pulumi-vault 7.2.0a1753339763__py3-none-any.whl → 7.2.0a1753398491__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -1
- pulumi_vault/_inputs.py +672 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +409 -410
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +273 -274
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +239 -240
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +379 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +299 -300
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +353 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +222 -223
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +384 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +673 -674
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +333 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +256 -257
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +81 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +137 -138
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +29 -30
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +207 -208
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +120 -121
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +138 -139
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +336 -337
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0a1753398491.dist-info/RECORD +268 -0
- pulumi_vault-7.2.0a1753339763.dist-info/RECORD +0 -268
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/top_level.txt +0 -0
@@ -2,8 +2,7 @@
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
4
4
|
|
5
|
-
import builtins
|
6
|
-
import copy
|
5
|
+
import builtins as _builtins
|
7
6
|
import warnings
|
8
7
|
import sys
|
9
8
|
import pulumi
|
@@ -20,38 +19,38 @@ __all__ = ['SyncAzureDestinationArgs', 'SyncAzureDestination']
|
|
20
19
|
@pulumi.input_type
|
21
20
|
class SyncAzureDestinationArgs:
|
22
21
|
def __init__(__self__, *,
|
23
|
-
client_id: Optional[pulumi.Input[
|
24
|
-
client_secret: Optional[pulumi.Input[
|
25
|
-
cloud: Optional[pulumi.Input[
|
26
|
-
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
27
|
-
granularity: Optional[pulumi.Input[
|
28
|
-
key_vault_uri: Optional[pulumi.Input[
|
29
|
-
name: Optional[pulumi.Input[
|
30
|
-
namespace: Optional[pulumi.Input[
|
31
|
-
secret_name_template: Optional[pulumi.Input[
|
32
|
-
tenant_id: Optional[pulumi.Input[
|
22
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
23
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
24
|
+
cloud: Optional[pulumi.Input[_builtins.str]] = None,
|
25
|
+
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
26
|
+
granularity: Optional[pulumi.Input[_builtins.str]] = None,
|
27
|
+
key_vault_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
28
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
29
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
30
|
+
secret_name_template: Optional[pulumi.Input[_builtins.str]] = None,
|
31
|
+
tenant_id: Optional[pulumi.Input[_builtins.str]] = None):
|
33
32
|
"""
|
34
33
|
The set of arguments for constructing a SyncAzureDestination resource.
|
35
|
-
:param pulumi.Input[
|
34
|
+
:param pulumi.Input[_builtins.str] client_id: Client ID of an Azure app registration.
|
36
35
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_ID` environment
|
37
36
|
variable.
|
38
|
-
:param pulumi.Input[
|
37
|
+
:param pulumi.Input[_builtins.str] client_secret: Client Secret of an Azure app registration.
|
39
38
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_SECRET` environment
|
40
39
|
variable.
|
41
|
-
:param pulumi.Input[
|
42
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[
|
43
|
-
:param pulumi.Input[
|
40
|
+
:param pulumi.Input[_builtins.str] cloud: Specifies a cloud for the client. The default is Azure Public Cloud.
|
41
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] custom_tags: Custom tags to set on the secret managed at the destination.
|
42
|
+
:param pulumi.Input[_builtins.str] granularity: Determines what level of information is synced as a distinct resource
|
44
43
|
at the destination. Supports `secret-path` and `secret-key`.
|
45
|
-
:param pulumi.Input[
|
44
|
+
:param pulumi.Input[_builtins.str] key_vault_uri: URI of an existing Azure Key Vault instance.
|
46
45
|
Can be omitted and directly provided to Vault using the `KEY_VAULT_URI` environment
|
47
46
|
variable.
|
48
|
-
:param pulumi.Input[
|
49
|
-
:param pulumi.Input[
|
47
|
+
:param pulumi.Input[_builtins.str] name: Unique name of the Azure destination.
|
48
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
50
49
|
The value should not contain leading or trailing forward slashes.
|
51
50
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
52
|
-
:param pulumi.Input[
|
51
|
+
:param pulumi.Input[_builtins.str] secret_name_template: Template describing how to generate external secret names.
|
53
52
|
Supports a subset of the Go Template syntax.
|
54
|
-
:param pulumi.Input[
|
53
|
+
:param pulumi.Input[_builtins.str] tenant_id: ID of the target Azure tenant.
|
55
54
|
Can be omitted and directly provided to Vault using the `AZURE_TENANT_ID` environment
|
56
55
|
variable.
|
57
56
|
"""
|
@@ -76,9 +75,9 @@ class SyncAzureDestinationArgs:
|
|
76
75
|
if tenant_id is not None:
|
77
76
|
pulumi.set(__self__, "tenant_id", tenant_id)
|
78
77
|
|
79
|
-
@property
|
78
|
+
@_builtins.property
|
80
79
|
@pulumi.getter(name="clientId")
|
81
|
-
def client_id(self) -> Optional[pulumi.Input[
|
80
|
+
def client_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
82
81
|
"""
|
83
82
|
Client ID of an Azure app registration.
|
84
83
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_ID` environment
|
@@ -87,12 +86,12 @@ class SyncAzureDestinationArgs:
|
|
87
86
|
return pulumi.get(self, "client_id")
|
88
87
|
|
89
88
|
@client_id.setter
|
90
|
-
def client_id(self, value: Optional[pulumi.Input[
|
89
|
+
def client_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
91
90
|
pulumi.set(self, "client_id", value)
|
92
91
|
|
93
|
-
@property
|
92
|
+
@_builtins.property
|
94
93
|
@pulumi.getter(name="clientSecret")
|
95
|
-
def client_secret(self) -> Optional[pulumi.Input[
|
94
|
+
def client_secret(self) -> Optional[pulumi.Input[_builtins.str]]:
|
96
95
|
"""
|
97
96
|
Client Secret of an Azure app registration.
|
98
97
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_SECRET` environment
|
@@ -101,36 +100,36 @@ class SyncAzureDestinationArgs:
|
|
101
100
|
return pulumi.get(self, "client_secret")
|
102
101
|
|
103
102
|
@client_secret.setter
|
104
|
-
def client_secret(self, value: Optional[pulumi.Input[
|
103
|
+
def client_secret(self, value: Optional[pulumi.Input[_builtins.str]]):
|
105
104
|
pulumi.set(self, "client_secret", value)
|
106
105
|
|
107
|
-
@property
|
106
|
+
@_builtins.property
|
108
107
|
@pulumi.getter
|
109
|
-
def cloud(self) -> Optional[pulumi.Input[
|
108
|
+
def cloud(self) -> Optional[pulumi.Input[_builtins.str]]:
|
110
109
|
"""
|
111
110
|
Specifies a cloud for the client. The default is Azure Public Cloud.
|
112
111
|
"""
|
113
112
|
return pulumi.get(self, "cloud")
|
114
113
|
|
115
114
|
@cloud.setter
|
116
|
-
def cloud(self, value: Optional[pulumi.Input[
|
115
|
+
def cloud(self, value: Optional[pulumi.Input[_builtins.str]]):
|
117
116
|
pulumi.set(self, "cloud", value)
|
118
117
|
|
119
|
-
@property
|
118
|
+
@_builtins.property
|
120
119
|
@pulumi.getter(name="customTags")
|
121
|
-
def custom_tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
120
|
+
def custom_tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
|
122
121
|
"""
|
123
122
|
Custom tags to set on the secret managed at the destination.
|
124
123
|
"""
|
125
124
|
return pulumi.get(self, "custom_tags")
|
126
125
|
|
127
126
|
@custom_tags.setter
|
128
|
-
def custom_tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
127
|
+
def custom_tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
|
129
128
|
pulumi.set(self, "custom_tags", value)
|
130
129
|
|
131
|
-
@property
|
130
|
+
@_builtins.property
|
132
131
|
@pulumi.getter
|
133
|
-
def granularity(self) -> Optional[pulumi.Input[
|
132
|
+
def granularity(self) -> Optional[pulumi.Input[_builtins.str]]:
|
134
133
|
"""
|
135
134
|
Determines what level of information is synced as a distinct resource
|
136
135
|
at the destination. Supports `secret-path` and `secret-key`.
|
@@ -138,12 +137,12 @@ class SyncAzureDestinationArgs:
|
|
138
137
|
return pulumi.get(self, "granularity")
|
139
138
|
|
140
139
|
@granularity.setter
|
141
|
-
def granularity(self, value: Optional[pulumi.Input[
|
140
|
+
def granularity(self, value: Optional[pulumi.Input[_builtins.str]]):
|
142
141
|
pulumi.set(self, "granularity", value)
|
143
142
|
|
144
|
-
@property
|
143
|
+
@_builtins.property
|
145
144
|
@pulumi.getter(name="keyVaultUri")
|
146
|
-
def key_vault_uri(self) -> Optional[pulumi.Input[
|
145
|
+
def key_vault_uri(self) -> Optional[pulumi.Input[_builtins.str]]:
|
147
146
|
"""
|
148
147
|
URI of an existing Azure Key Vault instance.
|
149
148
|
Can be omitted and directly provided to Vault using the `KEY_VAULT_URI` environment
|
@@ -152,24 +151,24 @@ class SyncAzureDestinationArgs:
|
|
152
151
|
return pulumi.get(self, "key_vault_uri")
|
153
152
|
|
154
153
|
@key_vault_uri.setter
|
155
|
-
def key_vault_uri(self, value: Optional[pulumi.Input[
|
154
|
+
def key_vault_uri(self, value: Optional[pulumi.Input[_builtins.str]]):
|
156
155
|
pulumi.set(self, "key_vault_uri", value)
|
157
156
|
|
158
|
-
@property
|
157
|
+
@_builtins.property
|
159
158
|
@pulumi.getter
|
160
|
-
def name(self) -> Optional[pulumi.Input[
|
159
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
161
160
|
"""
|
162
161
|
Unique name of the Azure destination.
|
163
162
|
"""
|
164
163
|
return pulumi.get(self, "name")
|
165
164
|
|
166
165
|
@name.setter
|
167
|
-
def name(self, value: Optional[pulumi.Input[
|
166
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
168
167
|
pulumi.set(self, "name", value)
|
169
168
|
|
170
|
-
@property
|
169
|
+
@_builtins.property
|
171
170
|
@pulumi.getter
|
172
|
-
def namespace(self) -> Optional[pulumi.Input[
|
171
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
173
172
|
"""
|
174
173
|
The namespace to provision the resource in.
|
175
174
|
The value should not contain leading or trailing forward slashes.
|
@@ -178,12 +177,12 @@ class SyncAzureDestinationArgs:
|
|
178
177
|
return pulumi.get(self, "namespace")
|
179
178
|
|
180
179
|
@namespace.setter
|
181
|
-
def namespace(self, value: Optional[pulumi.Input[
|
180
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
182
181
|
pulumi.set(self, "namespace", value)
|
183
182
|
|
184
|
-
@property
|
183
|
+
@_builtins.property
|
185
184
|
@pulumi.getter(name="secretNameTemplate")
|
186
|
-
def secret_name_template(self) -> Optional[pulumi.Input[
|
185
|
+
def secret_name_template(self) -> Optional[pulumi.Input[_builtins.str]]:
|
187
186
|
"""
|
188
187
|
Template describing how to generate external secret names.
|
189
188
|
Supports a subset of the Go Template syntax.
|
@@ -191,12 +190,12 @@ class SyncAzureDestinationArgs:
|
|
191
190
|
return pulumi.get(self, "secret_name_template")
|
192
191
|
|
193
192
|
@secret_name_template.setter
|
194
|
-
def secret_name_template(self, value: Optional[pulumi.Input[
|
193
|
+
def secret_name_template(self, value: Optional[pulumi.Input[_builtins.str]]):
|
195
194
|
pulumi.set(self, "secret_name_template", value)
|
196
195
|
|
197
|
-
@property
|
196
|
+
@_builtins.property
|
198
197
|
@pulumi.getter(name="tenantId")
|
199
|
-
def tenant_id(self) -> Optional[pulumi.Input[
|
198
|
+
def tenant_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
200
199
|
"""
|
201
200
|
ID of the target Azure tenant.
|
202
201
|
Can be omitted and directly provided to Vault using the `AZURE_TENANT_ID` environment
|
@@ -205,49 +204,49 @@ class SyncAzureDestinationArgs:
|
|
205
204
|
return pulumi.get(self, "tenant_id")
|
206
205
|
|
207
206
|
@tenant_id.setter
|
208
|
-
def tenant_id(self, value: Optional[pulumi.Input[
|
207
|
+
def tenant_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
209
208
|
pulumi.set(self, "tenant_id", value)
|
210
209
|
|
211
210
|
|
212
211
|
@pulumi.input_type
|
213
212
|
class _SyncAzureDestinationState:
|
214
213
|
def __init__(__self__, *,
|
215
|
-
client_id: Optional[pulumi.Input[
|
216
|
-
client_secret: Optional[pulumi.Input[
|
217
|
-
cloud: Optional[pulumi.Input[
|
218
|
-
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
219
|
-
granularity: Optional[pulumi.Input[
|
220
|
-
key_vault_uri: Optional[pulumi.Input[
|
221
|
-
name: Optional[pulumi.Input[
|
222
|
-
namespace: Optional[pulumi.Input[
|
223
|
-
secret_name_template: Optional[pulumi.Input[
|
224
|
-
tenant_id: Optional[pulumi.Input[
|
225
|
-
type: Optional[pulumi.Input[
|
214
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
215
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
216
|
+
cloud: Optional[pulumi.Input[_builtins.str]] = None,
|
217
|
+
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
218
|
+
granularity: Optional[pulumi.Input[_builtins.str]] = None,
|
219
|
+
key_vault_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
220
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
221
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
222
|
+
secret_name_template: Optional[pulumi.Input[_builtins.str]] = None,
|
223
|
+
tenant_id: Optional[pulumi.Input[_builtins.str]] = None,
|
224
|
+
type: Optional[pulumi.Input[_builtins.str]] = None):
|
226
225
|
"""
|
227
226
|
Input properties used for looking up and filtering SyncAzureDestination resources.
|
228
|
-
:param pulumi.Input[
|
227
|
+
:param pulumi.Input[_builtins.str] client_id: Client ID of an Azure app registration.
|
229
228
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_ID` environment
|
230
229
|
variable.
|
231
|
-
:param pulumi.Input[
|
230
|
+
:param pulumi.Input[_builtins.str] client_secret: Client Secret of an Azure app registration.
|
232
231
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_SECRET` environment
|
233
232
|
variable.
|
234
|
-
:param pulumi.Input[
|
235
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[
|
236
|
-
:param pulumi.Input[
|
233
|
+
:param pulumi.Input[_builtins.str] cloud: Specifies a cloud for the client. The default is Azure Public Cloud.
|
234
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] custom_tags: Custom tags to set on the secret managed at the destination.
|
235
|
+
:param pulumi.Input[_builtins.str] granularity: Determines what level of information is synced as a distinct resource
|
237
236
|
at the destination. Supports `secret-path` and `secret-key`.
|
238
|
-
:param pulumi.Input[
|
237
|
+
:param pulumi.Input[_builtins.str] key_vault_uri: URI of an existing Azure Key Vault instance.
|
239
238
|
Can be omitted and directly provided to Vault using the `KEY_VAULT_URI` environment
|
240
239
|
variable.
|
241
|
-
:param pulumi.Input[
|
242
|
-
:param pulumi.Input[
|
240
|
+
:param pulumi.Input[_builtins.str] name: Unique name of the Azure destination.
|
241
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
243
242
|
The value should not contain leading or trailing forward slashes.
|
244
243
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
245
|
-
:param pulumi.Input[
|
244
|
+
:param pulumi.Input[_builtins.str] secret_name_template: Template describing how to generate external secret names.
|
246
245
|
Supports a subset of the Go Template syntax.
|
247
|
-
:param pulumi.Input[
|
246
|
+
:param pulumi.Input[_builtins.str] tenant_id: ID of the target Azure tenant.
|
248
247
|
Can be omitted and directly provided to Vault using the `AZURE_TENANT_ID` environment
|
249
248
|
variable.
|
250
|
-
:param pulumi.Input[
|
249
|
+
:param pulumi.Input[_builtins.str] type: The type of the secrets destination (`azure-kv`).
|
251
250
|
"""
|
252
251
|
if client_id is not None:
|
253
252
|
pulumi.set(__self__, "client_id", client_id)
|
@@ -272,9 +271,9 @@ class _SyncAzureDestinationState:
|
|
272
271
|
if type is not None:
|
273
272
|
pulumi.set(__self__, "type", type)
|
274
273
|
|
275
|
-
@property
|
274
|
+
@_builtins.property
|
276
275
|
@pulumi.getter(name="clientId")
|
277
|
-
def client_id(self) -> Optional[pulumi.Input[
|
276
|
+
def client_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
278
277
|
"""
|
279
278
|
Client ID of an Azure app registration.
|
280
279
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_ID` environment
|
@@ -283,12 +282,12 @@ class _SyncAzureDestinationState:
|
|
283
282
|
return pulumi.get(self, "client_id")
|
284
283
|
|
285
284
|
@client_id.setter
|
286
|
-
def client_id(self, value: Optional[pulumi.Input[
|
285
|
+
def client_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
287
286
|
pulumi.set(self, "client_id", value)
|
288
287
|
|
289
|
-
@property
|
288
|
+
@_builtins.property
|
290
289
|
@pulumi.getter(name="clientSecret")
|
291
|
-
def client_secret(self) -> Optional[pulumi.Input[
|
290
|
+
def client_secret(self) -> Optional[pulumi.Input[_builtins.str]]:
|
292
291
|
"""
|
293
292
|
Client Secret of an Azure app registration.
|
294
293
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_SECRET` environment
|
@@ -297,36 +296,36 @@ class _SyncAzureDestinationState:
|
|
297
296
|
return pulumi.get(self, "client_secret")
|
298
297
|
|
299
298
|
@client_secret.setter
|
300
|
-
def client_secret(self, value: Optional[pulumi.Input[
|
299
|
+
def client_secret(self, value: Optional[pulumi.Input[_builtins.str]]):
|
301
300
|
pulumi.set(self, "client_secret", value)
|
302
301
|
|
303
|
-
@property
|
302
|
+
@_builtins.property
|
304
303
|
@pulumi.getter
|
305
|
-
def cloud(self) -> Optional[pulumi.Input[
|
304
|
+
def cloud(self) -> Optional[pulumi.Input[_builtins.str]]:
|
306
305
|
"""
|
307
306
|
Specifies a cloud for the client. The default is Azure Public Cloud.
|
308
307
|
"""
|
309
308
|
return pulumi.get(self, "cloud")
|
310
309
|
|
311
310
|
@cloud.setter
|
312
|
-
def cloud(self, value: Optional[pulumi.Input[
|
311
|
+
def cloud(self, value: Optional[pulumi.Input[_builtins.str]]):
|
313
312
|
pulumi.set(self, "cloud", value)
|
314
313
|
|
315
|
-
@property
|
314
|
+
@_builtins.property
|
316
315
|
@pulumi.getter(name="customTags")
|
317
|
-
def custom_tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
316
|
+
def custom_tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
|
318
317
|
"""
|
319
318
|
Custom tags to set on the secret managed at the destination.
|
320
319
|
"""
|
321
320
|
return pulumi.get(self, "custom_tags")
|
322
321
|
|
323
322
|
@custom_tags.setter
|
324
|
-
def custom_tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
323
|
+
def custom_tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
|
325
324
|
pulumi.set(self, "custom_tags", value)
|
326
325
|
|
327
|
-
@property
|
326
|
+
@_builtins.property
|
328
327
|
@pulumi.getter
|
329
|
-
def granularity(self) -> Optional[pulumi.Input[
|
328
|
+
def granularity(self) -> Optional[pulumi.Input[_builtins.str]]:
|
330
329
|
"""
|
331
330
|
Determines what level of information is synced as a distinct resource
|
332
331
|
at the destination. Supports `secret-path` and `secret-key`.
|
@@ -334,12 +333,12 @@ class _SyncAzureDestinationState:
|
|
334
333
|
return pulumi.get(self, "granularity")
|
335
334
|
|
336
335
|
@granularity.setter
|
337
|
-
def granularity(self, value: Optional[pulumi.Input[
|
336
|
+
def granularity(self, value: Optional[pulumi.Input[_builtins.str]]):
|
338
337
|
pulumi.set(self, "granularity", value)
|
339
338
|
|
340
|
-
@property
|
339
|
+
@_builtins.property
|
341
340
|
@pulumi.getter(name="keyVaultUri")
|
342
|
-
def key_vault_uri(self) -> Optional[pulumi.Input[
|
341
|
+
def key_vault_uri(self) -> Optional[pulumi.Input[_builtins.str]]:
|
343
342
|
"""
|
344
343
|
URI of an existing Azure Key Vault instance.
|
345
344
|
Can be omitted and directly provided to Vault using the `KEY_VAULT_URI` environment
|
@@ -348,24 +347,24 @@ class _SyncAzureDestinationState:
|
|
348
347
|
return pulumi.get(self, "key_vault_uri")
|
349
348
|
|
350
349
|
@key_vault_uri.setter
|
351
|
-
def key_vault_uri(self, value: Optional[pulumi.Input[
|
350
|
+
def key_vault_uri(self, value: Optional[pulumi.Input[_builtins.str]]):
|
352
351
|
pulumi.set(self, "key_vault_uri", value)
|
353
352
|
|
354
|
-
@property
|
353
|
+
@_builtins.property
|
355
354
|
@pulumi.getter
|
356
|
-
def name(self) -> Optional[pulumi.Input[
|
355
|
+
def name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
357
356
|
"""
|
358
357
|
Unique name of the Azure destination.
|
359
358
|
"""
|
360
359
|
return pulumi.get(self, "name")
|
361
360
|
|
362
361
|
@name.setter
|
363
|
-
def name(self, value: Optional[pulumi.Input[
|
362
|
+
def name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
364
363
|
pulumi.set(self, "name", value)
|
365
364
|
|
366
|
-
@property
|
365
|
+
@_builtins.property
|
367
366
|
@pulumi.getter
|
368
|
-
def namespace(self) -> Optional[pulumi.Input[
|
367
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
369
368
|
"""
|
370
369
|
The namespace to provision the resource in.
|
371
370
|
The value should not contain leading or trailing forward slashes.
|
@@ -374,12 +373,12 @@ class _SyncAzureDestinationState:
|
|
374
373
|
return pulumi.get(self, "namespace")
|
375
374
|
|
376
375
|
@namespace.setter
|
377
|
-
def namespace(self, value: Optional[pulumi.Input[
|
376
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
378
377
|
pulumi.set(self, "namespace", value)
|
379
378
|
|
380
|
-
@property
|
379
|
+
@_builtins.property
|
381
380
|
@pulumi.getter(name="secretNameTemplate")
|
382
|
-
def secret_name_template(self) -> Optional[pulumi.Input[
|
381
|
+
def secret_name_template(self) -> Optional[pulumi.Input[_builtins.str]]:
|
383
382
|
"""
|
384
383
|
Template describing how to generate external secret names.
|
385
384
|
Supports a subset of the Go Template syntax.
|
@@ -387,12 +386,12 @@ class _SyncAzureDestinationState:
|
|
387
386
|
return pulumi.get(self, "secret_name_template")
|
388
387
|
|
389
388
|
@secret_name_template.setter
|
390
|
-
def secret_name_template(self, value: Optional[pulumi.Input[
|
389
|
+
def secret_name_template(self, value: Optional[pulumi.Input[_builtins.str]]):
|
391
390
|
pulumi.set(self, "secret_name_template", value)
|
392
391
|
|
393
|
-
@property
|
392
|
+
@_builtins.property
|
394
393
|
@pulumi.getter(name="tenantId")
|
395
|
-
def tenant_id(self) -> Optional[pulumi.Input[
|
394
|
+
def tenant_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
396
395
|
"""
|
397
396
|
ID of the target Azure tenant.
|
398
397
|
Can be omitted and directly provided to Vault using the `AZURE_TENANT_ID` environment
|
@@ -401,19 +400,19 @@ class _SyncAzureDestinationState:
|
|
401
400
|
return pulumi.get(self, "tenant_id")
|
402
401
|
|
403
402
|
@tenant_id.setter
|
404
|
-
def tenant_id(self, value: Optional[pulumi.Input[
|
403
|
+
def tenant_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
405
404
|
pulumi.set(self, "tenant_id", value)
|
406
405
|
|
407
|
-
@property
|
406
|
+
@_builtins.property
|
408
407
|
@pulumi.getter
|
409
|
-
def type(self) -> Optional[pulumi.Input[
|
408
|
+
def type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
410
409
|
"""
|
411
410
|
The type of the secrets destination (`azure-kv`).
|
412
411
|
"""
|
413
412
|
return pulumi.get(self, "type")
|
414
413
|
|
415
414
|
@type.setter
|
416
|
-
def type(self, value: Optional[pulumi.Input[
|
415
|
+
def type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
417
416
|
pulumi.set(self, "type", value)
|
418
417
|
|
419
418
|
|
@@ -423,16 +422,16 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
423
422
|
def __init__(__self__,
|
424
423
|
resource_name: str,
|
425
424
|
opts: Optional[pulumi.ResourceOptions] = None,
|
426
|
-
client_id: Optional[pulumi.Input[
|
427
|
-
client_secret: Optional[pulumi.Input[
|
428
|
-
cloud: Optional[pulumi.Input[
|
429
|
-
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
430
|
-
granularity: Optional[pulumi.Input[
|
431
|
-
key_vault_uri: Optional[pulumi.Input[
|
432
|
-
name: Optional[pulumi.Input[
|
433
|
-
namespace: Optional[pulumi.Input[
|
434
|
-
secret_name_template: Optional[pulumi.Input[
|
435
|
-
tenant_id: Optional[pulumi.Input[
|
425
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
426
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
427
|
+
cloud: Optional[pulumi.Input[_builtins.str]] = None,
|
428
|
+
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
429
|
+
granularity: Optional[pulumi.Input[_builtins.str]] = None,
|
430
|
+
key_vault_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
431
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
432
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
433
|
+
secret_name_template: Optional[pulumi.Input[_builtins.str]] = None,
|
434
|
+
tenant_id: Optional[pulumi.Input[_builtins.str]] = None,
|
436
435
|
__props__=None):
|
437
436
|
"""
|
438
437
|
## Example Usage
|
@@ -463,26 +462,26 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
463
462
|
|
464
463
|
:param str resource_name: The name of the resource.
|
465
464
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
466
|
-
:param pulumi.Input[
|
465
|
+
:param pulumi.Input[_builtins.str] client_id: Client ID of an Azure app registration.
|
467
466
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_ID` environment
|
468
467
|
variable.
|
469
|
-
:param pulumi.Input[
|
468
|
+
:param pulumi.Input[_builtins.str] client_secret: Client Secret of an Azure app registration.
|
470
469
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_SECRET` environment
|
471
470
|
variable.
|
472
|
-
:param pulumi.Input[
|
473
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[
|
474
|
-
:param pulumi.Input[
|
471
|
+
:param pulumi.Input[_builtins.str] cloud: Specifies a cloud for the client. The default is Azure Public Cloud.
|
472
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] custom_tags: Custom tags to set on the secret managed at the destination.
|
473
|
+
:param pulumi.Input[_builtins.str] granularity: Determines what level of information is synced as a distinct resource
|
475
474
|
at the destination. Supports `secret-path` and `secret-key`.
|
476
|
-
:param pulumi.Input[
|
475
|
+
:param pulumi.Input[_builtins.str] key_vault_uri: URI of an existing Azure Key Vault instance.
|
477
476
|
Can be omitted and directly provided to Vault using the `KEY_VAULT_URI` environment
|
478
477
|
variable.
|
479
|
-
:param pulumi.Input[
|
480
|
-
:param pulumi.Input[
|
478
|
+
:param pulumi.Input[_builtins.str] name: Unique name of the Azure destination.
|
479
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
481
480
|
The value should not contain leading or trailing forward slashes.
|
482
481
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
483
|
-
:param pulumi.Input[
|
482
|
+
:param pulumi.Input[_builtins.str] secret_name_template: Template describing how to generate external secret names.
|
484
483
|
Supports a subset of the Go Template syntax.
|
485
|
-
:param pulumi.Input[
|
484
|
+
:param pulumi.Input[_builtins.str] tenant_id: ID of the target Azure tenant.
|
486
485
|
Can be omitted and directly provided to Vault using the `AZURE_TENANT_ID` environment
|
487
486
|
variable.
|
488
487
|
"""
|
@@ -534,16 +533,16 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
534
533
|
def _internal_init(__self__,
|
535
534
|
resource_name: str,
|
536
535
|
opts: Optional[pulumi.ResourceOptions] = None,
|
537
|
-
client_id: Optional[pulumi.Input[
|
538
|
-
client_secret: Optional[pulumi.Input[
|
539
|
-
cloud: Optional[pulumi.Input[
|
540
|
-
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
541
|
-
granularity: Optional[pulumi.Input[
|
542
|
-
key_vault_uri: Optional[pulumi.Input[
|
543
|
-
name: Optional[pulumi.Input[
|
544
|
-
namespace: Optional[pulumi.Input[
|
545
|
-
secret_name_template: Optional[pulumi.Input[
|
546
|
-
tenant_id: Optional[pulumi.Input[
|
536
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
537
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
538
|
+
cloud: Optional[pulumi.Input[_builtins.str]] = None,
|
539
|
+
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
540
|
+
granularity: Optional[pulumi.Input[_builtins.str]] = None,
|
541
|
+
key_vault_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
542
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
543
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
544
|
+
secret_name_template: Optional[pulumi.Input[_builtins.str]] = None,
|
545
|
+
tenant_id: Optional[pulumi.Input[_builtins.str]] = None,
|
547
546
|
__props__=None):
|
548
547
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
549
548
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -576,17 +575,17 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
576
575
|
def get(resource_name: str,
|
577
576
|
id: pulumi.Input[str],
|
578
577
|
opts: Optional[pulumi.ResourceOptions] = None,
|
579
|
-
client_id: Optional[pulumi.Input[
|
580
|
-
client_secret: Optional[pulumi.Input[
|
581
|
-
cloud: Optional[pulumi.Input[
|
582
|
-
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[
|
583
|
-
granularity: Optional[pulumi.Input[
|
584
|
-
key_vault_uri: Optional[pulumi.Input[
|
585
|
-
name: Optional[pulumi.Input[
|
586
|
-
namespace: Optional[pulumi.Input[
|
587
|
-
secret_name_template: Optional[pulumi.Input[
|
588
|
-
tenant_id: Optional[pulumi.Input[
|
589
|
-
type: Optional[pulumi.Input[
|
578
|
+
client_id: Optional[pulumi.Input[_builtins.str]] = None,
|
579
|
+
client_secret: Optional[pulumi.Input[_builtins.str]] = None,
|
580
|
+
cloud: Optional[pulumi.Input[_builtins.str]] = None,
|
581
|
+
custom_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
|
582
|
+
granularity: Optional[pulumi.Input[_builtins.str]] = None,
|
583
|
+
key_vault_uri: Optional[pulumi.Input[_builtins.str]] = None,
|
584
|
+
name: Optional[pulumi.Input[_builtins.str]] = None,
|
585
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
586
|
+
secret_name_template: Optional[pulumi.Input[_builtins.str]] = None,
|
587
|
+
tenant_id: Optional[pulumi.Input[_builtins.str]] = None,
|
588
|
+
type: Optional[pulumi.Input[_builtins.str]] = None) -> 'SyncAzureDestination':
|
590
589
|
"""
|
591
590
|
Get an existing SyncAzureDestination resource's state with the given name, id, and optional extra
|
592
591
|
properties used to qualify the lookup.
|
@@ -594,29 +593,29 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
594
593
|
:param str resource_name: The unique name of the resulting resource.
|
595
594
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
596
595
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
597
|
-
:param pulumi.Input[
|
596
|
+
:param pulumi.Input[_builtins.str] client_id: Client ID of an Azure app registration.
|
598
597
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_ID` environment
|
599
598
|
variable.
|
600
|
-
:param pulumi.Input[
|
599
|
+
:param pulumi.Input[_builtins.str] client_secret: Client Secret of an Azure app registration.
|
601
600
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_SECRET` environment
|
602
601
|
variable.
|
603
|
-
:param pulumi.Input[
|
604
|
-
:param pulumi.Input[Mapping[str, pulumi.Input[
|
605
|
-
:param pulumi.Input[
|
602
|
+
:param pulumi.Input[_builtins.str] cloud: Specifies a cloud for the client. The default is Azure Public Cloud.
|
603
|
+
:param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] custom_tags: Custom tags to set on the secret managed at the destination.
|
604
|
+
:param pulumi.Input[_builtins.str] granularity: Determines what level of information is synced as a distinct resource
|
606
605
|
at the destination. Supports `secret-path` and `secret-key`.
|
607
|
-
:param pulumi.Input[
|
606
|
+
:param pulumi.Input[_builtins.str] key_vault_uri: URI of an existing Azure Key Vault instance.
|
608
607
|
Can be omitted and directly provided to Vault using the `KEY_VAULT_URI` environment
|
609
608
|
variable.
|
610
|
-
:param pulumi.Input[
|
611
|
-
:param pulumi.Input[
|
609
|
+
:param pulumi.Input[_builtins.str] name: Unique name of the Azure destination.
|
610
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
612
611
|
The value should not contain leading or trailing forward slashes.
|
613
612
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
614
|
-
:param pulumi.Input[
|
613
|
+
:param pulumi.Input[_builtins.str] secret_name_template: Template describing how to generate external secret names.
|
615
614
|
Supports a subset of the Go Template syntax.
|
616
|
-
:param pulumi.Input[
|
615
|
+
:param pulumi.Input[_builtins.str] tenant_id: ID of the target Azure tenant.
|
617
616
|
Can be omitted and directly provided to Vault using the `AZURE_TENANT_ID` environment
|
618
617
|
variable.
|
619
|
-
:param pulumi.Input[
|
618
|
+
:param pulumi.Input[_builtins.str] type: The type of the secrets destination (`azure-kv`).
|
620
619
|
"""
|
621
620
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
622
621
|
|
@@ -635,9 +634,9 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
635
634
|
__props__.__dict__["type"] = type
|
636
635
|
return SyncAzureDestination(resource_name, opts=opts, __props__=__props__)
|
637
636
|
|
638
|
-
@property
|
637
|
+
@_builtins.property
|
639
638
|
@pulumi.getter(name="clientId")
|
640
|
-
def client_id(self) -> pulumi.Output[Optional[
|
639
|
+
def client_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
641
640
|
"""
|
642
641
|
Client ID of an Azure app registration.
|
643
642
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_ID` environment
|
@@ -645,9 +644,9 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
645
644
|
"""
|
646
645
|
return pulumi.get(self, "client_id")
|
647
646
|
|
648
|
-
@property
|
647
|
+
@_builtins.property
|
649
648
|
@pulumi.getter(name="clientSecret")
|
650
|
-
def client_secret(self) -> pulumi.Output[Optional[
|
649
|
+
def client_secret(self) -> pulumi.Output[Optional[_builtins.str]]:
|
651
650
|
"""
|
652
651
|
Client Secret of an Azure app registration.
|
653
652
|
Can be omitted and directly provided to Vault using the `AZURE_CLIENT_SECRET` environment
|
@@ -655,34 +654,34 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
655
654
|
"""
|
656
655
|
return pulumi.get(self, "client_secret")
|
657
656
|
|
658
|
-
@property
|
657
|
+
@_builtins.property
|
659
658
|
@pulumi.getter
|
660
|
-
def cloud(self) -> pulumi.Output[Optional[
|
659
|
+
def cloud(self) -> pulumi.Output[Optional[_builtins.str]]:
|
661
660
|
"""
|
662
661
|
Specifies a cloud for the client. The default is Azure Public Cloud.
|
663
662
|
"""
|
664
663
|
return pulumi.get(self, "cloud")
|
665
664
|
|
666
|
-
@property
|
665
|
+
@_builtins.property
|
667
666
|
@pulumi.getter(name="customTags")
|
668
|
-
def custom_tags(self) -> pulumi.Output[Optional[Mapping[str,
|
667
|
+
def custom_tags(self) -> pulumi.Output[Optional[Mapping[str, _builtins.str]]]:
|
669
668
|
"""
|
670
669
|
Custom tags to set on the secret managed at the destination.
|
671
670
|
"""
|
672
671
|
return pulumi.get(self, "custom_tags")
|
673
672
|
|
674
|
-
@property
|
673
|
+
@_builtins.property
|
675
674
|
@pulumi.getter
|
676
|
-
def granularity(self) -> pulumi.Output[Optional[
|
675
|
+
def granularity(self) -> pulumi.Output[Optional[_builtins.str]]:
|
677
676
|
"""
|
678
677
|
Determines what level of information is synced as a distinct resource
|
679
678
|
at the destination. Supports `secret-path` and `secret-key`.
|
680
679
|
"""
|
681
680
|
return pulumi.get(self, "granularity")
|
682
681
|
|
683
|
-
@property
|
682
|
+
@_builtins.property
|
684
683
|
@pulumi.getter(name="keyVaultUri")
|
685
|
-
def key_vault_uri(self) -> pulumi.Output[Optional[
|
684
|
+
def key_vault_uri(self) -> pulumi.Output[Optional[_builtins.str]]:
|
686
685
|
"""
|
687
686
|
URI of an existing Azure Key Vault instance.
|
688
687
|
Can be omitted and directly provided to Vault using the `KEY_VAULT_URI` environment
|
@@ -690,17 +689,17 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
690
689
|
"""
|
691
690
|
return pulumi.get(self, "key_vault_uri")
|
692
691
|
|
693
|
-
@property
|
692
|
+
@_builtins.property
|
694
693
|
@pulumi.getter
|
695
|
-
def name(self) -> pulumi.Output[
|
694
|
+
def name(self) -> pulumi.Output[_builtins.str]:
|
696
695
|
"""
|
697
696
|
Unique name of the Azure destination.
|
698
697
|
"""
|
699
698
|
return pulumi.get(self, "name")
|
700
699
|
|
701
|
-
@property
|
700
|
+
@_builtins.property
|
702
701
|
@pulumi.getter
|
703
|
-
def namespace(self) -> pulumi.Output[Optional[
|
702
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
704
703
|
"""
|
705
704
|
The namespace to provision the resource in.
|
706
705
|
The value should not contain leading or trailing forward slashes.
|
@@ -708,18 +707,18 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
708
707
|
"""
|
709
708
|
return pulumi.get(self, "namespace")
|
710
709
|
|
711
|
-
@property
|
710
|
+
@_builtins.property
|
712
711
|
@pulumi.getter(name="secretNameTemplate")
|
713
|
-
def secret_name_template(self) -> pulumi.Output[
|
712
|
+
def secret_name_template(self) -> pulumi.Output[_builtins.str]:
|
714
713
|
"""
|
715
714
|
Template describing how to generate external secret names.
|
716
715
|
Supports a subset of the Go Template syntax.
|
717
716
|
"""
|
718
717
|
return pulumi.get(self, "secret_name_template")
|
719
718
|
|
720
|
-
@property
|
719
|
+
@_builtins.property
|
721
720
|
@pulumi.getter(name="tenantId")
|
722
|
-
def tenant_id(self) -> pulumi.Output[Optional[
|
721
|
+
def tenant_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
723
722
|
"""
|
724
723
|
ID of the target Azure tenant.
|
725
724
|
Can be omitted and directly provided to Vault using the `AZURE_TENANT_ID` environment
|
@@ -727,9 +726,9 @@ class SyncAzureDestination(pulumi.CustomResource):
|
|
727
726
|
"""
|
728
727
|
return pulumi.get(self, "tenant_id")
|
729
728
|
|
730
|
-
@property
|
729
|
+
@_builtins.property
|
731
730
|
@pulumi.getter
|
732
|
-
def type(self) -> pulumi.Output[
|
731
|
+
def type(self) -> pulumi.Output[_builtins.str]:
|
733
732
|
"""
|
734
733
|
The type of the secrets destination (`azure-kv`).
|
735
734
|
"""
|