pulumi-vault 7.2.0a1753339763__py3-none-any.whl → 7.2.0a1753512474__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -1
- pulumi_vault/_inputs.py +672 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +409 -410
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +273 -274
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +239 -240
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +379 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +299 -300
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +353 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +222 -223
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +384 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +673 -674
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +333 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +256 -257
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +81 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +137 -138
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +29 -30
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +207 -208
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +120 -121
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +138 -139
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +336 -337
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753512474.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0a1753512474.dist-info/RECORD +268 -0
- pulumi_vault-7.2.0a1753339763.dist-info/RECORD +0 -268
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753512474.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753512474.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,88 +19,88 @@ __all__ = ['SecretBackendRootSignIntermediateArgs', 'SecretBackendRootSignInterm
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class SecretBackendRootSignIntermediateArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
backend: pulumi.Input[
|
|
24
|
-
common_name: pulumi.Input[
|
|
25
|
-
csr: pulumi.Input[
|
|
26
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
27
|
-
country: Optional[pulumi.Input[
|
|
28
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
29
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
30
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
31
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
32
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
33
|
-
format: Optional[pulumi.Input[
|
|
34
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
35
|
-
issuer_ref: Optional[pulumi.Input[
|
|
36
|
-
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
37
|
-
locality: Optional[pulumi.Input[
|
|
38
|
-
max_path_length: Optional[pulumi.Input[
|
|
39
|
-
namespace: Optional[pulumi.Input[
|
|
40
|
-
not_after: Optional[pulumi.Input[
|
|
41
|
-
not_before_duration: Optional[pulumi.Input[
|
|
42
|
-
organization: Optional[pulumi.Input[
|
|
43
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
44
|
-
ou: Optional[pulumi.Input[
|
|
45
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
46
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
47
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
48
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
49
|
-
postal_code: Optional[pulumi.Input[
|
|
50
|
-
province: Optional[pulumi.Input[
|
|
51
|
-
revoke: Optional[pulumi.Input[
|
|
52
|
-
signature_bits: Optional[pulumi.Input[
|
|
53
|
-
skid: Optional[pulumi.Input[
|
|
54
|
-
street_address: Optional[pulumi.Input[
|
|
55
|
-
ttl: Optional[pulumi.Input[
|
|
56
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
57
|
-
use_csr_values: Optional[pulumi.Input[
|
|
58
|
-
use_pss: Optional[pulumi.Input[
|
|
22
|
+
backend: pulumi.Input[_builtins.str],
|
|
23
|
+
common_name: pulumi.Input[_builtins.str],
|
|
24
|
+
csr: pulumi.Input[_builtins.str],
|
|
25
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
26
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
28
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
29
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
30
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
31
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
32
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
33
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
34
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
36
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
37
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
38
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
39
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
40
|
+
not_before_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
41
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
42
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
43
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
44
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
45
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
46
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
47
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
48
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
49
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
50
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
51
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
52
|
+
skid: Optional[pulumi.Input[_builtins.str]] = None,
|
|
53
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
54
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
55
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
56
|
+
use_csr_values: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
57
|
+
use_pss: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
59
58
|
"""
|
|
60
59
|
The set of arguments for constructing a SecretBackendRootSignIntermediate resource.
|
|
61
|
-
:param pulumi.Input[
|
|
62
|
-
:param pulumi.Input[
|
|
63
|
-
:param pulumi.Input[
|
|
64
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
65
|
-
:param pulumi.Input[
|
|
66
|
-
:param pulumi.Input[
|
|
67
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
68
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
69
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
70
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
71
|
-
:param pulumi.Input[
|
|
72
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
73
|
-
:param pulumi.Input[
|
|
60
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
61
|
+
:param pulumi.Input[_builtins.str] common_name: CN of intermediate to create
|
|
62
|
+
:param pulumi.Input[_builtins.str] csr: The CSR
|
|
63
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
64
|
+
:param pulumi.Input[_builtins.str] country: The country
|
|
65
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
66
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
67
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
68
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
69
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
70
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
71
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
72
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request. May
|
|
74
73
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
75
74
|
the `/pki/issuer/:issuer_ref/{issue,sign}/:name` paths to prevent users
|
|
76
75
|
overriding the role's `issuer_ref` value.
|
|
77
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
78
|
-
:param pulumi.Input[
|
|
79
|
-
:param pulumi.Input[
|
|
80
|
-
:param pulumi.Input[
|
|
76
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] key_usages: Specify the key usages to be added to the existing set of key usages ("CRL", "CertSign") on the generated certificate.
|
|
77
|
+
:param pulumi.Input[_builtins.str] locality: The locality
|
|
78
|
+
:param pulumi.Input[_builtins.int] max_path_length: The maximum path length to encode in the generated certificate
|
|
79
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
81
80
|
The value should not contain leading or trailing forward slashes.
|
|
82
81
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
83
82
|
*Available only for Vault Enterprise*.
|
|
84
|
-
:param pulumi.Input[
|
|
83
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value.
|
|
85
84
|
The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date
|
|
86
85
|
for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
87
|
-
:param pulumi.Input[
|
|
88
|
-
:param pulumi.Input[
|
|
89
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
90
|
-
:param pulumi.Input[
|
|
91
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
92
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
93
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
94
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
95
|
-
:param pulumi.Input[
|
|
96
|
-
:param pulumi.Input[
|
|
97
|
-
:param pulumi.Input[
|
|
98
|
-
:param pulumi.Input[
|
|
99
|
-
:param pulumi.Input[
|
|
100
|
-
:param pulumi.Input[
|
|
101
|
-
:param pulumi.Input[
|
|
102
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
103
|
-
:param pulumi.Input[
|
|
104
|
-
:param pulumi.Input[
|
|
86
|
+
:param pulumi.Input[_builtins.str] not_before_duration: Specifies the duration by which to backdate the NotBefore property.
|
|
87
|
+
:param pulumi.Input[_builtins.str] organization: The organization
|
|
88
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
89
|
+
:param pulumi.Input[_builtins.str] ou: The organization unit
|
|
90
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
|
|
91
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
92
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
93
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
94
|
+
:param pulumi.Input[_builtins.str] postal_code: The postal code
|
|
95
|
+
:param pulumi.Input[_builtins.str] province: The province
|
|
96
|
+
:param pulumi.Input[_builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction.
|
|
97
|
+
:param pulumi.Input[_builtins.int] signature_bits: The number of bits to use in the signature algorithm
|
|
98
|
+
:param pulumi.Input[_builtins.str] skid: Value for the Subject Key Identifier field (see https://tools.ietf.org/html/rfc5280#section-4.2.1.2). Specified as a string in hex format.
|
|
99
|
+
:param pulumi.Input[_builtins.str] street_address: The street address
|
|
100
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
101
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
102
|
+
:param pulumi.Input[_builtins.bool] use_csr_values: Preserve CSR values
|
|
103
|
+
:param pulumi.Input[_builtins.bool] use_pss: Specifies whether or not to use PSS signatures over PKCS#1v1.5 signatures when a RSA-type issuer is used. Ignored for ECDSA/Ed25519 issuers.
|
|
105
104
|
"""
|
|
106
105
|
pulumi.set(__self__, "backend", backend)
|
|
107
106
|
pulumi.set(__self__, "common_name", common_name)
|
|
@@ -173,153 +172,153 @@ class SecretBackendRootSignIntermediateArgs:
|
|
|
173
172
|
if use_pss is not None:
|
|
174
173
|
pulumi.set(__self__, "use_pss", use_pss)
|
|
175
174
|
|
|
176
|
-
@property
|
|
175
|
+
@_builtins.property
|
|
177
176
|
@pulumi.getter
|
|
178
|
-
def backend(self) -> pulumi.Input[
|
|
177
|
+
def backend(self) -> pulumi.Input[_builtins.str]:
|
|
179
178
|
"""
|
|
180
179
|
The PKI secret backend the resource belongs to.
|
|
181
180
|
"""
|
|
182
181
|
return pulumi.get(self, "backend")
|
|
183
182
|
|
|
184
183
|
@backend.setter
|
|
185
|
-
def backend(self, value: pulumi.Input[
|
|
184
|
+
def backend(self, value: pulumi.Input[_builtins.str]):
|
|
186
185
|
pulumi.set(self, "backend", value)
|
|
187
186
|
|
|
188
|
-
@property
|
|
187
|
+
@_builtins.property
|
|
189
188
|
@pulumi.getter(name="commonName")
|
|
190
|
-
def common_name(self) -> pulumi.Input[
|
|
189
|
+
def common_name(self) -> pulumi.Input[_builtins.str]:
|
|
191
190
|
"""
|
|
192
191
|
CN of intermediate to create
|
|
193
192
|
"""
|
|
194
193
|
return pulumi.get(self, "common_name")
|
|
195
194
|
|
|
196
195
|
@common_name.setter
|
|
197
|
-
def common_name(self, value: pulumi.Input[
|
|
196
|
+
def common_name(self, value: pulumi.Input[_builtins.str]):
|
|
198
197
|
pulumi.set(self, "common_name", value)
|
|
199
198
|
|
|
200
|
-
@property
|
|
199
|
+
@_builtins.property
|
|
201
200
|
@pulumi.getter
|
|
202
|
-
def csr(self) -> pulumi.Input[
|
|
201
|
+
def csr(self) -> pulumi.Input[_builtins.str]:
|
|
203
202
|
"""
|
|
204
203
|
The CSR
|
|
205
204
|
"""
|
|
206
205
|
return pulumi.get(self, "csr")
|
|
207
206
|
|
|
208
207
|
@csr.setter
|
|
209
|
-
def csr(self, value: pulumi.Input[
|
|
208
|
+
def csr(self, value: pulumi.Input[_builtins.str]):
|
|
210
209
|
pulumi.set(self, "csr", value)
|
|
211
210
|
|
|
212
|
-
@property
|
|
211
|
+
@_builtins.property
|
|
213
212
|
@pulumi.getter(name="altNames")
|
|
214
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
213
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
215
214
|
"""
|
|
216
215
|
List of alternative names
|
|
217
216
|
"""
|
|
218
217
|
return pulumi.get(self, "alt_names")
|
|
219
218
|
|
|
220
219
|
@alt_names.setter
|
|
221
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
220
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
222
221
|
pulumi.set(self, "alt_names", value)
|
|
223
222
|
|
|
224
|
-
@property
|
|
223
|
+
@_builtins.property
|
|
225
224
|
@pulumi.getter
|
|
226
|
-
def country(self) -> Optional[pulumi.Input[
|
|
225
|
+
def country(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
227
226
|
"""
|
|
228
227
|
The country
|
|
229
228
|
"""
|
|
230
229
|
return pulumi.get(self, "country")
|
|
231
230
|
|
|
232
231
|
@country.setter
|
|
233
|
-
def country(self, value: Optional[pulumi.Input[
|
|
232
|
+
def country(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
234
233
|
pulumi.set(self, "country", value)
|
|
235
234
|
|
|
236
|
-
@property
|
|
235
|
+
@_builtins.property
|
|
237
236
|
@pulumi.getter(name="excludeCnFromSans")
|
|
238
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[
|
|
237
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
239
238
|
"""
|
|
240
239
|
Flag to exclude CN from SANs
|
|
241
240
|
"""
|
|
242
241
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
243
242
|
|
|
244
243
|
@exclude_cn_from_sans.setter
|
|
245
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[
|
|
244
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
246
245
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
247
246
|
|
|
248
|
-
@property
|
|
247
|
+
@_builtins.property
|
|
249
248
|
@pulumi.getter(name="excludedDnsDomains")
|
|
250
|
-
def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
249
|
+
def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
251
250
|
"""
|
|
252
251
|
List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
253
252
|
"""
|
|
254
253
|
return pulumi.get(self, "excluded_dns_domains")
|
|
255
254
|
|
|
256
255
|
@excluded_dns_domains.setter
|
|
257
|
-
def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
256
|
+
def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
258
257
|
pulumi.set(self, "excluded_dns_domains", value)
|
|
259
258
|
|
|
260
|
-
@property
|
|
259
|
+
@_builtins.property
|
|
261
260
|
@pulumi.getter(name="excludedEmailAddresses")
|
|
262
|
-
def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
261
|
+
def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
263
262
|
"""
|
|
264
263
|
List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
265
264
|
"""
|
|
266
265
|
return pulumi.get(self, "excluded_email_addresses")
|
|
267
266
|
|
|
268
267
|
@excluded_email_addresses.setter
|
|
269
|
-
def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
268
|
+
def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
270
269
|
pulumi.set(self, "excluded_email_addresses", value)
|
|
271
270
|
|
|
272
|
-
@property
|
|
271
|
+
@_builtins.property
|
|
273
272
|
@pulumi.getter(name="excludedIpRanges")
|
|
274
|
-
def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
273
|
+
def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
275
274
|
"""
|
|
276
275
|
List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
277
276
|
"""
|
|
278
277
|
return pulumi.get(self, "excluded_ip_ranges")
|
|
279
278
|
|
|
280
279
|
@excluded_ip_ranges.setter
|
|
281
|
-
def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
280
|
+
def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
282
281
|
pulumi.set(self, "excluded_ip_ranges", value)
|
|
283
282
|
|
|
284
|
-
@property
|
|
283
|
+
@_builtins.property
|
|
285
284
|
@pulumi.getter(name="excludedUriDomains")
|
|
286
|
-
def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
285
|
+
def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
287
286
|
"""
|
|
288
287
|
List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
289
288
|
"""
|
|
290
289
|
return pulumi.get(self, "excluded_uri_domains")
|
|
291
290
|
|
|
292
291
|
@excluded_uri_domains.setter
|
|
293
|
-
def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
292
|
+
def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
294
293
|
pulumi.set(self, "excluded_uri_domains", value)
|
|
295
294
|
|
|
296
|
-
@property
|
|
295
|
+
@_builtins.property
|
|
297
296
|
@pulumi.getter
|
|
298
|
-
def format(self) -> Optional[pulumi.Input[
|
|
297
|
+
def format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
299
298
|
"""
|
|
300
299
|
The format of data
|
|
301
300
|
"""
|
|
302
301
|
return pulumi.get(self, "format")
|
|
303
302
|
|
|
304
303
|
@format.setter
|
|
305
|
-
def format(self, value: Optional[pulumi.Input[
|
|
304
|
+
def format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
306
305
|
pulumi.set(self, "format", value)
|
|
307
306
|
|
|
308
|
-
@property
|
|
307
|
+
@_builtins.property
|
|
309
308
|
@pulumi.getter(name="ipSans")
|
|
310
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
309
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
311
310
|
"""
|
|
312
311
|
List of alternative IPs
|
|
313
312
|
"""
|
|
314
313
|
return pulumi.get(self, "ip_sans")
|
|
315
314
|
|
|
316
315
|
@ip_sans.setter
|
|
317
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
316
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
318
317
|
pulumi.set(self, "ip_sans", value)
|
|
319
318
|
|
|
320
|
-
@property
|
|
319
|
+
@_builtins.property
|
|
321
320
|
@pulumi.getter(name="issuerRef")
|
|
322
|
-
def issuer_ref(self) -> Optional[pulumi.Input[
|
|
321
|
+
def issuer_ref(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
323
322
|
"""
|
|
324
323
|
Specifies the default issuer of this request. May
|
|
325
324
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
@@ -329,48 +328,48 @@ class SecretBackendRootSignIntermediateArgs:
|
|
|
329
328
|
return pulumi.get(self, "issuer_ref")
|
|
330
329
|
|
|
331
330
|
@issuer_ref.setter
|
|
332
|
-
def issuer_ref(self, value: Optional[pulumi.Input[
|
|
331
|
+
def issuer_ref(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
333
332
|
pulumi.set(self, "issuer_ref", value)
|
|
334
333
|
|
|
335
|
-
@property
|
|
334
|
+
@_builtins.property
|
|
336
335
|
@pulumi.getter(name="keyUsages")
|
|
337
|
-
def key_usages(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
336
|
+
def key_usages(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
338
337
|
"""
|
|
339
338
|
Specify the key usages to be added to the existing set of key usages ("CRL", "CertSign") on the generated certificate.
|
|
340
339
|
"""
|
|
341
340
|
return pulumi.get(self, "key_usages")
|
|
342
341
|
|
|
343
342
|
@key_usages.setter
|
|
344
|
-
def key_usages(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
343
|
+
def key_usages(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
345
344
|
pulumi.set(self, "key_usages", value)
|
|
346
345
|
|
|
347
|
-
@property
|
|
346
|
+
@_builtins.property
|
|
348
347
|
@pulumi.getter
|
|
349
|
-
def locality(self) -> Optional[pulumi.Input[
|
|
348
|
+
def locality(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
350
349
|
"""
|
|
351
350
|
The locality
|
|
352
351
|
"""
|
|
353
352
|
return pulumi.get(self, "locality")
|
|
354
353
|
|
|
355
354
|
@locality.setter
|
|
356
|
-
def locality(self, value: Optional[pulumi.Input[
|
|
355
|
+
def locality(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
357
356
|
pulumi.set(self, "locality", value)
|
|
358
357
|
|
|
359
|
-
@property
|
|
358
|
+
@_builtins.property
|
|
360
359
|
@pulumi.getter(name="maxPathLength")
|
|
361
|
-
def max_path_length(self) -> Optional[pulumi.Input[
|
|
360
|
+
def max_path_length(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
362
361
|
"""
|
|
363
362
|
The maximum path length to encode in the generated certificate
|
|
364
363
|
"""
|
|
365
364
|
return pulumi.get(self, "max_path_length")
|
|
366
365
|
|
|
367
366
|
@max_path_length.setter
|
|
368
|
-
def max_path_length(self, value: Optional[pulumi.Input[
|
|
367
|
+
def max_path_length(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
369
368
|
pulumi.set(self, "max_path_length", value)
|
|
370
369
|
|
|
371
|
-
@property
|
|
370
|
+
@_builtins.property
|
|
372
371
|
@pulumi.getter
|
|
373
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
372
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
374
373
|
"""
|
|
375
374
|
The namespace to provision the resource in.
|
|
376
375
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -380,12 +379,12 @@ class SecretBackendRootSignIntermediateArgs:
|
|
|
380
379
|
return pulumi.get(self, "namespace")
|
|
381
380
|
|
|
382
381
|
@namespace.setter
|
|
383
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
382
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
384
383
|
pulumi.set(self, "namespace", value)
|
|
385
384
|
|
|
386
|
-
@property
|
|
385
|
+
@_builtins.property
|
|
387
386
|
@pulumi.getter(name="notAfter")
|
|
388
|
-
def not_after(self) -> Optional[pulumi.Input[
|
|
387
|
+
def not_after(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
389
388
|
"""
|
|
390
389
|
Set the Not After field of the certificate with specified date value.
|
|
391
390
|
The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date
|
|
@@ -394,322 +393,322 @@ class SecretBackendRootSignIntermediateArgs:
|
|
|
394
393
|
return pulumi.get(self, "not_after")
|
|
395
394
|
|
|
396
395
|
@not_after.setter
|
|
397
|
-
def not_after(self, value: Optional[pulumi.Input[
|
|
396
|
+
def not_after(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
398
397
|
pulumi.set(self, "not_after", value)
|
|
399
398
|
|
|
400
|
-
@property
|
|
399
|
+
@_builtins.property
|
|
401
400
|
@pulumi.getter(name="notBeforeDuration")
|
|
402
|
-
def not_before_duration(self) -> Optional[pulumi.Input[
|
|
401
|
+
def not_before_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
403
402
|
"""
|
|
404
403
|
Specifies the duration by which to backdate the NotBefore property.
|
|
405
404
|
"""
|
|
406
405
|
return pulumi.get(self, "not_before_duration")
|
|
407
406
|
|
|
408
407
|
@not_before_duration.setter
|
|
409
|
-
def not_before_duration(self, value: Optional[pulumi.Input[
|
|
408
|
+
def not_before_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
410
409
|
pulumi.set(self, "not_before_duration", value)
|
|
411
410
|
|
|
412
|
-
@property
|
|
411
|
+
@_builtins.property
|
|
413
412
|
@pulumi.getter
|
|
414
|
-
def organization(self) -> Optional[pulumi.Input[
|
|
413
|
+
def organization(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
415
414
|
"""
|
|
416
415
|
The organization
|
|
417
416
|
"""
|
|
418
417
|
return pulumi.get(self, "organization")
|
|
419
418
|
|
|
420
419
|
@organization.setter
|
|
421
|
-
def organization(self, value: Optional[pulumi.Input[
|
|
420
|
+
def organization(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
422
421
|
pulumi.set(self, "organization", value)
|
|
423
422
|
|
|
424
|
-
@property
|
|
423
|
+
@_builtins.property
|
|
425
424
|
@pulumi.getter(name="otherSans")
|
|
426
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
425
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
427
426
|
"""
|
|
428
427
|
List of other SANs
|
|
429
428
|
"""
|
|
430
429
|
return pulumi.get(self, "other_sans")
|
|
431
430
|
|
|
432
431
|
@other_sans.setter
|
|
433
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
432
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
434
433
|
pulumi.set(self, "other_sans", value)
|
|
435
434
|
|
|
436
|
-
@property
|
|
435
|
+
@_builtins.property
|
|
437
436
|
@pulumi.getter
|
|
438
|
-
def ou(self) -> Optional[pulumi.Input[
|
|
437
|
+
def ou(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
439
438
|
"""
|
|
440
439
|
The organization unit
|
|
441
440
|
"""
|
|
442
441
|
return pulumi.get(self, "ou")
|
|
443
442
|
|
|
444
443
|
@ou.setter
|
|
445
|
-
def ou(self, value: Optional[pulumi.Input[
|
|
444
|
+
def ou(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
446
445
|
pulumi.set(self, "ou", value)
|
|
447
446
|
|
|
448
|
-
@property
|
|
447
|
+
@_builtins.property
|
|
449
448
|
@pulumi.getter(name="permittedDnsDomains")
|
|
450
|
-
def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
449
|
+
def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
451
450
|
"""
|
|
452
451
|
List of domains for which certificates are allowed to be issued
|
|
453
452
|
"""
|
|
454
453
|
return pulumi.get(self, "permitted_dns_domains")
|
|
455
454
|
|
|
456
455
|
@permitted_dns_domains.setter
|
|
457
|
-
def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
456
|
+
def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
458
457
|
pulumi.set(self, "permitted_dns_domains", value)
|
|
459
458
|
|
|
460
|
-
@property
|
|
459
|
+
@_builtins.property
|
|
461
460
|
@pulumi.getter(name="permittedEmailAddresses")
|
|
462
|
-
def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
461
|
+
def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
463
462
|
"""
|
|
464
463
|
List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
465
464
|
"""
|
|
466
465
|
return pulumi.get(self, "permitted_email_addresses")
|
|
467
466
|
|
|
468
467
|
@permitted_email_addresses.setter
|
|
469
|
-
def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
468
|
+
def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
470
469
|
pulumi.set(self, "permitted_email_addresses", value)
|
|
471
470
|
|
|
472
|
-
@property
|
|
471
|
+
@_builtins.property
|
|
473
472
|
@pulumi.getter(name="permittedIpRanges")
|
|
474
|
-
def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
473
|
+
def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
475
474
|
"""
|
|
476
475
|
List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
477
476
|
"""
|
|
478
477
|
return pulumi.get(self, "permitted_ip_ranges")
|
|
479
478
|
|
|
480
479
|
@permitted_ip_ranges.setter
|
|
481
|
-
def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
480
|
+
def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
482
481
|
pulumi.set(self, "permitted_ip_ranges", value)
|
|
483
482
|
|
|
484
|
-
@property
|
|
483
|
+
@_builtins.property
|
|
485
484
|
@pulumi.getter(name="permittedUriDomains")
|
|
486
|
-
def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
485
|
+
def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
487
486
|
"""
|
|
488
487
|
List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
489
488
|
"""
|
|
490
489
|
return pulumi.get(self, "permitted_uri_domains")
|
|
491
490
|
|
|
492
491
|
@permitted_uri_domains.setter
|
|
493
|
-
def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
492
|
+
def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
494
493
|
pulumi.set(self, "permitted_uri_domains", value)
|
|
495
494
|
|
|
496
|
-
@property
|
|
495
|
+
@_builtins.property
|
|
497
496
|
@pulumi.getter(name="postalCode")
|
|
498
|
-
def postal_code(self) -> Optional[pulumi.Input[
|
|
497
|
+
def postal_code(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
499
498
|
"""
|
|
500
499
|
The postal code
|
|
501
500
|
"""
|
|
502
501
|
return pulumi.get(self, "postal_code")
|
|
503
502
|
|
|
504
503
|
@postal_code.setter
|
|
505
|
-
def postal_code(self, value: Optional[pulumi.Input[
|
|
504
|
+
def postal_code(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
506
505
|
pulumi.set(self, "postal_code", value)
|
|
507
506
|
|
|
508
|
-
@property
|
|
507
|
+
@_builtins.property
|
|
509
508
|
@pulumi.getter
|
|
510
|
-
def province(self) -> Optional[pulumi.Input[
|
|
509
|
+
def province(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
511
510
|
"""
|
|
512
511
|
The province
|
|
513
512
|
"""
|
|
514
513
|
return pulumi.get(self, "province")
|
|
515
514
|
|
|
516
515
|
@province.setter
|
|
517
|
-
def province(self, value: Optional[pulumi.Input[
|
|
516
|
+
def province(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
518
517
|
pulumi.set(self, "province", value)
|
|
519
518
|
|
|
520
|
-
@property
|
|
519
|
+
@_builtins.property
|
|
521
520
|
@pulumi.getter
|
|
522
|
-
def revoke(self) -> Optional[pulumi.Input[
|
|
521
|
+
def revoke(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
523
522
|
"""
|
|
524
523
|
If set to `true`, the certificate will be revoked on resource destruction.
|
|
525
524
|
"""
|
|
526
525
|
return pulumi.get(self, "revoke")
|
|
527
526
|
|
|
528
527
|
@revoke.setter
|
|
529
|
-
def revoke(self, value: Optional[pulumi.Input[
|
|
528
|
+
def revoke(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
530
529
|
pulumi.set(self, "revoke", value)
|
|
531
530
|
|
|
532
|
-
@property
|
|
531
|
+
@_builtins.property
|
|
533
532
|
@pulumi.getter(name="signatureBits")
|
|
534
|
-
def signature_bits(self) -> Optional[pulumi.Input[
|
|
533
|
+
def signature_bits(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
535
534
|
"""
|
|
536
535
|
The number of bits to use in the signature algorithm
|
|
537
536
|
"""
|
|
538
537
|
return pulumi.get(self, "signature_bits")
|
|
539
538
|
|
|
540
539
|
@signature_bits.setter
|
|
541
|
-
def signature_bits(self, value: Optional[pulumi.Input[
|
|
540
|
+
def signature_bits(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
542
541
|
pulumi.set(self, "signature_bits", value)
|
|
543
542
|
|
|
544
|
-
@property
|
|
543
|
+
@_builtins.property
|
|
545
544
|
@pulumi.getter
|
|
546
|
-
def skid(self) -> Optional[pulumi.Input[
|
|
545
|
+
def skid(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
547
546
|
"""
|
|
548
547
|
Value for the Subject Key Identifier field (see https://tools.ietf.org/html/rfc5280#section-4.2.1.2). Specified as a string in hex format.
|
|
549
548
|
"""
|
|
550
549
|
return pulumi.get(self, "skid")
|
|
551
550
|
|
|
552
551
|
@skid.setter
|
|
553
|
-
def skid(self, value: Optional[pulumi.Input[
|
|
552
|
+
def skid(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
554
553
|
pulumi.set(self, "skid", value)
|
|
555
554
|
|
|
556
|
-
@property
|
|
555
|
+
@_builtins.property
|
|
557
556
|
@pulumi.getter(name="streetAddress")
|
|
558
|
-
def street_address(self) -> Optional[pulumi.Input[
|
|
557
|
+
def street_address(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
559
558
|
"""
|
|
560
559
|
The street address
|
|
561
560
|
"""
|
|
562
561
|
return pulumi.get(self, "street_address")
|
|
563
562
|
|
|
564
563
|
@street_address.setter
|
|
565
|
-
def street_address(self, value: Optional[pulumi.Input[
|
|
564
|
+
def street_address(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
566
565
|
pulumi.set(self, "street_address", value)
|
|
567
566
|
|
|
568
|
-
@property
|
|
567
|
+
@_builtins.property
|
|
569
568
|
@pulumi.getter
|
|
570
|
-
def ttl(self) -> Optional[pulumi.Input[
|
|
569
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
571
570
|
"""
|
|
572
571
|
Time to live
|
|
573
572
|
"""
|
|
574
573
|
return pulumi.get(self, "ttl")
|
|
575
574
|
|
|
576
575
|
@ttl.setter
|
|
577
|
-
def ttl(self, value: Optional[pulumi.Input[
|
|
576
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
578
577
|
pulumi.set(self, "ttl", value)
|
|
579
578
|
|
|
580
|
-
@property
|
|
579
|
+
@_builtins.property
|
|
581
580
|
@pulumi.getter(name="uriSans")
|
|
582
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
581
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
583
582
|
"""
|
|
584
583
|
List of alternative URIs
|
|
585
584
|
"""
|
|
586
585
|
return pulumi.get(self, "uri_sans")
|
|
587
586
|
|
|
588
587
|
@uri_sans.setter
|
|
589
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
588
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
590
589
|
pulumi.set(self, "uri_sans", value)
|
|
591
590
|
|
|
592
|
-
@property
|
|
591
|
+
@_builtins.property
|
|
593
592
|
@pulumi.getter(name="useCsrValues")
|
|
594
|
-
def use_csr_values(self) -> Optional[pulumi.Input[
|
|
593
|
+
def use_csr_values(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
595
594
|
"""
|
|
596
595
|
Preserve CSR values
|
|
597
596
|
"""
|
|
598
597
|
return pulumi.get(self, "use_csr_values")
|
|
599
598
|
|
|
600
599
|
@use_csr_values.setter
|
|
601
|
-
def use_csr_values(self, value: Optional[pulumi.Input[
|
|
600
|
+
def use_csr_values(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
602
601
|
pulumi.set(self, "use_csr_values", value)
|
|
603
602
|
|
|
604
|
-
@property
|
|
603
|
+
@_builtins.property
|
|
605
604
|
@pulumi.getter(name="usePss")
|
|
606
|
-
def use_pss(self) -> Optional[pulumi.Input[
|
|
605
|
+
def use_pss(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
607
606
|
"""
|
|
608
607
|
Specifies whether or not to use PSS signatures over PKCS#1v1.5 signatures when a RSA-type issuer is used. Ignored for ECDSA/Ed25519 issuers.
|
|
609
608
|
"""
|
|
610
609
|
return pulumi.get(self, "use_pss")
|
|
611
610
|
|
|
612
611
|
@use_pss.setter
|
|
613
|
-
def use_pss(self, value: Optional[pulumi.Input[
|
|
612
|
+
def use_pss(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
614
613
|
pulumi.set(self, "use_pss", value)
|
|
615
614
|
|
|
616
615
|
|
|
617
616
|
@pulumi.input_type
|
|
618
617
|
class _SecretBackendRootSignIntermediateState:
|
|
619
618
|
def __init__(__self__, *,
|
|
620
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
621
|
-
backend: Optional[pulumi.Input[
|
|
622
|
-
ca_chains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
623
|
-
certificate: Optional[pulumi.Input[
|
|
624
|
-
certificate_bundle: Optional[pulumi.Input[
|
|
625
|
-
common_name: Optional[pulumi.Input[
|
|
626
|
-
country: Optional[pulumi.Input[
|
|
627
|
-
csr: Optional[pulumi.Input[
|
|
628
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
629
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
630
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
631
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
632
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
633
|
-
format: Optional[pulumi.Input[
|
|
634
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
635
|
-
issuer_ref: Optional[pulumi.Input[
|
|
636
|
-
issuing_ca: Optional[pulumi.Input[
|
|
637
|
-
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
638
|
-
locality: Optional[pulumi.Input[
|
|
639
|
-
max_path_length: Optional[pulumi.Input[
|
|
640
|
-
namespace: Optional[pulumi.Input[
|
|
641
|
-
not_after: Optional[pulumi.Input[
|
|
642
|
-
not_before_duration: Optional[pulumi.Input[
|
|
643
|
-
organization: Optional[pulumi.Input[
|
|
644
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
645
|
-
ou: Optional[pulumi.Input[
|
|
646
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
647
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
648
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
649
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
650
|
-
postal_code: Optional[pulumi.Input[
|
|
651
|
-
province: Optional[pulumi.Input[
|
|
652
|
-
revoke: Optional[pulumi.Input[
|
|
653
|
-
serial_number: Optional[pulumi.Input[
|
|
654
|
-
signature_bits: Optional[pulumi.Input[
|
|
655
|
-
skid: Optional[pulumi.Input[
|
|
656
|
-
street_address: Optional[pulumi.Input[
|
|
657
|
-
ttl: Optional[pulumi.Input[
|
|
658
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
659
|
-
use_csr_values: Optional[pulumi.Input[
|
|
660
|
-
use_pss: Optional[pulumi.Input[
|
|
619
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
620
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
621
|
+
ca_chains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
622
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
623
|
+
certificate_bundle: Optional[pulumi.Input[_builtins.str]] = None,
|
|
624
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
625
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
626
|
+
csr: Optional[pulumi.Input[_builtins.str]] = None,
|
|
627
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
628
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
629
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
630
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
631
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
632
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
633
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
634
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
635
|
+
issuing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
636
|
+
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
637
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
638
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
639
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
640
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
641
|
+
not_before_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
642
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
643
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
644
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
645
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
646
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
647
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
648
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
649
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
650
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
651
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
652
|
+
serial_number: Optional[pulumi.Input[_builtins.str]] = None,
|
|
653
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
654
|
+
skid: Optional[pulumi.Input[_builtins.str]] = None,
|
|
655
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
656
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
657
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
658
|
+
use_csr_values: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
659
|
+
use_pss: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
661
660
|
"""
|
|
662
661
|
Input properties used for looking up and filtering SecretBackendRootSignIntermediate resources.
|
|
663
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
664
|
-
:param pulumi.Input[
|
|
665
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
666
|
-
:param pulumi.Input[
|
|
667
|
-
:param pulumi.Input[
|
|
662
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
663
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
664
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ca_chains: A list of the issuing and intermediate CA certificates in the `format` specified.
|
|
665
|
+
:param pulumi.Input[_builtins.str] certificate: The intermediate CA certificate in the `format` specified.
|
|
666
|
+
:param pulumi.Input[_builtins.str] certificate_bundle: The concatenation of the intermediate CA and the issuing CA certificates (PEM encoded).
|
|
668
667
|
Requires the `format` to be set to any of: pem, pem_bundle. The value will be empty for all other formats.
|
|
669
|
-
:param pulumi.Input[
|
|
670
|
-
:param pulumi.Input[
|
|
671
|
-
:param pulumi.Input[
|
|
672
|
-
:param pulumi.Input[
|
|
673
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
674
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
675
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
676
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
677
|
-
:param pulumi.Input[
|
|
678
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
679
|
-
:param pulumi.Input[
|
|
668
|
+
:param pulumi.Input[_builtins.str] common_name: CN of intermediate to create
|
|
669
|
+
:param pulumi.Input[_builtins.str] country: The country
|
|
670
|
+
:param pulumi.Input[_builtins.str] csr: The CSR
|
|
671
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
672
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
673
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
674
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
675
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
676
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
677
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
678
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request. May
|
|
680
679
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
681
680
|
the `/pki/issuer/:issuer_ref/{issue,sign}/:name` paths to prevent users
|
|
682
681
|
overriding the role's `issuer_ref` value.
|
|
683
|
-
:param pulumi.Input[
|
|
684
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
685
|
-
:param pulumi.Input[
|
|
686
|
-
:param pulumi.Input[
|
|
687
|
-
:param pulumi.Input[
|
|
682
|
+
:param pulumi.Input[_builtins.str] issuing_ca: The issuing CA certificate in the `format` specified.
|
|
683
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] key_usages: Specify the key usages to be added to the existing set of key usages ("CRL", "CertSign") on the generated certificate.
|
|
684
|
+
:param pulumi.Input[_builtins.str] locality: The locality
|
|
685
|
+
:param pulumi.Input[_builtins.int] max_path_length: The maximum path length to encode in the generated certificate
|
|
686
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
688
687
|
The value should not contain leading or trailing forward slashes.
|
|
689
688
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
690
689
|
*Available only for Vault Enterprise*.
|
|
691
|
-
:param pulumi.Input[
|
|
690
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value.
|
|
692
691
|
The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date
|
|
693
692
|
for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
694
|
-
:param pulumi.Input[
|
|
695
|
-
:param pulumi.Input[
|
|
696
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
697
|
-
:param pulumi.Input[
|
|
698
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
699
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
700
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
701
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
702
|
-
:param pulumi.Input[
|
|
703
|
-
:param pulumi.Input[
|
|
704
|
-
:param pulumi.Input[
|
|
705
|
-
:param pulumi.Input[
|
|
706
|
-
:param pulumi.Input[
|
|
707
|
-
:param pulumi.Input[
|
|
708
|
-
:param pulumi.Input[
|
|
709
|
-
:param pulumi.Input[
|
|
710
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
711
|
-
:param pulumi.Input[
|
|
712
|
-
:param pulumi.Input[
|
|
693
|
+
:param pulumi.Input[_builtins.str] not_before_duration: Specifies the duration by which to backdate the NotBefore property.
|
|
694
|
+
:param pulumi.Input[_builtins.str] organization: The organization
|
|
695
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
696
|
+
:param pulumi.Input[_builtins.str] ou: The organization unit
|
|
697
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
|
|
698
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
699
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
700
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
701
|
+
:param pulumi.Input[_builtins.str] postal_code: The postal code
|
|
702
|
+
:param pulumi.Input[_builtins.str] province: The province
|
|
703
|
+
:param pulumi.Input[_builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction.
|
|
704
|
+
:param pulumi.Input[_builtins.str] serial_number: The certificate's serial number, hex formatted.
|
|
705
|
+
:param pulumi.Input[_builtins.int] signature_bits: The number of bits to use in the signature algorithm
|
|
706
|
+
:param pulumi.Input[_builtins.str] skid: Value for the Subject Key Identifier field (see https://tools.ietf.org/html/rfc5280#section-4.2.1.2). Specified as a string in hex format.
|
|
707
|
+
:param pulumi.Input[_builtins.str] street_address: The street address
|
|
708
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
709
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
710
|
+
:param pulumi.Input[_builtins.bool] use_csr_values: Preserve CSR values
|
|
711
|
+
:param pulumi.Input[_builtins.bool] use_pss: Specifies whether or not to use PSS signatures over PKCS#1v1.5 signatures when a RSA-type issuer is used. Ignored for ECDSA/Ed25519 issuers.
|
|
713
712
|
"""
|
|
714
713
|
if alt_names is not None:
|
|
715
714
|
pulumi.set(__self__, "alt_names", alt_names)
|
|
@@ -794,57 +793,57 @@ class _SecretBackendRootSignIntermediateState:
|
|
|
794
793
|
if use_pss is not None:
|
|
795
794
|
pulumi.set(__self__, "use_pss", use_pss)
|
|
796
795
|
|
|
797
|
-
@property
|
|
796
|
+
@_builtins.property
|
|
798
797
|
@pulumi.getter(name="altNames")
|
|
799
|
-
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
798
|
+
def alt_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
800
799
|
"""
|
|
801
800
|
List of alternative names
|
|
802
801
|
"""
|
|
803
802
|
return pulumi.get(self, "alt_names")
|
|
804
803
|
|
|
805
804
|
@alt_names.setter
|
|
806
|
-
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
805
|
+
def alt_names(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
807
806
|
pulumi.set(self, "alt_names", value)
|
|
808
807
|
|
|
809
|
-
@property
|
|
808
|
+
@_builtins.property
|
|
810
809
|
@pulumi.getter
|
|
811
|
-
def backend(self) -> Optional[pulumi.Input[
|
|
810
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
812
811
|
"""
|
|
813
812
|
The PKI secret backend the resource belongs to.
|
|
814
813
|
"""
|
|
815
814
|
return pulumi.get(self, "backend")
|
|
816
815
|
|
|
817
816
|
@backend.setter
|
|
818
|
-
def backend(self, value: Optional[pulumi.Input[
|
|
817
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
819
818
|
pulumi.set(self, "backend", value)
|
|
820
819
|
|
|
821
|
-
@property
|
|
820
|
+
@_builtins.property
|
|
822
821
|
@pulumi.getter(name="caChains")
|
|
823
|
-
def ca_chains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
822
|
+
def ca_chains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
824
823
|
"""
|
|
825
824
|
A list of the issuing and intermediate CA certificates in the `format` specified.
|
|
826
825
|
"""
|
|
827
826
|
return pulumi.get(self, "ca_chains")
|
|
828
827
|
|
|
829
828
|
@ca_chains.setter
|
|
830
|
-
def ca_chains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
829
|
+
def ca_chains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
831
830
|
pulumi.set(self, "ca_chains", value)
|
|
832
831
|
|
|
833
|
-
@property
|
|
832
|
+
@_builtins.property
|
|
834
833
|
@pulumi.getter
|
|
835
|
-
def certificate(self) -> Optional[pulumi.Input[
|
|
834
|
+
def certificate(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
836
835
|
"""
|
|
837
836
|
The intermediate CA certificate in the `format` specified.
|
|
838
837
|
"""
|
|
839
838
|
return pulumi.get(self, "certificate")
|
|
840
839
|
|
|
841
840
|
@certificate.setter
|
|
842
|
-
def certificate(self, value: Optional[pulumi.Input[
|
|
841
|
+
def certificate(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
843
842
|
pulumi.set(self, "certificate", value)
|
|
844
843
|
|
|
845
|
-
@property
|
|
844
|
+
@_builtins.property
|
|
846
845
|
@pulumi.getter(name="certificateBundle")
|
|
847
|
-
def certificate_bundle(self) -> Optional[pulumi.Input[
|
|
846
|
+
def certificate_bundle(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
848
847
|
"""
|
|
849
848
|
The concatenation of the intermediate CA and the issuing CA certificates (PEM encoded).
|
|
850
849
|
Requires the `format` to be set to any of: pem, pem_bundle. The value will be empty for all other formats.
|
|
@@ -852,132 +851,132 @@ class _SecretBackendRootSignIntermediateState:
|
|
|
852
851
|
return pulumi.get(self, "certificate_bundle")
|
|
853
852
|
|
|
854
853
|
@certificate_bundle.setter
|
|
855
|
-
def certificate_bundle(self, value: Optional[pulumi.Input[
|
|
854
|
+
def certificate_bundle(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
856
855
|
pulumi.set(self, "certificate_bundle", value)
|
|
857
856
|
|
|
858
|
-
@property
|
|
857
|
+
@_builtins.property
|
|
859
858
|
@pulumi.getter(name="commonName")
|
|
860
|
-
def common_name(self) -> Optional[pulumi.Input[
|
|
859
|
+
def common_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
861
860
|
"""
|
|
862
861
|
CN of intermediate to create
|
|
863
862
|
"""
|
|
864
863
|
return pulumi.get(self, "common_name")
|
|
865
864
|
|
|
866
865
|
@common_name.setter
|
|
867
|
-
def common_name(self, value: Optional[pulumi.Input[
|
|
866
|
+
def common_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
868
867
|
pulumi.set(self, "common_name", value)
|
|
869
868
|
|
|
870
|
-
@property
|
|
869
|
+
@_builtins.property
|
|
871
870
|
@pulumi.getter
|
|
872
|
-
def country(self) -> Optional[pulumi.Input[
|
|
871
|
+
def country(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
873
872
|
"""
|
|
874
873
|
The country
|
|
875
874
|
"""
|
|
876
875
|
return pulumi.get(self, "country")
|
|
877
876
|
|
|
878
877
|
@country.setter
|
|
879
|
-
def country(self, value: Optional[pulumi.Input[
|
|
878
|
+
def country(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
880
879
|
pulumi.set(self, "country", value)
|
|
881
880
|
|
|
882
|
-
@property
|
|
881
|
+
@_builtins.property
|
|
883
882
|
@pulumi.getter
|
|
884
|
-
def csr(self) -> Optional[pulumi.Input[
|
|
883
|
+
def csr(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
885
884
|
"""
|
|
886
885
|
The CSR
|
|
887
886
|
"""
|
|
888
887
|
return pulumi.get(self, "csr")
|
|
889
888
|
|
|
890
889
|
@csr.setter
|
|
891
|
-
def csr(self, value: Optional[pulumi.Input[
|
|
890
|
+
def csr(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
892
891
|
pulumi.set(self, "csr", value)
|
|
893
892
|
|
|
894
|
-
@property
|
|
893
|
+
@_builtins.property
|
|
895
894
|
@pulumi.getter(name="excludeCnFromSans")
|
|
896
|
-
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[
|
|
895
|
+
def exclude_cn_from_sans(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
897
896
|
"""
|
|
898
897
|
Flag to exclude CN from SANs
|
|
899
898
|
"""
|
|
900
899
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
901
900
|
|
|
902
901
|
@exclude_cn_from_sans.setter
|
|
903
|
-
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[
|
|
902
|
+
def exclude_cn_from_sans(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
904
903
|
pulumi.set(self, "exclude_cn_from_sans", value)
|
|
905
904
|
|
|
906
|
-
@property
|
|
905
|
+
@_builtins.property
|
|
907
906
|
@pulumi.getter(name="excludedDnsDomains")
|
|
908
|
-
def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
907
|
+
def excluded_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
909
908
|
"""
|
|
910
909
|
List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
911
910
|
"""
|
|
912
911
|
return pulumi.get(self, "excluded_dns_domains")
|
|
913
912
|
|
|
914
913
|
@excluded_dns_domains.setter
|
|
915
|
-
def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
914
|
+
def excluded_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
916
915
|
pulumi.set(self, "excluded_dns_domains", value)
|
|
917
916
|
|
|
918
|
-
@property
|
|
917
|
+
@_builtins.property
|
|
919
918
|
@pulumi.getter(name="excludedEmailAddresses")
|
|
920
|
-
def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
919
|
+
def excluded_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
921
920
|
"""
|
|
922
921
|
List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
923
922
|
"""
|
|
924
923
|
return pulumi.get(self, "excluded_email_addresses")
|
|
925
924
|
|
|
926
925
|
@excluded_email_addresses.setter
|
|
927
|
-
def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
926
|
+
def excluded_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
928
927
|
pulumi.set(self, "excluded_email_addresses", value)
|
|
929
928
|
|
|
930
|
-
@property
|
|
929
|
+
@_builtins.property
|
|
931
930
|
@pulumi.getter(name="excludedIpRanges")
|
|
932
|
-
def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
931
|
+
def excluded_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
933
932
|
"""
|
|
934
933
|
List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
935
934
|
"""
|
|
936
935
|
return pulumi.get(self, "excluded_ip_ranges")
|
|
937
936
|
|
|
938
937
|
@excluded_ip_ranges.setter
|
|
939
|
-
def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
938
|
+
def excluded_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
940
939
|
pulumi.set(self, "excluded_ip_ranges", value)
|
|
941
940
|
|
|
942
|
-
@property
|
|
941
|
+
@_builtins.property
|
|
943
942
|
@pulumi.getter(name="excludedUriDomains")
|
|
944
|
-
def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
943
|
+
def excluded_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
945
944
|
"""
|
|
946
945
|
List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
947
946
|
"""
|
|
948
947
|
return pulumi.get(self, "excluded_uri_domains")
|
|
949
948
|
|
|
950
949
|
@excluded_uri_domains.setter
|
|
951
|
-
def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
950
|
+
def excluded_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
952
951
|
pulumi.set(self, "excluded_uri_domains", value)
|
|
953
952
|
|
|
954
|
-
@property
|
|
953
|
+
@_builtins.property
|
|
955
954
|
@pulumi.getter
|
|
956
|
-
def format(self) -> Optional[pulumi.Input[
|
|
955
|
+
def format(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
957
956
|
"""
|
|
958
957
|
The format of data
|
|
959
958
|
"""
|
|
960
959
|
return pulumi.get(self, "format")
|
|
961
960
|
|
|
962
961
|
@format.setter
|
|
963
|
-
def format(self, value: Optional[pulumi.Input[
|
|
962
|
+
def format(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
964
963
|
pulumi.set(self, "format", value)
|
|
965
964
|
|
|
966
|
-
@property
|
|
965
|
+
@_builtins.property
|
|
967
966
|
@pulumi.getter(name="ipSans")
|
|
968
|
-
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
967
|
+
def ip_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
969
968
|
"""
|
|
970
969
|
List of alternative IPs
|
|
971
970
|
"""
|
|
972
971
|
return pulumi.get(self, "ip_sans")
|
|
973
972
|
|
|
974
973
|
@ip_sans.setter
|
|
975
|
-
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
974
|
+
def ip_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
976
975
|
pulumi.set(self, "ip_sans", value)
|
|
977
976
|
|
|
978
|
-
@property
|
|
977
|
+
@_builtins.property
|
|
979
978
|
@pulumi.getter(name="issuerRef")
|
|
980
|
-
def issuer_ref(self) -> Optional[pulumi.Input[
|
|
979
|
+
def issuer_ref(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
981
980
|
"""
|
|
982
981
|
Specifies the default issuer of this request. May
|
|
983
982
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
@@ -987,60 +986,60 @@ class _SecretBackendRootSignIntermediateState:
|
|
|
987
986
|
return pulumi.get(self, "issuer_ref")
|
|
988
987
|
|
|
989
988
|
@issuer_ref.setter
|
|
990
|
-
def issuer_ref(self, value: Optional[pulumi.Input[
|
|
989
|
+
def issuer_ref(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
991
990
|
pulumi.set(self, "issuer_ref", value)
|
|
992
991
|
|
|
993
|
-
@property
|
|
992
|
+
@_builtins.property
|
|
994
993
|
@pulumi.getter(name="issuingCa")
|
|
995
|
-
def issuing_ca(self) -> Optional[pulumi.Input[
|
|
994
|
+
def issuing_ca(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
996
995
|
"""
|
|
997
996
|
The issuing CA certificate in the `format` specified.
|
|
998
997
|
"""
|
|
999
998
|
return pulumi.get(self, "issuing_ca")
|
|
1000
999
|
|
|
1001
1000
|
@issuing_ca.setter
|
|
1002
|
-
def issuing_ca(self, value: Optional[pulumi.Input[
|
|
1001
|
+
def issuing_ca(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1003
1002
|
pulumi.set(self, "issuing_ca", value)
|
|
1004
1003
|
|
|
1005
|
-
@property
|
|
1004
|
+
@_builtins.property
|
|
1006
1005
|
@pulumi.getter(name="keyUsages")
|
|
1007
|
-
def key_usages(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1006
|
+
def key_usages(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1008
1007
|
"""
|
|
1009
1008
|
Specify the key usages to be added to the existing set of key usages ("CRL", "CertSign") on the generated certificate.
|
|
1010
1009
|
"""
|
|
1011
1010
|
return pulumi.get(self, "key_usages")
|
|
1012
1011
|
|
|
1013
1012
|
@key_usages.setter
|
|
1014
|
-
def key_usages(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1013
|
+
def key_usages(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1015
1014
|
pulumi.set(self, "key_usages", value)
|
|
1016
1015
|
|
|
1017
|
-
@property
|
|
1016
|
+
@_builtins.property
|
|
1018
1017
|
@pulumi.getter
|
|
1019
|
-
def locality(self) -> Optional[pulumi.Input[
|
|
1018
|
+
def locality(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1020
1019
|
"""
|
|
1021
1020
|
The locality
|
|
1022
1021
|
"""
|
|
1023
1022
|
return pulumi.get(self, "locality")
|
|
1024
1023
|
|
|
1025
1024
|
@locality.setter
|
|
1026
|
-
def locality(self, value: Optional[pulumi.Input[
|
|
1025
|
+
def locality(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1027
1026
|
pulumi.set(self, "locality", value)
|
|
1028
1027
|
|
|
1029
|
-
@property
|
|
1028
|
+
@_builtins.property
|
|
1030
1029
|
@pulumi.getter(name="maxPathLength")
|
|
1031
|
-
def max_path_length(self) -> Optional[pulumi.Input[
|
|
1030
|
+
def max_path_length(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1032
1031
|
"""
|
|
1033
1032
|
The maximum path length to encode in the generated certificate
|
|
1034
1033
|
"""
|
|
1035
1034
|
return pulumi.get(self, "max_path_length")
|
|
1036
1035
|
|
|
1037
1036
|
@max_path_length.setter
|
|
1038
|
-
def max_path_length(self, value: Optional[pulumi.Input[
|
|
1037
|
+
def max_path_length(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
1039
1038
|
pulumi.set(self, "max_path_length", value)
|
|
1040
1039
|
|
|
1041
|
-
@property
|
|
1040
|
+
@_builtins.property
|
|
1042
1041
|
@pulumi.getter
|
|
1043
|
-
def namespace(self) -> Optional[pulumi.Input[
|
|
1042
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1044
1043
|
"""
|
|
1045
1044
|
The namespace to provision the resource in.
|
|
1046
1045
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1050,12 +1049,12 @@ class _SecretBackendRootSignIntermediateState:
|
|
|
1050
1049
|
return pulumi.get(self, "namespace")
|
|
1051
1050
|
|
|
1052
1051
|
@namespace.setter
|
|
1053
|
-
def namespace(self, value: Optional[pulumi.Input[
|
|
1052
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1054
1053
|
pulumi.set(self, "namespace", value)
|
|
1055
1054
|
|
|
1056
|
-
@property
|
|
1055
|
+
@_builtins.property
|
|
1057
1056
|
@pulumi.getter(name="notAfter")
|
|
1058
|
-
def not_after(self) -> Optional[pulumi.Input[
|
|
1057
|
+
def not_after(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1059
1058
|
"""
|
|
1060
1059
|
Set the Not After field of the certificate with specified date value.
|
|
1061
1060
|
The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date
|
|
@@ -1064,235 +1063,235 @@ class _SecretBackendRootSignIntermediateState:
|
|
|
1064
1063
|
return pulumi.get(self, "not_after")
|
|
1065
1064
|
|
|
1066
1065
|
@not_after.setter
|
|
1067
|
-
def not_after(self, value: Optional[pulumi.Input[
|
|
1066
|
+
def not_after(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1068
1067
|
pulumi.set(self, "not_after", value)
|
|
1069
1068
|
|
|
1070
|
-
@property
|
|
1069
|
+
@_builtins.property
|
|
1071
1070
|
@pulumi.getter(name="notBeforeDuration")
|
|
1072
|
-
def not_before_duration(self) -> Optional[pulumi.Input[
|
|
1071
|
+
def not_before_duration(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1073
1072
|
"""
|
|
1074
1073
|
Specifies the duration by which to backdate the NotBefore property.
|
|
1075
1074
|
"""
|
|
1076
1075
|
return pulumi.get(self, "not_before_duration")
|
|
1077
1076
|
|
|
1078
1077
|
@not_before_duration.setter
|
|
1079
|
-
def not_before_duration(self, value: Optional[pulumi.Input[
|
|
1078
|
+
def not_before_duration(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1080
1079
|
pulumi.set(self, "not_before_duration", value)
|
|
1081
1080
|
|
|
1082
|
-
@property
|
|
1081
|
+
@_builtins.property
|
|
1083
1082
|
@pulumi.getter
|
|
1084
|
-
def organization(self) -> Optional[pulumi.Input[
|
|
1083
|
+
def organization(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1085
1084
|
"""
|
|
1086
1085
|
The organization
|
|
1087
1086
|
"""
|
|
1088
1087
|
return pulumi.get(self, "organization")
|
|
1089
1088
|
|
|
1090
1089
|
@organization.setter
|
|
1091
|
-
def organization(self, value: Optional[pulumi.Input[
|
|
1090
|
+
def organization(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1092
1091
|
pulumi.set(self, "organization", value)
|
|
1093
1092
|
|
|
1094
|
-
@property
|
|
1093
|
+
@_builtins.property
|
|
1095
1094
|
@pulumi.getter(name="otherSans")
|
|
1096
|
-
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1095
|
+
def other_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1097
1096
|
"""
|
|
1098
1097
|
List of other SANs
|
|
1099
1098
|
"""
|
|
1100
1099
|
return pulumi.get(self, "other_sans")
|
|
1101
1100
|
|
|
1102
1101
|
@other_sans.setter
|
|
1103
|
-
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1102
|
+
def other_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1104
1103
|
pulumi.set(self, "other_sans", value)
|
|
1105
1104
|
|
|
1106
|
-
@property
|
|
1105
|
+
@_builtins.property
|
|
1107
1106
|
@pulumi.getter
|
|
1108
|
-
def ou(self) -> Optional[pulumi.Input[
|
|
1107
|
+
def ou(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1109
1108
|
"""
|
|
1110
1109
|
The organization unit
|
|
1111
1110
|
"""
|
|
1112
1111
|
return pulumi.get(self, "ou")
|
|
1113
1112
|
|
|
1114
1113
|
@ou.setter
|
|
1115
|
-
def ou(self, value: Optional[pulumi.Input[
|
|
1114
|
+
def ou(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1116
1115
|
pulumi.set(self, "ou", value)
|
|
1117
1116
|
|
|
1118
|
-
@property
|
|
1117
|
+
@_builtins.property
|
|
1119
1118
|
@pulumi.getter(name="permittedDnsDomains")
|
|
1120
|
-
def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1119
|
+
def permitted_dns_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1121
1120
|
"""
|
|
1122
1121
|
List of domains for which certificates are allowed to be issued
|
|
1123
1122
|
"""
|
|
1124
1123
|
return pulumi.get(self, "permitted_dns_domains")
|
|
1125
1124
|
|
|
1126
1125
|
@permitted_dns_domains.setter
|
|
1127
|
-
def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1126
|
+
def permitted_dns_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1128
1127
|
pulumi.set(self, "permitted_dns_domains", value)
|
|
1129
1128
|
|
|
1130
|
-
@property
|
|
1129
|
+
@_builtins.property
|
|
1131
1130
|
@pulumi.getter(name="permittedEmailAddresses")
|
|
1132
|
-
def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1131
|
+
def permitted_email_addresses(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1133
1132
|
"""
|
|
1134
1133
|
List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1135
1134
|
"""
|
|
1136
1135
|
return pulumi.get(self, "permitted_email_addresses")
|
|
1137
1136
|
|
|
1138
1137
|
@permitted_email_addresses.setter
|
|
1139
|
-
def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1138
|
+
def permitted_email_addresses(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1140
1139
|
pulumi.set(self, "permitted_email_addresses", value)
|
|
1141
1140
|
|
|
1142
|
-
@property
|
|
1141
|
+
@_builtins.property
|
|
1143
1142
|
@pulumi.getter(name="permittedIpRanges")
|
|
1144
|
-
def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1143
|
+
def permitted_ip_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1145
1144
|
"""
|
|
1146
1145
|
List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1147
1146
|
"""
|
|
1148
1147
|
return pulumi.get(self, "permitted_ip_ranges")
|
|
1149
1148
|
|
|
1150
1149
|
@permitted_ip_ranges.setter
|
|
1151
|
-
def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1150
|
+
def permitted_ip_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1152
1151
|
pulumi.set(self, "permitted_ip_ranges", value)
|
|
1153
1152
|
|
|
1154
|
-
@property
|
|
1153
|
+
@_builtins.property
|
|
1155
1154
|
@pulumi.getter(name="permittedUriDomains")
|
|
1156
|
-
def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1155
|
+
def permitted_uri_domains(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1157
1156
|
"""
|
|
1158
1157
|
List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1159
1158
|
"""
|
|
1160
1159
|
return pulumi.get(self, "permitted_uri_domains")
|
|
1161
1160
|
|
|
1162
1161
|
@permitted_uri_domains.setter
|
|
1163
|
-
def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1162
|
+
def permitted_uri_domains(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1164
1163
|
pulumi.set(self, "permitted_uri_domains", value)
|
|
1165
1164
|
|
|
1166
|
-
@property
|
|
1165
|
+
@_builtins.property
|
|
1167
1166
|
@pulumi.getter(name="postalCode")
|
|
1168
|
-
def postal_code(self) -> Optional[pulumi.Input[
|
|
1167
|
+
def postal_code(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1169
1168
|
"""
|
|
1170
1169
|
The postal code
|
|
1171
1170
|
"""
|
|
1172
1171
|
return pulumi.get(self, "postal_code")
|
|
1173
1172
|
|
|
1174
1173
|
@postal_code.setter
|
|
1175
|
-
def postal_code(self, value: Optional[pulumi.Input[
|
|
1174
|
+
def postal_code(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1176
1175
|
pulumi.set(self, "postal_code", value)
|
|
1177
1176
|
|
|
1178
|
-
@property
|
|
1177
|
+
@_builtins.property
|
|
1179
1178
|
@pulumi.getter
|
|
1180
|
-
def province(self) -> Optional[pulumi.Input[
|
|
1179
|
+
def province(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1181
1180
|
"""
|
|
1182
1181
|
The province
|
|
1183
1182
|
"""
|
|
1184
1183
|
return pulumi.get(self, "province")
|
|
1185
1184
|
|
|
1186
1185
|
@province.setter
|
|
1187
|
-
def province(self, value: Optional[pulumi.Input[
|
|
1186
|
+
def province(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1188
1187
|
pulumi.set(self, "province", value)
|
|
1189
1188
|
|
|
1190
|
-
@property
|
|
1189
|
+
@_builtins.property
|
|
1191
1190
|
@pulumi.getter
|
|
1192
|
-
def revoke(self) -> Optional[pulumi.Input[
|
|
1191
|
+
def revoke(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1193
1192
|
"""
|
|
1194
1193
|
If set to `true`, the certificate will be revoked on resource destruction.
|
|
1195
1194
|
"""
|
|
1196
1195
|
return pulumi.get(self, "revoke")
|
|
1197
1196
|
|
|
1198
1197
|
@revoke.setter
|
|
1199
|
-
def revoke(self, value: Optional[pulumi.Input[
|
|
1198
|
+
def revoke(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1200
1199
|
pulumi.set(self, "revoke", value)
|
|
1201
1200
|
|
|
1202
|
-
@property
|
|
1201
|
+
@_builtins.property
|
|
1203
1202
|
@pulumi.getter(name="serialNumber")
|
|
1204
|
-
def serial_number(self) -> Optional[pulumi.Input[
|
|
1203
|
+
def serial_number(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1205
1204
|
"""
|
|
1206
1205
|
The certificate's serial number, hex formatted.
|
|
1207
1206
|
"""
|
|
1208
1207
|
return pulumi.get(self, "serial_number")
|
|
1209
1208
|
|
|
1210
1209
|
@serial_number.setter
|
|
1211
|
-
def serial_number(self, value: Optional[pulumi.Input[
|
|
1210
|
+
def serial_number(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1212
1211
|
pulumi.set(self, "serial_number", value)
|
|
1213
1212
|
|
|
1214
|
-
@property
|
|
1213
|
+
@_builtins.property
|
|
1215
1214
|
@pulumi.getter(name="signatureBits")
|
|
1216
|
-
def signature_bits(self) -> Optional[pulumi.Input[
|
|
1215
|
+
def signature_bits(self) -> Optional[pulumi.Input[_builtins.int]]:
|
|
1217
1216
|
"""
|
|
1218
1217
|
The number of bits to use in the signature algorithm
|
|
1219
1218
|
"""
|
|
1220
1219
|
return pulumi.get(self, "signature_bits")
|
|
1221
1220
|
|
|
1222
1221
|
@signature_bits.setter
|
|
1223
|
-
def signature_bits(self, value: Optional[pulumi.Input[
|
|
1222
|
+
def signature_bits(self, value: Optional[pulumi.Input[_builtins.int]]):
|
|
1224
1223
|
pulumi.set(self, "signature_bits", value)
|
|
1225
1224
|
|
|
1226
|
-
@property
|
|
1225
|
+
@_builtins.property
|
|
1227
1226
|
@pulumi.getter
|
|
1228
|
-
def skid(self) -> Optional[pulumi.Input[
|
|
1227
|
+
def skid(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1229
1228
|
"""
|
|
1230
1229
|
Value for the Subject Key Identifier field (see https://tools.ietf.org/html/rfc5280#section-4.2.1.2). Specified as a string in hex format.
|
|
1231
1230
|
"""
|
|
1232
1231
|
return pulumi.get(self, "skid")
|
|
1233
1232
|
|
|
1234
1233
|
@skid.setter
|
|
1235
|
-
def skid(self, value: Optional[pulumi.Input[
|
|
1234
|
+
def skid(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1236
1235
|
pulumi.set(self, "skid", value)
|
|
1237
1236
|
|
|
1238
|
-
@property
|
|
1237
|
+
@_builtins.property
|
|
1239
1238
|
@pulumi.getter(name="streetAddress")
|
|
1240
|
-
def street_address(self) -> Optional[pulumi.Input[
|
|
1239
|
+
def street_address(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1241
1240
|
"""
|
|
1242
1241
|
The street address
|
|
1243
1242
|
"""
|
|
1244
1243
|
return pulumi.get(self, "street_address")
|
|
1245
1244
|
|
|
1246
1245
|
@street_address.setter
|
|
1247
|
-
def street_address(self, value: Optional[pulumi.Input[
|
|
1246
|
+
def street_address(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1248
1247
|
pulumi.set(self, "street_address", value)
|
|
1249
1248
|
|
|
1250
|
-
@property
|
|
1249
|
+
@_builtins.property
|
|
1251
1250
|
@pulumi.getter
|
|
1252
|
-
def ttl(self) -> Optional[pulumi.Input[
|
|
1251
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
1253
1252
|
"""
|
|
1254
1253
|
Time to live
|
|
1255
1254
|
"""
|
|
1256
1255
|
return pulumi.get(self, "ttl")
|
|
1257
1256
|
|
|
1258
1257
|
@ttl.setter
|
|
1259
|
-
def ttl(self, value: Optional[pulumi.Input[
|
|
1258
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
1260
1259
|
pulumi.set(self, "ttl", value)
|
|
1261
1260
|
|
|
1262
|
-
@property
|
|
1261
|
+
@_builtins.property
|
|
1263
1262
|
@pulumi.getter(name="uriSans")
|
|
1264
|
-
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1263
|
+
def uri_sans(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
|
1265
1264
|
"""
|
|
1266
1265
|
List of alternative URIs
|
|
1267
1266
|
"""
|
|
1268
1267
|
return pulumi.get(self, "uri_sans")
|
|
1269
1268
|
|
|
1270
1269
|
@uri_sans.setter
|
|
1271
|
-
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1270
|
+
def uri_sans(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
|
1272
1271
|
pulumi.set(self, "uri_sans", value)
|
|
1273
1272
|
|
|
1274
|
-
@property
|
|
1273
|
+
@_builtins.property
|
|
1275
1274
|
@pulumi.getter(name="useCsrValues")
|
|
1276
|
-
def use_csr_values(self) -> Optional[pulumi.Input[
|
|
1275
|
+
def use_csr_values(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1277
1276
|
"""
|
|
1278
1277
|
Preserve CSR values
|
|
1279
1278
|
"""
|
|
1280
1279
|
return pulumi.get(self, "use_csr_values")
|
|
1281
1280
|
|
|
1282
1281
|
@use_csr_values.setter
|
|
1283
|
-
def use_csr_values(self, value: Optional[pulumi.Input[
|
|
1282
|
+
def use_csr_values(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1284
1283
|
pulumi.set(self, "use_csr_values", value)
|
|
1285
1284
|
|
|
1286
|
-
@property
|
|
1285
|
+
@_builtins.property
|
|
1287
1286
|
@pulumi.getter(name="usePss")
|
|
1288
|
-
def use_pss(self) -> Optional[pulumi.Input[
|
|
1287
|
+
def use_pss(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
1289
1288
|
"""
|
|
1290
1289
|
Specifies whether or not to use PSS signatures over PKCS#1v1.5 signatures when a RSA-type issuer is used. Ignored for ECDSA/Ed25519 issuers.
|
|
1291
1290
|
"""
|
|
1292
1291
|
return pulumi.get(self, "use_pss")
|
|
1293
1292
|
|
|
1294
1293
|
@use_pss.setter
|
|
1295
|
-
def use_pss(self, value: Optional[pulumi.Input[
|
|
1294
|
+
def use_pss(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
1296
1295
|
pulumi.set(self, "use_pss", value)
|
|
1297
1296
|
|
|
1298
1297
|
|
|
@@ -1302,42 +1301,42 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1302
1301
|
def __init__(__self__,
|
|
1303
1302
|
resource_name: str,
|
|
1304
1303
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1305
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1306
|
-
backend: Optional[pulumi.Input[
|
|
1307
|
-
common_name: Optional[pulumi.Input[
|
|
1308
|
-
country: Optional[pulumi.Input[
|
|
1309
|
-
csr: Optional[pulumi.Input[
|
|
1310
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
1311
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1312
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1313
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1314
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1315
|
-
format: Optional[pulumi.Input[
|
|
1316
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1317
|
-
issuer_ref: Optional[pulumi.Input[
|
|
1318
|
-
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1319
|
-
locality: Optional[pulumi.Input[
|
|
1320
|
-
max_path_length: Optional[pulumi.Input[
|
|
1321
|
-
namespace: Optional[pulumi.Input[
|
|
1322
|
-
not_after: Optional[pulumi.Input[
|
|
1323
|
-
not_before_duration: Optional[pulumi.Input[
|
|
1324
|
-
organization: Optional[pulumi.Input[
|
|
1325
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1326
|
-
ou: Optional[pulumi.Input[
|
|
1327
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1328
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1329
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1330
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1331
|
-
postal_code: Optional[pulumi.Input[
|
|
1332
|
-
province: Optional[pulumi.Input[
|
|
1333
|
-
revoke: Optional[pulumi.Input[
|
|
1334
|
-
signature_bits: Optional[pulumi.Input[
|
|
1335
|
-
skid: Optional[pulumi.Input[
|
|
1336
|
-
street_address: Optional[pulumi.Input[
|
|
1337
|
-
ttl: Optional[pulumi.Input[
|
|
1338
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1339
|
-
use_csr_values: Optional[pulumi.Input[
|
|
1340
|
-
use_pss: Optional[pulumi.Input[
|
|
1304
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1305
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1306
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1307
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1308
|
+
csr: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1309
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1310
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1311
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1312
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1313
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1314
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1315
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1316
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1317
|
+
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1318
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1319
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1320
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1321
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1322
|
+
not_before_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1323
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1324
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1325
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1326
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1327
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1328
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1329
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1330
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1331
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1332
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1333
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1334
|
+
skid: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1335
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1336
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1337
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1338
|
+
use_csr_values: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1339
|
+
use_pss: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1341
1340
|
__props__=None):
|
|
1342
1341
|
"""
|
|
1343
1342
|
Creates PKI certificate.
|
|
@@ -1348,7 +1347,7 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1348
1347
|
import pulumi
|
|
1349
1348
|
import pulumi_vault as vault
|
|
1350
1349
|
|
|
1351
|
-
root = vault.
|
|
1350
|
+
root = vault.pkisecret.SecretBackendRootSignIntermediate("root",
|
|
1352
1351
|
backend=root_vault_mount["path"],
|
|
1353
1352
|
csr=intermediate["csr"],
|
|
1354
1353
|
common_name="Intermediate CA",
|
|
@@ -1360,50 +1359,50 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1360
1359
|
|
|
1361
1360
|
:param str resource_name: The name of the resource.
|
|
1362
1361
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1363
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1364
|
-
:param pulumi.Input[
|
|
1365
|
-
:param pulumi.Input[
|
|
1366
|
-
:param pulumi.Input[
|
|
1367
|
-
:param pulumi.Input[
|
|
1368
|
-
:param pulumi.Input[
|
|
1369
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1370
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1371
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1372
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1373
|
-
:param pulumi.Input[
|
|
1374
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1375
|
-
:param pulumi.Input[
|
|
1362
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
1363
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
1364
|
+
:param pulumi.Input[_builtins.str] common_name: CN of intermediate to create
|
|
1365
|
+
:param pulumi.Input[_builtins.str] country: The country
|
|
1366
|
+
:param pulumi.Input[_builtins.str] csr: The CSR
|
|
1367
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
1368
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1369
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1370
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1371
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1372
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
1373
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
1374
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request. May
|
|
1376
1375
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
1377
1376
|
the `/pki/issuer/:issuer_ref/{issue,sign}/:name` paths to prevent users
|
|
1378
1377
|
overriding the role's `issuer_ref` value.
|
|
1379
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1380
|
-
:param pulumi.Input[
|
|
1381
|
-
:param pulumi.Input[
|
|
1382
|
-
:param pulumi.Input[
|
|
1378
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] key_usages: Specify the key usages to be added to the existing set of key usages ("CRL", "CertSign") on the generated certificate.
|
|
1379
|
+
:param pulumi.Input[_builtins.str] locality: The locality
|
|
1380
|
+
:param pulumi.Input[_builtins.int] max_path_length: The maximum path length to encode in the generated certificate
|
|
1381
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
1383
1382
|
The value should not contain leading or trailing forward slashes.
|
|
1384
1383
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
1385
1384
|
*Available only for Vault Enterprise*.
|
|
1386
|
-
:param pulumi.Input[
|
|
1385
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value.
|
|
1387
1386
|
The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date
|
|
1388
1387
|
for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1389
|
-
:param pulumi.Input[
|
|
1390
|
-
:param pulumi.Input[
|
|
1391
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1392
|
-
:param pulumi.Input[
|
|
1393
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1394
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1395
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1396
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1397
|
-
:param pulumi.Input[
|
|
1398
|
-
:param pulumi.Input[
|
|
1399
|
-
:param pulumi.Input[
|
|
1400
|
-
:param pulumi.Input[
|
|
1401
|
-
:param pulumi.Input[
|
|
1402
|
-
:param pulumi.Input[
|
|
1403
|
-
:param pulumi.Input[
|
|
1404
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1405
|
-
:param pulumi.Input[
|
|
1406
|
-
:param pulumi.Input[
|
|
1388
|
+
:param pulumi.Input[_builtins.str] not_before_duration: Specifies the duration by which to backdate the NotBefore property.
|
|
1389
|
+
:param pulumi.Input[_builtins.str] organization: The organization
|
|
1390
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
1391
|
+
:param pulumi.Input[_builtins.str] ou: The organization unit
|
|
1392
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
|
|
1393
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1394
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1395
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1396
|
+
:param pulumi.Input[_builtins.str] postal_code: The postal code
|
|
1397
|
+
:param pulumi.Input[_builtins.str] province: The province
|
|
1398
|
+
:param pulumi.Input[_builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction.
|
|
1399
|
+
:param pulumi.Input[_builtins.int] signature_bits: The number of bits to use in the signature algorithm
|
|
1400
|
+
:param pulumi.Input[_builtins.str] skid: Value for the Subject Key Identifier field (see https://tools.ietf.org/html/rfc5280#section-4.2.1.2). Specified as a string in hex format.
|
|
1401
|
+
:param pulumi.Input[_builtins.str] street_address: The street address
|
|
1402
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
1403
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
1404
|
+
:param pulumi.Input[_builtins.bool] use_csr_values: Preserve CSR values
|
|
1405
|
+
:param pulumi.Input[_builtins.bool] use_pss: Specifies whether or not to use PSS signatures over PKCS#1v1.5 signatures when a RSA-type issuer is used. Ignored for ECDSA/Ed25519 issuers.
|
|
1407
1406
|
"""
|
|
1408
1407
|
...
|
|
1409
1408
|
@overload
|
|
@@ -1420,7 +1419,7 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1420
1419
|
import pulumi
|
|
1421
1420
|
import pulumi_vault as vault
|
|
1422
1421
|
|
|
1423
|
-
root = vault.
|
|
1422
|
+
root = vault.pkisecret.SecretBackendRootSignIntermediate("root",
|
|
1424
1423
|
backend=root_vault_mount["path"],
|
|
1425
1424
|
csr=intermediate["csr"],
|
|
1426
1425
|
common_name="Intermediate CA",
|
|
@@ -1445,42 +1444,42 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1445
1444
|
def _internal_init(__self__,
|
|
1446
1445
|
resource_name: str,
|
|
1447
1446
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1448
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1449
|
-
backend: Optional[pulumi.Input[
|
|
1450
|
-
common_name: Optional[pulumi.Input[
|
|
1451
|
-
country: Optional[pulumi.Input[
|
|
1452
|
-
csr: Optional[pulumi.Input[
|
|
1453
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
1454
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1455
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1456
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1457
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1458
|
-
format: Optional[pulumi.Input[
|
|
1459
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1460
|
-
issuer_ref: Optional[pulumi.Input[
|
|
1461
|
-
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1462
|
-
locality: Optional[pulumi.Input[
|
|
1463
|
-
max_path_length: Optional[pulumi.Input[
|
|
1464
|
-
namespace: Optional[pulumi.Input[
|
|
1465
|
-
not_after: Optional[pulumi.Input[
|
|
1466
|
-
not_before_duration: Optional[pulumi.Input[
|
|
1467
|
-
organization: Optional[pulumi.Input[
|
|
1468
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1469
|
-
ou: Optional[pulumi.Input[
|
|
1470
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1471
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1472
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1473
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1474
|
-
postal_code: Optional[pulumi.Input[
|
|
1475
|
-
province: Optional[pulumi.Input[
|
|
1476
|
-
revoke: Optional[pulumi.Input[
|
|
1477
|
-
signature_bits: Optional[pulumi.Input[
|
|
1478
|
-
skid: Optional[pulumi.Input[
|
|
1479
|
-
street_address: Optional[pulumi.Input[
|
|
1480
|
-
ttl: Optional[pulumi.Input[
|
|
1481
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1482
|
-
use_csr_values: Optional[pulumi.Input[
|
|
1483
|
-
use_pss: Optional[pulumi.Input[
|
|
1447
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1448
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1449
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1450
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1451
|
+
csr: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1452
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1453
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1454
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1455
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1456
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1457
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1458
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1459
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1460
|
+
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1461
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1462
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1463
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1464
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1465
|
+
not_before_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1466
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1467
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1468
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1469
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1470
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1471
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1472
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1473
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1474
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1475
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1476
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1477
|
+
skid: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1478
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1479
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1480
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1481
|
+
use_csr_values: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1482
|
+
use_pss: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1484
1483
|
__props__=None):
|
|
1485
1484
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
1486
1485
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -1547,47 +1546,47 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1547
1546
|
def get(resource_name: str,
|
|
1548
1547
|
id: pulumi.Input[str],
|
|
1549
1548
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
1550
|
-
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1551
|
-
backend: Optional[pulumi.Input[
|
|
1552
|
-
ca_chains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1553
|
-
certificate: Optional[pulumi.Input[
|
|
1554
|
-
certificate_bundle: Optional[pulumi.Input[
|
|
1555
|
-
common_name: Optional[pulumi.Input[
|
|
1556
|
-
country: Optional[pulumi.Input[
|
|
1557
|
-
csr: Optional[pulumi.Input[
|
|
1558
|
-
exclude_cn_from_sans: Optional[pulumi.Input[
|
|
1559
|
-
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1560
|
-
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1561
|
-
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1562
|
-
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1563
|
-
format: Optional[pulumi.Input[
|
|
1564
|
-
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1565
|
-
issuer_ref: Optional[pulumi.Input[
|
|
1566
|
-
issuing_ca: Optional[pulumi.Input[
|
|
1567
|
-
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1568
|
-
locality: Optional[pulumi.Input[
|
|
1569
|
-
max_path_length: Optional[pulumi.Input[
|
|
1570
|
-
namespace: Optional[pulumi.Input[
|
|
1571
|
-
not_after: Optional[pulumi.Input[
|
|
1572
|
-
not_before_duration: Optional[pulumi.Input[
|
|
1573
|
-
organization: Optional[pulumi.Input[
|
|
1574
|
-
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1575
|
-
ou: Optional[pulumi.Input[
|
|
1576
|
-
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1577
|
-
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1578
|
-
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1579
|
-
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1580
|
-
postal_code: Optional[pulumi.Input[
|
|
1581
|
-
province: Optional[pulumi.Input[
|
|
1582
|
-
revoke: Optional[pulumi.Input[
|
|
1583
|
-
serial_number: Optional[pulumi.Input[
|
|
1584
|
-
signature_bits: Optional[pulumi.Input[
|
|
1585
|
-
skid: Optional[pulumi.Input[
|
|
1586
|
-
street_address: Optional[pulumi.Input[
|
|
1587
|
-
ttl: Optional[pulumi.Input[
|
|
1588
|
-
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[
|
|
1589
|
-
use_csr_values: Optional[pulumi.Input[
|
|
1590
|
-
use_pss: Optional[pulumi.Input[
|
|
1549
|
+
alt_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1550
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1551
|
+
ca_chains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1552
|
+
certificate: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1553
|
+
certificate_bundle: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1554
|
+
common_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1555
|
+
country: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1556
|
+
csr: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1557
|
+
exclude_cn_from_sans: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1558
|
+
excluded_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1559
|
+
excluded_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1560
|
+
excluded_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1561
|
+
excluded_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1562
|
+
format: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1563
|
+
ip_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1564
|
+
issuer_ref: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1565
|
+
issuing_ca: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1566
|
+
key_usages: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1567
|
+
locality: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1568
|
+
max_path_length: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1569
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1570
|
+
not_after: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1571
|
+
not_before_duration: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1572
|
+
organization: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1573
|
+
other_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1574
|
+
ou: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1575
|
+
permitted_dns_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1576
|
+
permitted_email_addresses: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1577
|
+
permitted_ip_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1578
|
+
permitted_uri_domains: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1579
|
+
postal_code: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1580
|
+
province: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1581
|
+
revoke: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1582
|
+
serial_number: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1583
|
+
signature_bits: Optional[pulumi.Input[_builtins.int]] = None,
|
|
1584
|
+
skid: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1585
|
+
street_address: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1586
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
|
1587
|
+
uri_sans: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
|
1588
|
+
use_csr_values: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
1589
|
+
use_pss: Optional[pulumi.Input[_builtins.bool]] = None) -> 'SecretBackendRootSignIntermediate':
|
|
1591
1590
|
"""
|
|
1592
1591
|
Get an existing SecretBackendRootSignIntermediate resource's state with the given name, id, and optional extra
|
|
1593
1592
|
properties used to qualify the lookup.
|
|
@@ -1595,56 +1594,56 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1595
1594
|
:param str resource_name: The unique name of the resulting resource.
|
|
1596
1595
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
1597
1596
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
1598
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1599
|
-
:param pulumi.Input[
|
|
1600
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1601
|
-
:param pulumi.Input[
|
|
1602
|
-
:param pulumi.Input[
|
|
1597
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] alt_names: List of alternative names
|
|
1598
|
+
:param pulumi.Input[_builtins.str] backend: The PKI secret backend the resource belongs to.
|
|
1599
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ca_chains: A list of the issuing and intermediate CA certificates in the `format` specified.
|
|
1600
|
+
:param pulumi.Input[_builtins.str] certificate: The intermediate CA certificate in the `format` specified.
|
|
1601
|
+
:param pulumi.Input[_builtins.str] certificate_bundle: The concatenation of the intermediate CA and the issuing CA certificates (PEM encoded).
|
|
1603
1602
|
Requires the `format` to be set to any of: pem, pem_bundle. The value will be empty for all other formats.
|
|
1604
|
-
:param pulumi.Input[
|
|
1605
|
-
:param pulumi.Input[
|
|
1606
|
-
:param pulumi.Input[
|
|
1607
|
-
:param pulumi.Input[
|
|
1608
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1609
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1610
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1611
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1612
|
-
:param pulumi.Input[
|
|
1613
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1614
|
-
:param pulumi.Input[
|
|
1603
|
+
:param pulumi.Input[_builtins.str] common_name: CN of intermediate to create
|
|
1604
|
+
:param pulumi.Input[_builtins.str] country: The country
|
|
1605
|
+
:param pulumi.Input[_builtins.str] csr: The CSR
|
|
1606
|
+
:param pulumi.Input[_builtins.bool] exclude_cn_from_sans: Flag to exclude CN from SANs
|
|
1607
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_dns_domains: List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1608
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_email_addresses: List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1609
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_ip_ranges: List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1610
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] excluded_uri_domains: List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1611
|
+
:param pulumi.Input[_builtins.str] format: The format of data
|
|
1612
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] ip_sans: List of alternative IPs
|
|
1613
|
+
:param pulumi.Input[_builtins.str] issuer_ref: Specifies the default issuer of this request. May
|
|
1615
1614
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
1616
1615
|
the `/pki/issuer/:issuer_ref/{issue,sign}/:name` paths to prevent users
|
|
1617
1616
|
overriding the role's `issuer_ref` value.
|
|
1618
|
-
:param pulumi.Input[
|
|
1619
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1620
|
-
:param pulumi.Input[
|
|
1621
|
-
:param pulumi.Input[
|
|
1622
|
-
:param pulumi.Input[
|
|
1617
|
+
:param pulumi.Input[_builtins.str] issuing_ca: The issuing CA certificate in the `format` specified.
|
|
1618
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] key_usages: Specify the key usages to be added to the existing set of key usages ("CRL", "CertSign") on the generated certificate.
|
|
1619
|
+
:param pulumi.Input[_builtins.str] locality: The locality
|
|
1620
|
+
:param pulumi.Input[_builtins.int] max_path_length: The maximum path length to encode in the generated certificate
|
|
1621
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
|
1623
1622
|
The value should not contain leading or trailing forward slashes.
|
|
1624
1623
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
|
1625
1624
|
*Available only for Vault Enterprise*.
|
|
1626
|
-
:param pulumi.Input[
|
|
1625
|
+
:param pulumi.Input[_builtins.str] not_after: Set the Not After field of the certificate with specified date value.
|
|
1627
1626
|
The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date
|
|
1628
1627
|
for IEEE 802.1AR-2018 standard devices, 9999-12-31T23:59:59Z.
|
|
1629
|
-
:param pulumi.Input[
|
|
1630
|
-
:param pulumi.Input[
|
|
1631
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1632
|
-
:param pulumi.Input[
|
|
1633
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1634
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1635
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1636
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1637
|
-
:param pulumi.Input[
|
|
1638
|
-
:param pulumi.Input[
|
|
1639
|
-
:param pulumi.Input[
|
|
1640
|
-
:param pulumi.Input[
|
|
1641
|
-
:param pulumi.Input[
|
|
1642
|
-
:param pulumi.Input[
|
|
1643
|
-
:param pulumi.Input[
|
|
1644
|
-
:param pulumi.Input[
|
|
1645
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
|
1646
|
-
:param pulumi.Input[
|
|
1647
|
-
:param pulumi.Input[
|
|
1628
|
+
:param pulumi.Input[_builtins.str] not_before_duration: Specifies the duration by which to backdate the NotBefore property.
|
|
1629
|
+
:param pulumi.Input[_builtins.str] organization: The organization
|
|
1630
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] other_sans: List of other SANs
|
|
1631
|
+
:param pulumi.Input[_builtins.str] ou: The organization unit
|
|
1632
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_dns_domains: List of domains for which certificates are allowed to be issued
|
|
1633
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_email_addresses: List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1634
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_ip_ranges: List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1635
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] permitted_uri_domains: List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1636
|
+
:param pulumi.Input[_builtins.str] postal_code: The postal code
|
|
1637
|
+
:param pulumi.Input[_builtins.str] province: The province
|
|
1638
|
+
:param pulumi.Input[_builtins.bool] revoke: If set to `true`, the certificate will be revoked on resource destruction.
|
|
1639
|
+
:param pulumi.Input[_builtins.str] serial_number: The certificate's serial number, hex formatted.
|
|
1640
|
+
:param pulumi.Input[_builtins.int] signature_bits: The number of bits to use in the signature algorithm
|
|
1641
|
+
:param pulumi.Input[_builtins.str] skid: Value for the Subject Key Identifier field (see https://tools.ietf.org/html/rfc5280#section-4.2.1.2). Specified as a string in hex format.
|
|
1642
|
+
:param pulumi.Input[_builtins.str] street_address: The street address
|
|
1643
|
+
:param pulumi.Input[_builtins.str] ttl: Time to live
|
|
1644
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] uri_sans: List of alternative URIs
|
|
1645
|
+
:param pulumi.Input[_builtins.bool] use_csr_values: Preserve CSR values
|
|
1646
|
+
:param pulumi.Input[_builtins.bool] use_pss: Specifies whether or not to use PSS signatures over PKCS#1v1.5 signatures when a RSA-type issuer is used. Ignored for ECDSA/Ed25519 issuers.
|
|
1648
1647
|
"""
|
|
1649
1648
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
1650
1649
|
|
|
@@ -1693,130 +1692,130 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1693
1692
|
__props__.__dict__["use_pss"] = use_pss
|
|
1694
1693
|
return SecretBackendRootSignIntermediate(resource_name, opts=opts, __props__=__props__)
|
|
1695
1694
|
|
|
1696
|
-
@property
|
|
1695
|
+
@_builtins.property
|
|
1697
1696
|
@pulumi.getter(name="altNames")
|
|
1698
|
-
def alt_names(self) -> pulumi.Output[Optional[Sequence[
|
|
1697
|
+
def alt_names(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1699
1698
|
"""
|
|
1700
1699
|
List of alternative names
|
|
1701
1700
|
"""
|
|
1702
1701
|
return pulumi.get(self, "alt_names")
|
|
1703
1702
|
|
|
1704
|
-
@property
|
|
1703
|
+
@_builtins.property
|
|
1705
1704
|
@pulumi.getter
|
|
1706
|
-
def backend(self) -> pulumi.Output[
|
|
1705
|
+
def backend(self) -> pulumi.Output[_builtins.str]:
|
|
1707
1706
|
"""
|
|
1708
1707
|
The PKI secret backend the resource belongs to.
|
|
1709
1708
|
"""
|
|
1710
1709
|
return pulumi.get(self, "backend")
|
|
1711
1710
|
|
|
1712
|
-
@property
|
|
1711
|
+
@_builtins.property
|
|
1713
1712
|
@pulumi.getter(name="caChains")
|
|
1714
|
-
def ca_chains(self) -> pulumi.Output[Sequence[
|
|
1713
|
+
def ca_chains(self) -> pulumi.Output[Sequence[_builtins.str]]:
|
|
1715
1714
|
"""
|
|
1716
1715
|
A list of the issuing and intermediate CA certificates in the `format` specified.
|
|
1717
1716
|
"""
|
|
1718
1717
|
return pulumi.get(self, "ca_chains")
|
|
1719
1718
|
|
|
1720
|
-
@property
|
|
1719
|
+
@_builtins.property
|
|
1721
1720
|
@pulumi.getter
|
|
1722
|
-
def certificate(self) -> pulumi.Output[
|
|
1721
|
+
def certificate(self) -> pulumi.Output[_builtins.str]:
|
|
1723
1722
|
"""
|
|
1724
1723
|
The intermediate CA certificate in the `format` specified.
|
|
1725
1724
|
"""
|
|
1726
1725
|
return pulumi.get(self, "certificate")
|
|
1727
1726
|
|
|
1728
|
-
@property
|
|
1727
|
+
@_builtins.property
|
|
1729
1728
|
@pulumi.getter(name="certificateBundle")
|
|
1730
|
-
def certificate_bundle(self) -> pulumi.Output[
|
|
1729
|
+
def certificate_bundle(self) -> pulumi.Output[_builtins.str]:
|
|
1731
1730
|
"""
|
|
1732
1731
|
The concatenation of the intermediate CA and the issuing CA certificates (PEM encoded).
|
|
1733
1732
|
Requires the `format` to be set to any of: pem, pem_bundle. The value will be empty for all other formats.
|
|
1734
1733
|
"""
|
|
1735
1734
|
return pulumi.get(self, "certificate_bundle")
|
|
1736
1735
|
|
|
1737
|
-
@property
|
|
1736
|
+
@_builtins.property
|
|
1738
1737
|
@pulumi.getter(name="commonName")
|
|
1739
|
-
def common_name(self) -> pulumi.Output[
|
|
1738
|
+
def common_name(self) -> pulumi.Output[_builtins.str]:
|
|
1740
1739
|
"""
|
|
1741
1740
|
CN of intermediate to create
|
|
1742
1741
|
"""
|
|
1743
1742
|
return pulumi.get(self, "common_name")
|
|
1744
1743
|
|
|
1745
|
-
@property
|
|
1744
|
+
@_builtins.property
|
|
1746
1745
|
@pulumi.getter
|
|
1747
|
-
def country(self) -> pulumi.Output[Optional[
|
|
1746
|
+
def country(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1748
1747
|
"""
|
|
1749
1748
|
The country
|
|
1750
1749
|
"""
|
|
1751
1750
|
return pulumi.get(self, "country")
|
|
1752
1751
|
|
|
1753
|
-
@property
|
|
1752
|
+
@_builtins.property
|
|
1754
1753
|
@pulumi.getter
|
|
1755
|
-
def csr(self) -> pulumi.Output[
|
|
1754
|
+
def csr(self) -> pulumi.Output[_builtins.str]:
|
|
1756
1755
|
"""
|
|
1757
1756
|
The CSR
|
|
1758
1757
|
"""
|
|
1759
1758
|
return pulumi.get(self, "csr")
|
|
1760
1759
|
|
|
1761
|
-
@property
|
|
1760
|
+
@_builtins.property
|
|
1762
1761
|
@pulumi.getter(name="excludeCnFromSans")
|
|
1763
|
-
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[
|
|
1762
|
+
def exclude_cn_from_sans(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1764
1763
|
"""
|
|
1765
1764
|
Flag to exclude CN from SANs
|
|
1766
1765
|
"""
|
|
1767
1766
|
return pulumi.get(self, "exclude_cn_from_sans")
|
|
1768
1767
|
|
|
1769
|
-
@property
|
|
1768
|
+
@_builtins.property
|
|
1770
1769
|
@pulumi.getter(name="excludedDnsDomains")
|
|
1771
|
-
def excluded_dns_domains(self) -> pulumi.Output[Optional[Sequence[
|
|
1770
|
+
def excluded_dns_domains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1772
1771
|
"""
|
|
1773
1772
|
List of domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1774
1773
|
"""
|
|
1775
1774
|
return pulumi.get(self, "excluded_dns_domains")
|
|
1776
1775
|
|
|
1777
|
-
@property
|
|
1776
|
+
@_builtins.property
|
|
1778
1777
|
@pulumi.getter(name="excludedEmailAddresses")
|
|
1779
|
-
def excluded_email_addresses(self) -> pulumi.Output[Optional[Sequence[
|
|
1778
|
+
def excluded_email_addresses(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1780
1779
|
"""
|
|
1781
1780
|
List of email addresses for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1782
1781
|
"""
|
|
1783
1782
|
return pulumi.get(self, "excluded_email_addresses")
|
|
1784
1783
|
|
|
1785
|
-
@property
|
|
1784
|
+
@_builtins.property
|
|
1786
1785
|
@pulumi.getter(name="excludedIpRanges")
|
|
1787
|
-
def excluded_ip_ranges(self) -> pulumi.Output[Optional[Sequence[
|
|
1786
|
+
def excluded_ip_ranges(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1788
1787
|
"""
|
|
1789
1788
|
List of IP ranges for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1790
1789
|
"""
|
|
1791
1790
|
return pulumi.get(self, "excluded_ip_ranges")
|
|
1792
1791
|
|
|
1793
|
-
@property
|
|
1792
|
+
@_builtins.property
|
|
1794
1793
|
@pulumi.getter(name="excludedUriDomains")
|
|
1795
|
-
def excluded_uri_domains(self) -> pulumi.Output[Optional[Sequence[
|
|
1794
|
+
def excluded_uri_domains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1796
1795
|
"""
|
|
1797
1796
|
List of URI domains for which certificates are not allowed to be issued. Requires Vault version 1.19+.
|
|
1798
1797
|
"""
|
|
1799
1798
|
return pulumi.get(self, "excluded_uri_domains")
|
|
1800
1799
|
|
|
1801
|
-
@property
|
|
1800
|
+
@_builtins.property
|
|
1802
1801
|
@pulumi.getter
|
|
1803
|
-
def format(self) -> pulumi.Output[Optional[
|
|
1802
|
+
def format(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1804
1803
|
"""
|
|
1805
1804
|
The format of data
|
|
1806
1805
|
"""
|
|
1807
1806
|
return pulumi.get(self, "format")
|
|
1808
1807
|
|
|
1809
|
-
@property
|
|
1808
|
+
@_builtins.property
|
|
1810
1809
|
@pulumi.getter(name="ipSans")
|
|
1811
|
-
def ip_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1810
|
+
def ip_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1812
1811
|
"""
|
|
1813
1812
|
List of alternative IPs
|
|
1814
1813
|
"""
|
|
1815
1814
|
return pulumi.get(self, "ip_sans")
|
|
1816
1815
|
|
|
1817
|
-
@property
|
|
1816
|
+
@_builtins.property
|
|
1818
1817
|
@pulumi.getter(name="issuerRef")
|
|
1819
|
-
def issuer_ref(self) -> pulumi.Output[Optional[
|
|
1818
|
+
def issuer_ref(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1820
1819
|
"""
|
|
1821
1820
|
Specifies the default issuer of this request. May
|
|
1822
1821
|
be the value `default`, a name, or an issuer ID. Use ACLs to prevent access to
|
|
@@ -1825,41 +1824,41 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1825
1824
|
"""
|
|
1826
1825
|
return pulumi.get(self, "issuer_ref")
|
|
1827
1826
|
|
|
1828
|
-
@property
|
|
1827
|
+
@_builtins.property
|
|
1829
1828
|
@pulumi.getter(name="issuingCa")
|
|
1830
|
-
def issuing_ca(self) -> pulumi.Output[
|
|
1829
|
+
def issuing_ca(self) -> pulumi.Output[_builtins.str]:
|
|
1831
1830
|
"""
|
|
1832
1831
|
The issuing CA certificate in the `format` specified.
|
|
1833
1832
|
"""
|
|
1834
1833
|
return pulumi.get(self, "issuing_ca")
|
|
1835
1834
|
|
|
1836
|
-
@property
|
|
1835
|
+
@_builtins.property
|
|
1837
1836
|
@pulumi.getter(name="keyUsages")
|
|
1838
|
-
def key_usages(self) -> pulumi.Output[Optional[Sequence[
|
|
1837
|
+
def key_usages(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1839
1838
|
"""
|
|
1840
1839
|
Specify the key usages to be added to the existing set of key usages ("CRL", "CertSign") on the generated certificate.
|
|
1841
1840
|
"""
|
|
1842
1841
|
return pulumi.get(self, "key_usages")
|
|
1843
1842
|
|
|
1844
|
-
@property
|
|
1843
|
+
@_builtins.property
|
|
1845
1844
|
@pulumi.getter
|
|
1846
|
-
def locality(self) -> pulumi.Output[Optional[
|
|
1845
|
+
def locality(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1847
1846
|
"""
|
|
1848
1847
|
The locality
|
|
1849
1848
|
"""
|
|
1850
1849
|
return pulumi.get(self, "locality")
|
|
1851
1850
|
|
|
1852
|
-
@property
|
|
1851
|
+
@_builtins.property
|
|
1853
1852
|
@pulumi.getter(name="maxPathLength")
|
|
1854
|
-
def max_path_length(self) -> pulumi.Output[Optional[
|
|
1853
|
+
def max_path_length(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1855
1854
|
"""
|
|
1856
1855
|
The maximum path length to encode in the generated certificate
|
|
1857
1856
|
"""
|
|
1858
1857
|
return pulumi.get(self, "max_path_length")
|
|
1859
1858
|
|
|
1860
|
-
@property
|
|
1859
|
+
@_builtins.property
|
|
1861
1860
|
@pulumi.getter
|
|
1862
|
-
def namespace(self) -> pulumi.Output[Optional[
|
|
1861
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1863
1862
|
"""
|
|
1864
1863
|
The namespace to provision the resource in.
|
|
1865
1864
|
The value should not contain leading or trailing forward slashes.
|
|
@@ -1868,9 +1867,9 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1868
1867
|
"""
|
|
1869
1868
|
return pulumi.get(self, "namespace")
|
|
1870
1869
|
|
|
1871
|
-
@property
|
|
1870
|
+
@_builtins.property
|
|
1872
1871
|
@pulumi.getter(name="notAfter")
|
|
1873
|
-
def not_after(self) -> pulumi.Output[Optional[
|
|
1872
|
+
def not_after(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1874
1873
|
"""
|
|
1875
1874
|
Set the Not After field of the certificate with specified date value.
|
|
1876
1875
|
The value format should be given in UTC format YYYY-MM-ddTHH:MM:SSZ. Supports the Y10K end date
|
|
@@ -1878,153 +1877,153 @@ class SecretBackendRootSignIntermediate(pulumi.CustomResource):
|
|
|
1878
1877
|
"""
|
|
1879
1878
|
return pulumi.get(self, "not_after")
|
|
1880
1879
|
|
|
1881
|
-
@property
|
|
1880
|
+
@_builtins.property
|
|
1882
1881
|
@pulumi.getter(name="notBeforeDuration")
|
|
1883
|
-
def not_before_duration(self) -> pulumi.Output[Optional[
|
|
1882
|
+
def not_before_duration(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1884
1883
|
"""
|
|
1885
1884
|
Specifies the duration by which to backdate the NotBefore property.
|
|
1886
1885
|
"""
|
|
1887
1886
|
return pulumi.get(self, "not_before_duration")
|
|
1888
1887
|
|
|
1889
|
-
@property
|
|
1888
|
+
@_builtins.property
|
|
1890
1889
|
@pulumi.getter
|
|
1891
|
-
def organization(self) -> pulumi.Output[Optional[
|
|
1890
|
+
def organization(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1892
1891
|
"""
|
|
1893
1892
|
The organization
|
|
1894
1893
|
"""
|
|
1895
1894
|
return pulumi.get(self, "organization")
|
|
1896
1895
|
|
|
1897
|
-
@property
|
|
1896
|
+
@_builtins.property
|
|
1898
1897
|
@pulumi.getter(name="otherSans")
|
|
1899
|
-
def other_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
1898
|
+
def other_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1900
1899
|
"""
|
|
1901
1900
|
List of other SANs
|
|
1902
1901
|
"""
|
|
1903
1902
|
return pulumi.get(self, "other_sans")
|
|
1904
1903
|
|
|
1905
|
-
@property
|
|
1904
|
+
@_builtins.property
|
|
1906
1905
|
@pulumi.getter
|
|
1907
|
-
def ou(self) -> pulumi.Output[Optional[
|
|
1906
|
+
def ou(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1908
1907
|
"""
|
|
1909
1908
|
The organization unit
|
|
1910
1909
|
"""
|
|
1911
1910
|
return pulumi.get(self, "ou")
|
|
1912
1911
|
|
|
1913
|
-
@property
|
|
1912
|
+
@_builtins.property
|
|
1914
1913
|
@pulumi.getter(name="permittedDnsDomains")
|
|
1915
|
-
def permitted_dns_domains(self) -> pulumi.Output[Optional[Sequence[
|
|
1914
|
+
def permitted_dns_domains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1916
1915
|
"""
|
|
1917
1916
|
List of domains for which certificates are allowed to be issued
|
|
1918
1917
|
"""
|
|
1919
1918
|
return pulumi.get(self, "permitted_dns_domains")
|
|
1920
1919
|
|
|
1921
|
-
@property
|
|
1920
|
+
@_builtins.property
|
|
1922
1921
|
@pulumi.getter(name="permittedEmailAddresses")
|
|
1923
|
-
def permitted_email_addresses(self) -> pulumi.Output[Optional[Sequence[
|
|
1922
|
+
def permitted_email_addresses(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1924
1923
|
"""
|
|
1925
1924
|
List of email addresses for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1926
1925
|
"""
|
|
1927
1926
|
return pulumi.get(self, "permitted_email_addresses")
|
|
1928
1927
|
|
|
1929
|
-
@property
|
|
1928
|
+
@_builtins.property
|
|
1930
1929
|
@pulumi.getter(name="permittedIpRanges")
|
|
1931
|
-
def permitted_ip_ranges(self) -> pulumi.Output[Optional[Sequence[
|
|
1930
|
+
def permitted_ip_ranges(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1932
1931
|
"""
|
|
1933
1932
|
List of IP ranges for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1934
1933
|
"""
|
|
1935
1934
|
return pulumi.get(self, "permitted_ip_ranges")
|
|
1936
1935
|
|
|
1937
|
-
@property
|
|
1936
|
+
@_builtins.property
|
|
1938
1937
|
@pulumi.getter(name="permittedUriDomains")
|
|
1939
|
-
def permitted_uri_domains(self) -> pulumi.Output[Optional[Sequence[
|
|
1938
|
+
def permitted_uri_domains(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
1940
1939
|
"""
|
|
1941
1940
|
List of URI domains for which certificates are allowed to be issued. Requires Vault version 1.19+.
|
|
1942
1941
|
"""
|
|
1943
1942
|
return pulumi.get(self, "permitted_uri_domains")
|
|
1944
1943
|
|
|
1945
|
-
@property
|
|
1944
|
+
@_builtins.property
|
|
1946
1945
|
@pulumi.getter(name="postalCode")
|
|
1947
|
-
def postal_code(self) -> pulumi.Output[Optional[
|
|
1946
|
+
def postal_code(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1948
1947
|
"""
|
|
1949
1948
|
The postal code
|
|
1950
1949
|
"""
|
|
1951
1950
|
return pulumi.get(self, "postal_code")
|
|
1952
1951
|
|
|
1953
|
-
@property
|
|
1952
|
+
@_builtins.property
|
|
1954
1953
|
@pulumi.getter
|
|
1955
|
-
def province(self) -> pulumi.Output[Optional[
|
|
1954
|
+
def province(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1956
1955
|
"""
|
|
1957
1956
|
The province
|
|
1958
1957
|
"""
|
|
1959
1958
|
return pulumi.get(self, "province")
|
|
1960
1959
|
|
|
1961
|
-
@property
|
|
1960
|
+
@_builtins.property
|
|
1962
1961
|
@pulumi.getter
|
|
1963
|
-
def revoke(self) -> pulumi.Output[Optional[
|
|
1962
|
+
def revoke(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1964
1963
|
"""
|
|
1965
1964
|
If set to `true`, the certificate will be revoked on resource destruction.
|
|
1966
1965
|
"""
|
|
1967
1966
|
return pulumi.get(self, "revoke")
|
|
1968
1967
|
|
|
1969
|
-
@property
|
|
1968
|
+
@_builtins.property
|
|
1970
1969
|
@pulumi.getter(name="serialNumber")
|
|
1971
|
-
def serial_number(self) -> pulumi.Output[
|
|
1970
|
+
def serial_number(self) -> pulumi.Output[_builtins.str]:
|
|
1972
1971
|
"""
|
|
1973
1972
|
The certificate's serial number, hex formatted.
|
|
1974
1973
|
"""
|
|
1975
1974
|
return pulumi.get(self, "serial_number")
|
|
1976
1975
|
|
|
1977
|
-
@property
|
|
1976
|
+
@_builtins.property
|
|
1978
1977
|
@pulumi.getter(name="signatureBits")
|
|
1979
|
-
def signature_bits(self) -> pulumi.Output[Optional[
|
|
1978
|
+
def signature_bits(self) -> pulumi.Output[Optional[_builtins.int]]:
|
|
1980
1979
|
"""
|
|
1981
1980
|
The number of bits to use in the signature algorithm
|
|
1982
1981
|
"""
|
|
1983
1982
|
return pulumi.get(self, "signature_bits")
|
|
1984
1983
|
|
|
1985
|
-
@property
|
|
1984
|
+
@_builtins.property
|
|
1986
1985
|
@pulumi.getter
|
|
1987
|
-
def skid(self) -> pulumi.Output[Optional[
|
|
1986
|
+
def skid(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1988
1987
|
"""
|
|
1989
1988
|
Value for the Subject Key Identifier field (see https://tools.ietf.org/html/rfc5280#section-4.2.1.2). Specified as a string in hex format.
|
|
1990
1989
|
"""
|
|
1991
1990
|
return pulumi.get(self, "skid")
|
|
1992
1991
|
|
|
1993
|
-
@property
|
|
1992
|
+
@_builtins.property
|
|
1994
1993
|
@pulumi.getter(name="streetAddress")
|
|
1995
|
-
def street_address(self) -> pulumi.Output[Optional[
|
|
1994
|
+
def street_address(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
1996
1995
|
"""
|
|
1997
1996
|
The street address
|
|
1998
1997
|
"""
|
|
1999
1998
|
return pulumi.get(self, "street_address")
|
|
2000
1999
|
|
|
2001
|
-
@property
|
|
2000
|
+
@_builtins.property
|
|
2002
2001
|
@pulumi.getter
|
|
2003
|
-
def ttl(self) -> pulumi.Output[Optional[
|
|
2002
|
+
def ttl(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
2004
2003
|
"""
|
|
2005
2004
|
Time to live
|
|
2006
2005
|
"""
|
|
2007
2006
|
return pulumi.get(self, "ttl")
|
|
2008
2007
|
|
|
2009
|
-
@property
|
|
2008
|
+
@_builtins.property
|
|
2010
2009
|
@pulumi.getter(name="uriSans")
|
|
2011
|
-
def uri_sans(self) -> pulumi.Output[Optional[Sequence[
|
|
2010
|
+
def uri_sans(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
|
2012
2011
|
"""
|
|
2013
2012
|
List of alternative URIs
|
|
2014
2013
|
"""
|
|
2015
2014
|
return pulumi.get(self, "uri_sans")
|
|
2016
2015
|
|
|
2017
|
-
@property
|
|
2016
|
+
@_builtins.property
|
|
2018
2017
|
@pulumi.getter(name="useCsrValues")
|
|
2019
|
-
def use_csr_values(self) -> pulumi.Output[Optional[
|
|
2018
|
+
def use_csr_values(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
2020
2019
|
"""
|
|
2021
2020
|
Preserve CSR values
|
|
2022
2021
|
"""
|
|
2023
2022
|
return pulumi.get(self, "use_csr_values")
|
|
2024
2023
|
|
|
2025
|
-
@property
|
|
2024
|
+
@_builtins.property
|
|
2026
2025
|
@pulumi.getter(name="usePss")
|
|
2027
|
-
def use_pss(self) -> pulumi.Output[Optional[
|
|
2026
|
+
def use_pss(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
2028
2027
|
"""
|
|
2029
2028
|
Specifies whether or not to use PSS signatures over PKCS#1v1.5 signatures when a RSA-type issuer is used. Ignored for ECDSA/Ed25519 issuers.
|
|
2030
2029
|
"""
|