pulumi-vault 7.2.0a1753339763__py3-none-any.whl → 7.2.0a1753398491__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -1
- pulumi_vault/_inputs.py +672 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +409 -410
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +273 -274
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +239 -240
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +379 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +299 -300
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +353 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +222 -223
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +384 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +673 -674
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +333 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +256 -257
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +81 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +137 -138
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +29 -30
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +207 -208
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +120 -121
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +138 -139
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +336 -337
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0a1753398491.dist-info/RECORD +268 -0
- pulumi_vault-7.2.0a1753339763.dist-info/RECORD +0 -268
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,73 +19,73 @@ __all__ = ['BackendConfigAutoTidyArgs', 'BackendConfigAutoTidy']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class BackendConfigAutoTidyArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
backend: pulumi.Input[
|
|
24
|
-
enabled: pulumi.Input[
|
|
25
|
-
acme_account_safety_buffer: Optional[pulumi.Input[
|
|
26
|
-
interval_duration: Optional[pulumi.Input[
|
|
27
|
-
issuer_safety_buffer: Optional[pulumi.Input[
|
|
28
|
-
maintain_stored_certificate_counts: Optional[pulumi.Input[
|
|
29
|
-
max_startup_backoff_duration: Optional[pulumi.Input[
|
|
30
|
-
min_startup_backoff_duration: Optional[pulumi.Input[
|
|
31
|
-
namespace: Optional[pulumi.Input[
|
|
32
|
-
pause_duration: Optional[pulumi.Input[
|
|
33
|
-
publish_stored_certificate_count_metrics: Optional[pulumi.Input[
|
|
34
|
-
revocation_queue_safety_buffer: Optional[pulumi.Input[
|
|
35
|
-
safety_buffer: Optional[pulumi.Input[
|
|
36
|
-
tidy_acme: Optional[pulumi.Input[
|
|
37
|
-
tidy_cert_metadata: Optional[pulumi.Input[
|
|
38
|
-
tidy_cert_store: Optional[pulumi.Input[
|
|
39
|
-
tidy_cmpv2_nonce_store: Optional[pulumi.Input[
|
|
40
|
-
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[
|
|
41
|
-
tidy_expired_issuers: Optional[pulumi.Input[
|
|
42
|
-
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[
|
|
43
|
-
tidy_revocation_queue: Optional[pulumi.Input[
|
|
44
|
-
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[
|
|
45
|
-
tidy_revoked_certs: Optional[pulumi.Input[
|
|
22
|
+
backend: pulumi.Input[_builtins.str],
|
|
23
|
+
enabled: pulumi.Input[_builtins.bool],
|
|
24
|
+
acme_account_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
25
|
+
interval_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
|
+
issuer_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
maintain_stored_certificate_counts: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
28
|
+
max_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
29
|
+
min_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
pause_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
32
|
+
publish_stored_certificate_count_metrics: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
33
|
+
revocation_queue_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
34
|
+
safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
tidy_acme: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
36
|
+
tidy_cert_metadata: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
37
|
+
tidy_cert_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
38
|
+
tidy_cmpv2_nonce_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
39
|
+
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
40
|
+
tidy_expired_issuers: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
41
|
+
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
42
|
+
tidy_revocation_queue: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
43
|
+
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
44
|
+
tidy_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
46
45
|
"""
|
|
47
46
|
The set of arguments for constructing a BackendConfigAutoTidy resource.
|
|
48
|
-
:param pulumi.Input[
|
|
47
|
+
:param pulumi.Input[_builtins.str] backend: The path to the PKI secret backend to
|
|
49
48
|
read the configuration from, with no leading or trailing `/`s.
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
:param pulumi.Input[
|
|
49
|
+
:param pulumi.Input[_builtins.bool] enabled: Specifies whether automatic tidy is enabled or not.
|
|
50
|
+
:param pulumi.Input[_builtins.str] acme_account_safety_buffer: The amount of time that must pass after creation that an account with no orders is marked revoked, and the amount of
|
|
52
51
|
time after being marked revoked or deactivated.
|
|
53
|
-
:param pulumi.Input[
|
|
52
|
+
:param pulumi.Input[_builtins.str] interval_duration: Interval at which to run an auto-tidy operation. This is the time
|
|
54
53
|
between tidy invocations (after one finishes to the start of the next).
|
|
55
|
-
:param pulumi.Input[
|
|
54
|
+
:param pulumi.Input[_builtins.str] issuer_safety_buffer: The amount of extra time that must have passed beyond issuer's
|
|
56
55
|
expiration before it is removed from the backend storage.
|
|
57
|
-
:param pulumi.Input[
|
|
56
|
+
:param pulumi.Input[_builtins.bool] maintain_stored_certificate_counts: This configures whether stored certificate are
|
|
58
57
|
counted upon initialization of the backend, and whether during normal operation, a running count
|
|
59
58
|
of certificates stored is maintained.
|
|
60
|
-
:param pulumi.Input[
|
|
59
|
+
:param pulumi.Input[_builtins.str] max_startup_backoff_duration: The maximum amount of time auto-tidy will be delayed
|
|
61
60
|
after startup.
|
|
62
|
-
:param pulumi.Input[
|
|
61
|
+
:param pulumi.Input[_builtins.str] min_startup_backoff_duration: The minimum amount of time auto-tidy will be delayed
|
|
63
62
|
after startup.
|
|
64
|
-
:param pulumi.Input[
|
|
63
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace of the target resource.
|
|
65
64
|
The value should not contain leading or trailing forward slashes.
|
|
66
65
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
67
66
|
*Available only for Vault Enterprise*.
|
|
68
|
-
:param pulumi.Input[
|
|
69
|
-
:param pulumi.Input[
|
|
67
|
+
:param pulumi.Input[_builtins.str] pause_duration: The amount of time to wait between processing certificates.
|
|
68
|
+
:param pulumi.Input[_builtins.bool] publish_stored_certificate_count_metrics: This configures whether the stored
|
|
70
69
|
certificate count is published to the metrics consumer.
|
|
71
|
-
:param pulumi.Input[
|
|
70
|
+
:param pulumi.Input[_builtins.str] revocation_queue_safety_buffer: The amount of time that must pass from the
|
|
72
71
|
cross-cluster revocation request being initiated to when it will be slated for removal.
|
|
73
|
-
:param pulumi.Input[
|
|
72
|
+
:param pulumi.Input[_builtins.str] safety_buffer: The amount of extra time that must have passed beyond certificate
|
|
74
73
|
expiration before it is removed from the backend storage and/or revocation list.
|
|
75
|
-
:param pulumi.Input[
|
|
76
|
-
:param pulumi.Input[
|
|
77
|
-
:param pulumi.Input[
|
|
78
|
-
:param pulumi.Input[
|
|
79
|
-
:param pulumi.Input[
|
|
74
|
+
:param pulumi.Input[_builtins.bool] tidy_acme: Set to true to enable tidying ACME accounts, orders and authorizations.
|
|
75
|
+
:param pulumi.Input[_builtins.bool] tidy_cert_metadata: Set to true to enable tidying up certificate metadata.
|
|
76
|
+
:param pulumi.Input[_builtins.bool] tidy_cert_store: Set to true to enable tidying up the certificate store
|
|
77
|
+
:param pulumi.Input[_builtins.bool] tidy_cmpv2_nonce_store: Set to true to enable tidying up the CMPv2 nonce store.
|
|
78
|
+
:param pulumi.Input[_builtins.bool] tidy_cross_cluster_revoked_certs: Set to true to enable tidying up the cross-cluster
|
|
80
79
|
revoked certificate store.
|
|
81
|
-
:param pulumi.Input[
|
|
80
|
+
:param pulumi.Input[_builtins.bool] tidy_expired_issuers: Set to true to automatically remove expired issuers past the
|
|
82
81
|
`issuer_safety_buffer`. No keys will be removed as part of this operation.
|
|
83
|
-
:param pulumi.Input[
|
|
82
|
+
:param pulumi.Input[_builtins.bool] tidy_move_legacy_ca_bundle: Set to true to move the legacy `ca_bundle` from
|
|
84
83
|
`/config/ca_bundle` to `/config/ca_bundle.bak`.
|
|
85
|
-
:param pulumi.Input[
|
|
84
|
+
:param pulumi.Input[_builtins.bool] tidy_revocation_queue: Set to true to remove stale revocation queue entries that
|
|
86
85
|
haven't been confirmed by any active cluster.
|
|
87
|
-
:param pulumi.Input[
|
|
86
|
+
:param pulumi.Input[_builtins.bool] tidy_revoked_cert_issuer_associations: Set to true to validate issuer associations
|
|
88
87
|
on revocation entries. This helps increase the performance of CRL building and OCSP responses.
|
|
89
|
-
:param pulumi.Input[
|
|
88
|
+
:param pulumi.Input[_builtins.bool] tidy_revoked_certs: Set to true to remove all invalid and expired certificates from
|
|
90
89
|
storage. A revoked storage entry is considered invalid if the entry is empty, or the value within
|
|
91
90
|
the entry is empty. If a certificate is removed due to expiry, the entry will also be removed from
|
|
92
91
|
the CRL, and the CRL will be rotated.
|
|
@@ -136,9 +135,9 @@ class BackendConfigAutoTidyArgs:
|
|
|
136
135
|
if tidy_revoked_certs is not None:
|
|
137
136
|
pulumi.set(__self__, "tidy_revoked_certs", tidy_revoked_certs)
|
|
138
137
|
|
|
139
|
-
@property
|
|
138
|
+
@_builtins.property
|
|
140
139
|
@pulumi.getter
|
|
141
|
-
def backend(self) -> pulumi.Input[
|
|
140
|
+
def backend(self) -> pulumi.Input[_builtins.str]:
|
|
142
141
|
"""
|
|
143
142
|
The path to the PKI secret backend to
|
|
144
143
|
read the configuration from, with no leading or trailing `/`s.
|
|
@@ -146,24 +145,24 @@ class BackendConfigAutoTidyArgs:
|
|
|
146
145
|
return pulumi.get(self, "backend")
|
|
147
146
|
|
|
148
147
|
@backend.setter
|
|
149
|
-
def backend(self, value: pulumi.Input[
|
|
148
|
+
def backend(self, value: pulumi.Input[_builtins.str]):
|
|
150
149
|
pulumi.set(self, "backend", value)
|
|
151
150
|
|
|
152
|
-
@property
|
|
151
|
+
@_builtins.property
|
|
153
152
|
@pulumi.getter
|
|
154
|
-
def enabled(self) -> pulumi.Input[
|
|
153
|
+
def enabled(self) -> pulumi.Input[_builtins.bool]:
|
|
155
154
|
"""
|
|
156
155
|
Specifies whether automatic tidy is enabled or not.
|
|
157
156
|
"""
|
|
158
157
|
return pulumi.get(self, "enabled")
|
|
159
158
|
|
|
160
159
|
@enabled.setter
|
|
161
|
-
def enabled(self, value: pulumi.Input[
|
|
160
|
+
def enabled(self, value: pulumi.Input[_builtins.bool]):
|
|
162
161
|
pulumi.set(self, "enabled", value)
|
|
163
162
|
|
|
164
|
-
@property
|
|
163
|
+
@_builtins.property
|
|
165
164
|
@pulumi.getter(name="acmeAccountSafetyBuffer")
|
|
166
|
-
def acme_account_safety_buffer(self) -> Optional[pulumi.Input[
|
|
165
|
+
def acme_account_safety_buffer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
167
166
|
"""
|
|
168
167
|
The amount of time that must pass after creation that an account with no orders is marked revoked, and the amount of
|
|
169
168
|
time after being marked revoked or deactivated.
|
|
@@ -171,12 +170,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
171
170
|
return pulumi.get(self, "acme_account_safety_buffer")
|
|
172
171
|
|
|
173
172
|
@acme_account_safety_buffer.setter
|
|
174
|
-
def acme_account_safety_buffer(self, value: Optional[pulumi.Input[
|
|
173
|
+
def acme_account_safety_buffer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
175
174
|
pulumi.set(self, "acme_account_safety_buffer", value)
|
|
176
175
|
|
|
177
|
-
@property
|
|
176
|
+
@_builtins.property
|
|
178
177
|
@pulumi.getter(name="intervalDuration")
|
|
179
|
-
def interval_duration(self) -> Optional[pulumi.Input[
|
|
178
|
+
def interval_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
180
179
|
"""
|
|
181
180
|
Interval at which to run an auto-tidy operation. This is the time
|
|
182
181
|
between tidy invocations (after one finishes to the start of the next).
|
|
@@ -184,12 +183,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
184
183
|
return pulumi.get(self, "interval_duration")
|
|
185
184
|
|
|
186
185
|
@interval_duration.setter
|
|
187
|
-
def interval_duration(self, value: Optional[pulumi.Input[
|
|
186
|
+
def interval_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
188
187
|
pulumi.set(self, "interval_duration", value)
|
|
189
188
|
|
|
190
|
-
@property
|
|
189
|
+
@_builtins.property
|
|
191
190
|
@pulumi.getter(name="issuerSafetyBuffer")
|
|
192
|
-
def issuer_safety_buffer(self) -> Optional[pulumi.Input[
|
|
191
|
+
def issuer_safety_buffer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
193
192
|
"""
|
|
194
193
|
The amount of extra time that must have passed beyond issuer's
|
|
195
194
|
expiration before it is removed from the backend storage.
|
|
@@ -197,12 +196,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
197
196
|
return pulumi.get(self, "issuer_safety_buffer")
|
|
198
197
|
|
|
199
198
|
@issuer_safety_buffer.setter
|
|
200
|
-
def issuer_safety_buffer(self, value: Optional[pulumi.Input[
|
|
199
|
+
def issuer_safety_buffer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
201
200
|
pulumi.set(self, "issuer_safety_buffer", value)
|
|
202
201
|
|
|
203
|
-
@property
|
|
202
|
+
@_builtins.property
|
|
204
203
|
@pulumi.getter(name="maintainStoredCertificateCounts")
|
|
205
|
-
def maintain_stored_certificate_counts(self) -> Optional[pulumi.Input[
|
|
204
|
+
def maintain_stored_certificate_counts(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
206
205
|
"""
|
|
207
206
|
This configures whether stored certificate are
|
|
208
207
|
counted upon initialization of the backend, and whether during normal operation, a running count
|
|
@@ -211,12 +210,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
211
210
|
return pulumi.get(self, "maintain_stored_certificate_counts")
|
|
212
211
|
|
|
213
212
|
@maintain_stored_certificate_counts.setter
|
|
214
|
-
def maintain_stored_certificate_counts(self, value: Optional[pulumi.Input[
|
|
213
|
+
def maintain_stored_certificate_counts(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
215
214
|
pulumi.set(self, "maintain_stored_certificate_counts", value)
|
|
216
215
|
|
|
217
|
-
@property
|
|
216
|
+
@_builtins.property
|
|
218
217
|
@pulumi.getter(name="maxStartupBackoffDuration")
|
|
219
|
-
def max_startup_backoff_duration(self) -> Optional[pulumi.Input[
|
|
218
|
+
def max_startup_backoff_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
220
219
|
"""
|
|
221
220
|
The maximum amount of time auto-tidy will be delayed
|
|
222
221
|
after startup.
|
|
@@ -224,12 +223,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
224
223
|
return pulumi.get(self, "max_startup_backoff_duration")
|
|
225
224
|
|
|
226
225
|
@max_startup_backoff_duration.setter
|
|
227
|
-
def max_startup_backoff_duration(self, value: Optional[pulumi.Input[
|
|
226
|
+
def max_startup_backoff_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
228
227
|
pulumi.set(self, "max_startup_backoff_duration", value)
|
|
229
228
|
|
|
230
|
-
@property
|
|
229
|
+
@_builtins.property
|
|
231
230
|
@pulumi.getter(name="minStartupBackoffDuration")
|
|
232
|
-
def min_startup_backoff_duration(self) -> Optional[pulumi.Input[
|
|
231
|
+
def min_startup_backoff_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
233
232
|
"""
|
|
234
233
|
The minimum amount of time auto-tidy will be delayed
|
|
235
234
|
after startup.
|
|
@@ -237,12 +236,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
237
236
|
return pulumi.get(self, "min_startup_backoff_duration")
|
|
238
237
|
|
|
239
238
|
@min_startup_backoff_duration.setter
|
|
240
|
-
def min_startup_backoff_duration(self, value: Optional[pulumi.Input[
|
|
239
|
+
def min_startup_backoff_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
241
240
|
pulumi.set(self, "min_startup_backoff_duration", value)
|
|
242
241
|
|
|
243
|
-
@property
|
|
242
|
+
@_builtins.property
|
|
244
243
|
@pulumi.getter
|
|
245
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
244
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
246
245
|
"""
|
|
247
246
|
The namespace of the target resource.
|
|
248
247
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -252,24 +251,24 @@ class BackendConfigAutoTidyArgs:
|
|
|
252
251
|
return pulumi.get(self, "namespace")
|
|
253
252
|
|
|
254
253
|
@namespace.setter
|
|
255
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
254
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
256
255
|
pulumi.set(self, "namespace", value)
|
|
257
256
|
|
|
258
|
-
@property
|
|
257
|
+
@_builtins.property
|
|
259
258
|
@pulumi.getter(name="pauseDuration")
|
|
260
|
-
def pause_duration(self) -> Optional[pulumi.Input[
|
|
259
|
+
def pause_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
261
260
|
"""
|
|
262
261
|
The amount of time to wait between processing certificates.
|
|
263
262
|
"""
|
|
264
263
|
return pulumi.get(self, "pause_duration")
|
|
265
264
|
|
|
266
265
|
@pause_duration.setter
|
|
267
|
-
def pause_duration(self, value: Optional[pulumi.Input[
|
|
266
|
+
def pause_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
268
267
|
pulumi.set(self, "pause_duration", value)
|
|
269
268
|
|
|
270
|
-
@property
|
|
269
|
+
@_builtins.property
|
|
271
270
|
@pulumi.getter(name="publishStoredCertificateCountMetrics")
|
|
272
|
-
def publish_stored_certificate_count_metrics(self) -> Optional[pulumi.Input[
|
|
271
|
+
def publish_stored_certificate_count_metrics(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
273
272
|
"""
|
|
274
273
|
This configures whether the stored
|
|
275
274
|
certificate count is published to the metrics consumer.
|
|
@@ -277,12 +276,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
277
276
|
return pulumi.get(self, "publish_stored_certificate_count_metrics")
|
|
278
277
|
|
|
279
278
|
@publish_stored_certificate_count_metrics.setter
|
|
280
|
-
def publish_stored_certificate_count_metrics(self, value: Optional[pulumi.Input[
|
|
279
|
+
def publish_stored_certificate_count_metrics(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
281
280
|
pulumi.set(self, "publish_stored_certificate_count_metrics", value)
|
|
282
281
|
|
|
283
|
-
@property
|
|
282
|
+
@_builtins.property
|
|
284
283
|
@pulumi.getter(name="revocationQueueSafetyBuffer")
|
|
285
|
-
def revocation_queue_safety_buffer(self) -> Optional[pulumi.Input[
|
|
284
|
+
def revocation_queue_safety_buffer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
286
285
|
"""
|
|
287
286
|
The amount of time that must pass from the
|
|
288
287
|
cross-cluster revocation request being initiated to when it will be slated for removal.
|
|
@@ -290,12 +289,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
290
289
|
return pulumi.get(self, "revocation_queue_safety_buffer")
|
|
291
290
|
|
|
292
291
|
@revocation_queue_safety_buffer.setter
|
|
293
|
-
def revocation_queue_safety_buffer(self, value: Optional[pulumi.Input[
|
|
292
|
+
def revocation_queue_safety_buffer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
294
293
|
pulumi.set(self, "revocation_queue_safety_buffer", value)
|
|
295
294
|
|
|
296
|
-
@property
|
|
295
|
+
@_builtins.property
|
|
297
296
|
@pulumi.getter(name="safetyBuffer")
|
|
298
|
-
def safety_buffer(self) -> Optional[pulumi.Input[
|
|
297
|
+
def safety_buffer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
299
298
|
"""
|
|
300
299
|
The amount of extra time that must have passed beyond certificate
|
|
301
300
|
expiration before it is removed from the backend storage and/or revocation list.
|
|
@@ -303,60 +302,60 @@ class BackendConfigAutoTidyArgs:
|
|
|
303
302
|
return pulumi.get(self, "safety_buffer")
|
|
304
303
|
|
|
305
304
|
@safety_buffer.setter
|
|
306
|
-
def safety_buffer(self, value: Optional[pulumi.Input[
|
|
305
|
+
def safety_buffer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
307
306
|
pulumi.set(self, "safety_buffer", value)
|
|
308
307
|
|
|
309
|
-
@property
|
|
308
|
+
@_builtins.property
|
|
310
309
|
@pulumi.getter(name="tidyAcme")
|
|
311
|
-
def tidy_acme(self) -> Optional[pulumi.Input[
|
|
310
|
+
def tidy_acme(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
312
311
|
"""
|
|
313
312
|
Set to true to enable tidying ACME accounts, orders and authorizations.
|
|
314
313
|
"""
|
|
315
314
|
return pulumi.get(self, "tidy_acme")
|
|
316
315
|
|
|
317
316
|
@tidy_acme.setter
|
|
318
|
-
def tidy_acme(self, value: Optional[pulumi.Input[
|
|
317
|
+
def tidy_acme(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
319
318
|
pulumi.set(self, "tidy_acme", value)
|
|
320
319
|
|
|
321
|
-
@property
|
|
320
|
+
@_builtins.property
|
|
322
321
|
@pulumi.getter(name="tidyCertMetadata")
|
|
323
|
-
def tidy_cert_metadata(self) -> Optional[pulumi.Input[
|
|
322
|
+
def tidy_cert_metadata(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
324
323
|
"""
|
|
325
324
|
Set to true to enable tidying up certificate metadata.
|
|
326
325
|
"""
|
|
327
326
|
return pulumi.get(self, "tidy_cert_metadata")
|
|
328
327
|
|
|
329
328
|
@tidy_cert_metadata.setter
|
|
330
|
-
def tidy_cert_metadata(self, value: Optional[pulumi.Input[
|
|
329
|
+
def tidy_cert_metadata(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
331
330
|
pulumi.set(self, "tidy_cert_metadata", value)
|
|
332
331
|
|
|
333
|
-
@property
|
|
332
|
+
@_builtins.property
|
|
334
333
|
@pulumi.getter(name="tidyCertStore")
|
|
335
|
-
def tidy_cert_store(self) -> Optional[pulumi.Input[
|
|
334
|
+
def tidy_cert_store(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
336
335
|
"""
|
|
337
336
|
Set to true to enable tidying up the certificate store
|
|
338
337
|
"""
|
|
339
338
|
return pulumi.get(self, "tidy_cert_store")
|
|
340
339
|
|
|
341
340
|
@tidy_cert_store.setter
|
|
342
|
-
def tidy_cert_store(self, value: Optional[pulumi.Input[
|
|
341
|
+
def tidy_cert_store(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
343
342
|
pulumi.set(self, "tidy_cert_store", value)
|
|
344
343
|
|
|
345
|
-
@property
|
|
344
|
+
@_builtins.property
|
|
346
345
|
@pulumi.getter(name="tidyCmpv2NonceStore")
|
|
347
|
-
def tidy_cmpv2_nonce_store(self) -> Optional[pulumi.Input[
|
|
346
|
+
def tidy_cmpv2_nonce_store(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
348
347
|
"""
|
|
349
348
|
Set to true to enable tidying up the CMPv2 nonce store.
|
|
350
349
|
"""
|
|
351
350
|
return pulumi.get(self, "tidy_cmpv2_nonce_store")
|
|
352
351
|
|
|
353
352
|
@tidy_cmpv2_nonce_store.setter
|
|
354
|
-
def tidy_cmpv2_nonce_store(self, value: Optional[pulumi.Input[
|
|
353
|
+
def tidy_cmpv2_nonce_store(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
355
354
|
pulumi.set(self, "tidy_cmpv2_nonce_store", value)
|
|
356
355
|
|
|
357
|
-
@property
|
|
356
|
+
@_builtins.property
|
|
358
357
|
@pulumi.getter(name="tidyCrossClusterRevokedCerts")
|
|
359
|
-
def tidy_cross_cluster_revoked_certs(self) -> Optional[pulumi.Input[
|
|
358
|
+
def tidy_cross_cluster_revoked_certs(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
360
359
|
"""
|
|
361
360
|
Set to true to enable tidying up the cross-cluster
|
|
362
361
|
revoked certificate store.
|
|
@@ -364,12 +363,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
364
363
|
return pulumi.get(self, "tidy_cross_cluster_revoked_certs")
|
|
365
364
|
|
|
366
365
|
@tidy_cross_cluster_revoked_certs.setter
|
|
367
|
-
def tidy_cross_cluster_revoked_certs(self, value: Optional[pulumi.Input[
|
|
366
|
+
def tidy_cross_cluster_revoked_certs(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
368
367
|
pulumi.set(self, "tidy_cross_cluster_revoked_certs", value)
|
|
369
368
|
|
|
370
|
-
@property
|
|
369
|
+
@_builtins.property
|
|
371
370
|
@pulumi.getter(name="tidyExpiredIssuers")
|
|
372
|
-
def tidy_expired_issuers(self) -> Optional[pulumi.Input[
|
|
371
|
+
def tidy_expired_issuers(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
373
372
|
"""
|
|
374
373
|
Set to true to automatically remove expired issuers past the
|
|
375
374
|
`issuer_safety_buffer`. No keys will be removed as part of this operation.
|
|
@@ -377,12 +376,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
377
376
|
return pulumi.get(self, "tidy_expired_issuers")
|
|
378
377
|
|
|
379
378
|
@tidy_expired_issuers.setter
|
|
380
|
-
def tidy_expired_issuers(self, value: Optional[pulumi.Input[
|
|
379
|
+
def tidy_expired_issuers(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
381
380
|
pulumi.set(self, "tidy_expired_issuers", value)
|
|
382
381
|
|
|
383
|
-
@property
|
|
382
|
+
@_builtins.property
|
|
384
383
|
@pulumi.getter(name="tidyMoveLegacyCaBundle")
|
|
385
|
-
def tidy_move_legacy_ca_bundle(self) -> Optional[pulumi.Input[
|
|
384
|
+
def tidy_move_legacy_ca_bundle(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
386
385
|
"""
|
|
387
386
|
Set to true to move the legacy `ca_bundle` from
|
|
388
387
|
`/config/ca_bundle` to `/config/ca_bundle.bak`.
|
|
@@ -390,12 +389,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
390
389
|
return pulumi.get(self, "tidy_move_legacy_ca_bundle")
|
|
391
390
|
|
|
392
391
|
@tidy_move_legacy_ca_bundle.setter
|
|
393
|
-
def tidy_move_legacy_ca_bundle(self, value: Optional[pulumi.Input[
|
|
392
|
+
def tidy_move_legacy_ca_bundle(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
394
393
|
pulumi.set(self, "tidy_move_legacy_ca_bundle", value)
|
|
395
394
|
|
|
396
|
-
@property
|
|
395
|
+
@_builtins.property
|
|
397
396
|
@pulumi.getter(name="tidyRevocationQueue")
|
|
398
|
-
def tidy_revocation_queue(self) -> Optional[pulumi.Input[
|
|
397
|
+
def tidy_revocation_queue(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
399
398
|
"""
|
|
400
399
|
Set to true to remove stale revocation queue entries that
|
|
401
400
|
haven't been confirmed by any active cluster.
|
|
@@ -403,12 +402,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
403
402
|
return pulumi.get(self, "tidy_revocation_queue")
|
|
404
403
|
|
|
405
404
|
@tidy_revocation_queue.setter
|
|
406
|
-
def tidy_revocation_queue(self, value: Optional[pulumi.Input[
|
|
405
|
+
def tidy_revocation_queue(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
407
406
|
pulumi.set(self, "tidy_revocation_queue", value)
|
|
408
407
|
|
|
409
|
-
@property
|
|
408
|
+
@_builtins.property
|
|
410
409
|
@pulumi.getter(name="tidyRevokedCertIssuerAssociations")
|
|
411
|
-
def tidy_revoked_cert_issuer_associations(self) -> Optional[pulumi.Input[
|
|
410
|
+
def tidy_revoked_cert_issuer_associations(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
412
411
|
"""
|
|
413
412
|
Set to true to validate issuer associations
|
|
414
413
|
on revocation entries. This helps increase the performance of CRL building and OCSP responses.
|
|
@@ -416,12 +415,12 @@ class BackendConfigAutoTidyArgs:
|
|
|
416
415
|
return pulumi.get(self, "tidy_revoked_cert_issuer_associations")
|
|
417
416
|
|
|
418
417
|
@tidy_revoked_cert_issuer_associations.setter
|
|
419
|
-
def tidy_revoked_cert_issuer_associations(self, value: Optional[pulumi.Input[
|
|
418
|
+
def tidy_revoked_cert_issuer_associations(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
420
419
|
pulumi.set(self, "tidy_revoked_cert_issuer_associations", value)
|
|
421
420
|
|
|
422
|
-
@property
|
|
421
|
+
@_builtins.property
|
|
423
422
|
@pulumi.getter(name="tidyRevokedCerts")
|
|
424
|
-
def tidy_revoked_certs(self) -> Optional[pulumi.Input[
|
|
423
|
+
def tidy_revoked_certs(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
425
424
|
"""
|
|
426
425
|
Set to true to remove all invalid and expired certificates from
|
|
427
426
|
storage. A revoked storage entry is considered invalid if the entry is empty, or the value within
|
|
@@ -431,80 +430,80 @@ class BackendConfigAutoTidyArgs:
|
|
|
431
430
|
return pulumi.get(self, "tidy_revoked_certs")
|
|
432
431
|
|
|
433
432
|
@tidy_revoked_certs.setter
|
|
434
|
-
def tidy_revoked_certs(self, value: Optional[pulumi.Input[
|
|
433
|
+
def tidy_revoked_certs(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
435
434
|
pulumi.set(self, "tidy_revoked_certs", value)
|
|
436
435
|
|
|
437
436
|
|
|
438
437
|
@pulumi.input_type
|
|
439
438
|
class _BackendConfigAutoTidyState:
|
|
440
439
|
def __init__(__self__, *,
|
|
441
|
-
acme_account_safety_buffer: Optional[pulumi.Input[
|
|
442
|
-
backend: Optional[pulumi.Input[
|
|
443
|
-
enabled: Optional[pulumi.Input[
|
|
444
|
-
interval_duration: Optional[pulumi.Input[
|
|
445
|
-
issuer_safety_buffer: Optional[pulumi.Input[
|
|
446
|
-
maintain_stored_certificate_counts: Optional[pulumi.Input[
|
|
447
|
-
max_startup_backoff_duration: Optional[pulumi.Input[
|
|
448
|
-
min_startup_backoff_duration: Optional[pulumi.Input[
|
|
449
|
-
namespace: Optional[pulumi.Input[
|
|
450
|
-
pause_duration: Optional[pulumi.Input[
|
|
451
|
-
publish_stored_certificate_count_metrics: Optional[pulumi.Input[
|
|
452
|
-
revocation_queue_safety_buffer: Optional[pulumi.Input[
|
|
453
|
-
safety_buffer: Optional[pulumi.Input[
|
|
454
|
-
tidy_acme: Optional[pulumi.Input[
|
|
455
|
-
tidy_cert_metadata: Optional[pulumi.Input[
|
|
456
|
-
tidy_cert_store: Optional[pulumi.Input[
|
|
457
|
-
tidy_cmpv2_nonce_store: Optional[pulumi.Input[
|
|
458
|
-
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[
|
|
459
|
-
tidy_expired_issuers: Optional[pulumi.Input[
|
|
460
|
-
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[
|
|
461
|
-
tidy_revocation_queue: Optional[pulumi.Input[
|
|
462
|
-
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[
|
|
463
|
-
tidy_revoked_certs: Optional[pulumi.Input[
|
|
440
|
+
acme_account_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
441
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
442
|
+
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
443
|
+
interval_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
444
|
+
issuer_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
445
|
+
maintain_stored_certificate_counts: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
446
|
+
max_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
447
|
+
min_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
448
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
449
|
+
pause_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
450
|
+
publish_stored_certificate_count_metrics: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
451
|
+
revocation_queue_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
452
|
+
safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
453
|
+
tidy_acme: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
454
|
+
tidy_cert_metadata: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
455
|
+
tidy_cert_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
456
|
+
tidy_cmpv2_nonce_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
457
|
+
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
458
|
+
tidy_expired_issuers: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
459
|
+
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
460
|
+
tidy_revocation_queue: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
461
|
+
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
462
|
+
tidy_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
464
463
|
"""
|
|
465
464
|
Input properties used for looking up and filtering BackendConfigAutoTidy resources.
|
|
466
|
-
:param pulumi.Input[
|
|
465
|
+
:param pulumi.Input[_builtins.str] acme_account_safety_buffer: The amount of time that must pass after creation that an account with no orders is marked revoked, and the amount of
|
|
467
466
|
time after being marked revoked or deactivated.
|
|
468
|
-
:param pulumi.Input[
|
|
467
|
+
:param pulumi.Input[_builtins.str] backend: The path to the PKI secret backend to
|
|
469
468
|
read the configuration from, with no leading or trailing `/`s.
|
|
470
|
-
:param pulumi.Input[
|
|
471
|
-
:param pulumi.Input[
|
|
469
|
+
:param pulumi.Input[_builtins.bool] enabled: Specifies whether automatic tidy is enabled or not.
|
|
470
|
+
:param pulumi.Input[_builtins.str] interval_duration: Interval at which to run an auto-tidy operation. This is the time
|
|
472
471
|
between tidy invocations (after one finishes to the start of the next).
|
|
473
|
-
:param pulumi.Input[
|
|
472
|
+
:param pulumi.Input[_builtins.str] issuer_safety_buffer: The amount of extra time that must have passed beyond issuer's
|
|
474
473
|
expiration before it is removed from the backend storage.
|
|
475
|
-
:param pulumi.Input[
|
|
474
|
+
:param pulumi.Input[_builtins.bool] maintain_stored_certificate_counts: This configures whether stored certificate are
|
|
476
475
|
counted upon initialization of the backend, and whether during normal operation, a running count
|
|
477
476
|
of certificates stored is maintained.
|
|
478
|
-
:param pulumi.Input[
|
|
477
|
+
:param pulumi.Input[_builtins.str] max_startup_backoff_duration: The maximum amount of time auto-tidy will be delayed
|
|
479
478
|
after startup.
|
|
480
|
-
:param pulumi.Input[
|
|
479
|
+
:param pulumi.Input[_builtins.str] min_startup_backoff_duration: The minimum amount of time auto-tidy will be delayed
|
|
481
480
|
after startup.
|
|
482
|
-
:param pulumi.Input[
|
|
481
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace of the target resource.
|
|
483
482
|
The value should not contain leading or trailing forward slashes.
|
|
484
483
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
485
484
|
*Available only for Vault Enterprise*.
|
|
486
|
-
:param pulumi.Input[
|
|
487
|
-
:param pulumi.Input[
|
|
485
|
+
:param pulumi.Input[_builtins.str] pause_duration: The amount of time to wait between processing certificates.
|
|
486
|
+
:param pulumi.Input[_builtins.bool] publish_stored_certificate_count_metrics: This configures whether the stored
|
|
488
487
|
certificate count is published to the metrics consumer.
|
|
489
|
-
:param pulumi.Input[
|
|
488
|
+
:param pulumi.Input[_builtins.str] revocation_queue_safety_buffer: The amount of time that must pass from the
|
|
490
489
|
cross-cluster revocation request being initiated to when it will be slated for removal.
|
|
491
|
-
:param pulumi.Input[
|
|
490
|
+
:param pulumi.Input[_builtins.str] safety_buffer: The amount of extra time that must have passed beyond certificate
|
|
492
491
|
expiration before it is removed from the backend storage and/or revocation list.
|
|
493
|
-
:param pulumi.Input[
|
|
494
|
-
:param pulumi.Input[
|
|
495
|
-
:param pulumi.Input[
|
|
496
|
-
:param pulumi.Input[
|
|
497
|
-
:param pulumi.Input[
|
|
492
|
+
:param pulumi.Input[_builtins.bool] tidy_acme: Set to true to enable tidying ACME accounts, orders and authorizations.
|
|
493
|
+
:param pulumi.Input[_builtins.bool] tidy_cert_metadata: Set to true to enable tidying up certificate metadata.
|
|
494
|
+
:param pulumi.Input[_builtins.bool] tidy_cert_store: Set to true to enable tidying up the certificate store
|
|
495
|
+
:param pulumi.Input[_builtins.bool] tidy_cmpv2_nonce_store: Set to true to enable tidying up the CMPv2 nonce store.
|
|
496
|
+
:param pulumi.Input[_builtins.bool] tidy_cross_cluster_revoked_certs: Set to true to enable tidying up the cross-cluster
|
|
498
497
|
revoked certificate store.
|
|
499
|
-
:param pulumi.Input[
|
|
498
|
+
:param pulumi.Input[_builtins.bool] tidy_expired_issuers: Set to true to automatically remove expired issuers past the
|
|
500
499
|
`issuer_safety_buffer`. No keys will be removed as part of this operation.
|
|
501
|
-
:param pulumi.Input[
|
|
500
|
+
:param pulumi.Input[_builtins.bool] tidy_move_legacy_ca_bundle: Set to true to move the legacy `ca_bundle` from
|
|
502
501
|
`/config/ca_bundle` to `/config/ca_bundle.bak`.
|
|
503
|
-
:param pulumi.Input[
|
|
502
|
+
:param pulumi.Input[_builtins.bool] tidy_revocation_queue: Set to true to remove stale revocation queue entries that
|
|
504
503
|
haven't been confirmed by any active cluster.
|
|
505
|
-
:param pulumi.Input[
|
|
504
|
+
:param pulumi.Input[_builtins.bool] tidy_revoked_cert_issuer_associations: Set to true to validate issuer associations
|
|
506
505
|
on revocation entries. This helps increase the performance of CRL building and OCSP responses.
|
|
507
|
-
:param pulumi.Input[
|
|
506
|
+
:param pulumi.Input[_builtins.bool] tidy_revoked_certs: Set to true to remove all invalid and expired certificates from
|
|
508
507
|
storage. A revoked storage entry is considered invalid if the entry is empty, or the value within
|
|
509
508
|
the entry is empty. If a certificate is removed due to expiry, the entry will also be removed from
|
|
510
509
|
the CRL, and the CRL will be rotated.
|
|
@@ -556,9 +555,9 @@ class _BackendConfigAutoTidyState:
|
|
|
556
555
|
if tidy_revoked_certs is not None:
|
|
557
556
|
pulumi.set(__self__, "tidy_revoked_certs", tidy_revoked_certs)
|
|
558
557
|
|
|
559
|
-
@property
|
|
558
|
+
@_builtins.property
|
|
560
559
|
@pulumi.getter(name="acmeAccountSafetyBuffer")
|
|
561
|
-
def acme_account_safety_buffer(self) -> Optional[pulumi.Input[
|
|
560
|
+
def acme_account_safety_buffer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
562
561
|
"""
|
|
563
562
|
The amount of time that must pass after creation that an account with no orders is marked revoked, and the amount of
|
|
564
563
|
time after being marked revoked or deactivated.
|
|
@@ -566,12 +565,12 @@ class _BackendConfigAutoTidyState:
|
|
|
566
565
|
return pulumi.get(self, "acme_account_safety_buffer")
|
|
567
566
|
|
|
568
567
|
@acme_account_safety_buffer.setter
|
|
569
|
-
def acme_account_safety_buffer(self, value: Optional[pulumi.Input[
|
|
568
|
+
def acme_account_safety_buffer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
570
569
|
pulumi.set(self, "acme_account_safety_buffer", value)
|
|
571
570
|
|
|
572
|
-
@property
|
|
571
|
+
@_builtins.property
|
|
573
572
|
@pulumi.getter
|
|
574
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
573
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
575
574
|
"""
|
|
576
575
|
The path to the PKI secret backend to
|
|
577
576
|
read the configuration from, with no leading or trailing `/`s.
|
|
@@ -579,24 +578,24 @@ class _BackendConfigAutoTidyState:
|
|
|
579
578
|
return pulumi.get(self, "backend")
|
|
580
579
|
|
|
581
580
|
@backend.setter
|
|
582
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
581
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
583
582
|
pulumi.set(self, "backend", value)
|
|
584
583
|
|
|
585
|
-
@property
|
|
584
|
+
@_builtins.property
|
|
586
585
|
@pulumi.getter
|
|
587
|
-
def enabled(self) -> Optional[pulumi.Input[
|
|
586
|
+
def enabled(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
588
587
|
"""
|
|
589
588
|
Specifies whether automatic tidy is enabled or not.
|
|
590
589
|
"""
|
|
591
590
|
return pulumi.get(self, "enabled")
|
|
592
591
|
|
|
593
592
|
@enabled.setter
|
|
594
|
-
def enabled(self, value: Optional[pulumi.Input[
|
|
593
|
+
def enabled(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
595
594
|
pulumi.set(self, "enabled", value)
|
|
596
595
|
|
|
597
|
-
@property
|
|
596
|
+
@_builtins.property
|
|
598
597
|
@pulumi.getter(name="intervalDuration")
|
|
599
|
-
def interval_duration(self) -> Optional[pulumi.Input[
|
|
598
|
+
def interval_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
600
599
|
"""
|
|
601
600
|
Interval at which to run an auto-tidy operation. This is the time
|
|
602
601
|
between tidy invocations (after one finishes to the start of the next).
|
|
@@ -604,12 +603,12 @@ class _BackendConfigAutoTidyState:
|
|
|
604
603
|
return pulumi.get(self, "interval_duration")
|
|
605
604
|
|
|
606
605
|
@interval_duration.setter
|
|
607
|
-
def interval_duration(self, value: Optional[pulumi.Input[
|
|
606
|
+
def interval_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
608
607
|
pulumi.set(self, "interval_duration", value)
|
|
609
608
|
|
|
610
|
-
@property
|
|
609
|
+
@_builtins.property
|
|
611
610
|
@pulumi.getter(name="issuerSafetyBuffer")
|
|
612
|
-
def issuer_safety_buffer(self) -> Optional[pulumi.Input[
|
|
611
|
+
def issuer_safety_buffer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
613
612
|
"""
|
|
614
613
|
The amount of extra time that must have passed beyond issuer's
|
|
615
614
|
expiration before it is removed from the backend storage.
|
|
@@ -617,12 +616,12 @@ class _BackendConfigAutoTidyState:
|
|
|
617
616
|
return pulumi.get(self, "issuer_safety_buffer")
|
|
618
617
|
|
|
619
618
|
@issuer_safety_buffer.setter
|
|
620
|
-
def issuer_safety_buffer(self, value: Optional[pulumi.Input[
|
|
619
|
+
def issuer_safety_buffer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
621
620
|
pulumi.set(self, "issuer_safety_buffer", value)
|
|
622
621
|
|
|
623
|
-
@property
|
|
622
|
+
@_builtins.property
|
|
624
623
|
@pulumi.getter(name="maintainStoredCertificateCounts")
|
|
625
|
-
def maintain_stored_certificate_counts(self) -> Optional[pulumi.Input[
|
|
624
|
+
def maintain_stored_certificate_counts(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
626
625
|
"""
|
|
627
626
|
This configures whether stored certificate are
|
|
628
627
|
counted upon initialization of the backend, and whether during normal operation, a running count
|
|
@@ -631,12 +630,12 @@ class _BackendConfigAutoTidyState:
|
|
|
631
630
|
return pulumi.get(self, "maintain_stored_certificate_counts")
|
|
632
631
|
|
|
633
632
|
@maintain_stored_certificate_counts.setter
|
|
634
|
-
def maintain_stored_certificate_counts(self, value: Optional[pulumi.Input[
|
|
633
|
+
def maintain_stored_certificate_counts(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
635
634
|
pulumi.set(self, "maintain_stored_certificate_counts", value)
|
|
636
635
|
|
|
637
|
-
@property
|
|
636
|
+
@_builtins.property
|
|
638
637
|
@pulumi.getter(name="maxStartupBackoffDuration")
|
|
639
|
-
def max_startup_backoff_duration(self) -> Optional[pulumi.Input[
|
|
638
|
+
def max_startup_backoff_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
640
639
|
"""
|
|
641
640
|
The maximum amount of time auto-tidy will be delayed
|
|
642
641
|
after startup.
|
|
@@ -644,12 +643,12 @@ class _BackendConfigAutoTidyState:
|
|
|
644
643
|
return pulumi.get(self, "max_startup_backoff_duration")
|
|
645
644
|
|
|
646
645
|
@max_startup_backoff_duration.setter
|
|
647
|
-
def max_startup_backoff_duration(self, value: Optional[pulumi.Input[
|
|
646
|
+
def max_startup_backoff_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
648
647
|
pulumi.set(self, "max_startup_backoff_duration", value)
|
|
649
648
|
|
|
650
|
-
@property
|
|
649
|
+
@_builtins.property
|
|
651
650
|
@pulumi.getter(name="minStartupBackoffDuration")
|
|
652
|
-
def min_startup_backoff_duration(self) -> Optional[pulumi.Input[
|
|
651
|
+
def min_startup_backoff_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
653
652
|
"""
|
|
654
653
|
The minimum amount of time auto-tidy will be delayed
|
|
655
654
|
after startup.
|
|
@@ -657,12 +656,12 @@ class _BackendConfigAutoTidyState:
|
|
|
657
656
|
return pulumi.get(self, "min_startup_backoff_duration")
|
|
658
657
|
|
|
659
658
|
@min_startup_backoff_duration.setter
|
|
660
|
-
def min_startup_backoff_duration(self, value: Optional[pulumi.Input[
|
|
659
|
+
def min_startup_backoff_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
661
660
|
pulumi.set(self, "min_startup_backoff_duration", value)
|
|
662
661
|
|
|
663
|
-
@property
|
|
662
|
+
@_builtins.property
|
|
664
663
|
@pulumi.getter
|
|
665
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
664
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
666
665
|
"""
|
|
667
666
|
The namespace of the target resource.
|
|
668
667
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -672,24 +671,24 @@ class _BackendConfigAutoTidyState:
|
|
|
672
671
|
return pulumi.get(self, "namespace")
|
|
673
672
|
|
|
674
673
|
@namespace.setter
|
|
675
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
674
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
676
675
|
pulumi.set(self, "namespace", value)
|
|
677
676
|
|
|
678
|
-
@property
|
|
677
|
+
@_builtins.property
|
|
679
678
|
@pulumi.getter(name="pauseDuration")
|
|
680
|
-
def pause_duration(self) -> Optional[pulumi.Input[
|
|
679
|
+
def pause_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
681
680
|
"""
|
|
682
681
|
The amount of time to wait between processing certificates.
|
|
683
682
|
"""
|
|
684
683
|
return pulumi.get(self, "pause_duration")
|
|
685
684
|
|
|
686
685
|
@pause_duration.setter
|
|
687
|
-
def pause_duration(self, value: Optional[pulumi.Input[
|
|
686
|
+
def pause_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
688
687
|
pulumi.set(self, "pause_duration", value)
|
|
689
688
|
|
|
690
|
-
@property
|
|
689
|
+
@_builtins.property
|
|
691
690
|
@pulumi.getter(name="publishStoredCertificateCountMetrics")
|
|
692
|
-
def publish_stored_certificate_count_metrics(self) -> Optional[pulumi.Input[
|
|
691
|
+
def publish_stored_certificate_count_metrics(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
693
692
|
"""
|
|
694
693
|
This configures whether the stored
|
|
695
694
|
certificate count is published to the metrics consumer.
|
|
@@ -697,12 +696,12 @@ class _BackendConfigAutoTidyState:
|
|
|
697
696
|
return pulumi.get(self, "publish_stored_certificate_count_metrics")
|
|
698
697
|
|
|
699
698
|
@publish_stored_certificate_count_metrics.setter
|
|
700
|
-
def publish_stored_certificate_count_metrics(self, value: Optional[pulumi.Input[
|
|
699
|
+
def publish_stored_certificate_count_metrics(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
701
700
|
pulumi.set(self, "publish_stored_certificate_count_metrics", value)
|
|
702
701
|
|
|
703
|
-
@property
|
|
702
|
+
@_builtins.property
|
|
704
703
|
@pulumi.getter(name="revocationQueueSafetyBuffer")
|
|
705
|
-
def revocation_queue_safety_buffer(self) -> Optional[pulumi.Input[
|
|
704
|
+
def revocation_queue_safety_buffer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
706
705
|
"""
|
|
707
706
|
The amount of time that must pass from the
|
|
708
707
|
cross-cluster revocation request being initiated to when it will be slated for removal.
|
|
@@ -710,12 +709,12 @@ class _BackendConfigAutoTidyState:
|
|
|
710
709
|
return pulumi.get(self, "revocation_queue_safety_buffer")
|
|
711
710
|
|
|
712
711
|
@revocation_queue_safety_buffer.setter
|
|
713
|
-
def revocation_queue_safety_buffer(self, value: Optional[pulumi.Input[
|
|
712
|
+
def revocation_queue_safety_buffer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
714
713
|
pulumi.set(self, "revocation_queue_safety_buffer", value)
|
|
715
714
|
|
|
716
|
-
@property
|
|
715
|
+
@_builtins.property
|
|
717
716
|
@pulumi.getter(name="safetyBuffer")
|
|
718
|
-
def safety_buffer(self) -> Optional[pulumi.Input[
|
|
717
|
+
def safety_buffer(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
719
718
|
"""
|
|
720
719
|
The amount of extra time that must have passed beyond certificate
|
|
721
720
|
expiration before it is removed from the backend storage and/or revocation list.
|
|
@@ -723,60 +722,60 @@ class _BackendConfigAutoTidyState:
|
|
|
723
722
|
return pulumi.get(self, "safety_buffer")
|
|
724
723
|
|
|
725
724
|
@safety_buffer.setter
|
|
726
|
-
def safety_buffer(self, value: Optional[pulumi.Input[
|
|
725
|
+
def safety_buffer(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
727
726
|
pulumi.set(self, "safety_buffer", value)
|
|
728
727
|
|
|
729
|
-
@property
|
|
728
|
+
@_builtins.property
|
|
730
729
|
@pulumi.getter(name="tidyAcme")
|
|
731
|
-
def tidy_acme(self) -> Optional[pulumi.Input[
|
|
730
|
+
def tidy_acme(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
732
731
|
"""
|
|
733
732
|
Set to true to enable tidying ACME accounts, orders and authorizations.
|
|
734
733
|
"""
|
|
735
734
|
return pulumi.get(self, "tidy_acme")
|
|
736
735
|
|
|
737
736
|
@tidy_acme.setter
|
|
738
|
-
def tidy_acme(self, value: Optional[pulumi.Input[
|
|
737
|
+
def tidy_acme(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
739
738
|
pulumi.set(self, "tidy_acme", value)
|
|
740
739
|
|
|
741
|
-
@property
|
|
740
|
+
@_builtins.property
|
|
742
741
|
@pulumi.getter(name="tidyCertMetadata")
|
|
743
|
-
def tidy_cert_metadata(self) -> Optional[pulumi.Input[
|
|
742
|
+
def tidy_cert_metadata(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
744
743
|
"""
|
|
745
744
|
Set to true to enable tidying up certificate metadata.
|
|
746
745
|
"""
|
|
747
746
|
return pulumi.get(self, "tidy_cert_metadata")
|
|
748
747
|
|
|
749
748
|
@tidy_cert_metadata.setter
|
|
750
|
-
def tidy_cert_metadata(self, value: Optional[pulumi.Input[
|
|
749
|
+
def tidy_cert_metadata(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
751
750
|
pulumi.set(self, "tidy_cert_metadata", value)
|
|
752
751
|
|
|
753
|
-
@property
|
|
752
|
+
@_builtins.property
|
|
754
753
|
@pulumi.getter(name="tidyCertStore")
|
|
755
|
-
def tidy_cert_store(self) -> Optional[pulumi.Input[
|
|
754
|
+
def tidy_cert_store(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
756
755
|
"""
|
|
757
756
|
Set to true to enable tidying up the certificate store
|
|
758
757
|
"""
|
|
759
758
|
return pulumi.get(self, "tidy_cert_store")
|
|
760
759
|
|
|
761
760
|
@tidy_cert_store.setter
|
|
762
|
-
def tidy_cert_store(self, value: Optional[pulumi.Input[
|
|
761
|
+
def tidy_cert_store(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
763
762
|
pulumi.set(self, "tidy_cert_store", value)
|
|
764
763
|
|
|
765
|
-
@property
|
|
764
|
+
@_builtins.property
|
|
766
765
|
@pulumi.getter(name="tidyCmpv2NonceStore")
|
|
767
|
-
def tidy_cmpv2_nonce_store(self) -> Optional[pulumi.Input[
|
|
766
|
+
def tidy_cmpv2_nonce_store(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
768
767
|
"""
|
|
769
768
|
Set to true to enable tidying up the CMPv2 nonce store.
|
|
770
769
|
"""
|
|
771
770
|
return pulumi.get(self, "tidy_cmpv2_nonce_store")
|
|
772
771
|
|
|
773
772
|
@tidy_cmpv2_nonce_store.setter
|
|
774
|
-
def tidy_cmpv2_nonce_store(self, value: Optional[pulumi.Input[
|
|
773
|
+
def tidy_cmpv2_nonce_store(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
775
774
|
pulumi.set(self, "tidy_cmpv2_nonce_store", value)
|
|
776
775
|
|
|
777
|
-
@property
|
|
776
|
+
@_builtins.property
|
|
778
777
|
@pulumi.getter(name="tidyCrossClusterRevokedCerts")
|
|
779
|
-
def tidy_cross_cluster_revoked_certs(self) -> Optional[pulumi.Input[
|
|
778
|
+
def tidy_cross_cluster_revoked_certs(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
780
779
|
"""
|
|
781
780
|
Set to true to enable tidying up the cross-cluster
|
|
782
781
|
revoked certificate store.
|
|
@@ -784,12 +783,12 @@ class _BackendConfigAutoTidyState:
|
|
|
784
783
|
return pulumi.get(self, "tidy_cross_cluster_revoked_certs")
|
|
785
784
|
|
|
786
785
|
@tidy_cross_cluster_revoked_certs.setter
|
|
787
|
-
def tidy_cross_cluster_revoked_certs(self, value: Optional[pulumi.Input[
|
|
786
|
+
def tidy_cross_cluster_revoked_certs(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
788
787
|
pulumi.set(self, "tidy_cross_cluster_revoked_certs", value)
|
|
789
788
|
|
|
790
|
-
@property
|
|
789
|
+
@_builtins.property
|
|
791
790
|
@pulumi.getter(name="tidyExpiredIssuers")
|
|
792
|
-
def tidy_expired_issuers(self) -> Optional[pulumi.Input[
|
|
791
|
+
def tidy_expired_issuers(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
793
792
|
"""
|
|
794
793
|
Set to true to automatically remove expired issuers past the
|
|
795
794
|
`issuer_safety_buffer`. No keys will be removed as part of this operation.
|
|
@@ -797,12 +796,12 @@ class _BackendConfigAutoTidyState:
|
|
|
797
796
|
return pulumi.get(self, "tidy_expired_issuers")
|
|
798
797
|
|
|
799
798
|
@tidy_expired_issuers.setter
|
|
800
|
-
def tidy_expired_issuers(self, value: Optional[pulumi.Input[
|
|
799
|
+
def tidy_expired_issuers(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
801
800
|
pulumi.set(self, "tidy_expired_issuers", value)
|
|
802
801
|
|
|
803
|
-
@property
|
|
802
|
+
@_builtins.property
|
|
804
803
|
@pulumi.getter(name="tidyMoveLegacyCaBundle")
|
|
805
|
-
def tidy_move_legacy_ca_bundle(self) -> Optional[pulumi.Input[
|
|
804
|
+
def tidy_move_legacy_ca_bundle(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
806
805
|
"""
|
|
807
806
|
Set to true to move the legacy `ca_bundle` from
|
|
808
807
|
`/config/ca_bundle` to `/config/ca_bundle.bak`.
|
|
@@ -810,12 +809,12 @@ class _BackendConfigAutoTidyState:
|
|
|
810
809
|
return pulumi.get(self, "tidy_move_legacy_ca_bundle")
|
|
811
810
|
|
|
812
811
|
@tidy_move_legacy_ca_bundle.setter
|
|
813
|
-
def tidy_move_legacy_ca_bundle(self, value: Optional[pulumi.Input[
|
|
812
|
+
def tidy_move_legacy_ca_bundle(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
814
813
|
pulumi.set(self, "tidy_move_legacy_ca_bundle", value)
|
|
815
814
|
|
|
816
|
-
@property
|
|
815
|
+
@_builtins.property
|
|
817
816
|
@pulumi.getter(name="tidyRevocationQueue")
|
|
818
|
-
def tidy_revocation_queue(self) -> Optional[pulumi.Input[
|
|
817
|
+
def tidy_revocation_queue(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
819
818
|
"""
|
|
820
819
|
Set to true to remove stale revocation queue entries that
|
|
821
820
|
haven't been confirmed by any active cluster.
|
|
@@ -823,12 +822,12 @@ class _BackendConfigAutoTidyState:
|
|
|
823
822
|
return pulumi.get(self, "tidy_revocation_queue")
|
|
824
823
|
|
|
825
824
|
@tidy_revocation_queue.setter
|
|
826
|
-
def tidy_revocation_queue(self, value: Optional[pulumi.Input[
|
|
825
|
+
def tidy_revocation_queue(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
827
826
|
pulumi.set(self, "tidy_revocation_queue", value)
|
|
828
827
|
|
|
829
|
-
@property
|
|
828
|
+
@_builtins.property
|
|
830
829
|
@pulumi.getter(name="tidyRevokedCertIssuerAssociations")
|
|
831
|
-
def tidy_revoked_cert_issuer_associations(self) -> Optional[pulumi.Input[
|
|
830
|
+
def tidy_revoked_cert_issuer_associations(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
832
831
|
"""
|
|
833
832
|
Set to true to validate issuer associations
|
|
834
833
|
on revocation entries. This helps increase the performance of CRL building and OCSP responses.
|
|
@@ -836,12 +835,12 @@ class _BackendConfigAutoTidyState:
|
|
|
836
835
|
return pulumi.get(self, "tidy_revoked_cert_issuer_associations")
|
|
837
836
|
|
|
838
837
|
@tidy_revoked_cert_issuer_associations.setter
|
|
839
|
-
def tidy_revoked_cert_issuer_associations(self, value: Optional[pulumi.Input[
|
|
838
|
+
def tidy_revoked_cert_issuer_associations(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
840
839
|
pulumi.set(self, "tidy_revoked_cert_issuer_associations", value)
|
|
841
840
|
|
|
842
|
-
@property
|
|
841
|
+
@_builtins.property
|
|
843
842
|
@pulumi.getter(name="tidyRevokedCerts")
|
|
844
|
-
def tidy_revoked_certs(self) -> Optional[pulumi.Input[
|
|
843
|
+
def tidy_revoked_certs(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
845
844
|
"""
|
|
846
845
|
Set to true to remove all invalid and expired certificates from
|
|
847
846
|
storage. A revoked storage entry is considered invalid if the entry is empty, or the value within
|
|
@@ -851,7 +850,7 @@ class _BackendConfigAutoTidyState:
|
|
|
851
850
|
return pulumi.get(self, "tidy_revoked_certs")
|
|
852
851
|
|
|
853
852
|
@tidy_revoked_certs.setter
|
|
854
|
-
def tidy_revoked_certs(self, value: Optional[pulumi.Input[
|
|
853
|
+
def tidy_revoked_certs(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
855
854
|
pulumi.set(self, "tidy_revoked_certs", value)
|
|
856
855
|
|
|
857
856
|
|
|
@@ -861,29 +860,29 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
861
860
|
def __init__(__self__,
|
|
862
861
|
resource_name: str,
|
|
863
862
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
864
|
-
acme_account_safety_buffer: Optional[pulumi.Input[
|
|
865
|
-
backend: Optional[pulumi.Input[
|
|
866
|
-
enabled: Optional[pulumi.Input[
|
|
867
|
-
interval_duration: Optional[pulumi.Input[
|
|
868
|
-
issuer_safety_buffer: Optional[pulumi.Input[
|
|
869
|
-
maintain_stored_certificate_counts: Optional[pulumi.Input[
|
|
870
|
-
max_startup_backoff_duration: Optional[pulumi.Input[
|
|
871
|
-
min_startup_backoff_duration: Optional[pulumi.Input[
|
|
872
|
-
namespace: Optional[pulumi.Input[
|
|
873
|
-
pause_duration: Optional[pulumi.Input[
|
|
874
|
-
publish_stored_certificate_count_metrics: Optional[pulumi.Input[
|
|
875
|
-
revocation_queue_safety_buffer: Optional[pulumi.Input[
|
|
876
|
-
safety_buffer: Optional[pulumi.Input[
|
|
877
|
-
tidy_acme: Optional[pulumi.Input[
|
|
878
|
-
tidy_cert_metadata: Optional[pulumi.Input[
|
|
879
|
-
tidy_cert_store: Optional[pulumi.Input[
|
|
880
|
-
tidy_cmpv2_nonce_store: Optional[pulumi.Input[
|
|
881
|
-
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[
|
|
882
|
-
tidy_expired_issuers: Optional[pulumi.Input[
|
|
883
|
-
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[
|
|
884
|
-
tidy_revocation_queue: Optional[pulumi.Input[
|
|
885
|
-
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[
|
|
886
|
-
tidy_revoked_certs: Optional[pulumi.Input[
|
|
863
|
+
acme_account_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
864
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
865
|
+
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
866
|
+
interval_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
867
|
+
issuer_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
868
|
+
maintain_stored_certificate_counts: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
869
|
+
max_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
870
|
+
min_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
871
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
872
|
+
pause_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
873
|
+
publish_stored_certificate_count_metrics: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
874
|
+
revocation_queue_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
875
|
+
safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
876
|
+
tidy_acme: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
877
|
+
tidy_cert_metadata: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
878
|
+
tidy_cert_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
879
|
+
tidy_cmpv2_nonce_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
880
|
+
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
881
|
+
tidy_expired_issuers: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
882
|
+
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
883
|
+
tidy_revocation_queue: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
884
|
+
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
885
|
+
tidy_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
887
886
|
__props__=None):
|
|
888
887
|
"""
|
|
889
888
|
Allows setting the Auto Tidy configuration on a PKI Secret Backend
|
|
@@ -899,7 +898,7 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
899
898
|
type="pki",
|
|
900
899
|
default_lease_ttl_seconds=3600,
|
|
901
900
|
max_lease_ttl_seconds=86400)
|
|
902
|
-
test = vault.
|
|
901
|
+
test = vault.pkisecret.BackendConfigAutoTidy("test",
|
|
903
902
|
backend=pki.path,
|
|
904
903
|
enabled=True,
|
|
905
904
|
tidy_cert_store=True,
|
|
@@ -908,48 +907,48 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
908
907
|
|
|
909
908
|
:param str resource_name: The name of the resource.
|
|
910
909
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
911
|
-
:param pulumi.Input[
|
|
910
|
+
:param pulumi.Input[_builtins.str] acme_account_safety_buffer: The amount of time that must pass after creation that an account with no orders is marked revoked, and the amount of
|
|
912
911
|
time after being marked revoked or deactivated.
|
|
913
|
-
:param pulumi.Input[
|
|
912
|
+
:param pulumi.Input[_builtins.str] backend: The path to the PKI secret backend to
|
|
914
913
|
read the configuration from, with no leading or trailing `/`s.
|
|
915
|
-
:param pulumi.Input[
|
|
916
|
-
:param pulumi.Input[
|
|
914
|
+
:param pulumi.Input[_builtins.bool] enabled: Specifies whether automatic tidy is enabled or not.
|
|
915
|
+
:param pulumi.Input[_builtins.str] interval_duration: Interval at which to run an auto-tidy operation. This is the time
|
|
917
916
|
between tidy invocations (after one finishes to the start of the next).
|
|
918
|
-
:param pulumi.Input[
|
|
917
|
+
:param pulumi.Input[_builtins.str] issuer_safety_buffer: The amount of extra time that must have passed beyond issuer's
|
|
919
918
|
expiration before it is removed from the backend storage.
|
|
920
|
-
:param pulumi.Input[
|
|
919
|
+
:param pulumi.Input[_builtins.bool] maintain_stored_certificate_counts: This configures whether stored certificate are
|
|
921
920
|
counted upon initialization of the backend, and whether during normal operation, a running count
|
|
922
921
|
of certificates stored is maintained.
|
|
923
|
-
:param pulumi.Input[
|
|
922
|
+
:param pulumi.Input[_builtins.str] max_startup_backoff_duration: The maximum amount of time auto-tidy will be delayed
|
|
924
923
|
after startup.
|
|
925
|
-
:param pulumi.Input[
|
|
924
|
+
:param pulumi.Input[_builtins.str] min_startup_backoff_duration: The minimum amount of time auto-tidy will be delayed
|
|
926
925
|
after startup.
|
|
927
|
-
:param pulumi.Input[
|
|
926
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace of the target resource.
|
|
928
927
|
The value should not contain leading or trailing forward slashes.
|
|
929
928
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
930
929
|
*Available only for Vault Enterprise*.
|
|
931
|
-
:param pulumi.Input[
|
|
932
|
-
:param pulumi.Input[
|
|
930
|
+
:param pulumi.Input[_builtins.str] pause_duration: The amount of time to wait between processing certificates.
|
|
931
|
+
:param pulumi.Input[_builtins.bool] publish_stored_certificate_count_metrics: This configures whether the stored
|
|
933
932
|
certificate count is published to the metrics consumer.
|
|
934
|
-
:param pulumi.Input[
|
|
933
|
+
:param pulumi.Input[_builtins.str] revocation_queue_safety_buffer: The amount of time that must pass from the
|
|
935
934
|
cross-cluster revocation request being initiated to when it will be slated for removal.
|
|
936
|
-
:param pulumi.Input[
|
|
935
|
+
:param pulumi.Input[_builtins.str] safety_buffer: The amount of extra time that must have passed beyond certificate
|
|
937
936
|
expiration before it is removed from the backend storage and/or revocation list.
|
|
938
|
-
:param pulumi.Input[
|
|
939
|
-
:param pulumi.Input[
|
|
940
|
-
:param pulumi.Input[
|
|
941
|
-
:param pulumi.Input[
|
|
942
|
-
:param pulumi.Input[
|
|
937
|
+
:param pulumi.Input[_builtins.bool] tidy_acme: Set to true to enable tidying ACME accounts, orders and authorizations.
|
|
938
|
+
:param pulumi.Input[_builtins.bool] tidy_cert_metadata: Set to true to enable tidying up certificate metadata.
|
|
939
|
+
:param pulumi.Input[_builtins.bool] tidy_cert_store: Set to true to enable tidying up the certificate store
|
|
940
|
+
:param pulumi.Input[_builtins.bool] tidy_cmpv2_nonce_store: Set to true to enable tidying up the CMPv2 nonce store.
|
|
941
|
+
:param pulumi.Input[_builtins.bool] tidy_cross_cluster_revoked_certs: Set to true to enable tidying up the cross-cluster
|
|
943
942
|
revoked certificate store.
|
|
944
|
-
:param pulumi.Input[
|
|
943
|
+
:param pulumi.Input[_builtins.bool] tidy_expired_issuers: Set to true to automatically remove expired issuers past the
|
|
945
944
|
`issuer_safety_buffer`. No keys will be removed as part of this operation.
|
|
946
|
-
:param pulumi.Input[
|
|
945
|
+
:param pulumi.Input[_builtins.bool] tidy_move_legacy_ca_bundle: Set to true to move the legacy `ca_bundle` from
|
|
947
946
|
`/config/ca_bundle` to `/config/ca_bundle.bak`.
|
|
948
|
-
:param pulumi.Input[
|
|
947
|
+
:param pulumi.Input[_builtins.bool] tidy_revocation_queue: Set to true to remove stale revocation queue entries that
|
|
949
948
|
haven't been confirmed by any active cluster.
|
|
950
|
-
:param pulumi.Input[
|
|
949
|
+
:param pulumi.Input[_builtins.bool] tidy_revoked_cert_issuer_associations: Set to true to validate issuer associations
|
|
951
950
|
on revocation entries. This helps increase the performance of CRL building and OCSP responses.
|
|
952
|
-
:param pulumi.Input[
|
|
951
|
+
:param pulumi.Input[_builtins.bool] tidy_revoked_certs: Set to true to remove all invalid and expired certificates from
|
|
953
952
|
storage. A revoked storage entry is considered invalid if the entry is empty, or the value within
|
|
954
953
|
the entry is empty. If a certificate is removed due to expiry, the entry will also be removed from
|
|
955
954
|
the CRL, and the CRL will be rotated.
|
|
@@ -974,7 +973,7 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
974
973
|
type="pki",
|
|
975
974
|
default_lease_ttl_seconds=3600,
|
|
976
975
|
max_lease_ttl_seconds=86400)
|
|
977
|
-
test = vault.
|
|
976
|
+
test = vault.pkisecret.BackendConfigAutoTidy("test",
|
|
978
977
|
backend=pki.path,
|
|
979
978
|
enabled=True,
|
|
980
979
|
tidy_cert_store=True,
|
|
@@ -996,29 +995,29 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
996
995
|
def _internal_init(__self__,
|
|
997
996
|
resource_name: str,
|
|
998
997
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
999
|
-
acme_account_safety_buffer: Optional[pulumi.Input[
|
|
1000
|
-
backend: Optional[pulumi.Input[
|
|
1001
|
-
enabled: Optional[pulumi.Input[
|
|
1002
|
-
interval_duration: Optional[pulumi.Input[
|
|
1003
|
-
issuer_safety_buffer: Optional[pulumi.Input[
|
|
1004
|
-
maintain_stored_certificate_counts: Optional[pulumi.Input[
|
|
1005
|
-
max_startup_backoff_duration: Optional[pulumi.Input[
|
|
1006
|
-
min_startup_backoff_duration: Optional[pulumi.Input[
|
|
1007
|
-
namespace: Optional[pulumi.Input[
|
|
1008
|
-
pause_duration: Optional[pulumi.Input[
|
|
1009
|
-
publish_stored_certificate_count_metrics: Optional[pulumi.Input[
|
|
1010
|
-
revocation_queue_safety_buffer: Optional[pulumi.Input[
|
|
1011
|
-
safety_buffer: Optional[pulumi.Input[
|
|
1012
|
-
tidy_acme: Optional[pulumi.Input[
|
|
1013
|
-
tidy_cert_metadata: Optional[pulumi.Input[
|
|
1014
|
-
tidy_cert_store: Optional[pulumi.Input[
|
|
1015
|
-
tidy_cmpv2_nonce_store: Optional[pulumi.Input[
|
|
1016
|
-
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[
|
|
1017
|
-
tidy_expired_issuers: Optional[pulumi.Input[
|
|
1018
|
-
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[
|
|
1019
|
-
tidy_revocation_queue: Optional[pulumi.Input[
|
|
1020
|
-
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[
|
|
1021
|
-
tidy_revoked_certs: Optional[pulumi.Input[
|
|
998
|
+
acme_account_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
999
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1000
|
+
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1001
|
+
interval_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1002
|
+
issuer_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1003
|
+
maintain_stored_certificate_counts: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1004
|
+
max_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1005
|
+
min_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1006
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1007
|
+
pause_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1008
|
+
publish_stored_certificate_count_metrics: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1009
|
+
revocation_queue_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1010
|
+
safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1011
|
+
tidy_acme: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1012
|
+
tidy_cert_metadata: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1013
|
+
tidy_cert_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1014
|
+
tidy_cmpv2_nonce_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1015
|
+
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1016
|
+
tidy_expired_issuers: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1017
|
+
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1018
|
+
tidy_revocation_queue: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1019
|
+
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1020
|
+
tidy_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1022
1021
|
__props__=None):
|
|
1023
1022
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
1024
1023
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -1065,29 +1064,29 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
1065
1064
|
def get(resource_name: str,
|
|
1066
1065
|
id: pulumi.Input[str],
|
|
1067
1066
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1068
|
-
acme_account_safety_buffer: Optional[pulumi.Input[
|
|
1069
|
-
backend: Optional[pulumi.Input[
|
|
1070
|
-
enabled: Optional[pulumi.Input[
|
|
1071
|
-
interval_duration: Optional[pulumi.Input[
|
|
1072
|
-
issuer_safety_buffer: Optional[pulumi.Input[
|
|
1073
|
-
maintain_stored_certificate_counts: Optional[pulumi.Input[
|
|
1074
|
-
max_startup_backoff_duration: Optional[pulumi.Input[
|
|
1075
|
-
min_startup_backoff_duration: Optional[pulumi.Input[
|
|
1076
|
-
namespace: Optional[pulumi.Input[
|
|
1077
|
-
pause_duration: Optional[pulumi.Input[
|
|
1078
|
-
publish_stored_certificate_count_metrics: Optional[pulumi.Input[
|
|
1079
|
-
revocation_queue_safety_buffer: Optional[pulumi.Input[
|
|
1080
|
-
safety_buffer: Optional[pulumi.Input[
|
|
1081
|
-
tidy_acme: Optional[pulumi.Input[
|
|
1082
|
-
tidy_cert_metadata: Optional[pulumi.Input[
|
|
1083
|
-
tidy_cert_store: Optional[pulumi.Input[
|
|
1084
|
-
tidy_cmpv2_nonce_store: Optional[pulumi.Input[
|
|
1085
|
-
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[
|
|
1086
|
-
tidy_expired_issuers: Optional[pulumi.Input[
|
|
1087
|
-
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[
|
|
1088
|
-
tidy_revocation_queue: Optional[pulumi.Input[
|
|
1089
|
-
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[
|
|
1090
|
-
tidy_revoked_certs: Optional[pulumi.Input[
|
|
1067
|
+
acme_account_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1068
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1069
|
+
enabled: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1070
|
+
interval_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1071
|
+
issuer_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1072
|
+
maintain_stored_certificate_counts: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1073
|
+
max_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1074
|
+
min_startup_backoff_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1075
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1076
|
+
pause_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1077
|
+
publish_stored_certificate_count_metrics: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1078
|
+
revocation_queue_safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1079
|
+
safety_buffer: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1080
|
+
tidy_acme: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1081
|
+
tidy_cert_metadata: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1082
|
+
tidy_cert_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1083
|
+
tidy_cmpv2_nonce_store: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1084
|
+
tidy_cross_cluster_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1085
|
+
tidy_expired_issuers: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1086
|
+
tidy_move_legacy_ca_bundle: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1087
|
+
tidy_revocation_queue: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1088
|
+
tidy_revoked_cert_issuer_associations: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1089
|
+
tidy_revoked_certs: Optional[pulumi.Input[_builtins.bool]] = None) -> 'BackendConfigAutoTidy':
|
|
1091
1090
|
"""
|
|
1092
1091
|
Get an existing BackendConfigAutoTidy resource's state with the given name, id, and optional extra
|
|
1093
1092
|
properties used to qualify the lookup.
|
|
@@ -1095,48 +1094,48 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
1095
1094
|
:param str resource_name: The unique name of the resulting resource.
|
|
1096
1095
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
1097
1096
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1098
|
-
:param pulumi.Input[
|
|
1097
|
+
:param pulumi.Input[_builtins.str] acme_account_safety_buffer: The amount of time that must pass after creation that an account with no orders is marked revoked, and the amount of
|
|
1099
1098
|
time after being marked revoked or deactivated.
|
|
1100
|
-
:param pulumi.Input[
|
|
1099
|
+
:param pulumi.Input[_builtins.str] backend: The path to the PKI secret backend to
|
|
1101
1100
|
read the configuration from, with no leading or trailing `/`s.
|
|
1102
|
-
:param pulumi.Input[
|
|
1103
|
-
:param pulumi.Input[
|
|
1101
|
+
:param pulumi.Input[_builtins.bool] enabled: Specifies whether automatic tidy is enabled or not.
|
|
1102
|
+
:param pulumi.Input[_builtins.str] interval_duration: Interval at which to run an auto-tidy operation. This is the time
|
|
1104
1103
|
between tidy invocations (after one finishes to the start of the next).
|
|
1105
|
-
:param pulumi.Input[
|
|
1104
|
+
:param pulumi.Input[_builtins.str] issuer_safety_buffer: The amount of extra time that must have passed beyond issuer's
|
|
1106
1105
|
expiration before it is removed from the backend storage.
|
|
1107
|
-
:param pulumi.Input[
|
|
1106
|
+
:param pulumi.Input[_builtins.bool] maintain_stored_certificate_counts: This configures whether stored certificate are
|
|
1108
1107
|
counted upon initialization of the backend, and whether during normal operation, a running count
|
|
1109
1108
|
of certificates stored is maintained.
|
|
1110
|
-
:param pulumi.Input[
|
|
1109
|
+
:param pulumi.Input[_builtins.str] max_startup_backoff_duration: The maximum amount of time auto-tidy will be delayed
|
|
1111
1110
|
after startup.
|
|
1112
|
-
:param pulumi.Input[
|
|
1111
|
+
:param pulumi.Input[_builtins.str] min_startup_backoff_duration: The minimum amount of time auto-tidy will be delayed
|
|
1113
1112
|
after startup.
|
|
1114
|
-
:param pulumi.Input[
|
|
1113
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace of the target resource.
|
|
1115
1114
|
The value should not contain leading or trailing forward slashes.
|
|
1116
1115
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
1117
1116
|
*Available only for Vault Enterprise*.
|
|
1118
|
-
:param pulumi.Input[
|
|
1119
|
-
:param pulumi.Input[
|
|
1117
|
+
:param pulumi.Input[_builtins.str] pause_duration: The amount of time to wait between processing certificates.
|
|
1118
|
+
:param pulumi.Input[_builtins.bool] publish_stored_certificate_count_metrics: This configures whether the stored
|
|
1120
1119
|
certificate count is published to the metrics consumer.
|
|
1121
|
-
:param pulumi.Input[
|
|
1120
|
+
:param pulumi.Input[_builtins.str] revocation_queue_safety_buffer: The amount of time that must pass from the
|
|
1122
1121
|
cross-cluster revocation request being initiated to when it will be slated for removal.
|
|
1123
|
-
:param pulumi.Input[
|
|
1122
|
+
:param pulumi.Input[_builtins.str] safety_buffer: The amount of extra time that must have passed beyond certificate
|
|
1124
1123
|
expiration before it is removed from the backend storage and/or revocation list.
|
|
1125
|
-
:param pulumi.Input[
|
|
1126
|
-
:param pulumi.Input[
|
|
1127
|
-
:param pulumi.Input[
|
|
1128
|
-
:param pulumi.Input[
|
|
1129
|
-
:param pulumi.Input[
|
|
1124
|
+
:param pulumi.Input[_builtins.bool] tidy_acme: Set to true to enable tidying ACME accounts, orders and authorizations.
|
|
1125
|
+
:param pulumi.Input[_builtins.bool] tidy_cert_metadata: Set to true to enable tidying up certificate metadata.
|
|
1126
|
+
:param pulumi.Input[_builtins.bool] tidy_cert_store: Set to true to enable tidying up the certificate store
|
|
1127
|
+
:param pulumi.Input[_builtins.bool] tidy_cmpv2_nonce_store: Set to true to enable tidying up the CMPv2 nonce store.
|
|
1128
|
+
:param pulumi.Input[_builtins.bool] tidy_cross_cluster_revoked_certs: Set to true to enable tidying up the cross-cluster
|
|
1130
1129
|
revoked certificate store.
|
|
1131
|
-
:param pulumi.Input[
|
|
1130
|
+
:param pulumi.Input[_builtins.bool] tidy_expired_issuers: Set to true to automatically remove expired issuers past the
|
|
1132
1131
|
`issuer_safety_buffer`. No keys will be removed as part of this operation.
|
|
1133
|
-
:param pulumi.Input[
|
|
1132
|
+
:param pulumi.Input[_builtins.bool] tidy_move_legacy_ca_bundle: Set to true to move the legacy `ca_bundle` from
|
|
1134
1133
|
`/config/ca_bundle` to `/config/ca_bundle.bak`.
|
|
1135
|
-
:param pulumi.Input[
|
|
1134
|
+
:param pulumi.Input[_builtins.bool] tidy_revocation_queue: Set to true to remove stale revocation queue entries that
|
|
1136
1135
|
haven't been confirmed by any active cluster.
|
|
1137
|
-
:param pulumi.Input[
|
|
1136
|
+
:param pulumi.Input[_builtins.bool] tidy_revoked_cert_issuer_associations: Set to true to validate issuer associations
|
|
1138
1137
|
on revocation entries. This helps increase the performance of CRL building and OCSP responses.
|
|
1139
|
-
:param pulumi.Input[
|
|
1138
|
+
:param pulumi.Input[_builtins.bool] tidy_revoked_certs: Set to true to remove all invalid and expired certificates from
|
|
1140
1139
|
storage. A revoked storage entry is considered invalid if the entry is empty, or the value within
|
|
1141
1140
|
the entry is empty. If a certificate is removed due to expiry, the entry will also be removed from
|
|
1142
1141
|
the CRL, and the CRL will be rotated.
|
|
@@ -1170,53 +1169,53 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
1170
1169
|
__props__.__dict__["tidy_revoked_certs"] = tidy_revoked_certs
|
|
1171
1170
|
return BackendConfigAutoTidy(resource_name, opts=opts, __props__=__props__)
|
|
1172
1171
|
|
|
1173
|
-
@property
|
|
1172
|
+
@_builtins.property
|
|
1174
1173
|
@pulumi.getter(name="acmeAccountSafetyBuffer")
|
|
1175
|
-
def acme_account_safety_buffer(self) -> pulumi.Output[
|
|
1174
|
+
def acme_account_safety_buffer(self) -> pulumi.Output[_builtins.str]:
|
|
1176
1175
|
"""
|
|
1177
1176
|
The amount of time that must pass after creation that an account with no orders is marked revoked, and the amount of
|
|
1178
1177
|
time after being marked revoked or deactivated.
|
|
1179
1178
|
"""
|
|
1180
1179
|
return pulumi.get(self, "acme_account_safety_buffer")
|
|
1181
1180
|
|
|
1182
|
-
@property
|
|
1181
|
+
@_builtins.property
|
|
1183
1182
|
@pulumi.getter
|
|
1184
|
-
def backend(self) -> pulumi.Output[
|
|
1183
|
+
def backend(self) -> pulumi.Output[_builtins.str]:
|
|
1185
1184
|
"""
|
|
1186
1185
|
The path to the PKI secret backend to
|
|
1187
1186
|
read the configuration from, with no leading or trailing `/`s.
|
|
1188
1187
|
"""
|
|
1189
1188
|
return pulumi.get(self, "backend")
|
|
1190
1189
|
|
|
1191
|
-
@property
|
|
1190
|
+
@_builtins.property
|
|
1192
1191
|
@pulumi.getter
|
|
1193
|
-
def enabled(self) -> pulumi.Output[
|
|
1192
|
+
def enabled(self) -> pulumi.Output[_builtins.bool]:
|
|
1194
1193
|
"""
|
|
1195
1194
|
Specifies whether automatic tidy is enabled or not.
|
|
1196
1195
|
"""
|
|
1197
1196
|
return pulumi.get(self, "enabled")
|
|
1198
1197
|
|
|
1199
|
-
@property
|
|
1198
|
+
@_builtins.property
|
|
1200
1199
|
@pulumi.getter(name="intervalDuration")
|
|
1201
|
-
def interval_duration(self) -> pulumi.Output[
|
|
1200
|
+
def interval_duration(self) -> pulumi.Output[_builtins.str]:
|
|
1202
1201
|
"""
|
|
1203
1202
|
Interval at which to run an auto-tidy operation. This is the time
|
|
1204
1203
|
between tidy invocations (after one finishes to the start of the next).
|
|
1205
1204
|
"""
|
|
1206
1205
|
return pulumi.get(self, "interval_duration")
|
|
1207
1206
|
|
|
1208
|
-
@property
|
|
1207
|
+
@_builtins.property
|
|
1209
1208
|
@pulumi.getter(name="issuerSafetyBuffer")
|
|
1210
|
-
def issuer_safety_buffer(self) -> pulumi.Output[
|
|
1209
|
+
def issuer_safety_buffer(self) -> pulumi.Output[_builtins.str]:
|
|
1211
1210
|
"""
|
|
1212
1211
|
The amount of extra time that must have passed beyond issuer's
|
|
1213
1212
|
expiration before it is removed from the backend storage.
|
|
1214
1213
|
"""
|
|
1215
1214
|
return pulumi.get(self, "issuer_safety_buffer")
|
|
1216
1215
|
|
|
1217
|
-
@property
|
|
1216
|
+
@_builtins.property
|
|
1218
1217
|
@pulumi.getter(name="maintainStoredCertificateCounts")
|
|
1219
|
-
def maintain_stored_certificate_counts(self) -> pulumi.Output[Optional[
|
|
1218
|
+
def maintain_stored_certificate_counts(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1220
1219
|
"""
|
|
1221
1220
|
This configures whether stored certificate are
|
|
1222
1221
|
counted upon initialization of the backend, and whether during normal operation, a running count
|
|
@@ -1224,27 +1223,27 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
1224
1223
|
"""
|
|
1225
1224
|
return pulumi.get(self, "maintain_stored_certificate_counts")
|
|
1226
1225
|
|
|
1227
|
-
@property
|
|
1226
|
+
@_builtins.property
|
|
1228
1227
|
@pulumi.getter(name="maxStartupBackoffDuration")
|
|
1229
|
-
def max_startup_backoff_duration(self) -> pulumi.Output[
|
|
1228
|
+
def max_startup_backoff_duration(self) -> pulumi.Output[_builtins.str]:
|
|
1230
1229
|
"""
|
|
1231
1230
|
The maximum amount of time auto-tidy will be delayed
|
|
1232
1231
|
after startup.
|
|
1233
1232
|
"""
|
|
1234
1233
|
return pulumi.get(self, "max_startup_backoff_duration")
|
|
1235
1234
|
|
|
1236
|
-
@property
|
|
1235
|
+
@_builtins.property
|
|
1237
1236
|
@pulumi.getter(name="minStartupBackoffDuration")
|
|
1238
|
-
def min_startup_backoff_duration(self) -> pulumi.Output[
|
|
1237
|
+
def min_startup_backoff_duration(self) -> pulumi.Output[_builtins.str]:
|
|
1239
1238
|
"""
|
|
1240
1239
|
The minimum amount of time auto-tidy will be delayed
|
|
1241
1240
|
after startup.
|
|
1242
1241
|
"""
|
|
1243
1242
|
return pulumi.get(self, "min_startup_backoff_duration")
|
|
1244
1243
|
|
|
1245
|
-
@property
|
|
1244
|
+
@_builtins.property
|
|
1246
1245
|
@pulumi.getter
|
|
1247
|
-
def namespace(self) -> pulumi.Output[Optional[
|
|
1246
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1248
1247
|
"""
|
|
1249
1248
|
The namespace of the target resource.
|
|
1250
1249
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1253,121 +1252,121 @@ class BackendConfigAutoTidy(pulumi.CustomResource):
|
|
|
1253
1252
|
"""
|
|
1254
1253
|
return pulumi.get(self, "namespace")
|
|
1255
1254
|
|
|
1256
|
-
@property
|
|
1255
|
+
@_builtins.property
|
|
1257
1256
|
@pulumi.getter(name="pauseDuration")
|
|
1258
|
-
def pause_duration(self) -> pulumi.Output[
|
|
1257
|
+
def pause_duration(self) -> pulumi.Output[_builtins.str]:
|
|
1259
1258
|
"""
|
|
1260
1259
|
The amount of time to wait between processing certificates.
|
|
1261
1260
|
"""
|
|
1262
1261
|
return pulumi.get(self, "pause_duration")
|
|
1263
1262
|
|
|
1264
|
-
@property
|
|
1263
|
+
@_builtins.property
|
|
1265
1264
|
@pulumi.getter(name="publishStoredCertificateCountMetrics")
|
|
1266
|
-
def publish_stored_certificate_count_metrics(self) -> pulumi.Output[Optional[
|
|
1265
|
+
def publish_stored_certificate_count_metrics(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1267
1266
|
"""
|
|
1268
1267
|
This configures whether the stored
|
|
1269
1268
|
certificate count is published to the metrics consumer.
|
|
1270
1269
|
"""
|
|
1271
1270
|
return pulumi.get(self, "publish_stored_certificate_count_metrics")
|
|
1272
1271
|
|
|
1273
|
-
@property
|
|
1272
|
+
@_builtins.property
|
|
1274
1273
|
@pulumi.getter(name="revocationQueueSafetyBuffer")
|
|
1275
|
-
def revocation_queue_safety_buffer(self) -> pulumi.Output[
|
|
1274
|
+
def revocation_queue_safety_buffer(self) -> pulumi.Output[_builtins.str]:
|
|
1276
1275
|
"""
|
|
1277
1276
|
The amount of time that must pass from the
|
|
1278
1277
|
cross-cluster revocation request being initiated to when it will be slated for removal.
|
|
1279
1278
|
"""
|
|
1280
1279
|
return pulumi.get(self, "revocation_queue_safety_buffer")
|
|
1281
1280
|
|
|
1282
|
-
@property
|
|
1281
|
+
@_builtins.property
|
|
1283
1282
|
@pulumi.getter(name="safetyBuffer")
|
|
1284
|
-
def safety_buffer(self) -> pulumi.Output[
|
|
1283
|
+
def safety_buffer(self) -> pulumi.Output[_builtins.str]:
|
|
1285
1284
|
"""
|
|
1286
1285
|
The amount of extra time that must have passed beyond certificate
|
|
1287
1286
|
expiration before it is removed from the backend storage and/or revocation list.
|
|
1288
1287
|
"""
|
|
1289
1288
|
return pulumi.get(self, "safety_buffer")
|
|
1290
1289
|
|
|
1291
|
-
@property
|
|
1290
|
+
@_builtins.property
|
|
1292
1291
|
@pulumi.getter(name="tidyAcme")
|
|
1293
|
-
def tidy_acme(self) -> pulumi.Output[Optional[
|
|
1292
|
+
def tidy_acme(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1294
1293
|
"""
|
|
1295
1294
|
Set to true to enable tidying ACME accounts, orders and authorizations.
|
|
1296
1295
|
"""
|
|
1297
1296
|
return pulumi.get(self, "tidy_acme")
|
|
1298
1297
|
|
|
1299
|
-
@property
|
|
1298
|
+
@_builtins.property
|
|
1300
1299
|
@pulumi.getter(name="tidyCertMetadata")
|
|
1301
|
-
def tidy_cert_metadata(self) -> pulumi.Output[Optional[
|
|
1300
|
+
def tidy_cert_metadata(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1302
1301
|
"""
|
|
1303
1302
|
Set to true to enable tidying up certificate metadata.
|
|
1304
1303
|
"""
|
|
1305
1304
|
return pulumi.get(self, "tidy_cert_metadata")
|
|
1306
1305
|
|
|
1307
|
-
@property
|
|
1306
|
+
@_builtins.property
|
|
1308
1307
|
@pulumi.getter(name="tidyCertStore")
|
|
1309
|
-
def tidy_cert_store(self) -> pulumi.Output[Optional[
|
|
1308
|
+
def tidy_cert_store(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1310
1309
|
"""
|
|
1311
1310
|
Set to true to enable tidying up the certificate store
|
|
1312
1311
|
"""
|
|
1313
1312
|
return pulumi.get(self, "tidy_cert_store")
|
|
1314
1313
|
|
|
1315
|
-
@property
|
|
1314
|
+
@_builtins.property
|
|
1316
1315
|
@pulumi.getter(name="tidyCmpv2NonceStore")
|
|
1317
|
-
def tidy_cmpv2_nonce_store(self) -> pulumi.Output[Optional[
|
|
1316
|
+
def tidy_cmpv2_nonce_store(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1318
1317
|
"""
|
|
1319
1318
|
Set to true to enable tidying up the CMPv2 nonce store.
|
|
1320
1319
|
"""
|
|
1321
1320
|
return pulumi.get(self, "tidy_cmpv2_nonce_store")
|
|
1322
1321
|
|
|
1323
|
-
@property
|
|
1322
|
+
@_builtins.property
|
|
1324
1323
|
@pulumi.getter(name="tidyCrossClusterRevokedCerts")
|
|
1325
|
-
def tidy_cross_cluster_revoked_certs(self) -> pulumi.Output[Optional[
|
|
1324
|
+
def tidy_cross_cluster_revoked_certs(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1326
1325
|
"""
|
|
1327
1326
|
Set to true to enable tidying up the cross-cluster
|
|
1328
1327
|
revoked certificate store.
|
|
1329
1328
|
"""
|
|
1330
1329
|
return pulumi.get(self, "tidy_cross_cluster_revoked_certs")
|
|
1331
1330
|
|
|
1332
|
-
@property
|
|
1331
|
+
@_builtins.property
|
|
1333
1332
|
@pulumi.getter(name="tidyExpiredIssuers")
|
|
1334
|
-
def tidy_expired_issuers(self) -> pulumi.Output[Optional[
|
|
1333
|
+
def tidy_expired_issuers(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1335
1334
|
"""
|
|
1336
1335
|
Set to true to automatically remove expired issuers past the
|
|
1337
1336
|
`issuer_safety_buffer`. No keys will be removed as part of this operation.
|
|
1338
1337
|
"""
|
|
1339
1338
|
return pulumi.get(self, "tidy_expired_issuers")
|
|
1340
1339
|
|
|
1341
|
-
@property
|
|
1340
|
+
@_builtins.property
|
|
1342
1341
|
@pulumi.getter(name="tidyMoveLegacyCaBundle")
|
|
1343
|
-
def tidy_move_legacy_ca_bundle(self) -> pulumi.Output[Optional[
|
|
1342
|
+
def tidy_move_legacy_ca_bundle(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1344
1343
|
"""
|
|
1345
1344
|
Set to true to move the legacy `ca_bundle` from
|
|
1346
1345
|
`/config/ca_bundle` to `/config/ca_bundle.bak`.
|
|
1347
1346
|
"""
|
|
1348
1347
|
return pulumi.get(self, "tidy_move_legacy_ca_bundle")
|
|
1349
1348
|
|
|
1350
|
-
@property
|
|
1349
|
+
@_builtins.property
|
|
1351
1350
|
@pulumi.getter(name="tidyRevocationQueue")
|
|
1352
|
-
def tidy_revocation_queue(self) -> pulumi.Output[Optional[
|
|
1351
|
+
def tidy_revocation_queue(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1353
1352
|
"""
|
|
1354
1353
|
Set to true to remove stale revocation queue entries that
|
|
1355
1354
|
haven't been confirmed by any active cluster.
|
|
1356
1355
|
"""
|
|
1357
1356
|
return pulumi.get(self, "tidy_revocation_queue")
|
|
1358
1357
|
|
|
1359
|
-
@property
|
|
1358
|
+
@_builtins.property
|
|
1360
1359
|
@pulumi.getter(name="tidyRevokedCertIssuerAssociations")
|
|
1361
|
-
def tidy_revoked_cert_issuer_associations(self) -> pulumi.Output[Optional[
|
|
1360
|
+
def tidy_revoked_cert_issuer_associations(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1362
1361
|
"""
|
|
1363
1362
|
Set to true to validate issuer associations
|
|
1364
1363
|
on revocation entries. This helps increase the performance of CRL building and OCSP responses.
|
|
1365
1364
|
"""
|
|
1366
1365
|
return pulumi.get(self, "tidy_revoked_cert_issuer_associations")
|
|
1367
1366
|
|
|
1368
|
-
@property
|
|
1367
|
+
@_builtins.property
|
|
1369
1368
|
@pulumi.getter(name="tidyRevokedCerts")
|
|
1370
|
-
def tidy_revoked_certs(self) -> pulumi.Output[Optional[
|
|
1369
|
+
def tidy_revoked_certs(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1371
1370
|
"""
|
|
1372
1371
|
Set to true to remove all invalid and expired certificates from
|
|
1373
1372
|
storage. A revoked storage entry is considered invalid if the entry is empty, or the value within
|