pulumi-vault 7.2.0a1752907825__py3-none-any.whl → 7.2.0a1753398491__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -1
- pulumi_vault/_inputs.py +672 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +409 -410
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +273 -274
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +239 -240
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +379 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +299 -300
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +353 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +222 -223
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +384 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +673 -674
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +333 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +256 -257
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +81 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +137 -138
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +29 -30
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +207 -208
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +120 -121
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +138 -139
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +336 -337
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0a1753398491.dist-info/RECORD +268 -0
- pulumi_vault-7.2.0a1752907825.dist-info/RECORD +0 -268
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.2.0a1752907825.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,48 +19,48 @@ __all__ = ['AuthBackendRoleArgs', 'AuthBackendRole']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class AuthBackendRoleArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
role: pulumi.Input[
|
|
24
|
-
type: pulumi.Input[
|
|
25
|
-
add_group_aliases: Optional[pulumi.Input[
|
|
26
|
-
allow_gce_inference: Optional[pulumi.Input[
|
|
27
|
-
backend: Optional[pulumi.Input[
|
|
28
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
29
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
30
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
31
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
32
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
33
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
34
|
-
max_jwt_exp: Optional[pulumi.Input[
|
|
35
|
-
namespace: Optional[pulumi.Input[
|
|
36
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
37
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
38
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
39
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
40
|
-
token_num_uses: Optional[pulumi.Input[
|
|
41
|
-
token_period: Optional[pulumi.Input[
|
|
42
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
43
|
-
token_ttl: Optional[pulumi.Input[
|
|
44
|
-
token_type: Optional[pulumi.Input[
|
|
22
|
+
role: pulumi.Input[_builtins.str],
|
|
23
|
+
type: pulumi.Input[_builtins.str],
|
|
24
|
+
add_group_aliases: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
25
|
+
allow_gce_inference: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
26
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
28
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
29
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
30
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
31
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
32
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
33
|
+
max_jwt_exp: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
36
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
37
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
38
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
39
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
40
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
41
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
42
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
43
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None):
|
|
45
44
|
"""
|
|
46
45
|
The set of arguments for constructing a AuthBackendRole resource.
|
|
47
|
-
:param pulumi.Input[
|
|
48
|
-
:param pulumi.Input[
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
51
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
52
|
-
:param pulumi.Input[
|
|
46
|
+
:param pulumi.Input[_builtins.str] role: Name of the GCP role
|
|
47
|
+
:param pulumi.Input[_builtins.str] type: Type of GCP authentication role (either `gce` or `iam`)
|
|
48
|
+
:param pulumi.Input[_builtins.str] backend: Path to the mounted GCP auth backend
|
|
49
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
|
50
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
|
51
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
53
52
|
The value should not contain leading or trailing forward slashes.
|
|
54
53
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
55
54
|
*Available only for Vault Enterprise*.
|
|
56
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
57
|
-
:param pulumi.Input[
|
|
58
|
-
:param pulumi.Input[
|
|
59
|
-
:param pulumi.Input[
|
|
60
|
-
:param pulumi.Input[
|
|
61
|
-
:param pulumi.Input[
|
|
62
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
63
|
-
:param pulumi.Input[
|
|
64
|
-
:param pulumi.Input[
|
|
55
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
56
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
57
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
58
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
59
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
60
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
61
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
62
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
63
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
65
64
|
"""
|
|
66
65
|
pulumi.set(__self__, "role", role)
|
|
67
66
|
pulumi.set(__self__, "type", type)
|
|
@@ -106,132 +105,132 @@ class AuthBackendRoleArgs:
|
|
|
106
105
|
if token_type is not None:
|
|
107
106
|
pulumi.set(__self__, "token_type", token_type)
|
|
108
107
|
|
|
109
|
-
@property
|
|
108
|
+
@_builtins.property
|
|
110
109
|
@pulumi.getter
|
|
111
|
-
def role(self) -> pulumi.Input[
|
|
110
|
+
def role(self) -> pulumi.Input[_builtins.str]:
|
|
112
111
|
"""
|
|
113
112
|
Name of the GCP role
|
|
114
113
|
"""
|
|
115
114
|
return pulumi.get(self, "role")
|
|
116
115
|
|
|
117
116
|
@role.setter
|
|
118
|
-
def role(self, value: pulumi.Input[
|
|
117
|
+
def role(self, value: pulumi.Input[_builtins.str]):
|
|
119
118
|
pulumi.set(self, "role", value)
|
|
120
119
|
|
|
121
|
-
@property
|
|
120
|
+
@_builtins.property
|
|
122
121
|
@pulumi.getter
|
|
123
|
-
def type(self) -> pulumi.Input[
|
|
122
|
+
def type(self) -> pulumi.Input[_builtins.str]:
|
|
124
123
|
"""
|
|
125
124
|
Type of GCP authentication role (either `gce` or `iam`)
|
|
126
125
|
"""
|
|
127
126
|
return pulumi.get(self, "type")
|
|
128
127
|
|
|
129
128
|
@type.setter
|
|
130
|
-
def type(self, value: pulumi.Input[
|
|
129
|
+
def type(self, value: pulumi.Input[_builtins.str]):
|
|
131
130
|
pulumi.set(self, "type", value)
|
|
132
131
|
|
|
133
|
-
@property
|
|
132
|
+
@_builtins.property
|
|
134
133
|
@pulumi.getter(name="addGroupAliases")
|
|
135
|
-
def add_group_aliases(self) -> Optional[pulumi.Input[
|
|
134
|
+
def add_group_aliases(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
136
135
|
return pulumi.get(self, "add_group_aliases")
|
|
137
136
|
|
|
138
137
|
@add_group_aliases.setter
|
|
139
|
-
def add_group_aliases(self, value: Optional[pulumi.Input[
|
|
138
|
+
def add_group_aliases(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
140
139
|
pulumi.set(self, "add_group_aliases", value)
|
|
141
140
|
|
|
142
|
-
@property
|
|
141
|
+
@_builtins.property
|
|
143
142
|
@pulumi.getter(name="allowGceInference")
|
|
144
|
-
def allow_gce_inference(self) -> Optional[pulumi.Input[
|
|
143
|
+
def allow_gce_inference(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
145
144
|
return pulumi.get(self, "allow_gce_inference")
|
|
146
145
|
|
|
147
146
|
@allow_gce_inference.setter
|
|
148
|
-
def allow_gce_inference(self, value: Optional[pulumi.Input[
|
|
147
|
+
def allow_gce_inference(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
149
148
|
pulumi.set(self, "allow_gce_inference", value)
|
|
150
149
|
|
|
151
|
-
@property
|
|
150
|
+
@_builtins.property
|
|
152
151
|
@pulumi.getter
|
|
153
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
152
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
154
153
|
"""
|
|
155
154
|
Path to the mounted GCP auth backend
|
|
156
155
|
"""
|
|
157
156
|
return pulumi.get(self, "backend")
|
|
158
157
|
|
|
159
158
|
@backend.setter
|
|
160
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
159
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
161
160
|
pulumi.set(self, "backend", value)
|
|
162
161
|
|
|
163
|
-
@property
|
|
162
|
+
@_builtins.property
|
|
164
163
|
@pulumi.getter(name="boundInstanceGroups")
|
|
165
|
-
def bound_instance_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
164
|
+
def bound_instance_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
166
165
|
return pulumi.get(self, "bound_instance_groups")
|
|
167
166
|
|
|
168
167
|
@bound_instance_groups.setter
|
|
169
|
-
def bound_instance_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
168
|
+
def bound_instance_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
170
169
|
pulumi.set(self, "bound_instance_groups", value)
|
|
171
170
|
|
|
172
|
-
@property
|
|
171
|
+
@_builtins.property
|
|
173
172
|
@pulumi.getter(name="boundLabels")
|
|
174
|
-
def bound_labels(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
173
|
+
def bound_labels(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
175
174
|
return pulumi.get(self, "bound_labels")
|
|
176
175
|
|
|
177
176
|
@bound_labels.setter
|
|
178
|
-
def bound_labels(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
177
|
+
def bound_labels(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
179
178
|
pulumi.set(self, "bound_labels", value)
|
|
180
179
|
|
|
181
|
-
@property
|
|
180
|
+
@_builtins.property
|
|
182
181
|
@pulumi.getter(name="boundProjects")
|
|
183
|
-
def bound_projects(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
182
|
+
def bound_projects(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
184
183
|
"""
|
|
185
184
|
An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
|
186
185
|
"""
|
|
187
186
|
return pulumi.get(self, "bound_projects")
|
|
188
187
|
|
|
189
188
|
@bound_projects.setter
|
|
190
|
-
def bound_projects(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
189
|
+
def bound_projects(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
191
190
|
pulumi.set(self, "bound_projects", value)
|
|
192
191
|
|
|
193
|
-
@property
|
|
192
|
+
@_builtins.property
|
|
194
193
|
@pulumi.getter(name="boundRegions")
|
|
195
|
-
def bound_regions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
194
|
+
def bound_regions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
196
195
|
return pulumi.get(self, "bound_regions")
|
|
197
196
|
|
|
198
197
|
@bound_regions.setter
|
|
199
|
-
def bound_regions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
198
|
+
def bound_regions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
200
199
|
pulumi.set(self, "bound_regions", value)
|
|
201
200
|
|
|
202
|
-
@property
|
|
201
|
+
@_builtins.property
|
|
203
202
|
@pulumi.getter(name="boundServiceAccounts")
|
|
204
|
-
def bound_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
203
|
+
def bound_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
205
204
|
"""
|
|
206
205
|
GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
|
207
206
|
"""
|
|
208
207
|
return pulumi.get(self, "bound_service_accounts")
|
|
209
208
|
|
|
210
209
|
@bound_service_accounts.setter
|
|
211
|
-
def bound_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
210
|
+
def bound_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
212
211
|
pulumi.set(self, "bound_service_accounts", value)
|
|
213
212
|
|
|
214
|
-
@property
|
|
213
|
+
@_builtins.property
|
|
215
214
|
@pulumi.getter(name="boundZones")
|
|
216
|
-
def bound_zones(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
215
|
+
def bound_zones(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
217
216
|
return pulumi.get(self, "bound_zones")
|
|
218
217
|
|
|
219
218
|
@bound_zones.setter
|
|
220
|
-
def bound_zones(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
219
|
+
def bound_zones(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
221
220
|
pulumi.set(self, "bound_zones", value)
|
|
222
221
|
|
|
223
|
-
@property
|
|
222
|
+
@_builtins.property
|
|
224
223
|
@pulumi.getter(name="maxJwtExp")
|
|
225
|
-
def max_jwt_exp(self) -> Optional[pulumi.Input[
|
|
224
|
+
def max_jwt_exp(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
226
225
|
return pulumi.get(self, "max_jwt_exp")
|
|
227
226
|
|
|
228
227
|
@max_jwt_exp.setter
|
|
229
|
-
def max_jwt_exp(self, value: Optional[pulumi.Input[
|
|
228
|
+
def max_jwt_exp(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
230
229
|
pulumi.set(self, "max_jwt_exp", value)
|
|
231
230
|
|
|
232
|
-
@property
|
|
231
|
+
@_builtins.property
|
|
233
232
|
@pulumi.getter
|
|
234
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
233
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
235
234
|
"""
|
|
236
235
|
The namespace to provision the resource in.
|
|
237
236
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -241,163 +240,163 @@ class AuthBackendRoleArgs:
|
|
|
241
240
|
return pulumi.get(self, "namespace")
|
|
242
241
|
|
|
243
242
|
@namespace.setter
|
|
244
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
243
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
245
244
|
pulumi.set(self, "namespace", value)
|
|
246
245
|
|
|
247
|
-
@property
|
|
246
|
+
@_builtins.property
|
|
248
247
|
@pulumi.getter(name="tokenBoundCidrs")
|
|
249
|
-
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
248
|
+
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
250
249
|
"""
|
|
251
250
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
252
251
|
"""
|
|
253
252
|
return pulumi.get(self, "token_bound_cidrs")
|
|
254
253
|
|
|
255
254
|
@token_bound_cidrs.setter
|
|
256
|
-
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
255
|
+
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
257
256
|
pulumi.set(self, "token_bound_cidrs", value)
|
|
258
257
|
|
|
259
|
-
@property
|
|
258
|
+
@_builtins.property
|
|
260
259
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
|
261
|
-
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[
|
|
260
|
+
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
262
261
|
"""
|
|
263
262
|
Generated Token's Explicit Maximum TTL in seconds
|
|
264
263
|
"""
|
|
265
264
|
return pulumi.get(self, "token_explicit_max_ttl")
|
|
266
265
|
|
|
267
266
|
@token_explicit_max_ttl.setter
|
|
268
|
-
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[
|
|
267
|
+
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
269
268
|
pulumi.set(self, "token_explicit_max_ttl", value)
|
|
270
269
|
|
|
271
|
-
@property
|
|
270
|
+
@_builtins.property
|
|
272
271
|
@pulumi.getter(name="tokenMaxTtl")
|
|
273
|
-
def token_max_ttl(self) -> Optional[pulumi.Input[
|
|
272
|
+
def token_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
274
273
|
"""
|
|
275
274
|
The maximum lifetime of the generated token
|
|
276
275
|
"""
|
|
277
276
|
return pulumi.get(self, "token_max_ttl")
|
|
278
277
|
|
|
279
278
|
@token_max_ttl.setter
|
|
280
|
-
def token_max_ttl(self, value: Optional[pulumi.Input[
|
|
279
|
+
def token_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
281
280
|
pulumi.set(self, "token_max_ttl", value)
|
|
282
281
|
|
|
283
|
-
@property
|
|
282
|
+
@_builtins.property
|
|
284
283
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
|
285
|
-
def token_no_default_policy(self) -> Optional[pulumi.Input[
|
|
284
|
+
def token_no_default_policy(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
286
285
|
"""
|
|
287
286
|
If true, the 'default' policy will not automatically be added to generated tokens
|
|
288
287
|
"""
|
|
289
288
|
return pulumi.get(self, "token_no_default_policy")
|
|
290
289
|
|
|
291
290
|
@token_no_default_policy.setter
|
|
292
|
-
def token_no_default_policy(self, value: Optional[pulumi.Input[
|
|
291
|
+
def token_no_default_policy(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
293
292
|
pulumi.set(self, "token_no_default_policy", value)
|
|
294
293
|
|
|
295
|
-
@property
|
|
294
|
+
@_builtins.property
|
|
296
295
|
@pulumi.getter(name="tokenNumUses")
|
|
297
|
-
def token_num_uses(self) -> Optional[pulumi.Input[
|
|
296
|
+
def token_num_uses(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
298
297
|
"""
|
|
299
298
|
The maximum number of times a token may be used, a value of zero means unlimited
|
|
300
299
|
"""
|
|
301
300
|
return pulumi.get(self, "token_num_uses")
|
|
302
301
|
|
|
303
302
|
@token_num_uses.setter
|
|
304
|
-
def token_num_uses(self, value: Optional[pulumi.Input[
|
|
303
|
+
def token_num_uses(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
305
304
|
pulumi.set(self, "token_num_uses", value)
|
|
306
305
|
|
|
307
|
-
@property
|
|
306
|
+
@_builtins.property
|
|
308
307
|
@pulumi.getter(name="tokenPeriod")
|
|
309
|
-
def token_period(self) -> Optional[pulumi.Input[
|
|
308
|
+
def token_period(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
310
309
|
"""
|
|
311
310
|
Generated Token's Period
|
|
312
311
|
"""
|
|
313
312
|
return pulumi.get(self, "token_period")
|
|
314
313
|
|
|
315
314
|
@token_period.setter
|
|
316
|
-
def token_period(self, value: Optional[pulumi.Input[
|
|
315
|
+
def token_period(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
317
316
|
pulumi.set(self, "token_period", value)
|
|
318
317
|
|
|
319
|
-
@property
|
|
318
|
+
@_builtins.property
|
|
320
319
|
@pulumi.getter(name="tokenPolicies")
|
|
321
|
-
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
320
|
+
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
322
321
|
"""
|
|
323
322
|
Generated Token's Policies
|
|
324
323
|
"""
|
|
325
324
|
return pulumi.get(self, "token_policies")
|
|
326
325
|
|
|
327
326
|
@token_policies.setter
|
|
328
|
-
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
327
|
+
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
329
328
|
pulumi.set(self, "token_policies", value)
|
|
330
329
|
|
|
331
|
-
@property
|
|
330
|
+
@_builtins.property
|
|
332
331
|
@pulumi.getter(name="tokenTtl")
|
|
333
|
-
def token_ttl(self) -> Optional[pulumi.Input[
|
|
332
|
+
def token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
334
333
|
"""
|
|
335
334
|
The initial ttl of the token to generate in seconds
|
|
336
335
|
"""
|
|
337
336
|
return pulumi.get(self, "token_ttl")
|
|
338
337
|
|
|
339
338
|
@token_ttl.setter
|
|
340
|
-
def token_ttl(self, value: Optional[pulumi.Input[
|
|
339
|
+
def token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
341
340
|
pulumi.set(self, "token_ttl", value)
|
|
342
341
|
|
|
343
|
-
@property
|
|
342
|
+
@_builtins.property
|
|
344
343
|
@pulumi.getter(name="tokenType")
|
|
345
|
-
def token_type(self) -> Optional[pulumi.Input[
|
|
344
|
+
def token_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
346
345
|
"""
|
|
347
346
|
The type of token to generate, service or batch
|
|
348
347
|
"""
|
|
349
348
|
return pulumi.get(self, "token_type")
|
|
350
349
|
|
|
351
350
|
@token_type.setter
|
|
352
|
-
def token_type(self, value: Optional[pulumi.Input[
|
|
351
|
+
def token_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
353
352
|
pulumi.set(self, "token_type", value)
|
|
354
353
|
|
|
355
354
|
|
|
356
355
|
@pulumi.input_type
|
|
357
356
|
class _AuthBackendRoleState:
|
|
358
357
|
def __init__(__self__, *,
|
|
359
|
-
add_group_aliases: Optional[pulumi.Input[
|
|
360
|
-
allow_gce_inference: Optional[pulumi.Input[
|
|
361
|
-
backend: Optional[pulumi.Input[
|
|
362
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
363
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
364
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
365
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
366
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
367
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
368
|
-
max_jwt_exp: Optional[pulumi.Input[
|
|
369
|
-
namespace: Optional[pulumi.Input[
|
|
370
|
-
role: Optional[pulumi.Input[
|
|
371
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
372
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
373
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
374
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
375
|
-
token_num_uses: Optional[pulumi.Input[
|
|
376
|
-
token_period: Optional[pulumi.Input[
|
|
377
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
378
|
-
token_ttl: Optional[pulumi.Input[
|
|
379
|
-
token_type: Optional[pulumi.Input[
|
|
380
|
-
type: Optional[pulumi.Input[
|
|
358
|
+
add_group_aliases: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
359
|
+
allow_gce_inference: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
360
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
361
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
362
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
363
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
364
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
365
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
366
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
367
|
+
max_jwt_exp: Optional[pulumi.Input[_builtins.str]] = None,
|
|
368
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
369
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
370
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
371
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
372
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
373
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
374
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
375
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
376
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
377
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
378
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
379
|
+
type: Optional[pulumi.Input[_builtins.str]] = None):
|
|
381
380
|
"""
|
|
382
381
|
Input properties used for looking up and filtering AuthBackendRole resources.
|
|
383
|
-
:param pulumi.Input[
|
|
384
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
385
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
386
|
-
:param pulumi.Input[
|
|
382
|
+
:param pulumi.Input[_builtins.str] backend: Path to the mounted GCP auth backend
|
|
383
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
|
384
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
|
385
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
387
386
|
The value should not contain leading or trailing forward slashes.
|
|
388
387
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
389
388
|
*Available only for Vault Enterprise*.
|
|
390
|
-
:param pulumi.Input[
|
|
391
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
392
|
-
:param pulumi.Input[
|
|
393
|
-
:param pulumi.Input[
|
|
394
|
-
:param pulumi.Input[
|
|
395
|
-
:param pulumi.Input[
|
|
396
|
-
:param pulumi.Input[
|
|
397
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
398
|
-
:param pulumi.Input[
|
|
399
|
-
:param pulumi.Input[
|
|
400
|
-
:param pulumi.Input[
|
|
389
|
+
:param pulumi.Input[_builtins.str] role: Name of the GCP role
|
|
390
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
391
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
392
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
393
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
394
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
395
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
396
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
397
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
398
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
399
|
+
:param pulumi.Input[_builtins.str] type: Type of GCP authentication role (either `gce` or `iam`)
|
|
401
400
|
"""
|
|
402
401
|
if add_group_aliases is not None:
|
|
403
402
|
pulumi.set(__self__, "add_group_aliases", add_group_aliases)
|
|
@@ -444,108 +443,108 @@ class _AuthBackendRoleState:
|
|
|
444
443
|
if type is not None:
|
|
445
444
|
pulumi.set(__self__, "type", type)
|
|
446
445
|
|
|
447
|
-
@property
|
|
446
|
+
@_builtins.property
|
|
448
447
|
@pulumi.getter(name="addGroupAliases")
|
|
449
|
-
def add_group_aliases(self) -> Optional[pulumi.Input[
|
|
448
|
+
def add_group_aliases(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
450
449
|
return pulumi.get(self, "add_group_aliases")
|
|
451
450
|
|
|
452
451
|
@add_group_aliases.setter
|
|
453
|
-
def add_group_aliases(self, value: Optional[pulumi.Input[
|
|
452
|
+
def add_group_aliases(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
454
453
|
pulumi.set(self, "add_group_aliases", value)
|
|
455
454
|
|
|
456
|
-
@property
|
|
455
|
+
@_builtins.property
|
|
457
456
|
@pulumi.getter(name="allowGceInference")
|
|
458
|
-
def allow_gce_inference(self) -> Optional[pulumi.Input[
|
|
457
|
+
def allow_gce_inference(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
459
458
|
return pulumi.get(self, "allow_gce_inference")
|
|
460
459
|
|
|
461
460
|
@allow_gce_inference.setter
|
|
462
|
-
def allow_gce_inference(self, value: Optional[pulumi.Input[
|
|
461
|
+
def allow_gce_inference(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
463
462
|
pulumi.set(self, "allow_gce_inference", value)
|
|
464
463
|
|
|
465
|
-
@property
|
|
464
|
+
@_builtins.property
|
|
466
465
|
@pulumi.getter
|
|
467
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
466
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
468
467
|
"""
|
|
469
468
|
Path to the mounted GCP auth backend
|
|
470
469
|
"""
|
|
471
470
|
return pulumi.get(self, "backend")
|
|
472
471
|
|
|
473
472
|
@backend.setter
|
|
474
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
473
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
475
474
|
pulumi.set(self, "backend", value)
|
|
476
475
|
|
|
477
|
-
@property
|
|
476
|
+
@_builtins.property
|
|
478
477
|
@pulumi.getter(name="boundInstanceGroups")
|
|
479
|
-
def bound_instance_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
478
|
+
def bound_instance_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
480
479
|
return pulumi.get(self, "bound_instance_groups")
|
|
481
480
|
|
|
482
481
|
@bound_instance_groups.setter
|
|
483
|
-
def bound_instance_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
482
|
+
def bound_instance_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
484
483
|
pulumi.set(self, "bound_instance_groups", value)
|
|
485
484
|
|
|
486
|
-
@property
|
|
485
|
+
@_builtins.property
|
|
487
486
|
@pulumi.getter(name="boundLabels")
|
|
488
|
-
def bound_labels(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
487
|
+
def bound_labels(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
489
488
|
return pulumi.get(self, "bound_labels")
|
|
490
489
|
|
|
491
490
|
@bound_labels.setter
|
|
492
|
-
def bound_labels(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
491
|
+
def bound_labels(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
493
492
|
pulumi.set(self, "bound_labels", value)
|
|
494
493
|
|
|
495
|
-
@property
|
|
494
|
+
@_builtins.property
|
|
496
495
|
@pulumi.getter(name="boundProjects")
|
|
497
|
-
def bound_projects(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
496
|
+
def bound_projects(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
498
497
|
"""
|
|
499
498
|
An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
|
500
499
|
"""
|
|
501
500
|
return pulumi.get(self, "bound_projects")
|
|
502
501
|
|
|
503
502
|
@bound_projects.setter
|
|
504
|
-
def bound_projects(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
503
|
+
def bound_projects(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
505
504
|
pulumi.set(self, "bound_projects", value)
|
|
506
505
|
|
|
507
|
-
@property
|
|
506
|
+
@_builtins.property
|
|
508
507
|
@pulumi.getter(name="boundRegions")
|
|
509
|
-
def bound_regions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
508
|
+
def bound_regions(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
510
509
|
return pulumi.get(self, "bound_regions")
|
|
511
510
|
|
|
512
511
|
@bound_regions.setter
|
|
513
|
-
def bound_regions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
512
|
+
def bound_regions(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
514
513
|
pulumi.set(self, "bound_regions", value)
|
|
515
514
|
|
|
516
|
-
@property
|
|
515
|
+
@_builtins.property
|
|
517
516
|
@pulumi.getter(name="boundServiceAccounts")
|
|
518
|
-
def bound_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
517
|
+
def bound_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
519
518
|
"""
|
|
520
519
|
GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
|
521
520
|
"""
|
|
522
521
|
return pulumi.get(self, "bound_service_accounts")
|
|
523
522
|
|
|
524
523
|
@bound_service_accounts.setter
|
|
525
|
-
def bound_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
524
|
+
def bound_service_accounts(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
526
525
|
pulumi.set(self, "bound_service_accounts", value)
|
|
527
526
|
|
|
528
|
-
@property
|
|
527
|
+
@_builtins.property
|
|
529
528
|
@pulumi.getter(name="boundZones")
|
|
530
|
-
def bound_zones(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
529
|
+
def bound_zones(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
531
530
|
return pulumi.get(self, "bound_zones")
|
|
532
531
|
|
|
533
532
|
@bound_zones.setter
|
|
534
|
-
def bound_zones(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
533
|
+
def bound_zones(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
535
534
|
pulumi.set(self, "bound_zones", value)
|
|
536
535
|
|
|
537
|
-
@property
|
|
536
|
+
@_builtins.property
|
|
538
537
|
@pulumi.getter(name="maxJwtExp")
|
|
539
|
-
def max_jwt_exp(self) -> Optional[pulumi.Input[
|
|
538
|
+
def max_jwt_exp(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
540
539
|
return pulumi.get(self, "max_jwt_exp")
|
|
541
540
|
|
|
542
541
|
@max_jwt_exp.setter
|
|
543
|
-
def max_jwt_exp(self, value: Optional[pulumi.Input[
|
|
542
|
+
def max_jwt_exp(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
544
543
|
pulumi.set(self, "max_jwt_exp", value)
|
|
545
544
|
|
|
546
|
-
@property
|
|
545
|
+
@_builtins.property
|
|
547
546
|
@pulumi.getter
|
|
548
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
547
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
549
548
|
"""
|
|
550
549
|
The namespace to provision the resource in.
|
|
551
550
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -555,139 +554,139 @@ class _AuthBackendRoleState:
|
|
|
555
554
|
return pulumi.get(self, "namespace")
|
|
556
555
|
|
|
557
556
|
@namespace.setter
|
|
558
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
557
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
559
558
|
pulumi.set(self, "namespace", value)
|
|
560
559
|
|
|
561
|
-
@property
|
|
560
|
+
@_builtins.property
|
|
562
561
|
@pulumi.getter
|
|
563
|
-
def role(self) -> Optional[pulumi.Input[
|
|
562
|
+
def role(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
564
563
|
"""
|
|
565
564
|
Name of the GCP role
|
|
566
565
|
"""
|
|
567
566
|
return pulumi.get(self, "role")
|
|
568
567
|
|
|
569
568
|
@role.setter
|
|
570
|
-
def role(self, value: Optional[pulumi.Input[
|
|
569
|
+
def role(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
571
570
|
pulumi.set(self, "role", value)
|
|
572
571
|
|
|
573
|
-
@property
|
|
572
|
+
@_builtins.property
|
|
574
573
|
@pulumi.getter(name="tokenBoundCidrs")
|
|
575
|
-
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
574
|
+
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
576
575
|
"""
|
|
577
576
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
578
577
|
"""
|
|
579
578
|
return pulumi.get(self, "token_bound_cidrs")
|
|
580
579
|
|
|
581
580
|
@token_bound_cidrs.setter
|
|
582
|
-
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
581
|
+
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
583
582
|
pulumi.set(self, "token_bound_cidrs", value)
|
|
584
583
|
|
|
585
|
-
@property
|
|
584
|
+
@_builtins.property
|
|
586
585
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
|
587
|
-
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[
|
|
586
|
+
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
588
587
|
"""
|
|
589
588
|
Generated Token's Explicit Maximum TTL in seconds
|
|
590
589
|
"""
|
|
591
590
|
return pulumi.get(self, "token_explicit_max_ttl")
|
|
592
591
|
|
|
593
592
|
@token_explicit_max_ttl.setter
|
|
594
|
-
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[
|
|
593
|
+
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
595
594
|
pulumi.set(self, "token_explicit_max_ttl", value)
|
|
596
595
|
|
|
597
|
-
@property
|
|
596
|
+
@_builtins.property
|
|
598
597
|
@pulumi.getter(name="tokenMaxTtl")
|
|
599
|
-
def token_max_ttl(self) -> Optional[pulumi.Input[
|
|
598
|
+
def token_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
600
599
|
"""
|
|
601
600
|
The maximum lifetime of the generated token
|
|
602
601
|
"""
|
|
603
602
|
return pulumi.get(self, "token_max_ttl")
|
|
604
603
|
|
|
605
604
|
@token_max_ttl.setter
|
|
606
|
-
def token_max_ttl(self, value: Optional[pulumi.Input[
|
|
605
|
+
def token_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
607
606
|
pulumi.set(self, "token_max_ttl", value)
|
|
608
607
|
|
|
609
|
-
@property
|
|
608
|
+
@_builtins.property
|
|
610
609
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
|
611
|
-
def token_no_default_policy(self) -> Optional[pulumi.Input[
|
|
610
|
+
def token_no_default_policy(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
612
611
|
"""
|
|
613
612
|
If true, the 'default' policy will not automatically be added to generated tokens
|
|
614
613
|
"""
|
|
615
614
|
return pulumi.get(self, "token_no_default_policy")
|
|
616
615
|
|
|
617
616
|
@token_no_default_policy.setter
|
|
618
|
-
def token_no_default_policy(self, value: Optional[pulumi.Input[
|
|
617
|
+
def token_no_default_policy(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
619
618
|
pulumi.set(self, "token_no_default_policy", value)
|
|
620
619
|
|
|
621
|
-
@property
|
|
620
|
+
@_builtins.property
|
|
622
621
|
@pulumi.getter(name="tokenNumUses")
|
|
623
|
-
def token_num_uses(self) -> Optional[pulumi.Input[
|
|
622
|
+
def token_num_uses(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
624
623
|
"""
|
|
625
624
|
The maximum number of times a token may be used, a value of zero means unlimited
|
|
626
625
|
"""
|
|
627
626
|
return pulumi.get(self, "token_num_uses")
|
|
628
627
|
|
|
629
628
|
@token_num_uses.setter
|
|
630
|
-
def token_num_uses(self, value: Optional[pulumi.Input[
|
|
629
|
+
def token_num_uses(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
631
630
|
pulumi.set(self, "token_num_uses", value)
|
|
632
631
|
|
|
633
|
-
@property
|
|
632
|
+
@_builtins.property
|
|
634
633
|
@pulumi.getter(name="tokenPeriod")
|
|
635
|
-
def token_period(self) -> Optional[pulumi.Input[
|
|
634
|
+
def token_period(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
636
635
|
"""
|
|
637
636
|
Generated Token's Period
|
|
638
637
|
"""
|
|
639
638
|
return pulumi.get(self, "token_period")
|
|
640
639
|
|
|
641
640
|
@token_period.setter
|
|
642
|
-
def token_period(self, value: Optional[pulumi.Input[
|
|
641
|
+
def token_period(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
643
642
|
pulumi.set(self, "token_period", value)
|
|
644
643
|
|
|
645
|
-
@property
|
|
644
|
+
@_builtins.property
|
|
646
645
|
@pulumi.getter(name="tokenPolicies")
|
|
647
|
-
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
646
|
+
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
648
647
|
"""
|
|
649
648
|
Generated Token's Policies
|
|
650
649
|
"""
|
|
651
650
|
return pulumi.get(self, "token_policies")
|
|
652
651
|
|
|
653
652
|
@token_policies.setter
|
|
654
|
-
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
653
|
+
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
655
654
|
pulumi.set(self, "token_policies", value)
|
|
656
655
|
|
|
657
|
-
@property
|
|
656
|
+
@_builtins.property
|
|
658
657
|
@pulumi.getter(name="tokenTtl")
|
|
659
|
-
def token_ttl(self) -> Optional[pulumi.Input[
|
|
658
|
+
def token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
660
659
|
"""
|
|
661
660
|
The initial ttl of the token to generate in seconds
|
|
662
661
|
"""
|
|
663
662
|
return pulumi.get(self, "token_ttl")
|
|
664
663
|
|
|
665
664
|
@token_ttl.setter
|
|
666
|
-
def token_ttl(self, value: Optional[pulumi.Input[
|
|
665
|
+
def token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
667
666
|
pulumi.set(self, "token_ttl", value)
|
|
668
667
|
|
|
669
|
-
@property
|
|
668
|
+
@_builtins.property
|
|
670
669
|
@pulumi.getter(name="tokenType")
|
|
671
|
-
def token_type(self) -> Optional[pulumi.Input[
|
|
670
|
+
def token_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
672
671
|
"""
|
|
673
672
|
The type of token to generate, service or batch
|
|
674
673
|
"""
|
|
675
674
|
return pulumi.get(self, "token_type")
|
|
676
675
|
|
|
677
676
|
@token_type.setter
|
|
678
|
-
def token_type(self, value: Optional[pulumi.Input[
|
|
677
|
+
def token_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
679
678
|
pulumi.set(self, "token_type", value)
|
|
680
679
|
|
|
681
|
-
@property
|
|
680
|
+
@_builtins.property
|
|
682
681
|
@pulumi.getter
|
|
683
|
-
def type(self) -> Optional[pulumi.Input[
|
|
682
|
+
def type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
684
683
|
"""
|
|
685
684
|
Type of GCP authentication role (either `gce` or `iam`)
|
|
686
685
|
"""
|
|
687
686
|
return pulumi.get(self, "type")
|
|
688
687
|
|
|
689
688
|
@type.setter
|
|
690
|
-
def type(self, value: Optional[pulumi.Input[
|
|
689
|
+
def type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
691
690
|
pulumi.set(self, "type", value)
|
|
692
691
|
|
|
693
692
|
|
|
@@ -697,28 +696,28 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
697
696
|
def __init__(__self__,
|
|
698
697
|
resource_name: str,
|
|
699
698
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
700
|
-
add_group_aliases: Optional[pulumi.Input[
|
|
701
|
-
allow_gce_inference: Optional[pulumi.Input[
|
|
702
|
-
backend: Optional[pulumi.Input[
|
|
703
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
704
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
705
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
706
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
707
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
708
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
709
|
-
max_jwt_exp: Optional[pulumi.Input[
|
|
710
|
-
namespace: Optional[pulumi.Input[
|
|
711
|
-
role: Optional[pulumi.Input[
|
|
712
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
713
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
714
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
715
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
716
|
-
token_num_uses: Optional[pulumi.Input[
|
|
717
|
-
token_period: Optional[pulumi.Input[
|
|
718
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
719
|
-
token_ttl: Optional[pulumi.Input[
|
|
720
|
-
token_type: Optional[pulumi.Input[
|
|
721
|
-
type: Optional[pulumi.Input[
|
|
699
|
+
add_group_aliases: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
700
|
+
allow_gce_inference: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
701
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
702
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
703
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
704
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
705
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
706
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
707
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
708
|
+
max_jwt_exp: Optional[pulumi.Input[_builtins.str]] = None,
|
|
709
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
710
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
711
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
712
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
713
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
714
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
715
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
716
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
717
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
718
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
719
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
720
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
722
721
|
__props__=None):
|
|
723
722
|
"""
|
|
724
723
|
Provides a resource to create a role in an [GCP auth backend within Vault](https://www.vaultproject.io/docs/auth/gcp.html).
|
|
@@ -757,24 +756,24 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
757
756
|
|
|
758
757
|
:param str resource_name: The name of the resource.
|
|
759
758
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
760
|
-
:param pulumi.Input[
|
|
761
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
762
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
763
|
-
:param pulumi.Input[
|
|
759
|
+
:param pulumi.Input[_builtins.str] backend: Path to the mounted GCP auth backend
|
|
760
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
|
761
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
|
762
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
764
763
|
The value should not contain leading or trailing forward slashes.
|
|
765
764
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
766
765
|
*Available only for Vault Enterprise*.
|
|
767
|
-
:param pulumi.Input[
|
|
768
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
769
|
-
:param pulumi.Input[
|
|
770
|
-
:param pulumi.Input[
|
|
771
|
-
:param pulumi.Input[
|
|
772
|
-
:param pulumi.Input[
|
|
773
|
-
:param pulumi.Input[
|
|
774
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
775
|
-
:param pulumi.Input[
|
|
776
|
-
:param pulumi.Input[
|
|
777
|
-
:param pulumi.Input[
|
|
766
|
+
:param pulumi.Input[_builtins.str] role: Name of the GCP role
|
|
767
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
768
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
769
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
770
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
771
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
772
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
773
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
774
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
775
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
776
|
+
:param pulumi.Input[_builtins.str] type: Type of GCP authentication role (either `gce` or `iam`)
|
|
778
777
|
"""
|
|
779
778
|
...
|
|
780
779
|
@overload
|
|
@@ -832,28 +831,28 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
832
831
|
def _internal_init(__self__,
|
|
833
832
|
resource_name: str,
|
|
834
833
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
835
|
-
add_group_aliases: Optional[pulumi.Input[
|
|
836
|
-
allow_gce_inference: Optional[pulumi.Input[
|
|
837
|
-
backend: Optional[pulumi.Input[
|
|
838
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
839
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
840
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
841
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
842
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
843
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
844
|
-
max_jwt_exp: Optional[pulumi.Input[
|
|
845
|
-
namespace: Optional[pulumi.Input[
|
|
846
|
-
role: Optional[pulumi.Input[
|
|
847
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
848
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
849
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
850
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
851
|
-
token_num_uses: Optional[pulumi.Input[
|
|
852
|
-
token_period: Optional[pulumi.Input[
|
|
853
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
854
|
-
token_ttl: Optional[pulumi.Input[
|
|
855
|
-
token_type: Optional[pulumi.Input[
|
|
856
|
-
type: Optional[pulumi.Input[
|
|
834
|
+
add_group_aliases: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
835
|
+
allow_gce_inference: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
836
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
837
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
838
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
839
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
840
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
841
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
842
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
843
|
+
max_jwt_exp: Optional[pulumi.Input[_builtins.str]] = None,
|
|
844
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
845
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
846
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
847
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
848
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
849
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
850
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
851
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
852
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
853
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
854
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
855
|
+
type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
857
856
|
__props__=None):
|
|
858
857
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
859
858
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -899,28 +898,28 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
899
898
|
def get(resource_name: str,
|
|
900
899
|
id: pulumi.Input[str],
|
|
901
900
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
902
|
-
add_group_aliases: Optional[pulumi.Input[
|
|
903
|
-
allow_gce_inference: Optional[pulumi.Input[
|
|
904
|
-
backend: Optional[pulumi.Input[
|
|
905
|
-
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
906
|
-
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
907
|
-
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
908
|
-
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
909
|
-
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
910
|
-
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
911
|
-
max_jwt_exp: Optional[pulumi.Input[
|
|
912
|
-
namespace: Optional[pulumi.Input[
|
|
913
|
-
role: Optional[pulumi.Input[
|
|
914
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
915
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
916
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
917
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
918
|
-
token_num_uses: Optional[pulumi.Input[
|
|
919
|
-
token_period: Optional[pulumi.Input[
|
|
920
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
921
|
-
token_ttl: Optional[pulumi.Input[
|
|
922
|
-
token_type: Optional[pulumi.Input[
|
|
923
|
-
type: Optional[pulumi.Input[
|
|
901
|
+
add_group_aliases: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
902
|
+
allow_gce_inference: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
903
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
904
|
+
bound_instance_groups: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
905
|
+
bound_labels: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
906
|
+
bound_projects: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
907
|
+
bound_regions: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
908
|
+
bound_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
909
|
+
bound_zones: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
910
|
+
max_jwt_exp: Optional[pulumi.Input[_builtins.str]] = None,
|
|
911
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
912
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
|
913
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
914
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
915
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
916
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
917
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
918
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
919
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
920
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
921
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
922
|
+
type: Optional[pulumi.Input[_builtins.str]] = None) -> 'AuthBackendRole':
|
|
924
923
|
"""
|
|
925
924
|
Get an existing AuthBackendRole resource's state with the given name, id, and optional extra
|
|
926
925
|
properties used to qualify the lookup.
|
|
@@ -928,24 +927,24 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
928
927
|
:param str resource_name: The unique name of the resulting resource.
|
|
929
928
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
930
929
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
931
|
-
:param pulumi.Input[
|
|
932
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
933
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
934
|
-
:param pulumi.Input[
|
|
930
|
+
:param pulumi.Input[_builtins.str] backend: Path to the mounted GCP auth backend
|
|
931
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_projects: An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
|
932
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] bound_service_accounts: GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
|
933
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
935
934
|
The value should not contain leading or trailing forward slashes.
|
|
936
935
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
937
936
|
*Available only for Vault Enterprise*.
|
|
938
|
-
:param pulumi.Input[
|
|
939
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
940
|
-
:param pulumi.Input[
|
|
941
|
-
:param pulumi.Input[
|
|
942
|
-
:param pulumi.Input[
|
|
943
|
-
:param pulumi.Input[
|
|
944
|
-
:param pulumi.Input[
|
|
945
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
946
|
-
:param pulumi.Input[
|
|
947
|
-
:param pulumi.Input[
|
|
948
|
-
:param pulumi.Input[
|
|
937
|
+
:param pulumi.Input[_builtins.str] role: Name of the GCP role
|
|
938
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
939
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
940
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
941
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
942
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
943
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
944
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
945
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
946
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
947
|
+
:param pulumi.Input[_builtins.str] type: Type of GCP authentication role (either `gce` or `iam`)
|
|
949
948
|
"""
|
|
950
949
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
951
950
|
|
|
@@ -975,68 +974,68 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
975
974
|
__props__.__dict__["type"] = type
|
|
976
975
|
return AuthBackendRole(resource_name, opts=opts, __props__=__props__)
|
|
977
976
|
|
|
978
|
-
@property
|
|
977
|
+
@_builtins.property
|
|
979
978
|
@pulumi.getter(name="addGroupAliases")
|
|
980
|
-
def add_group_aliases(self) -> pulumi.Output[
|
|
979
|
+
def add_group_aliases(self) -> pulumi.Output[_builtins.bool]:
|
|
981
980
|
return pulumi.get(self, "add_group_aliases")
|
|
982
981
|
|
|
983
|
-
@property
|
|
982
|
+
@_builtins.property
|
|
984
983
|
@pulumi.getter(name="allowGceInference")
|
|
985
|
-
def allow_gce_inference(self) -> pulumi.Output[
|
|
984
|
+
def allow_gce_inference(self) -> pulumi.Output[_builtins.bool]:
|
|
986
985
|
return pulumi.get(self, "allow_gce_inference")
|
|
987
986
|
|
|
988
|
-
@property
|
|
987
|
+
@_builtins.property
|
|
989
988
|
@pulumi.getter
|
|
990
|
-
def backend(self) -> pulumi.Output[Optional[
|
|
989
|
+
def backend(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
991
990
|
"""
|
|
992
991
|
Path to the mounted GCP auth backend
|
|
993
992
|
"""
|
|
994
993
|
return pulumi.get(self, "backend")
|
|
995
994
|
|
|
996
|
-
@property
|
|
995
|
+
@_builtins.property
|
|
997
996
|
@pulumi.getter(name="boundInstanceGroups")
|
|
998
|
-
def bound_instance_groups(self) -> pulumi.Output[Sequence[
|
|
997
|
+
def bound_instance_groups(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
999
998
|
return pulumi.get(self, "bound_instance_groups")
|
|
1000
999
|
|
|
1001
|
-
@property
|
|
1000
|
+
@_builtins.property
|
|
1002
1001
|
@pulumi.getter(name="boundLabels")
|
|
1003
|
-
def bound_labels(self) -> pulumi.Output[Sequence[
|
|
1002
|
+
def bound_labels(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
1004
1003
|
return pulumi.get(self, "bound_labels")
|
|
1005
1004
|
|
|
1006
|
-
@property
|
|
1005
|
+
@_builtins.property
|
|
1007
1006
|
@pulumi.getter(name="boundProjects")
|
|
1008
|
-
def bound_projects(self) -> pulumi.Output[Optional[Sequence[
|
|
1007
|
+
def bound_projects(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1009
1008
|
"""
|
|
1010
1009
|
An array of GCP project IDs. Only entities belonging to this project can authenticate under the role.
|
|
1011
1010
|
"""
|
|
1012
1011
|
return pulumi.get(self, "bound_projects")
|
|
1013
1012
|
|
|
1014
|
-
@property
|
|
1013
|
+
@_builtins.property
|
|
1015
1014
|
@pulumi.getter(name="boundRegions")
|
|
1016
|
-
def bound_regions(self) -> pulumi.Output[Sequence[
|
|
1015
|
+
def bound_regions(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
1017
1016
|
return pulumi.get(self, "bound_regions")
|
|
1018
1017
|
|
|
1019
|
-
@property
|
|
1018
|
+
@_builtins.property
|
|
1020
1019
|
@pulumi.getter(name="boundServiceAccounts")
|
|
1021
|
-
def bound_service_accounts(self) -> pulumi.Output[Sequence[
|
|
1020
|
+
def bound_service_accounts(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
1022
1021
|
"""
|
|
1023
1022
|
GCP Service Accounts allowed to issue tokens under this role. (Note: **Required** if role is `iam`)
|
|
1024
1023
|
"""
|
|
1025
1024
|
return pulumi.get(self, "bound_service_accounts")
|
|
1026
1025
|
|
|
1027
|
-
@property
|
|
1026
|
+
@_builtins.property
|
|
1028
1027
|
@pulumi.getter(name="boundZones")
|
|
1029
|
-
def bound_zones(self) -> pulumi.Output[Sequence[
|
|
1028
|
+
def bound_zones(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
1030
1029
|
return pulumi.get(self, "bound_zones")
|
|
1031
1030
|
|
|
1032
|
-
@property
|
|
1031
|
+
@_builtins.property
|
|
1033
1032
|
@pulumi.getter(name="maxJwtExp")
|
|
1034
|
-
def max_jwt_exp(self) -> pulumi.Output[
|
|
1033
|
+
def max_jwt_exp(self) -> pulumi.Output[_builtins.str]:
|
|
1035
1034
|
return pulumi.get(self, "max_jwt_exp")
|
|
1036
1035
|
|
|
1037
|
-
@property
|
|
1036
|
+
@_builtins.property
|
|
1038
1037
|
@pulumi.getter
|
|
1039
|
-
def namespace(self) -> pulumi.Output[Optional[
|
|
1038
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1040
1039
|
"""
|
|
1041
1040
|
The namespace to provision the resource in.
|
|
1042
1041
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1045,89 +1044,89 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
1045
1044
|
"""
|
|
1046
1045
|
return pulumi.get(self, "namespace")
|
|
1047
1046
|
|
|
1048
|
-
@property
|
|
1047
|
+
@_builtins.property
|
|
1049
1048
|
@pulumi.getter
|
|
1050
|
-
def role(self) -> pulumi.Output[
|
|
1049
|
+
def role(self) -> pulumi.Output[_builtins.str]:
|
|
1051
1050
|
"""
|
|
1052
1051
|
Name of the GCP role
|
|
1053
1052
|
"""
|
|
1054
1053
|
return pulumi.get(self, "role")
|
|
1055
1054
|
|
|
1056
|
-
@property
|
|
1055
|
+
@_builtins.property
|
|
1057
1056
|
@pulumi.getter(name="tokenBoundCidrs")
|
|
1058
|
-
def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[
|
|
1057
|
+
def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1059
1058
|
"""
|
|
1060
1059
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
1061
1060
|
"""
|
|
1062
1061
|
return pulumi.get(self, "token_bound_cidrs")
|
|
1063
1062
|
|
|
1064
|
-
@property
|
|
1063
|
+
@_builtins.property
|
|
1065
1064
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
|
1066
|
-
def token_explicit_max_ttl(self) -> pulumi.Output[Optional[
|
|
1065
|
+
def token_explicit_max_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1067
1066
|
"""
|
|
1068
1067
|
Generated Token's Explicit Maximum TTL in seconds
|
|
1069
1068
|
"""
|
|
1070
1069
|
return pulumi.get(self, "token_explicit_max_ttl")
|
|
1071
1070
|
|
|
1072
|
-
@property
|
|
1071
|
+
@_builtins.property
|
|
1073
1072
|
@pulumi.getter(name="tokenMaxTtl")
|
|
1074
|
-
def token_max_ttl(self) -> pulumi.Output[Optional[
|
|
1073
|
+
def token_max_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1075
1074
|
"""
|
|
1076
1075
|
The maximum lifetime of the generated token
|
|
1077
1076
|
"""
|
|
1078
1077
|
return pulumi.get(self, "token_max_ttl")
|
|
1079
1078
|
|
|
1080
|
-
@property
|
|
1079
|
+
@_builtins.property
|
|
1081
1080
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
|
1082
|
-
def token_no_default_policy(self) -> pulumi.Output[Optional[
|
|
1081
|
+
def token_no_default_policy(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1083
1082
|
"""
|
|
1084
1083
|
If true, the 'default' policy will not automatically be added to generated tokens
|
|
1085
1084
|
"""
|
|
1086
1085
|
return pulumi.get(self, "token_no_default_policy")
|
|
1087
1086
|
|
|
1088
|
-
@property
|
|
1087
|
+
@_builtins.property
|
|
1089
1088
|
@pulumi.getter(name="tokenNumUses")
|
|
1090
|
-
def token_num_uses(self) -> pulumi.Output[Optional[
|
|
1089
|
+
def token_num_uses(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1091
1090
|
"""
|
|
1092
1091
|
The maximum number of times a token may be used, a value of zero means unlimited
|
|
1093
1092
|
"""
|
|
1094
1093
|
return pulumi.get(self, "token_num_uses")
|
|
1095
1094
|
|
|
1096
|
-
@property
|
|
1095
|
+
@_builtins.property
|
|
1097
1096
|
@pulumi.getter(name="tokenPeriod")
|
|
1098
|
-
def token_period(self) -> pulumi.Output[Optional[
|
|
1097
|
+
def token_period(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1099
1098
|
"""
|
|
1100
1099
|
Generated Token's Period
|
|
1101
1100
|
"""
|
|
1102
1101
|
return pulumi.get(self, "token_period")
|
|
1103
1102
|
|
|
1104
|
-
@property
|
|
1103
|
+
@_builtins.property
|
|
1105
1104
|
@pulumi.getter(name="tokenPolicies")
|
|
1106
|
-
def token_policies(self) -> pulumi.Output[Optional[Sequence[
|
|
1105
|
+
def token_policies(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1107
1106
|
"""
|
|
1108
1107
|
Generated Token's Policies
|
|
1109
1108
|
"""
|
|
1110
1109
|
return pulumi.get(self, "token_policies")
|
|
1111
1110
|
|
|
1112
|
-
@property
|
|
1111
|
+
@_builtins.property
|
|
1113
1112
|
@pulumi.getter(name="tokenTtl")
|
|
1114
|
-
def token_ttl(self) -> pulumi.Output[Optional[
|
|
1113
|
+
def token_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1115
1114
|
"""
|
|
1116
1115
|
The initial ttl of the token to generate in seconds
|
|
1117
1116
|
"""
|
|
1118
1117
|
return pulumi.get(self, "token_ttl")
|
|
1119
1118
|
|
|
1120
|
-
@property
|
|
1119
|
+
@_builtins.property
|
|
1121
1120
|
@pulumi.getter(name="tokenType")
|
|
1122
|
-
def token_type(self) -> pulumi.Output[Optional[
|
|
1121
|
+
def token_type(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1123
1122
|
"""
|
|
1124
1123
|
The type of token to generate, service or batch
|
|
1125
1124
|
"""
|
|
1126
1125
|
return pulumi.get(self, "token_type")
|
|
1127
1126
|
|
|
1128
|
-
@property
|
|
1127
|
+
@_builtins.property
|
|
1129
1128
|
@pulumi.getter
|
|
1130
|
-
def type(self) -> pulumi.Output[
|
|
1129
|
+
def type(self) -> pulumi.Output[_builtins.str]:
|
|
1131
1130
|
"""
|
|
1132
1131
|
Type of GCP authentication role (either `gce` or `iam`)
|
|
1133
1132
|
"""
|