pulumi-vault 7.2.0a1753339763__py3-none-any.whl → 7.2.0a1753398491__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -1
- pulumi_vault/_inputs.py +672 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +409 -410
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +273 -274
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +239 -240
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +379 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +299 -300
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +353 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +222 -223
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +384 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +673 -674
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +333 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +256 -257
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +81 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +137 -138
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +29 -30
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +207 -208
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +120 -121
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +138 -139
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +336 -337
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0a1753398491.dist-info/RECORD +268 -0
- pulumi_vault-7.2.0a1753339763.dist-info/RECORD +0 -268
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753398491.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,52 +19,52 @@ __all__ = ['AuthBackendRoleArgs', 'AuthBackendRole']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class AuthBackendRoleArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
role_name: pulumi.Input[
|
|
24
|
-
backend: Optional[pulumi.Input[
|
|
25
|
-
bind_secret_id: Optional[pulumi.Input[
|
|
26
|
-
namespace: Optional[pulumi.Input[
|
|
27
|
-
role_id: Optional[pulumi.Input[
|
|
28
|
-
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
29
|
-
secret_id_num_uses: Optional[pulumi.Input[
|
|
30
|
-
secret_id_ttl: Optional[pulumi.Input[
|
|
31
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
32
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
33
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
34
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
35
|
-
token_num_uses: Optional[pulumi.Input[
|
|
36
|
-
token_period: Optional[pulumi.Input[
|
|
37
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
38
|
-
token_ttl: Optional[pulumi.Input[
|
|
39
|
-
token_type: Optional[pulumi.Input[
|
|
22
|
+
role_name: pulumi.Input[_builtins.str],
|
|
23
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
24
|
+
bind_secret_id: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
25
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
26
|
+
role_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
28
|
+
secret_id_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
29
|
+
secret_id_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
30
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
31
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
32
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
33
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
34
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
35
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
36
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
37
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
38
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None):
|
|
40
39
|
"""
|
|
41
40
|
The set of arguments for constructing a AuthBackendRole resource.
|
|
42
|
-
:param pulumi.Input[
|
|
43
|
-
:param pulumi.Input[
|
|
41
|
+
:param pulumi.Input[_builtins.str] role_name: The name of the role.
|
|
42
|
+
:param pulumi.Input[_builtins.str] backend: The unique name of the auth backend to configure.
|
|
44
43
|
Defaults to `approle`.
|
|
45
|
-
:param pulumi.Input[
|
|
44
|
+
:param pulumi.Input[_builtins.bool] bind_secret_id: Whether or not to require `secret_id` to be
|
|
46
45
|
presented when logging in using this AppRole. Defaults to `true`.
|
|
47
|
-
:param pulumi.Input[
|
|
46
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
48
47
|
The value should not contain leading or trailing forward slashes.
|
|
49
48
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
50
49
|
*Available only for Vault Enterprise*.
|
|
51
|
-
:param pulumi.Input[
|
|
50
|
+
:param pulumi.Input[_builtins.str] role_id: The RoleID of this role. If not specified, one will be
|
|
52
51
|
auto-generated.
|
|
53
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
52
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] secret_id_bound_cidrs: If set,
|
|
54
53
|
specifies blocks of IP addresses which can perform the login operation.
|
|
55
|
-
:param pulumi.Input[
|
|
54
|
+
:param pulumi.Input[_builtins.int] secret_id_num_uses: The number of times any particular SecretID
|
|
56
55
|
can be used to fetch a token from this AppRole, after which the SecretID will
|
|
57
56
|
expire. A value of zero will allow unlimited uses.
|
|
58
|
-
:param pulumi.Input[
|
|
57
|
+
:param pulumi.Input[_builtins.int] secret_id_ttl: The number of seconds after which any SecretID
|
|
59
58
|
expires.
|
|
60
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
61
|
-
:param pulumi.Input[
|
|
62
|
-
:param pulumi.Input[
|
|
63
|
-
:param pulumi.Input[
|
|
64
|
-
:param pulumi.Input[
|
|
65
|
-
:param pulumi.Input[
|
|
66
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
67
|
-
:param pulumi.Input[
|
|
68
|
-
:param pulumi.Input[
|
|
59
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
60
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
61
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
62
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
63
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
64
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
65
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
66
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
67
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
69
68
|
"""
|
|
70
69
|
pulumi.set(__self__, "role_name", role_name)
|
|
71
70
|
if backend is not None:
|
|
@@ -101,21 +100,21 @@ class AuthBackendRoleArgs:
|
|
|
101
100
|
if token_type is not None:
|
|
102
101
|
pulumi.set(__self__, "token_type", token_type)
|
|
103
102
|
|
|
104
|
-
@property
|
|
103
|
+
@_builtins.property
|
|
105
104
|
@pulumi.getter(name="roleName")
|
|
106
|
-
def role_name(self) -> pulumi.Input[
|
|
105
|
+
def role_name(self) -> pulumi.Input[_builtins.str]:
|
|
107
106
|
"""
|
|
108
107
|
The name of the role.
|
|
109
108
|
"""
|
|
110
109
|
return pulumi.get(self, "role_name")
|
|
111
110
|
|
|
112
111
|
@role_name.setter
|
|
113
|
-
def role_name(self, value: pulumi.Input[
|
|
112
|
+
def role_name(self, value: pulumi.Input[_builtins.str]):
|
|
114
113
|
pulumi.set(self, "role_name", value)
|
|
115
114
|
|
|
116
|
-
@property
|
|
115
|
+
@_builtins.property
|
|
117
116
|
@pulumi.getter
|
|
118
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
117
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
119
118
|
"""
|
|
120
119
|
The unique name of the auth backend to configure.
|
|
121
120
|
Defaults to `approle`.
|
|
@@ -123,12 +122,12 @@ class AuthBackendRoleArgs:
|
|
|
123
122
|
return pulumi.get(self, "backend")
|
|
124
123
|
|
|
125
124
|
@backend.setter
|
|
126
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
125
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
127
126
|
pulumi.set(self, "backend", value)
|
|
128
127
|
|
|
129
|
-
@property
|
|
128
|
+
@_builtins.property
|
|
130
129
|
@pulumi.getter(name="bindSecretId")
|
|
131
|
-
def bind_secret_id(self) -> Optional[pulumi.Input[
|
|
130
|
+
def bind_secret_id(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
132
131
|
"""
|
|
133
132
|
Whether or not to require `secret_id` to be
|
|
134
133
|
presented when logging in using this AppRole. Defaults to `true`.
|
|
@@ -136,12 +135,12 @@ class AuthBackendRoleArgs:
|
|
|
136
135
|
return pulumi.get(self, "bind_secret_id")
|
|
137
136
|
|
|
138
137
|
@bind_secret_id.setter
|
|
139
|
-
def bind_secret_id(self, value: Optional[pulumi.Input[
|
|
138
|
+
def bind_secret_id(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
140
139
|
pulumi.set(self, "bind_secret_id", value)
|
|
141
140
|
|
|
142
|
-
@property
|
|
141
|
+
@_builtins.property
|
|
143
142
|
@pulumi.getter
|
|
144
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
143
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
145
144
|
"""
|
|
146
145
|
The namespace to provision the resource in.
|
|
147
146
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -151,12 +150,12 @@ class AuthBackendRoleArgs:
|
|
|
151
150
|
return pulumi.get(self, "namespace")
|
|
152
151
|
|
|
153
152
|
@namespace.setter
|
|
154
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
153
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
155
154
|
pulumi.set(self, "namespace", value)
|
|
156
155
|
|
|
157
|
-
@property
|
|
156
|
+
@_builtins.property
|
|
158
157
|
@pulumi.getter(name="roleId")
|
|
159
|
-
def role_id(self) -> Optional[pulumi.Input[
|
|
158
|
+
def role_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
160
159
|
"""
|
|
161
160
|
The RoleID of this role. If not specified, one will be
|
|
162
161
|
auto-generated.
|
|
@@ -164,12 +163,12 @@ class AuthBackendRoleArgs:
|
|
|
164
163
|
return pulumi.get(self, "role_id")
|
|
165
164
|
|
|
166
165
|
@role_id.setter
|
|
167
|
-
def role_id(self, value: Optional[pulumi.Input[
|
|
166
|
+
def role_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
168
167
|
pulumi.set(self, "role_id", value)
|
|
169
168
|
|
|
170
|
-
@property
|
|
169
|
+
@_builtins.property
|
|
171
170
|
@pulumi.getter(name="secretIdBoundCidrs")
|
|
172
|
-
def secret_id_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
171
|
+
def secret_id_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
173
172
|
"""
|
|
174
173
|
If set,
|
|
175
174
|
specifies blocks of IP addresses which can perform the login operation.
|
|
@@ -177,12 +176,12 @@ class AuthBackendRoleArgs:
|
|
|
177
176
|
return pulumi.get(self, "secret_id_bound_cidrs")
|
|
178
177
|
|
|
179
178
|
@secret_id_bound_cidrs.setter
|
|
180
|
-
def secret_id_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
179
|
+
def secret_id_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
181
180
|
pulumi.set(self, "secret_id_bound_cidrs", value)
|
|
182
181
|
|
|
183
|
-
@property
|
|
182
|
+
@_builtins.property
|
|
184
183
|
@pulumi.getter(name="secretIdNumUses")
|
|
185
|
-
def secret_id_num_uses(self) -> Optional[pulumi.Input[
|
|
184
|
+
def secret_id_num_uses(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
186
185
|
"""
|
|
187
186
|
The number of times any particular SecretID
|
|
188
187
|
can be used to fetch a token from this AppRole, after which the SecretID will
|
|
@@ -191,12 +190,12 @@ class AuthBackendRoleArgs:
|
|
|
191
190
|
return pulumi.get(self, "secret_id_num_uses")
|
|
192
191
|
|
|
193
192
|
@secret_id_num_uses.setter
|
|
194
|
-
def secret_id_num_uses(self, value: Optional[pulumi.Input[
|
|
193
|
+
def secret_id_num_uses(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
195
194
|
pulumi.set(self, "secret_id_num_uses", value)
|
|
196
195
|
|
|
197
|
-
@property
|
|
196
|
+
@_builtins.property
|
|
198
197
|
@pulumi.getter(name="secretIdTtl")
|
|
199
|
-
def secret_id_ttl(self) -> Optional[pulumi.Input[
|
|
198
|
+
def secret_id_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
200
199
|
"""
|
|
201
200
|
The number of seconds after which any SecretID
|
|
202
201
|
expires.
|
|
@@ -204,167 +203,167 @@ class AuthBackendRoleArgs:
|
|
|
204
203
|
return pulumi.get(self, "secret_id_ttl")
|
|
205
204
|
|
|
206
205
|
@secret_id_ttl.setter
|
|
207
|
-
def secret_id_ttl(self, value: Optional[pulumi.Input[
|
|
206
|
+
def secret_id_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
208
207
|
pulumi.set(self, "secret_id_ttl", value)
|
|
209
208
|
|
|
210
|
-
@property
|
|
209
|
+
@_builtins.property
|
|
211
210
|
@pulumi.getter(name="tokenBoundCidrs")
|
|
212
|
-
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
211
|
+
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
213
212
|
"""
|
|
214
213
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
215
214
|
"""
|
|
216
215
|
return pulumi.get(self, "token_bound_cidrs")
|
|
217
216
|
|
|
218
217
|
@token_bound_cidrs.setter
|
|
219
|
-
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
218
|
+
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
220
219
|
pulumi.set(self, "token_bound_cidrs", value)
|
|
221
220
|
|
|
222
|
-
@property
|
|
221
|
+
@_builtins.property
|
|
223
222
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
|
224
|
-
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[
|
|
223
|
+
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
225
224
|
"""
|
|
226
225
|
Generated Token's Explicit Maximum TTL in seconds
|
|
227
226
|
"""
|
|
228
227
|
return pulumi.get(self, "token_explicit_max_ttl")
|
|
229
228
|
|
|
230
229
|
@token_explicit_max_ttl.setter
|
|
231
|
-
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[
|
|
230
|
+
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
232
231
|
pulumi.set(self, "token_explicit_max_ttl", value)
|
|
233
232
|
|
|
234
|
-
@property
|
|
233
|
+
@_builtins.property
|
|
235
234
|
@pulumi.getter(name="tokenMaxTtl")
|
|
236
|
-
def token_max_ttl(self) -> Optional[pulumi.Input[
|
|
235
|
+
def token_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
237
236
|
"""
|
|
238
237
|
The maximum lifetime of the generated token
|
|
239
238
|
"""
|
|
240
239
|
return pulumi.get(self, "token_max_ttl")
|
|
241
240
|
|
|
242
241
|
@token_max_ttl.setter
|
|
243
|
-
def token_max_ttl(self, value: Optional[pulumi.Input[
|
|
242
|
+
def token_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
244
243
|
pulumi.set(self, "token_max_ttl", value)
|
|
245
244
|
|
|
246
|
-
@property
|
|
245
|
+
@_builtins.property
|
|
247
246
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
|
248
|
-
def token_no_default_policy(self) -> Optional[pulumi.Input[
|
|
247
|
+
def token_no_default_policy(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
249
248
|
"""
|
|
250
249
|
If true, the 'default' policy will not automatically be added to generated tokens
|
|
251
250
|
"""
|
|
252
251
|
return pulumi.get(self, "token_no_default_policy")
|
|
253
252
|
|
|
254
253
|
@token_no_default_policy.setter
|
|
255
|
-
def token_no_default_policy(self, value: Optional[pulumi.Input[
|
|
254
|
+
def token_no_default_policy(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
256
255
|
pulumi.set(self, "token_no_default_policy", value)
|
|
257
256
|
|
|
258
|
-
@property
|
|
257
|
+
@_builtins.property
|
|
259
258
|
@pulumi.getter(name="tokenNumUses")
|
|
260
|
-
def token_num_uses(self) -> Optional[pulumi.Input[
|
|
259
|
+
def token_num_uses(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
261
260
|
"""
|
|
262
261
|
The maximum number of times a token may be used, a value of zero means unlimited
|
|
263
262
|
"""
|
|
264
263
|
return pulumi.get(self, "token_num_uses")
|
|
265
264
|
|
|
266
265
|
@token_num_uses.setter
|
|
267
|
-
def token_num_uses(self, value: Optional[pulumi.Input[
|
|
266
|
+
def token_num_uses(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
268
267
|
pulumi.set(self, "token_num_uses", value)
|
|
269
268
|
|
|
270
|
-
@property
|
|
269
|
+
@_builtins.property
|
|
271
270
|
@pulumi.getter(name="tokenPeriod")
|
|
272
|
-
def token_period(self) -> Optional[pulumi.Input[
|
|
271
|
+
def token_period(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
273
272
|
"""
|
|
274
273
|
Generated Token's Period
|
|
275
274
|
"""
|
|
276
275
|
return pulumi.get(self, "token_period")
|
|
277
276
|
|
|
278
277
|
@token_period.setter
|
|
279
|
-
def token_period(self, value: Optional[pulumi.Input[
|
|
278
|
+
def token_period(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
280
279
|
pulumi.set(self, "token_period", value)
|
|
281
280
|
|
|
282
|
-
@property
|
|
281
|
+
@_builtins.property
|
|
283
282
|
@pulumi.getter(name="tokenPolicies")
|
|
284
|
-
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
283
|
+
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
285
284
|
"""
|
|
286
285
|
Generated Token's Policies
|
|
287
286
|
"""
|
|
288
287
|
return pulumi.get(self, "token_policies")
|
|
289
288
|
|
|
290
289
|
@token_policies.setter
|
|
291
|
-
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
290
|
+
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
292
291
|
pulumi.set(self, "token_policies", value)
|
|
293
292
|
|
|
294
|
-
@property
|
|
293
|
+
@_builtins.property
|
|
295
294
|
@pulumi.getter(name="tokenTtl")
|
|
296
|
-
def token_ttl(self) -> Optional[pulumi.Input[
|
|
295
|
+
def token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
297
296
|
"""
|
|
298
297
|
The initial ttl of the token to generate in seconds
|
|
299
298
|
"""
|
|
300
299
|
return pulumi.get(self, "token_ttl")
|
|
301
300
|
|
|
302
301
|
@token_ttl.setter
|
|
303
|
-
def token_ttl(self, value: Optional[pulumi.Input[
|
|
302
|
+
def token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
304
303
|
pulumi.set(self, "token_ttl", value)
|
|
305
304
|
|
|
306
|
-
@property
|
|
305
|
+
@_builtins.property
|
|
307
306
|
@pulumi.getter(name="tokenType")
|
|
308
|
-
def token_type(self) -> Optional[pulumi.Input[
|
|
307
|
+
def token_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
309
308
|
"""
|
|
310
309
|
The type of token to generate, service or batch
|
|
311
310
|
"""
|
|
312
311
|
return pulumi.get(self, "token_type")
|
|
313
312
|
|
|
314
313
|
@token_type.setter
|
|
315
|
-
def token_type(self, value: Optional[pulumi.Input[
|
|
314
|
+
def token_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
316
315
|
pulumi.set(self, "token_type", value)
|
|
317
316
|
|
|
318
317
|
|
|
319
318
|
@pulumi.input_type
|
|
320
319
|
class _AuthBackendRoleState:
|
|
321
320
|
def __init__(__self__, *,
|
|
322
|
-
backend: Optional[pulumi.Input[
|
|
323
|
-
bind_secret_id: Optional[pulumi.Input[
|
|
324
|
-
namespace: Optional[pulumi.Input[
|
|
325
|
-
role_id: Optional[pulumi.Input[
|
|
326
|
-
role_name: Optional[pulumi.Input[
|
|
327
|
-
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
328
|
-
secret_id_num_uses: Optional[pulumi.Input[
|
|
329
|
-
secret_id_ttl: Optional[pulumi.Input[
|
|
330
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
331
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
332
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
333
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
334
|
-
token_num_uses: Optional[pulumi.Input[
|
|
335
|
-
token_period: Optional[pulumi.Input[
|
|
336
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
337
|
-
token_ttl: Optional[pulumi.Input[
|
|
338
|
-
token_type: Optional[pulumi.Input[
|
|
321
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
322
|
+
bind_secret_id: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
323
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
324
|
+
role_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
325
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
326
|
+
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
327
|
+
secret_id_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
328
|
+
secret_id_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
329
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
330
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
331
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
332
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
333
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
334
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
335
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
336
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
337
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None):
|
|
339
338
|
"""
|
|
340
339
|
Input properties used for looking up and filtering AuthBackendRole resources.
|
|
341
|
-
:param pulumi.Input[
|
|
340
|
+
:param pulumi.Input[_builtins.str] backend: The unique name of the auth backend to configure.
|
|
342
341
|
Defaults to `approle`.
|
|
343
|
-
:param pulumi.Input[
|
|
342
|
+
:param pulumi.Input[_builtins.bool] bind_secret_id: Whether or not to require `secret_id` to be
|
|
344
343
|
presented when logging in using this AppRole. Defaults to `true`.
|
|
345
|
-
:param pulumi.Input[
|
|
344
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
346
345
|
The value should not contain leading or trailing forward slashes.
|
|
347
346
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
348
347
|
*Available only for Vault Enterprise*.
|
|
349
|
-
:param pulumi.Input[
|
|
348
|
+
:param pulumi.Input[_builtins.str] role_id: The RoleID of this role. If not specified, one will be
|
|
350
349
|
auto-generated.
|
|
351
|
-
:param pulumi.Input[
|
|
352
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
350
|
+
:param pulumi.Input[_builtins.str] role_name: The name of the role.
|
|
351
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] secret_id_bound_cidrs: If set,
|
|
353
352
|
specifies blocks of IP addresses which can perform the login operation.
|
|
354
|
-
:param pulumi.Input[
|
|
353
|
+
:param pulumi.Input[_builtins.int] secret_id_num_uses: The number of times any particular SecretID
|
|
355
354
|
can be used to fetch a token from this AppRole, after which the SecretID will
|
|
356
355
|
expire. A value of zero will allow unlimited uses.
|
|
357
|
-
:param pulumi.Input[
|
|
356
|
+
:param pulumi.Input[_builtins.int] secret_id_ttl: The number of seconds after which any SecretID
|
|
358
357
|
expires.
|
|
359
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
360
|
-
:param pulumi.Input[
|
|
361
|
-
:param pulumi.Input[
|
|
362
|
-
:param pulumi.Input[
|
|
363
|
-
:param pulumi.Input[
|
|
364
|
-
:param pulumi.Input[
|
|
365
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
366
|
-
:param pulumi.Input[
|
|
367
|
-
:param pulumi.Input[
|
|
358
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
359
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
360
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
361
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
362
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
363
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
364
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
365
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
366
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
368
367
|
"""
|
|
369
368
|
if backend is not None:
|
|
370
369
|
pulumi.set(__self__, "backend", backend)
|
|
@@ -401,9 +400,9 @@ class _AuthBackendRoleState:
|
|
|
401
400
|
if token_type is not None:
|
|
402
401
|
pulumi.set(__self__, "token_type", token_type)
|
|
403
402
|
|
|
404
|
-
@property
|
|
403
|
+
@_builtins.property
|
|
405
404
|
@pulumi.getter
|
|
406
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
405
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
407
406
|
"""
|
|
408
407
|
The unique name of the auth backend to configure.
|
|
409
408
|
Defaults to `approle`.
|
|
@@ -411,12 +410,12 @@ class _AuthBackendRoleState:
|
|
|
411
410
|
return pulumi.get(self, "backend")
|
|
412
411
|
|
|
413
412
|
@backend.setter
|
|
414
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
413
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
415
414
|
pulumi.set(self, "backend", value)
|
|
416
415
|
|
|
417
|
-
@property
|
|
416
|
+
@_builtins.property
|
|
418
417
|
@pulumi.getter(name="bindSecretId")
|
|
419
|
-
def bind_secret_id(self) -> Optional[pulumi.Input[
|
|
418
|
+
def bind_secret_id(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
420
419
|
"""
|
|
421
420
|
Whether or not to require `secret_id` to be
|
|
422
421
|
presented when logging in using this AppRole. Defaults to `true`.
|
|
@@ -424,12 +423,12 @@ class _AuthBackendRoleState:
|
|
|
424
423
|
return pulumi.get(self, "bind_secret_id")
|
|
425
424
|
|
|
426
425
|
@bind_secret_id.setter
|
|
427
|
-
def bind_secret_id(self, value: Optional[pulumi.Input[
|
|
426
|
+
def bind_secret_id(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
428
427
|
pulumi.set(self, "bind_secret_id", value)
|
|
429
428
|
|
|
430
|
-
@property
|
|
429
|
+
@_builtins.property
|
|
431
430
|
@pulumi.getter
|
|
432
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
431
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
433
432
|
"""
|
|
434
433
|
The namespace to provision the resource in.
|
|
435
434
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -439,12 +438,12 @@ class _AuthBackendRoleState:
|
|
|
439
438
|
return pulumi.get(self, "namespace")
|
|
440
439
|
|
|
441
440
|
@namespace.setter
|
|
442
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
441
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
443
442
|
pulumi.set(self, "namespace", value)
|
|
444
443
|
|
|
445
|
-
@property
|
|
444
|
+
@_builtins.property
|
|
446
445
|
@pulumi.getter(name="roleId")
|
|
447
|
-
def role_id(self) -> Optional[pulumi.Input[
|
|
446
|
+
def role_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
448
447
|
"""
|
|
449
448
|
The RoleID of this role. If not specified, one will be
|
|
450
449
|
auto-generated.
|
|
@@ -452,24 +451,24 @@ class _AuthBackendRoleState:
|
|
|
452
451
|
return pulumi.get(self, "role_id")
|
|
453
452
|
|
|
454
453
|
@role_id.setter
|
|
455
|
-
def role_id(self, value: Optional[pulumi.Input[
|
|
454
|
+
def role_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
456
455
|
pulumi.set(self, "role_id", value)
|
|
457
456
|
|
|
458
|
-
@property
|
|
457
|
+
@_builtins.property
|
|
459
458
|
@pulumi.getter(name="roleName")
|
|
460
|
-
def role_name(self) -> Optional[pulumi.Input[
|
|
459
|
+
def role_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
461
460
|
"""
|
|
462
461
|
The name of the role.
|
|
463
462
|
"""
|
|
464
463
|
return pulumi.get(self, "role_name")
|
|
465
464
|
|
|
466
465
|
@role_name.setter
|
|
467
|
-
def role_name(self, value: Optional[pulumi.Input[
|
|
466
|
+
def role_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
468
467
|
pulumi.set(self, "role_name", value)
|
|
469
468
|
|
|
470
|
-
@property
|
|
469
|
+
@_builtins.property
|
|
471
470
|
@pulumi.getter(name="secretIdBoundCidrs")
|
|
472
|
-
def secret_id_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
471
|
+
def secret_id_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
473
472
|
"""
|
|
474
473
|
If set,
|
|
475
474
|
specifies blocks of IP addresses which can perform the login operation.
|
|
@@ -477,12 +476,12 @@ class _AuthBackendRoleState:
|
|
|
477
476
|
return pulumi.get(self, "secret_id_bound_cidrs")
|
|
478
477
|
|
|
479
478
|
@secret_id_bound_cidrs.setter
|
|
480
|
-
def secret_id_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
479
|
+
def secret_id_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
481
480
|
pulumi.set(self, "secret_id_bound_cidrs", value)
|
|
482
481
|
|
|
483
|
-
@property
|
|
482
|
+
@_builtins.property
|
|
484
483
|
@pulumi.getter(name="secretIdNumUses")
|
|
485
|
-
def secret_id_num_uses(self) -> Optional[pulumi.Input[
|
|
484
|
+
def secret_id_num_uses(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
486
485
|
"""
|
|
487
486
|
The number of times any particular SecretID
|
|
488
487
|
can be used to fetch a token from this AppRole, after which the SecretID will
|
|
@@ -491,12 +490,12 @@ class _AuthBackendRoleState:
|
|
|
491
490
|
return pulumi.get(self, "secret_id_num_uses")
|
|
492
491
|
|
|
493
492
|
@secret_id_num_uses.setter
|
|
494
|
-
def secret_id_num_uses(self, value: Optional[pulumi.Input[
|
|
493
|
+
def secret_id_num_uses(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
495
494
|
pulumi.set(self, "secret_id_num_uses", value)
|
|
496
495
|
|
|
497
|
-
@property
|
|
496
|
+
@_builtins.property
|
|
498
497
|
@pulumi.getter(name="secretIdTtl")
|
|
499
|
-
def secret_id_ttl(self) -> Optional[pulumi.Input[
|
|
498
|
+
def secret_id_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
500
499
|
"""
|
|
501
500
|
The number of seconds after which any SecretID
|
|
502
501
|
expires.
|
|
@@ -504,115 +503,115 @@ class _AuthBackendRoleState:
|
|
|
504
503
|
return pulumi.get(self, "secret_id_ttl")
|
|
505
504
|
|
|
506
505
|
@secret_id_ttl.setter
|
|
507
|
-
def secret_id_ttl(self, value: Optional[pulumi.Input[
|
|
506
|
+
def secret_id_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
508
507
|
pulumi.set(self, "secret_id_ttl", value)
|
|
509
508
|
|
|
510
|
-
@property
|
|
509
|
+
@_builtins.property
|
|
511
510
|
@pulumi.getter(name="tokenBoundCidrs")
|
|
512
|
-
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
511
|
+
def token_bound_cidrs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
513
512
|
"""
|
|
514
513
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
515
514
|
"""
|
|
516
515
|
return pulumi.get(self, "token_bound_cidrs")
|
|
517
516
|
|
|
518
517
|
@token_bound_cidrs.setter
|
|
519
|
-
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
518
|
+
def token_bound_cidrs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
520
519
|
pulumi.set(self, "token_bound_cidrs", value)
|
|
521
520
|
|
|
522
|
-
@property
|
|
521
|
+
@_builtins.property
|
|
523
522
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
|
524
|
-
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[
|
|
523
|
+
def token_explicit_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
525
524
|
"""
|
|
526
525
|
Generated Token's Explicit Maximum TTL in seconds
|
|
527
526
|
"""
|
|
528
527
|
return pulumi.get(self, "token_explicit_max_ttl")
|
|
529
528
|
|
|
530
529
|
@token_explicit_max_ttl.setter
|
|
531
|
-
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[
|
|
530
|
+
def token_explicit_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
532
531
|
pulumi.set(self, "token_explicit_max_ttl", value)
|
|
533
532
|
|
|
534
|
-
@property
|
|
533
|
+
@_builtins.property
|
|
535
534
|
@pulumi.getter(name="tokenMaxTtl")
|
|
536
|
-
def token_max_ttl(self) -> Optional[pulumi.Input[
|
|
535
|
+
def token_max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
537
536
|
"""
|
|
538
537
|
The maximum lifetime of the generated token
|
|
539
538
|
"""
|
|
540
539
|
return pulumi.get(self, "token_max_ttl")
|
|
541
540
|
|
|
542
541
|
@token_max_ttl.setter
|
|
543
|
-
def token_max_ttl(self, value: Optional[pulumi.Input[
|
|
542
|
+
def token_max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
544
543
|
pulumi.set(self, "token_max_ttl", value)
|
|
545
544
|
|
|
546
|
-
@property
|
|
545
|
+
@_builtins.property
|
|
547
546
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
|
548
|
-
def token_no_default_policy(self) -> Optional[pulumi.Input[
|
|
547
|
+
def token_no_default_policy(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
549
548
|
"""
|
|
550
549
|
If true, the 'default' policy will not automatically be added to generated tokens
|
|
551
550
|
"""
|
|
552
551
|
return pulumi.get(self, "token_no_default_policy")
|
|
553
552
|
|
|
554
553
|
@token_no_default_policy.setter
|
|
555
|
-
def token_no_default_policy(self, value: Optional[pulumi.Input[
|
|
554
|
+
def token_no_default_policy(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
556
555
|
pulumi.set(self, "token_no_default_policy", value)
|
|
557
556
|
|
|
558
|
-
@property
|
|
557
|
+
@_builtins.property
|
|
559
558
|
@pulumi.getter(name="tokenNumUses")
|
|
560
|
-
def token_num_uses(self) -> Optional[pulumi.Input[
|
|
559
|
+
def token_num_uses(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
561
560
|
"""
|
|
562
561
|
The maximum number of times a token may be used, a value of zero means unlimited
|
|
563
562
|
"""
|
|
564
563
|
return pulumi.get(self, "token_num_uses")
|
|
565
564
|
|
|
566
565
|
@token_num_uses.setter
|
|
567
|
-
def token_num_uses(self, value: Optional[pulumi.Input[
|
|
566
|
+
def token_num_uses(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
568
567
|
pulumi.set(self, "token_num_uses", value)
|
|
569
568
|
|
|
570
|
-
@property
|
|
569
|
+
@_builtins.property
|
|
571
570
|
@pulumi.getter(name="tokenPeriod")
|
|
572
|
-
def token_period(self) -> Optional[pulumi.Input[
|
|
571
|
+
def token_period(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
573
572
|
"""
|
|
574
573
|
Generated Token's Period
|
|
575
574
|
"""
|
|
576
575
|
return pulumi.get(self, "token_period")
|
|
577
576
|
|
|
578
577
|
@token_period.setter
|
|
579
|
-
def token_period(self, value: Optional[pulumi.Input[
|
|
578
|
+
def token_period(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
580
579
|
pulumi.set(self, "token_period", value)
|
|
581
580
|
|
|
582
|
-
@property
|
|
581
|
+
@_builtins.property
|
|
583
582
|
@pulumi.getter(name="tokenPolicies")
|
|
584
|
-
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
583
|
+
def token_policies(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
585
584
|
"""
|
|
586
585
|
Generated Token's Policies
|
|
587
586
|
"""
|
|
588
587
|
return pulumi.get(self, "token_policies")
|
|
589
588
|
|
|
590
589
|
@token_policies.setter
|
|
591
|
-
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
590
|
+
def token_policies(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
592
591
|
pulumi.set(self, "token_policies", value)
|
|
593
592
|
|
|
594
|
-
@property
|
|
593
|
+
@_builtins.property
|
|
595
594
|
@pulumi.getter(name="tokenTtl")
|
|
596
|
-
def token_ttl(self) -> Optional[pulumi.Input[
|
|
595
|
+
def token_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
597
596
|
"""
|
|
598
597
|
The initial ttl of the token to generate in seconds
|
|
599
598
|
"""
|
|
600
599
|
return pulumi.get(self, "token_ttl")
|
|
601
600
|
|
|
602
601
|
@token_ttl.setter
|
|
603
|
-
def token_ttl(self, value: Optional[pulumi.Input[
|
|
602
|
+
def token_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
604
603
|
pulumi.set(self, "token_ttl", value)
|
|
605
604
|
|
|
606
|
-
@property
|
|
605
|
+
@_builtins.property
|
|
607
606
|
@pulumi.getter(name="tokenType")
|
|
608
|
-
def token_type(self) -> Optional[pulumi.Input[
|
|
607
|
+
def token_type(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
609
608
|
"""
|
|
610
609
|
The type of token to generate, service or batch
|
|
611
610
|
"""
|
|
612
611
|
return pulumi.get(self, "token_type")
|
|
613
612
|
|
|
614
613
|
@token_type.setter
|
|
615
|
-
def token_type(self, value: Optional[pulumi.Input[
|
|
614
|
+
def token_type(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
616
615
|
pulumi.set(self, "token_type", value)
|
|
617
616
|
|
|
618
617
|
|
|
@@ -622,23 +621,23 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
622
621
|
def __init__(__self__,
|
|
623
622
|
resource_name: str,
|
|
624
623
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
625
|
-
backend: Optional[pulumi.Input[
|
|
626
|
-
bind_secret_id: Optional[pulumi.Input[
|
|
627
|
-
namespace: Optional[pulumi.Input[
|
|
628
|
-
role_id: Optional[pulumi.Input[
|
|
629
|
-
role_name: Optional[pulumi.Input[
|
|
630
|
-
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
631
|
-
secret_id_num_uses: Optional[pulumi.Input[
|
|
632
|
-
secret_id_ttl: Optional[pulumi.Input[
|
|
633
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
634
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
635
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
636
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
637
|
-
token_num_uses: Optional[pulumi.Input[
|
|
638
|
-
token_period: Optional[pulumi.Input[
|
|
639
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
640
|
-
token_ttl: Optional[pulumi.Input[
|
|
641
|
-
token_type: Optional[pulumi.Input[
|
|
624
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
625
|
+
bind_secret_id: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
626
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
627
|
+
role_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
628
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
629
|
+
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
630
|
+
secret_id_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
631
|
+
secret_id_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
632
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
633
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
634
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
635
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
636
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
637
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
638
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
639
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
640
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
642
641
|
__props__=None):
|
|
643
642
|
"""
|
|
644
643
|
Manages an AppRole auth backend role in a Vault server. See the [Vault
|
|
@@ -652,7 +651,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
652
651
|
import pulumi_vault as vault
|
|
653
652
|
|
|
654
653
|
approle = vault.AuthBackend("approle", type="approle")
|
|
655
|
-
example = vault.
|
|
654
|
+
example = vault.approle.AuthBackendRole("example",
|
|
656
655
|
backend=approle.path,
|
|
657
656
|
role_name="test-role",
|
|
658
657
|
token_policies=[
|
|
@@ -672,33 +671,33 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
672
671
|
|
|
673
672
|
:param str resource_name: The name of the resource.
|
|
674
673
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
675
|
-
:param pulumi.Input[
|
|
674
|
+
:param pulumi.Input[_builtins.str] backend: The unique name of the auth backend to configure.
|
|
676
675
|
Defaults to `approle`.
|
|
677
|
-
:param pulumi.Input[
|
|
676
|
+
:param pulumi.Input[_builtins.bool] bind_secret_id: Whether or not to require `secret_id` to be
|
|
678
677
|
presented when logging in using this AppRole. Defaults to `true`.
|
|
679
|
-
:param pulumi.Input[
|
|
678
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
680
679
|
The value should not contain leading or trailing forward slashes.
|
|
681
680
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
682
681
|
*Available only for Vault Enterprise*.
|
|
683
|
-
:param pulumi.Input[
|
|
682
|
+
:param pulumi.Input[_builtins.str] role_id: The RoleID of this role. If not specified, one will be
|
|
684
683
|
auto-generated.
|
|
685
|
-
:param pulumi.Input[
|
|
686
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
684
|
+
:param pulumi.Input[_builtins.str] role_name: The name of the role.
|
|
685
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] secret_id_bound_cidrs: If set,
|
|
687
686
|
specifies blocks of IP addresses which can perform the login operation.
|
|
688
|
-
:param pulumi.Input[
|
|
687
|
+
:param pulumi.Input[_builtins.int] secret_id_num_uses: The number of times any particular SecretID
|
|
689
688
|
can be used to fetch a token from this AppRole, after which the SecretID will
|
|
690
689
|
expire. A value of zero will allow unlimited uses.
|
|
691
|
-
:param pulumi.Input[
|
|
690
|
+
:param pulumi.Input[_builtins.int] secret_id_ttl: The number of seconds after which any SecretID
|
|
692
691
|
expires.
|
|
693
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
694
|
-
:param pulumi.Input[
|
|
695
|
-
:param pulumi.Input[
|
|
696
|
-
:param pulumi.Input[
|
|
697
|
-
:param pulumi.Input[
|
|
698
|
-
:param pulumi.Input[
|
|
699
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
700
|
-
:param pulumi.Input[
|
|
701
|
-
:param pulumi.Input[
|
|
692
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
693
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
694
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
695
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
696
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
697
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
698
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
699
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
700
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
702
701
|
"""
|
|
703
702
|
...
|
|
704
703
|
@overload
|
|
@@ -718,7 +717,7 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
718
717
|
import pulumi_vault as vault
|
|
719
718
|
|
|
720
719
|
approle = vault.AuthBackend("approle", type="approle")
|
|
721
|
-
example = vault.
|
|
720
|
+
example = vault.approle.AuthBackendRole("example",
|
|
722
721
|
backend=approle.path,
|
|
723
722
|
role_name="test-role",
|
|
724
723
|
token_policies=[
|
|
@@ -751,23 +750,23 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
751
750
|
def _internal_init(__self__,
|
|
752
751
|
resource_name: str,
|
|
753
752
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
754
|
-
backend: Optional[pulumi.Input[
|
|
755
|
-
bind_secret_id: Optional[pulumi.Input[
|
|
756
|
-
namespace: Optional[pulumi.Input[
|
|
757
|
-
role_id: Optional[pulumi.Input[
|
|
758
|
-
role_name: Optional[pulumi.Input[
|
|
759
|
-
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
760
|
-
secret_id_num_uses: Optional[pulumi.Input[
|
|
761
|
-
secret_id_ttl: Optional[pulumi.Input[
|
|
762
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
763
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
764
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
765
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
766
|
-
token_num_uses: Optional[pulumi.Input[
|
|
767
|
-
token_period: Optional[pulumi.Input[
|
|
768
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
769
|
-
token_ttl: Optional[pulumi.Input[
|
|
770
|
-
token_type: Optional[pulumi.Input[
|
|
753
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
754
|
+
bind_secret_id: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
755
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
756
|
+
role_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
757
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
758
|
+
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
759
|
+
secret_id_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
760
|
+
secret_id_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
761
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
762
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
763
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
764
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
765
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
766
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
767
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
768
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
769
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None,
|
|
771
770
|
__props__=None):
|
|
772
771
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
773
772
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -806,23 +805,23 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
806
805
|
def get(resource_name: str,
|
|
807
806
|
id: pulumi.Input[str],
|
|
808
807
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
809
|
-
backend: Optional[pulumi.Input[
|
|
810
|
-
bind_secret_id: Optional[pulumi.Input[
|
|
811
|
-
namespace: Optional[pulumi.Input[
|
|
812
|
-
role_id: Optional[pulumi.Input[
|
|
813
|
-
role_name: Optional[pulumi.Input[
|
|
814
|
-
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
815
|
-
secret_id_num_uses: Optional[pulumi.Input[
|
|
816
|
-
secret_id_ttl: Optional[pulumi.Input[
|
|
817
|
-
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
818
|
-
token_explicit_max_ttl: Optional[pulumi.Input[
|
|
819
|
-
token_max_ttl: Optional[pulumi.Input[
|
|
820
|
-
token_no_default_policy: Optional[pulumi.Input[
|
|
821
|
-
token_num_uses: Optional[pulumi.Input[
|
|
822
|
-
token_period: Optional[pulumi.Input[
|
|
823
|
-
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
824
|
-
token_ttl: Optional[pulumi.Input[
|
|
825
|
-
token_type: Optional[pulumi.Input[
|
|
808
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
809
|
+
bind_secret_id: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
810
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
811
|
+
role_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
812
|
+
role_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
813
|
+
secret_id_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
814
|
+
secret_id_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
815
|
+
secret_id_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
816
|
+
token_bound_cidrs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
817
|
+
token_explicit_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
818
|
+
token_max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
819
|
+
token_no_default_policy: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
820
|
+
token_num_uses: Optional[pulumi.Input[_builtins.int]] = None,
|
|
821
|
+
token_period: Optional[pulumi.Input[_builtins.int]] = None,
|
|
822
|
+
token_policies: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
823
|
+
token_ttl: Optional[pulumi.Input[_builtins.int]] = None,
|
|
824
|
+
token_type: Optional[pulumi.Input[_builtins.str]] = None) -> 'AuthBackendRole':
|
|
826
825
|
"""
|
|
827
826
|
Get an existing AuthBackendRole resource's state with the given name, id, and optional extra
|
|
828
827
|
properties used to qualify the lookup.
|
|
@@ -830,33 +829,33 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
830
829
|
:param str resource_name: The unique name of the resulting resource.
|
|
831
830
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
832
831
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
833
|
-
:param pulumi.Input[
|
|
832
|
+
:param pulumi.Input[_builtins.str] backend: The unique name of the auth backend to configure.
|
|
834
833
|
Defaults to `approle`.
|
|
835
|
-
:param pulumi.Input[
|
|
834
|
+
:param pulumi.Input[_builtins.bool] bind_secret_id: Whether or not to require `secret_id` to be
|
|
836
835
|
presented when logging in using this AppRole. Defaults to `true`.
|
|
837
|
-
:param pulumi.Input[
|
|
836
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
838
837
|
The value should not contain leading or trailing forward slashes.
|
|
839
838
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
840
839
|
*Available only for Vault Enterprise*.
|
|
841
|
-
:param pulumi.Input[
|
|
840
|
+
:param pulumi.Input[_builtins.str] role_id: The RoleID of this role. If not specified, one will be
|
|
842
841
|
auto-generated.
|
|
843
|
-
:param pulumi.Input[
|
|
844
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
842
|
+
:param pulumi.Input[_builtins.str] role_name: The name of the role.
|
|
843
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] secret_id_bound_cidrs: If set,
|
|
845
844
|
specifies blocks of IP addresses which can perform the login operation.
|
|
846
|
-
:param pulumi.Input[
|
|
845
|
+
:param pulumi.Input[_builtins.int] secret_id_num_uses: The number of times any particular SecretID
|
|
847
846
|
can be used to fetch a token from this AppRole, after which the SecretID will
|
|
848
847
|
expire. A value of zero will allow unlimited uses.
|
|
849
|
-
:param pulumi.Input[
|
|
848
|
+
:param pulumi.Input[_builtins.int] secret_id_ttl: The number of seconds after which any SecretID
|
|
850
849
|
expires.
|
|
851
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
852
|
-
:param pulumi.Input[
|
|
853
|
-
:param pulumi.Input[
|
|
854
|
-
:param pulumi.Input[
|
|
855
|
-
:param pulumi.Input[
|
|
856
|
-
:param pulumi.Input[
|
|
857
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
858
|
-
:param pulumi.Input[
|
|
859
|
-
:param pulumi.Input[
|
|
850
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_bound_cidrs: Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
851
|
+
:param pulumi.Input[_builtins.int] token_explicit_max_ttl: Generated Token's Explicit Maximum TTL in seconds
|
|
852
|
+
:param pulumi.Input[_builtins.int] token_max_ttl: The maximum lifetime of the generated token
|
|
853
|
+
:param pulumi.Input[_builtins.bool] token_no_default_policy: If true, the 'default' policy will not automatically be added to generated tokens
|
|
854
|
+
:param pulumi.Input[_builtins.int] token_num_uses: The maximum number of times a token may be used, a value of zero means unlimited
|
|
855
|
+
:param pulumi.Input[_builtins.int] token_period: Generated Token's Period
|
|
856
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] token_policies: Generated Token's Policies
|
|
857
|
+
:param pulumi.Input[_builtins.int] token_ttl: The initial ttl of the token to generate in seconds
|
|
858
|
+
:param pulumi.Input[_builtins.str] token_type: The type of token to generate, service or batch
|
|
860
859
|
"""
|
|
861
860
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
862
861
|
|
|
@@ -881,27 +880,27 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
881
880
|
__props__.__dict__["token_type"] = token_type
|
|
882
881
|
return AuthBackendRole(resource_name, opts=opts, __props__=__props__)
|
|
883
882
|
|
|
884
|
-
@property
|
|
883
|
+
@_builtins.property
|
|
885
884
|
@pulumi.getter
|
|
886
|
-
def backend(self) -> pulumi.Output[Optional[
|
|
885
|
+
def backend(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
887
886
|
"""
|
|
888
887
|
The unique name of the auth backend to configure.
|
|
889
888
|
Defaults to `approle`.
|
|
890
889
|
"""
|
|
891
890
|
return pulumi.get(self, "backend")
|
|
892
891
|
|
|
893
|
-
@property
|
|
892
|
+
@_builtins.property
|
|
894
893
|
@pulumi.getter(name="bindSecretId")
|
|
895
|
-
def bind_secret_id(self) -> pulumi.Output[Optional[
|
|
894
|
+
def bind_secret_id(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
896
895
|
"""
|
|
897
896
|
Whether or not to require `secret_id` to be
|
|
898
897
|
presented when logging in using this AppRole. Defaults to `true`.
|
|
899
898
|
"""
|
|
900
899
|
return pulumi.get(self, "bind_secret_id")
|
|
901
900
|
|
|
902
|
-
@property
|
|
901
|
+
@_builtins.property
|
|
903
902
|
@pulumi.getter
|
|
904
|
-
def namespace(self) -> pulumi.Output[Optional[
|
|
903
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
905
904
|
"""
|
|
906
905
|
The namespace to provision the resource in.
|
|
907
906
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -910,35 +909,35 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
910
909
|
"""
|
|
911
910
|
return pulumi.get(self, "namespace")
|
|
912
911
|
|
|
913
|
-
@property
|
|
912
|
+
@_builtins.property
|
|
914
913
|
@pulumi.getter(name="roleId")
|
|
915
|
-
def role_id(self) -> pulumi.Output[
|
|
914
|
+
def role_id(self) -> pulumi.Output[_builtins.str]:
|
|
916
915
|
"""
|
|
917
916
|
The RoleID of this role. If not specified, one will be
|
|
918
917
|
auto-generated.
|
|
919
918
|
"""
|
|
920
919
|
return pulumi.get(self, "role_id")
|
|
921
920
|
|
|
922
|
-
@property
|
|
921
|
+
@_builtins.property
|
|
923
922
|
@pulumi.getter(name="roleName")
|
|
924
|
-
def role_name(self) -> pulumi.Output[
|
|
923
|
+
def role_name(self) -> pulumi.Output[_builtins.str]:
|
|
925
924
|
"""
|
|
926
925
|
The name of the role.
|
|
927
926
|
"""
|
|
928
927
|
return pulumi.get(self, "role_name")
|
|
929
928
|
|
|
930
|
-
@property
|
|
929
|
+
@_builtins.property
|
|
931
930
|
@pulumi.getter(name="secretIdBoundCidrs")
|
|
932
|
-
def secret_id_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[
|
|
931
|
+
def secret_id_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
933
932
|
"""
|
|
934
933
|
If set,
|
|
935
934
|
specifies blocks of IP addresses which can perform the login operation.
|
|
936
935
|
"""
|
|
937
936
|
return pulumi.get(self, "secret_id_bound_cidrs")
|
|
938
937
|
|
|
939
|
-
@property
|
|
938
|
+
@_builtins.property
|
|
940
939
|
@pulumi.getter(name="secretIdNumUses")
|
|
941
|
-
def secret_id_num_uses(self) -> pulumi.Output[Optional[
|
|
940
|
+
def secret_id_num_uses(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
942
941
|
"""
|
|
943
942
|
The number of times any particular SecretID
|
|
944
943
|
can be used to fetch a token from this AppRole, after which the SecretID will
|
|
@@ -946,82 +945,82 @@ class AuthBackendRole(pulumi.CustomResource):
|
|
|
946
945
|
"""
|
|
947
946
|
return pulumi.get(self, "secret_id_num_uses")
|
|
948
947
|
|
|
949
|
-
@property
|
|
948
|
+
@_builtins.property
|
|
950
949
|
@pulumi.getter(name="secretIdTtl")
|
|
951
|
-
def secret_id_ttl(self) -> pulumi.Output[Optional[
|
|
950
|
+
def secret_id_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
952
951
|
"""
|
|
953
952
|
The number of seconds after which any SecretID
|
|
954
953
|
expires.
|
|
955
954
|
"""
|
|
956
955
|
return pulumi.get(self, "secret_id_ttl")
|
|
957
956
|
|
|
958
|
-
@property
|
|
957
|
+
@_builtins.property
|
|
959
958
|
@pulumi.getter(name="tokenBoundCidrs")
|
|
960
|
-
def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[
|
|
959
|
+
def token_bound_cidrs(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
961
960
|
"""
|
|
962
961
|
Specifies the blocks of IP addresses which are allowed to use the generated token
|
|
963
962
|
"""
|
|
964
963
|
return pulumi.get(self, "token_bound_cidrs")
|
|
965
964
|
|
|
966
|
-
@property
|
|
965
|
+
@_builtins.property
|
|
967
966
|
@pulumi.getter(name="tokenExplicitMaxTtl")
|
|
968
|
-
def token_explicit_max_ttl(self) -> pulumi.Output[Optional[
|
|
967
|
+
def token_explicit_max_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
969
968
|
"""
|
|
970
969
|
Generated Token's Explicit Maximum TTL in seconds
|
|
971
970
|
"""
|
|
972
971
|
return pulumi.get(self, "token_explicit_max_ttl")
|
|
973
972
|
|
|
974
|
-
@property
|
|
973
|
+
@_builtins.property
|
|
975
974
|
@pulumi.getter(name="tokenMaxTtl")
|
|
976
|
-
def token_max_ttl(self) -> pulumi.Output[Optional[
|
|
975
|
+
def token_max_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
977
976
|
"""
|
|
978
977
|
The maximum lifetime of the generated token
|
|
979
978
|
"""
|
|
980
979
|
return pulumi.get(self, "token_max_ttl")
|
|
981
980
|
|
|
982
|
-
@property
|
|
981
|
+
@_builtins.property
|
|
983
982
|
@pulumi.getter(name="tokenNoDefaultPolicy")
|
|
984
|
-
def token_no_default_policy(self) -> pulumi.Output[Optional[
|
|
983
|
+
def token_no_default_policy(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
985
984
|
"""
|
|
986
985
|
If true, the 'default' policy will not automatically be added to generated tokens
|
|
987
986
|
"""
|
|
988
987
|
return pulumi.get(self, "token_no_default_policy")
|
|
989
988
|
|
|
990
|
-
@property
|
|
989
|
+
@_builtins.property
|
|
991
990
|
@pulumi.getter(name="tokenNumUses")
|
|
992
|
-
def token_num_uses(self) -> pulumi.Output[Optional[
|
|
991
|
+
def token_num_uses(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
993
992
|
"""
|
|
994
993
|
The maximum number of times a token may be used, a value of zero means unlimited
|
|
995
994
|
"""
|
|
996
995
|
return pulumi.get(self, "token_num_uses")
|
|
997
996
|
|
|
998
|
-
@property
|
|
997
|
+
@_builtins.property
|
|
999
998
|
@pulumi.getter(name="tokenPeriod")
|
|
1000
|
-
def token_period(self) -> pulumi.Output[Optional[
|
|
999
|
+
def token_period(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1001
1000
|
"""
|
|
1002
1001
|
Generated Token's Period
|
|
1003
1002
|
"""
|
|
1004
1003
|
return pulumi.get(self, "token_period")
|
|
1005
1004
|
|
|
1006
|
-
@property
|
|
1005
|
+
@_builtins.property
|
|
1007
1006
|
@pulumi.getter(name="tokenPolicies")
|
|
1008
|
-
def token_policies(self) -> pulumi.Output[Optional[Sequence[
|
|
1007
|
+
def token_policies(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1009
1008
|
"""
|
|
1010
1009
|
Generated Token's Policies
|
|
1011
1010
|
"""
|
|
1012
1011
|
return pulumi.get(self, "token_policies")
|
|
1013
1012
|
|
|
1014
|
-
@property
|
|
1013
|
+
@_builtins.property
|
|
1015
1014
|
@pulumi.getter(name="tokenTtl")
|
|
1016
|
-
def token_ttl(self) -> pulumi.Output[Optional[
|
|
1015
|
+
def token_ttl(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1017
1016
|
"""
|
|
1018
1017
|
The initial ttl of the token to generate in seconds
|
|
1019
1018
|
"""
|
|
1020
1019
|
return pulumi.get(self, "token_ttl")
|
|
1021
1020
|
|
|
1022
|
-
@property
|
|
1021
|
+
@_builtins.property
|
|
1023
1022
|
@pulumi.getter(name="tokenType")
|
|
1024
|
-
def token_type(self) -> pulumi.Output[Optional[
|
|
1023
|
+
def token_type(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1025
1024
|
"""
|
|
1026
1025
|
The type of token to generate, service or batch
|
|
1027
1026
|
"""
|