation of the GetCallerIdentity HTTP request headers.
|
273
|
-
:param pulumi.Input[
|
272
|
+
:param pulumi.Input[_builtins.str] iam_request_url: The base64-encoded HTTP URL used in the signed
|
274
273
|
request.
|
275
|
-
:param pulumi.Input[
|
274
|
+
:param pulumi.Input[_builtins.str] identity: The base64-encoded EC2 instance identity document to
|
276
275
|
authenticate with. Can be retrieved from the EC2 metadata server.
|
277
|
-
:param pulumi.Input[
|
276
|
+
:param pulumi.Input[_builtins.int] lease_duration: The duration in seconds the token will be valid, relative
|
278
277
|
to the time in `lease_start_time`.
|
279
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[
|
278
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] metadata: A map of information returned by the Vault server about the
|
280
279
|
authentication used to generate this token.
|
281
|
-
:param pulumi.Input[
|
280
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
282
281
|
The value should not contain leading or trailing forward slashes.
|
283
282
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
284
283
|
*Available only for Vault Enterprise*.
|
285
|
-
:param pulumi.Input[
|
284
|
+
:param pulumi.Input[_builtins.str] nonce: The unique nonce to be used for login requests. Can be
|
286
285
|
set to a user-specified value, or will contain the server-generated value
|
287
286
|
once a token is issued. EC2 instances can only acquire a single token until
|
288
287
|
the whitelist is tidied again unless they keep track of this nonce.
|
289
|
-
:param pulumi.Input[
|
288
|
+
:param pulumi.Input[_builtins.str] pkcs7: The PKCS#7 signature of the identity document to
|
290
289
|
authenticate with, with all newline characters removed. Can be retrieved from
|
291
290
|
the EC2 metadata server.
|
292
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
293
|
-
:param pulumi.Input[
|
294
|
-
:param pulumi.Input[
|
291
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] policies: The Vault policies assigned to this token.
|
292
|
+
:param pulumi.Input[_builtins.bool] renewable: Set to true if the token can be extended through renewal.
|
293
|
+
:param pulumi.Input[_builtins.str] role: The name of the AWS auth backend role to create tokens
|
295
294
|
against.
|
296
|
-
:param pulumi.Input[
|
295
|
+
:param pulumi.Input[_builtins.str] signature: The base64-encoded SHA256 RSA signature of the
|
297
296
|
instance identity document to authenticate with, with all newline characters
|
298
297
|
removed. Can be retrieved from the EC2 metadata server.
|
299
298
|
"""
|
@@ -336,33 +335,33 @@ class _AuthBackendLoginState:
|
|
336
335
|
if signature is not None:
|
337
336
|
pulumi.set(__self__, "signature", signature)
|
338
337
|
|
339
|
-
@property
|
338
|
+
@_builtins.property
|
340
339
|
@pulumi.getter
|
341
|
-
def accessor(self) -> Optional[pulumi.Input[
|
340
|
+
def accessor(self) -> Optional[pulumi.Input[_builtins.str]]:
|
342
341
|
"""
|
343
342
|
The token's accessor.
|
344
343
|
"""
|
345
344
|
return pulumi.get(self, "accessor")
|
346
345
|
|
347
346
|
@accessor.setter
|
348
|
-
def accessor(self, value: Optional[pulumi.Input[
|
347
|
+
def accessor(self, value: Optional[pulumi.Input[_builtins.str]]):
|
349
348
|
pulumi.set(self, "accessor", value)
|
350
349
|
|
351
|
-
@property
|
350
|
+
@_builtins.property
|
352
351
|
@pulumi.getter(name="authType")
|
353
|
-
def auth_type(self) -> Optional[pulumi.Input[
|
352
|
+
def auth_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
354
353
|
"""
|
355
354
|
The authentication type used to generate this token.
|
356
355
|
"""
|
357
356
|
return pulumi.get(self, "auth_type")
|
358
357
|
|
359
358
|
@auth_type.setter
|
360
|
-
def auth_type(self, value: Optional[pulumi.Input[
|
359
|
+
def auth_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
361
360
|
pulumi.set(self, "auth_type", value)
|
362
361
|
|
363
|
-
@property
|
362
|
+
@_builtins.property
|
364
363
|
@pulumi.getter
|
365
|
-
def backend(self) -> Optional[pulumi.Input[
|
364
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
366
365
|
"""
|
367
366
|
The unique name of the AWS auth backend. Defaults to
|
368
367
|
'aws'.
|
@@ -370,24 +369,24 @@ class _AuthBackendLoginState:
|
|
370
369
|
return pulumi.get(self, "backend")
|
371
370
|
|
372
371
|
@backend.setter
|
373
|
-
def backend(self, value: Optional[pulumi.Input[
|
372
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
374
373
|
pulumi.set(self, "backend", value)
|
375
374
|
|
376
|
-
@property
|
375
|
+
@_builtins.property
|
377
376
|
@pulumi.getter(name="clientToken")
|
378
|
-
def client_token(self) -> Optional[pulumi.Input[
|
377
|
+
def client_token(self) -> Optional[pulumi.Input[_builtins.str]]:
|
379
378
|
"""
|
380
379
|
The token returned by Vault.
|
381
380
|
"""
|
382
381
|
return pulumi.get(self, "client_token")
|
383
382
|
|
384
383
|
@client_token.setter
|
385
|
-
def client_token(self, value: Optional[pulumi.Input[
|
384
|
+
def client_token(self, value: Optional[pulumi.Input[_builtins.str]]):
|
386
385
|
pulumi.set(self, "client_token", value)
|
387
386
|
|
388
|
-
@property
|
387
|
+
@_builtins.property
|
389
388
|
@pulumi.getter(name="iamHttpRequestMethod")
|
390
|
-
def iam_http_request_method(self) -> Optional[pulumi.Input[
|
389
|
+
def iam_http_request_method(self) -> Optional[pulumi.Input[_builtins.str]]:
|
391
390
|
"""
|
392
391
|
The HTTP method used in the signed IAM
|
393
392
|
request.
|
@@ -395,12 +394,12 @@ class _AuthBackendLoginState:
|
|
395
394
|
return pulumi.get(self, "iam_http_request_method")
|
396
395
|
|
397
396
|
@iam_http_request_method.setter
|
398
|
-
def iam_http_request_method(self, value: Optional[pulumi.Input[
|
397
|
+
def iam_http_request_method(self, value: Optional[pulumi.Input[_builtins.str]]):
|
399
398
|
pulumi.set(self, "iam_http_request_method", value)
|
400
399
|
|
401
|
-
@property
|
400
|
+
@_builtins.property
|
402
401
|
@pulumi.getter(name="iamRequestBody")
|
403
|
-
def iam_request_body(self) -> Optional[pulumi.Input[
|
402
|
+
def iam_request_body(self) -> Optional[pulumi.Input[_builtins.str]]:
|
404
403
|
"""
|
405
404
|
The base64-encoded body of the signed
|
406
405
|
request.
|
@@ -408,12 +407,12 @@ class _AuthBackendLoginState:
|
|
408
407
|
return pulumi.get(self, "iam_request_body")
|
409
408
|
|
410
409
|
@iam_request_body.setter
|
411
|
-
def iam_request_body(self, value: Optional[pulumi.Input[
|
410
|
+
def iam_request_body(self, value: Optional[pulumi.Input[_builtins.str]]):
|
412
411
|
pulumi.set(self, "iam_request_body", value)
|
413
412
|
|
414
|
-
@property
|
413
|
+
@_builtins.property
|
415
414
|
@pulumi.getter(name="iamRequestHeaders")
|
416
|
-
def iam_request_headers(self) -> Optional[pulumi.Input[
|
415
|
+
def iam_request_headers(self) -> Optional[pulumi.Input[_builtins.str]]:
|
417
416
|
"""
|
418
417
|
The base64-encoded, JSON serialized
|
419
418
|
representation of the GetCallerIdentity HTTP request headers.
|
@@ -421,12 +420,12 @@ class _AuthBackendLoginState:
|
|
421
420
|
return pulumi.get(self, "iam_request_headers")
|
422
421
|
|
423
422
|
@iam_request_headers.setter
|
424
|
-
def iam_request_headers(self, value: Optional[pulumi.Input[
|
423
|
+
def iam_request_headers(self, value: Optional[pulumi.Input[_builtins.str]]):
|
425
424
|
pulumi.set(self, "iam_request_headers", value)
|
426
425
|
|
427
|
-
@property
|
426
|
+
@_builtins.property
|
428
427
|
@pulumi.getter(name="iamRequestUrl")
|
429
|
-
def iam_request_url(self) -> Optional[pulumi.Input[
|
428
|
+
def iam_request_url(self) -> Optional[pulumi.Input[_builtins.str]]:
|
430
429
|
"""
|
431
430
|
The base64-encoded HTTP URL used in the signed
|
432
431
|
request.
|
@@ -434,12 +433,12 @@ class _AuthBackendLoginState:
|
|
434
433
|
return pulumi.get(self, "iam_request_url")
|
435
434
|
|
436
435
|
@iam_request_url.setter
|
437
|
-
def iam_request_url(self, value: Optional[pulumi.Input[
|
436
|
+
def iam_request_url(self, value: Optional[pulumi.Input[_builtins.str]]):
|
438
437
|
pulumi.set(self, "iam_request_url", value)
|
439
438
|
|
440
|
-
@property
|
439
|
+
@_builtins.property
|
441
440
|
@pulumi.getter
|
442
|
-
def identity(self) -> Optional[pulumi.Input[
|
441
|
+
def identity(self) -> Optional[pulumi.Input[_builtins.str]]:
|
443
442
|
"""
|
444
443
|
The base64-encoded EC2 instance identity document to
|
445
444
|
authenticate with. Can be retrieved from the EC2 metadata server.
|
@@ -447,12 +446,12 @@ class _AuthBackendLoginState:
|
|
447
446
|
return pulumi.get(self, "identity")
|
448
447
|
|
449
448
|
@identity.setter
|
450
|
-
def identity(self, value: Optional[pulumi.Input[
|
449
|
+
def identity(self, value: Optional[pulumi.Input[_builtins.str]]):
|
451
450
|
pulumi.set(self, "identity", value)
|
452
451
|
|
453
|
-
@property
|
452
|
+
@_builtins.property
|
454
453
|
@pulumi.getter(name="leaseDuration")
|
455
|
-
def lease_duration(self) -> Optional[pulumi.Input[
|
454
|
+
def lease_duration(self) -> Optional[pulumi.Input[_builtins.int]]:
|
456
455
|
"""
|
457
456
|
The duration in seconds the token will be valid, relative
|
458
457
|
to the time in `lease_start_time`.
|
@@ -460,21 +459,21 @@ class _AuthBackendLoginState:
|
|
460
459
|
return pulumi.get(self, "lease_duration")
|
461
460
|
|
462
461
|
@lease_duration.setter
|
463
|
-
def lease_duration(self, value: Optional[pulumi.Input[
|
462
|
+
def lease_duration(self, value: Optional[pulumi.Input[_builtins.int]]):
|
464
463
|
pulumi.set(self, "lease_duration", value)
|
465
464
|
|
466
|
-
@property
|
465
|
+
@_builtins.property
|
467
466
|
@pulumi.getter(name="leaseStartTime")
|
468
|
-
def lease_start_time(self) -> Optional[pulumi.Input[
|
467
|
+
def lease_start_time(self) -> Optional[pulumi.Input[_builtins.str]]:
|
469
468
|
return pulumi.get(self, "lease_start_time")
|
470
469
|
|
471
470
|
@lease_start_time.setter
|
472
|
-
def lease_start_time(self, value: Optional[pulumi.Input[
|
471
|
+
def lease_start_time(self, value: Optional[pulumi.Input[_builtins.str]]):
|
473
472
|
pulumi.set(self, "lease_start_time", value)
|
474
473
|
|
475
|
-
@property
|
474
|
+
@_builtins.property
|
476
475
|
@pulumi.getter
|
477
|
-
def metadata(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
476
|
+
def metadata(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
|
478
477
|
"""
|
479
478
|
A map of information returned by the Vault server about the
|
480
479
|
authentication used to generate this token.
|
@@ -482,12 +481,12 @@ class _AuthBackendLoginState:
|
|
482
481
|
return pulumi.get(self, "metadata")
|
483
482
|
|
484
483
|
@metadata.setter
|
485
|
-
def metadata(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
484
|
+
def metadata(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
|
486
485
|
pulumi.set(self, "metadata", value)
|
487
486
|
|
488
|
-
@property
|
487
|
+
@_builtins.property
|
489
488
|
@pulumi.getter
|
490
|
-
def namespace(self) -> Optional[pulumi.Input[
|
489
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
491
490
|
"""
|
492
491
|
The namespace to provision the resource in.
|
493
492
|
The value should not contain leading or trailing forward slashes.
|
@@ -497,12 +496,12 @@ class _AuthBackendLoginState:
|
|
497
496
|
return pulumi.get(self, "namespace")
|
498
497
|
|
499
498
|
@namespace.setter
|
500
|
-
def namespace(self, value: Optional[pulumi.Input[
|
499
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
501
500
|
pulumi.set(self, "namespace", value)
|
502
501
|
|
503
|
-
@property
|
502
|
+
@_builtins.property
|
504
503
|
@pulumi.getter
|
505
|
-
def nonce(self) -> Optional[pulumi.Input[
|
504
|
+
def nonce(self) -> Optional[pulumi.Input[_builtins.str]]:
|
506
505
|
"""
|
507
506
|
The unique nonce to be used for login requests. Can be
|
508
507
|
set to a user-specified value, or will contain the server-generated value
|
@@ -512,12 +511,12 @@ class _AuthBackendLoginState:
|
|
512
511
|
return pulumi.get(self, "nonce")
|
513
512
|
|
514
513
|
@nonce.setter
|
515
|
-
def nonce(self, value: Optional[pulumi.Input[
|
514
|
+
def nonce(self, value: Optional[pulumi.Input[_builtins.str]]):
|
516
515
|
pulumi.set(self, "nonce", value)
|
517
516
|
|
518
|
-
@property
|
517
|
+
@_builtins.property
|
519
518
|
@pulumi.getter
|
520
|
-
def pkcs7(self) -> Optional[pulumi.Input[
|
519
|
+
def pkcs7(self) -> Optional[pulumi.Input[_builtins.str]]:
|
521
520
|
"""
|
522
521
|
The PKCS#7 signature of the identity document to
|
523
522
|
authenticate with, with all newline characters removed. Can be retrieved from
|
@@ -526,36 +525,36 @@ class _AuthBackendLoginState:
|
|
526
525
|
return pulumi.get(self, "pkcs7")
|
527
526
|
|
528
527
|
@pkcs7.setter
|
529
|
-
def pkcs7(self, value: Optional[pulumi.Input[
|
528
|
+
def pkcs7(self, value: Optional[pulumi.Input[_builtins.str]]):
|
530
529
|
pulumi.set(self, "pkcs7", value)
|
531
530
|
|
532
|
-
@property
|
531
|
+
@_builtins.property
|
533
532
|
@pulumi.getter
|
534
|
-
def policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
533
|
+
def policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
535
534
|
"""
|
536
535
|
The Vault policies assigned to this token.
|
537
536
|
"""
|
538
537
|
return pulumi.get(self, "policies")
|
539
538
|
|
540
539
|
@policies.setter
|
541
|
-
def policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
540
|
+
def policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
542
541
|
pulumi.set(self, "policies", value)
|
543
542
|
|
544
|
-
@property
|
543
|
+
@_builtins.property
|
545
544
|
@pulumi.getter
|
546
|
-
def renewable(self) -> Optional[pulumi.Input[
|
545
|
+
def renewable(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
547
546
|
"""
|
548
547
|
Set to true if the token can be extended through renewal.
|
549
548
|
"""
|
550
549
|
return pulumi.get(self, "renewable")
|
551
550
|
|
552
551
|
@renewable.setter
|
553
|
-
def renewable(self, value: Optional[pulumi.Input[
|
552
|
+
def renewable(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
554
553
|
pulumi.set(self, "renewable", value)
|
555
554
|
|
556
|
-
@property
|
555
|
+
@_builtins.property
|
557
556
|
@pulumi.getter
|
558
|
-
def role(self) -> Optional[pulumi.Input[
|
557
|
+
def role(self) -> Optional[pulumi.Input[_builtins.str]]:
|
559
558
|
"""
|
560
559
|
The name of the AWS auth backend role to create tokens
|
561
560
|
against.
|
@@ -563,12 +562,12 @@ class _AuthBackendLoginState:
|
|
563
562
|
return pulumi.get(self, "role")
|
564
563
|
|
565
564
|
@role.setter
|
566
|
-
def role(self, value: Optional[pulumi.Input[
|
565
|
+
def role(self, value: Optional[pulumi.Input[_builtins.str]]):
|
567
566
|
pulumi.set(self, "role", value)
|
568
567
|
|
569
|
-
@property
|
568
|
+
@_builtins.property
|
570
569
|
@pulumi.getter
|
571
|
-
def signature(self) -> Optional[pulumi.Input[
|
570
|
+
def signature(self) -> Optional[pulumi.Input[_builtins.str]]:
|
572
571
|
"""
|
573
572
|
The base64-encoded SHA256 RSA signature of the
|
574
573
|
instance identity document to authenticate with, with all newline characters
|
@@ -577,7 +576,7 @@ class _AuthBackendLoginState:
|
|
577
576
|
return pulumi.get(self, "signature")
|
578
577
|
|
579
578
|
@signature.setter
|
580
|
-
def signature(self, value: Optional[pulumi.Input[
|
579
|
+
def signature(self, value: Optional[pulumi.Input[_builtins.str]]):
|
581
580
|
pulumi.set(self, "signature", value)
|
582
581
|
|
583
582
|
|
@@ -587,17 +586,17 @@ class AuthBackendLogin(pulumi.CustomResource):
|
|
587
586
|
def __init__(__self__,
|
588
587
|
resource_name: str,
|
589
588
|
opts: Optional[pulumi.ResourceOptions] = None,
|
590
|
-
backend: Optional[pulumi.Input[
|
591
|
-
iam_http_request_method: Optional[pulumi.Input[
|
592
|
-
iam_request_body: Optional[pulumi.Input[
|
593
|
-
iam_request_headers: Optional[pulumi.Input[
|
594
|
-
iam_request_url: Optional[pulumi.Input[
|
595
|
-
identity: Optional[pulumi.Input[
|
596
|
-
namespace: Optional[pulumi.Input[
|
597
|
-
nonce: Optional[pulumi.Input[
|
598
|
-
pkcs7: Optional[pulumi.Input[
|
599
|
-
role: Optional[pulumi.Input[
|
600
|
-
signature: Optional[pulumi.Input[
|
589
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
590
|
+
iam_http_request_method: Optional[pulumi.Input[_builtins.str]] = None,
|
591
|
+
iam_request_body: Optional[pulumi.Input[_builtins.str]] = None,
|
592
|
+
iam_request_headers: Optional[pulumi.Input[_builtins.str]] = None,
|
593
|
+
iam_request_url: Optional[pulumi.Input[_builtins.str]] = None,
|
594
|
+
identity: Optional[pulumi.Input[_builtins.str]] = None,
|
595
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
596
|
+
nonce: Optional[pulumi.Input[_builtins.str]] = None,
|
597
|
+
pkcs7: Optional[pulumi.Input[_builtins.str]] = None,
|
598
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
599
|
+
signature: Optional[pulumi.Input[_builtins.str]] = None,
|
601
600
|
__props__=None):
|
602
601
|
"""
|
603
602
|
Logs into a Vault server using an AWS auth backend. Login can be
|
@@ -607,32 +606,32 @@ class AuthBackendLogin(pulumi.CustomResource):
|
|
607
606
|
|
608
607
|
:param str resource_name: The name of the resource.
|
609
608
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
610
|
-
:param pulumi.Input[
|
609
|
+
:param pulumi.Input[_builtins.str] backend: The unique name of the AWS auth backend. Defaults to
|
611
610
|
'aws'.
|
612
|
-
:param pulumi.Input[
|
611
|
+
:param pulumi.Input[_builtins.str] iam_http_request_method: The HTTP method used in the signed IAM
|
613
612
|
request.
|
614
|
-
:param pulumi.Input[
|
613
|
+
:param pulumi.Input[_builtins.str] iam_request_body: The base64-encoded body of the signed
|
615
614
|
request.
|
616
|
-
:param pulumi.Input[
|
615
|
+
:param pulumi.Input[_builtins.str] iam_request_headers: The base64-encoded, JSON serialized
|
617
616
|
representation of the GetCallerIdentity HTTP request headers.
|
618
|
-
:param pulumi.Input[
|
617
|
+
:param pulumi.Input[_builtins.str] iam_request_url: The base64-encoded HTTP URL used in the signed
|
619
618
|
request.
|
620
|
-
:param pulumi.Input[
|
619
|
+
:param pulumi.Input[_builtins.str] identity: The base64-encoded EC2 instance identity document to
|
621
620
|
authenticate with. Can be retrieved from the EC2 metadata server.
|
622
|
-
:param pulumi.Input[
|
621
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
623
622
|
The value should not contain leading or trailing forward slashes.
|
624
623
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
625
624
|
*Available only for Vault Enterprise*.
|
626
|
-
:param pulumi.Input[
|
625
|
+
:param pulumi.Input[_builtins.str] nonce: The unique nonce to be used for login requests. Can be
|
627
626
|
set to a user-specified value, or will contain the server-generated value
|
628
627
|
once a token is issued. EC2 instances can only acquire a single token until
|
629
628
|
the whitelist is tidied again unless they keep track of this nonce.
|
630
|
-
:param pulumi.Input[
|
629
|
+
:param pulumi.Input[_builtins.str] pkcs7: The PKCS#7 signature of the identity document to
|
631
630
|
authenticate with, with all newline characters removed. Can be retrieved from
|
632
631
|
the EC2 metadata server.
|
633
|
-
:param pulumi.Input[
|
632
|
+
:param pulumi.Input[_builtins.str] role: The name of the AWS auth backend role to create tokens
|
634
633
|
against.
|
635
|
-
:param pulumi.Input[
|
634
|
+
:param pulumi.Input[_builtins.str] signature: The base64-encoded SHA256 RSA signature of the
|
636
635
|
instance identity document to authenticate with, with all newline characters
|
637
636
|
removed. Can be retrieved from the EC2 metadata server.
|
638
637
|
"""
|
@@ -663,17 +662,17 @@ class AuthBackendLogin(pulumi.CustomResource):
|
|
663
662
|
def _internal_init(__self__,
|
664
663
|
resource_name: str,
|
665
664
|
opts: Optional[pulumi.ResourceOptions] = None,
|
666
|
-
backend: Optional[pulumi.Input[
|
667
|
-
iam_http_request_method: Optional[pulumi.Input[
|
668
|
-
iam_request_body: Optional[pulumi.Input[
|
669
|
-
iam_request_headers: Optional[pulumi.Input[
|
670
|
-
iam_request_url: Optional[pulumi.Input[
|
671
|
-
identity: Optional[pulumi.Input[
|
672
|
-
namespace: Optional[pulumi.Input[
|
673
|
-
nonce: Optional[pulumi.Input[
|
674
|
-
pkcs7: Optional[pulumi.Input[
|
675
|
-
role: Optional[pulumi.Input[
|
676
|
-
signature: Optional[pulumi.Input[
|
665
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
666
|
+
iam_http_request_method: Optional[pulumi.Input[_builtins.str]] = None,
|
667
|
+
iam_request_body: Optional[pulumi.Input[_builtins.str]] = None,
|
668
|
+
iam_request_headers: Optional[pulumi.Input[_builtins.str]] = None,
|
669
|
+
iam_request_url: Optional[pulumi.Input[_builtins.str]] = None,
|
670
|
+
identity: Optional[pulumi.Input[_builtins.str]] = None,
|
671
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
672
|
+
nonce: Optional[pulumi.Input[_builtins.str]] = None,
|
673
|
+
pkcs7: Optional[pulumi.Input[_builtins.str]] = None,
|
674
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
675
|
+
signature: Optional[pulumi.Input[_builtins.str]] = None,
|
677
676
|
__props__=None):
|
678
677
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
679
678
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -714,25 +713,25 @@ class AuthBackendLogin(pulumi.CustomResource):
|
|
714
713
|
def get(resource_name: str,
|
715
714
|
id: pulumi.Input[str],
|
716
715
|
opts: Optional[pulumi.ResourceOptions] = None,
|
717
|
-
accessor: Optional[pulumi.Input[
|
718
|
-
auth_type: Optional[pulumi.Input[
|
719
|
-
backend: Optional[pulumi.Input[
|
720
|
-
client_token: Optional[pulumi.Input[
|
721
|
-
iam_http_request_method: Optional[pulumi.Input[
|
722
|
-
iam_request_body: Optional[pulumi.Input[
|
723
|
-
iam_request_headers: Optional[pulumi.Input[
|
724
|
-
iam_request_url: Optional[pulumi.Input[
|
725
|
-
identity: Optional[pulumi.Input[
|
726
|
-
lease_duration: Optional[pulumi.Input[
|
727
|
-
lease_start_time: Optional[pulumi.Input[
|
728
|
-
metadata: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
729
|
-
namespace: Optional[pulumi.Input[
|
730
|
-
nonce: Optional[pulumi.Input[
|
731
|
-
pkcs7: Optional[pulumi.Input[
|
732
|
-
policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
733
|
-
renewable: Optional[pulumi.Input[
|
734
|
-
role: Optional[pulumi.Input[
|
735
|
-
signature: Optional[pulumi.Input[
|
716
|
+
accessor: Optional[pulumi.Input[_builtins.str]] = None,
|
717
|
+
auth_type: Optional[pulumi.Input[_builtins.str]] = None,
|
718
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
719
|
+
client_token: Optional[pulumi.Input[_builtins.str]] = None,
|
720
|
+
iam_http_request_method: Optional[pulumi.Input[_builtins.str]] = None,
|
721
|
+
iam_request_body: Optional[pulumi.Input[_builtins.str]] = None,
|
722
|
+
iam_request_headers: Optional[pulumi.Input[_builtins.str]] = None,
|
723
|
+
iam_request_url: Optional[pulumi.Input[_builtins.str]] = None,
|
724
|
+
identity: Optional[pulumi.Input[_builtins.str]] = None,
|
725
|
+
lease_duration: Optional[pulumi.Input[_builtins.int]] = None,
|
726
|
+
lease_start_time: Optional[pulumi.Input[_builtins.str]] = None,
|
727
|
+
metadata: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
728
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
729
|
+
nonce: Optional[pulumi.Input[_builtins.str]] = None,
|
730
|
+
pkcs7: Optional[pulumi.Input[_builtins.str]] = None,
|
731
|
+
policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
732
|
+
renewable: Optional[pulumi.Input[_builtins.bool]] = None,
|
733
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
734
|
+
signature: Optional[pulumi.Input[_builtins.str]] = None) -> 'AuthBackendLogin':
|
736
735
|
"""
|
737
736
|
Get an existing AuthBackendLogin resource's state with the given name, id, and optional extra
|
738
737
|
properties used to qualify the lookup.
|
@@ -740,41 +739,41 @@ class AuthBackendLogin(pulumi.CustomResource):
|
|
740
739
|
:param str resource_name: The unique name of the resulting resource.
|
741
740
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
742
741
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
743
|
-
:param pulumi.Input[
|
744
|
-
:param pulumi.Input[
|
745
|
-
:param pulumi.Input[
|
742
|
+
:param pulumi.Input[_builtins.str] accessor: The token's accessor.
|
743
|
+
:param pulumi.Input[_builtins.str] auth_type: The authentication type used to generate this token.
|
744
|
+
:param pulumi.Input[_builtins.str] backend: The unique name of the AWS auth backend. Defaults to
|
746
745
|
'aws'.
|
747
|
-
:param pulumi.Input[
|
748
|
-
:param pulumi.Input[
|
746
|
+
:param pulumi.Input[_builtins.str] client_token: The token returned by Vault.
|
747
|
+
:param pulumi.Input[_builtins.str] iam_http_request_method: The HTTP method used in the signed IAM
|
749
748
|
request.
|
750
|
-
:param pulumi.Input[
|
749
|
+
:param pulumi.Input[_builtins.str] iam_request_body: The base64-encoded body of the signed
|
751
750
|
request.
|
752
|
-
:param pulumi.Input[
|
751
|
+
:param pulumi.Input[_builtins.str] iam_request_headers: The base64-encoded, JSON serialized
|
753
752
|
representation of the GetCallerIdentity HTTP request headers.
|
754
|
-
:param pulumi.Input[
|
753
|
+
:param pulumi.Input[_builtins.str] iam_request_url: The base64-encoded HTTP URL used in the signed
|
755
754
|
request.
|
756
|
-
:param pulumi.Input[
|
755
|
+
:param pulumi.Input[_builtins.str] identity: The base64-encoded EC2 instance identity document to
|
757
756
|
authenticate with. Can be retrieved from the EC2 metadata server.
|
758
|
-
:param pulumi.Input[
|
757
|
+
:param pulumi.Input[_builtins.int] lease_duration: The duration in seconds the token will be valid, relative
|
759
758
|
to the time in `lease_start_time`.
|
760
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[
|
759
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] metadata: A map of information returned by the Vault server about the
|
761
760
|
authentication used to generate this token.
|
762
|
-
:param pulumi.Input[
|
761
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
763
762
|
The value should not contain leading or trailing forward slashes.
|
764
763
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
765
764
|
*Available only for Vault Enterprise*.
|
766
|
-
:param pulumi.Input[
|
765
|
+
:param pulumi.Input[_builtins.str] nonce: The unique nonce to be used for login requests. Can be
|
767
766
|
set to a user-specified value, or will contain the server-generated value
|
768
767
|
once a token is issued. EC2 instances can only acquire a single token until
|
769
768
|
the whitelist is tidied again unless they keep track of this nonce.
|
770
|
-
:param pulumi.Input[
|
769
|
+
:param pulumi.Input[_builtins.str] pkcs7: The PKCS#7 signature of the identity document to
|
771
770
|
authenticate with, with all newline characters removed. Can be retrieved from
|
772
771
|
the EC2 metadata server.
|
773
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
774
|
-
:param pulumi.Input[
|
775
|
-
:param pulumi.Input[
|
772
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] policies: The Vault policies assigned to this token.
|
773
|
+
:param pulumi.Input[_builtins.bool] renewable: Set to true if the token can be extended through renewal.
|
774
|
+
:param pulumi.Input[_builtins.str] role: The name of the AWS auth backend role to create tokens
|
776
775
|
against.
|
777
|
-
:param pulumi.Input[
|
776
|
+
:param pulumi.Input[_builtins.str] signature: The base64-encoded SHA256 RSA signature of the
|
778
777
|
instance identity document to authenticate with, with all newline characters
|
779
778
|
removed. Can be retrieved from the EC2 metadata server.
|
780
779
|
"""
|
@@ -803,110 +802,110 @@ class AuthBackendLogin(pulumi.CustomResource):
|
|
803
802
|
__props__.__dict__["signature"] = signature
|
804
803
|
return AuthBackendLogin(resource_name, opts=opts, __props__=__props__)
|
805
804
|
|
806
|
-
@property
|
805
|
+
@_builtins.property
|
807
806
|
@pulumi.getter
|
808
|
-
def accessor(self) -> pulumi.Output[
|
807
|
+
def accessor(self) -> pulumi.Output[_builtins.str]:
|
809
808
|
"""
|
810
809
|
The token's accessor.
|
811
810
|
"""
|
812
811
|
return pulumi.get(self, "accessor")
|
813
812
|
|
814
|
-
@property
|
813
|
+
@_builtins.property
|
815
814
|
@pulumi.getter(name="authType")
|
816
|
-
def auth_type(self) -> pulumi.Output[
|
815
|
+
def auth_type(self) -> pulumi.Output[_builtins.str]:
|
817
816
|
"""
|
818
817
|
The authentication type used to generate this token.
|
819
818
|
"""
|
820
819
|
return pulumi.get(self, "auth_type")
|
821
820
|
|
822
|
-
@property
|
821
|
+
@_builtins.property
|
823
822
|
@pulumi.getter
|
824
|
-
def backend(self) -> pulumi.Output[Optional[
|
823
|
+
def backend(self) -> pulumi.Output[Optional[_builtins.str]]:
|
825
824
|
"""
|
826
825
|
The unique name of the AWS auth backend. Defaults to
|
827
826
|
'aws'.
|
828
827
|
"""
|
829
828
|
return pulumi.get(self, "backend")
|
830
829
|
|
831
|
-
@property
|
830
|
+
@_builtins.property
|
832
831
|
@pulumi.getter(name="clientToken")
|
833
|
-
def client_token(self) -> pulumi.Output[
|
832
|
+
def client_token(self) -> pulumi.Output[_builtins.str]:
|
834
833
|
"""
|
835
834
|
The token returned by Vault.
|
836
835
|
"""
|
837
836
|
return pulumi.get(self, "client_token")
|
838
837
|
|
839
|
-
@property
|
838
|
+
@_builtins.property
|
840
839
|
@pulumi.getter(name="iamHttpRequestMethod")
|
841
|
-
def iam_http_request_method(self) -> pulumi.Output[Optional[
|
840
|
+
def iam_http_request_method(self) -> pulumi.Output[Optional[_builtins.str]]:
|
842
841
|
"""
|
843
842
|
The HTTP method used in the signed IAM
|
844
843
|
request.
|
845
844
|
"""
|
846
845
|
return pulumi.get(self, "iam_http_request_method")
|
847
846
|
|
848
|
-
@property
|
847
|
+
@_builtins.property
|
849
848
|
@pulumi.getter(name="iamRequestBody")
|
850
|
-
def iam_request_body(self) -> pulumi.Output[Optional[
|
849
|
+
def iam_request_body(self) -> pulumi.Output[Optional[_builtins.str]]:
|
851
850
|
"""
|
852
851
|
The base64-encoded body of the signed
|
853
852
|
request.
|
854
853
|
"""
|
855
854
|
return pulumi.get(self, "iam_request_body")
|
856
855
|
|
857
|
-
@property
|
856
|
+
@_builtins.property
|
858
857
|
@pulumi.getter(name="iamRequestHeaders")
|
859
|
-
def iam_request_headers(self) -> pulumi.Output[Optional[
|
858
|
+
def iam_request_headers(self) -> pulumi.Output[Optional[_builtins.str]]:
|
860
859
|
"""
|
861
860
|
The base64-encoded, JSON serialized
|
862
861
|
representation of the GetCallerIdentity HTTP request headers.
|
863
862
|
"""
|
864
863
|
return pulumi.get(self, "iam_request_headers")
|
865
864
|
|
866
|
-
@property
|
865
|
+
@_builtins.property
|
867
866
|
@pulumi.getter(name="iamRequestUrl")
|
868
|
-
def iam_request_url(self) -> pulumi.Output[Optional[
|
867
|
+
def iam_request_url(self) -> pulumi.Output[Optional[_builtins.str]]:
|
869
868
|
"""
|
870
869
|
The base64-encoded HTTP URL used in the signed
|
871
870
|
request.
|
872
871
|
"""
|
873
872
|
return pulumi.get(self, "iam_request_url")
|
874
873
|
|
875
|
-
@property
|
874
|
+
@_builtins.property
|
876
875
|
@pulumi.getter
|
877
|
-
def identity(self) -> pulumi.Output[Optional[
|
876
|
+
def identity(self) -> pulumi.Output[Optional[_builtins.str]]:
|
878
877
|
"""
|
879
878
|
The base64-encoded EC2 instance identity document to
|
880
879
|
authenticate with. Can be retrieved from the EC2 metadata server.
|
881
880
|
"""
|
882
881
|
return pulumi.get(self, "identity")
|
883
882
|
|
884
|
-
@property
|
883
|
+
@_builtins.property
|
885
884
|
@pulumi.getter(name="leaseDuration")
|
886
|
-
def lease_duration(self) -> pulumi.Output[
|
885
|
+
def lease_duration(self) -> pulumi.Output[_builtins.int]:
|
887
886
|
"""
|
888
887
|
The duration in seconds the token will be valid, relative
|
889
888
|
to the time in `lease_start_time`.
|
890
889
|
"""
|
891
890
|
return pulumi.get(self, "lease_duration")
|
892
891
|
|
893
|
-
@property
|
892
|
+
@_builtins.property
|
894
893
|
@pulumi.getter(name="leaseStartTime")
|
895
|
-
def lease_start_time(self) -> pulumi.Output[
|
894
|
+
def lease_start_time(self) -> pulumi.Output[_builtins.str]:
|
896
895
|
return pulumi.get(self, "lease_start_time")
|
897
896
|
|
898
|
-
@property
|
897
|
+
@_builtins.property
|
899
898
|
@pulumi.getter
|
900
|
-
def metadata(self) -> pulumi.Output[Mapping[str,
|
899
|
+
def metadata(self) -> pulumi.Output[Mapping[str, _builtins.str]]:
|
901
900
|
"""
|
902
901
|
A map of information returned by the Vault server about the
|
903
902
|
authentication used to generate this token.
|
904
903
|
"""
|
905
904
|
return pulumi.get(self, "metadata")
|
906
905
|
|
907
|
-
@property
|
906
|
+
@_builtins.property
|
908
907
|
@pulumi.getter
|
909
|
-
def namespace(self) -> pulumi.Output[Optional[
|
908
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
910
909
|
"""
|
911
910
|
The namespace to provision the resource in.
|
912
911
|
The value should not contain leading or trailing forward slashes.
|
@@ -915,9 +914,9 @@ class AuthBackendLogin(pulumi.CustomResource):
|
|
915
914
|
"""
|
916
915
|
return pulumi.get(self, "namespace")
|
917
916
|
|
918
|
-
@property
|
917
|
+
@_builtins.property
|
919
918
|
@pulumi.getter
|
920
|
-
def nonce(self) -> pulumi.Output[
|
919
|
+
def nonce(self) -> pulumi.Output[_builtins.str]:
|
921
920
|
"""
|
922
921
|
The unique nonce to be used for login requests. Can be
|
923
922
|
set to a user-specified value, or will contain the server-generated value
|
@@ -926,9 +925,9 @@ class AuthBackendLogin(pulumi.CustomResource):
|
|
926
925
|
"""
|
927
926
|
return pulumi.get(self, "nonce")
|
928
927
|
|
929
|
-
@property
|
928
|
+
@_builtins.property
|
930
929
|
@pulumi.getter
|
931
|
-
def pkcs7(self) -> pulumi.Output[Optional[
|
930
|
+
def pkcs7(self) -> pulumi.Output[Optional[_builtins.str]]:
|
932
931
|
"""
|
933
932
|
The PKCS#7 signature of the identity document to
|
934
933
|
authenticate with, with all newline characters removed. Can be retrieved from
|
@@ -936,34 +935,34 @@ class AuthBackendLogin(pulumi.CustomResource):
|
|
936
935
|
"""
|
937
936
|
return pulumi.get(self, "pkcs7")
|
938
937
|
|
939
|
-
@property
|
938
|
+
@_builtins.property
|
940
939
|
@pulumi.getter
|
941
|
-
def policies(self) -> pulumi.Output[Sequence[
|
940
|
+
def policies(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
942
941
|
"""
|
943
942
|
The Vault policies assigned to this token.
|
944
943
|
"""
|
945
944
|
return pulumi.get(self, "policies")
|
946
945
|
|
947
|
-
@property
|
946
|
+
@_builtins.property
|
948
947
|
@pulumi.getter
|
949
|
-
def renewable(self) -> pulumi.Output[
|
948
|
+
def renewable(self) -> pulumi.Output[_builtins.bool]:
|
950
949
|
"""
|
951
950
|
Set to true if the token can be extended through renewal.
|
952
951
|
"""
|
953
952
|
return pulumi.get(self, "renewable")
|
954
953
|
|
955
|
-
@property
|
954
|
+
@_builtins.property
|
956
955
|
@pulumi.getter
|
957
|
-
def role(self) -> pulumi.Output[
|
956
|
+
def role(self) -> pulumi.Output[_builtins.str]:
|
958
957
|
"""
|
959
958
|
The name of the AWS auth backend role to create tokens
|
960
959
|
against.
|
961
960
|
"""
|
962
961
|
return pulumi.get(self, "role")
|
963
962
|
|
964
|
-
@property
|
963
|
+
@_builtins.property
|
965
964
|
@pulumi.getter
|
966
|
-
def signature(self) -> pulumi.Output[Optional[
|
965
|
+
def signature(self) -> pulumi.Output[Optional[_builtins.str]]:
|
967
966
|
"""
|
968
967
|
The base64-encoded SHA256 RSA signature of the
|
969
968
|
instance identity document to authenticate with, with all newline characters
|