pulumi-vault 7.2.0a1753339763__py3-none-any.whl → 7.2.0a1753512474__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_vault/__init__.py +1 -1
- pulumi_vault/_inputs.py +672 -673
- pulumi_vault/ad/__init__.py +1 -1
- pulumi_vault/ad/get_access_credentials.py +27 -28
- pulumi_vault/ad/secret_backend.py +579 -580
- pulumi_vault/ad/secret_library.py +120 -121
- pulumi_vault/ad/secret_role.py +104 -105
- pulumi_vault/alicloud/__init__.py +1 -1
- pulumi_vault/alicloud/auth_backend_role.py +222 -223
- pulumi_vault/approle/__init__.py +1 -1
- pulumi_vault/approle/auth_backend_login.py +138 -139
- pulumi_vault/approle/auth_backend_role.py +292 -293
- pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
- pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
- pulumi_vault/audit.py +103 -104
- pulumi_vault/audit_request_header.py +52 -53
- pulumi_vault/auth_backend.py +132 -133
- pulumi_vault/aws/__init__.py +1 -1
- pulumi_vault/aws/auth_backend_cert.py +86 -87
- pulumi_vault/aws/auth_backend_client.py +307 -308
- pulumi_vault/aws/auth_backend_config_identity.py +103 -104
- pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
- pulumi_vault/aws/auth_backend_login.py +258 -259
- pulumi_vault/aws/auth_backend_role.py +486 -487
- pulumi_vault/aws/auth_backend_role_tag.py +155 -156
- pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
- pulumi_vault/aws/auth_backend_sts_role.py +86 -87
- pulumi_vault/aws/get_access_credentials.py +59 -60
- pulumi_vault/aws/get_static_access_credentials.py +19 -20
- pulumi_vault/aws/secret_backend.py +409 -410
- pulumi_vault/aws/secret_backend_role.py +256 -257
- pulumi_vault/aws/secret_backend_static_role.py +137 -138
- pulumi_vault/azure/__init__.py +1 -1
- pulumi_vault/azure/_inputs.py +26 -27
- pulumi_vault/azure/auth_backend_config.py +222 -223
- pulumi_vault/azure/auth_backend_role.py +307 -308
- pulumi_vault/azure/backend.py +273 -274
- pulumi_vault/azure/backend_role.py +194 -195
- pulumi_vault/azure/get_access_credentials.py +75 -76
- pulumi_vault/azure/outputs.py +16 -17
- pulumi_vault/cert_auth_backend_role.py +443 -444
- pulumi_vault/config/__init__.py +1 -1
- pulumi_vault/config/__init__.pyi +1 -2
- pulumi_vault/config/_inputs.py +13 -14
- pulumi_vault/config/outputs.py +380 -381
- pulumi_vault/config/ui_custom_message.py +140 -141
- pulumi_vault/config/vars.py +31 -32
- pulumi_vault/consul/__init__.py +1 -1
- pulumi_vault/consul/secret_backend.py +239 -240
- pulumi_vault/consul/secret_backend_role.py +222 -223
- pulumi_vault/database/__init__.py +1 -1
- pulumi_vault/database/_inputs.py +3167 -3168
- pulumi_vault/database/outputs.py +2123 -2124
- pulumi_vault/database/secret_backend_connection.py +259 -260
- pulumi_vault/database/secret_backend_role.py +205 -206
- pulumi_vault/database/secret_backend_static_role.py +218 -219
- pulumi_vault/database/secrets_mount.py +379 -380
- pulumi_vault/egp_policy.py +86 -87
- pulumi_vault/gcp/__init__.py +1 -1
- pulumi_vault/gcp/_inputs.py +98 -99
- pulumi_vault/gcp/auth_backend.py +322 -323
- pulumi_vault/gcp/auth_backend_role.py +347 -348
- pulumi_vault/gcp/get_auth_backend_role.py +91 -92
- pulumi_vault/gcp/outputs.py +66 -67
- pulumi_vault/gcp/secret_backend.py +299 -300
- pulumi_vault/gcp/secret_impersonated_account.py +112 -113
- pulumi_vault/gcp/secret_roleset.py +115 -116
- pulumi_vault/gcp/secret_static_account.py +115 -116
- pulumi_vault/generic/__init__.py +1 -1
- pulumi_vault/generic/endpoint.py +138 -139
- pulumi_vault/generic/get_secret.py +39 -40
- pulumi_vault/generic/secret.py +95 -96
- pulumi_vault/get_auth_backend.py +29 -30
- pulumi_vault/get_auth_backends.py +19 -20
- pulumi_vault/get_namespace.py +21 -22
- pulumi_vault/get_namespaces.py +19 -20
- pulumi_vault/get_nomad_access_token.py +25 -26
- pulumi_vault/get_policy_document.py +10 -11
- pulumi_vault/get_raft_autopilot_state.py +31 -32
- pulumi_vault/github/__init__.py +1 -1
- pulumi_vault/github/_inputs.py +50 -51
- pulumi_vault/github/auth_backend.py +285 -286
- pulumi_vault/github/outputs.py +34 -35
- pulumi_vault/github/team.py +69 -70
- pulumi_vault/github/user.py +69 -70
- pulumi_vault/identity/__init__.py +1 -1
- pulumi_vault/identity/entity.py +103 -104
- pulumi_vault/identity/entity_alias.py +86 -87
- pulumi_vault/identity/entity_policies.py +78 -79
- pulumi_vault/identity/get_entity.py +62 -63
- pulumi_vault/identity/get_group.py +75 -76
- pulumi_vault/identity/get_oidc_client_creds.py +19 -20
- pulumi_vault/identity/get_oidc_openid_config.py +39 -40
- pulumi_vault/identity/get_oidc_public_keys.py +17 -18
- pulumi_vault/identity/group.py +171 -172
- pulumi_vault/identity/group_alias.py +69 -70
- pulumi_vault/identity/group_member_entity_ids.py +69 -70
- pulumi_vault/identity/group_member_group_ids.py +69 -70
- pulumi_vault/identity/group_policies.py +78 -79
- pulumi_vault/identity/mfa_duo.py +183 -184
- pulumi_vault/identity/mfa_login_enforcement.py +147 -148
- pulumi_vault/identity/mfa_okta.py +166 -167
- pulumi_vault/identity/mfa_pingid.py +160 -161
- pulumi_vault/identity/mfa_totp.py +217 -218
- pulumi_vault/identity/oidc.py +35 -36
- pulumi_vault/identity/oidc_assignment.py +69 -70
- pulumi_vault/identity/oidc_client.py +155 -156
- pulumi_vault/identity/oidc_key.py +103 -104
- pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
- pulumi_vault/identity/oidc_provider.py +112 -113
- pulumi_vault/identity/oidc_role.py +103 -104
- pulumi_vault/identity/oidc_scope.py +69 -70
- pulumi_vault/identity/outputs.py +42 -43
- pulumi_vault/jwt/__init__.py +1 -1
- pulumi_vault/jwt/_inputs.py +50 -51
- pulumi_vault/jwt/auth_backend.py +353 -354
- pulumi_vault/jwt/auth_backend_role.py +494 -495
- pulumi_vault/jwt/outputs.py +34 -35
- pulumi_vault/kmip/__init__.py +1 -1
- pulumi_vault/kmip/secret_backend.py +222 -223
- pulumi_vault/kmip/secret_role.py +358 -359
- pulumi_vault/kmip/secret_scope.py +69 -70
- pulumi_vault/kubernetes/__init__.py +1 -1
- pulumi_vault/kubernetes/auth_backend_config.py +171 -172
- pulumi_vault/kubernetes/auth_backend_role.py +273 -274
- pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
- pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
- pulumi_vault/kubernetes/get_service_account_token.py +51 -52
- pulumi_vault/kubernetes/secret_backend.py +384 -385
- pulumi_vault/kubernetes/secret_backend_role.py +239 -240
- pulumi_vault/kv/__init__.py +1 -1
- pulumi_vault/kv/_inputs.py +25 -26
- pulumi_vault/kv/get_secret.py +25 -26
- pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
- pulumi_vault/kv/get_secret_v2.py +41 -42
- pulumi_vault/kv/get_secrets_list.py +17 -18
- pulumi_vault/kv/get_secrets_list_v2.py +25 -26
- pulumi_vault/kv/outputs.py +17 -18
- pulumi_vault/kv/secret.py +61 -62
- pulumi_vault/kv/secret_backend_v2.py +86 -87
- pulumi_vault/kv/secret_v2.py +184 -185
- pulumi_vault/ldap/__init__.py +1 -1
- pulumi_vault/ldap/auth_backend.py +716 -717
- pulumi_vault/ldap/auth_backend_group.py +69 -70
- pulumi_vault/ldap/auth_backend_user.py +86 -87
- pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
- pulumi_vault/ldap/get_static_credentials.py +29 -30
- pulumi_vault/ldap/secret_backend.py +673 -674
- pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
- pulumi_vault/ldap/secret_backend_library_set.py +120 -121
- pulumi_vault/ldap/secret_backend_static_role.py +120 -121
- pulumi_vault/managed/__init__.py +1 -1
- pulumi_vault/managed/_inputs.py +274 -275
- pulumi_vault/managed/keys.py +27 -28
- pulumi_vault/managed/outputs.py +184 -185
- pulumi_vault/mfa_duo.py +137 -138
- pulumi_vault/mfa_okta.py +137 -138
- pulumi_vault/mfa_pingid.py +149 -150
- pulumi_vault/mfa_totp.py +154 -155
- pulumi_vault/mongodbatlas/__init__.py +1 -1
- pulumi_vault/mongodbatlas/secret_backend.py +78 -79
- pulumi_vault/mongodbatlas/secret_role.py +188 -189
- pulumi_vault/mount.py +333 -334
- pulumi_vault/namespace.py +78 -79
- pulumi_vault/nomad_secret_backend.py +256 -257
- pulumi_vault/nomad_secret_role.py +103 -104
- pulumi_vault/okta/__init__.py +1 -1
- pulumi_vault/okta/_inputs.py +31 -32
- pulumi_vault/okta/auth_backend.py +305 -306
- pulumi_vault/okta/auth_backend_group.py +69 -70
- pulumi_vault/okta/auth_backend_user.py +86 -87
- pulumi_vault/okta/outputs.py +21 -22
- pulumi_vault/outputs.py +81 -82
- pulumi_vault/pkisecret/__init__.py +1 -1
- pulumi_vault/pkisecret/_inputs.py +55 -56
- pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
- pulumi_vault/pkisecret/backend_config_acme.py +175 -176
- pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
- pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
- pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
- pulumi_vault/pkisecret/backend_config_est.py +149 -150
- pulumi_vault/pkisecret/backend_config_scep.py +137 -138
- pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
- pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
- pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
- pulumi_vault/pkisecret/get_backend_config_scep.py +29 -30
- pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
- pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
- pulumi_vault/pkisecret/get_backend_key.py +29 -30
- pulumi_vault/pkisecret/get_backend_keys.py +23 -24
- pulumi_vault/pkisecret/outputs.py +61 -62
- pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
- pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
- pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
- pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
- pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
- pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
- pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
- pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
- pulumi_vault/pkisecret/secret_backend_key.py +146 -147
- pulumi_vault/pkisecret/secret_backend_role.py +873 -874
- pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
- pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
- pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
- pulumi_vault/plugin.py +154 -155
- pulumi_vault/plugin_pinned_version.py +52 -53
- pulumi_vault/policy.py +52 -53
- pulumi_vault/provider.py +160 -161
- pulumi_vault/pulumi-plugin.json +1 -1
- pulumi_vault/quota_lease_count.py +103 -104
- pulumi_vault/quota_rate_limit.py +171 -172
- pulumi_vault/rabbitmq/__init__.py +1 -1
- pulumi_vault/rabbitmq/_inputs.py +50 -51
- pulumi_vault/rabbitmq/outputs.py +34 -35
- pulumi_vault/rabbitmq/secret_backend.py +207 -208
- pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
- pulumi_vault/raft_autopilot.py +137 -138
- pulumi_vault/raft_snapshot_agent_config.py +477 -478
- pulumi_vault/rgp_policy.py +69 -70
- pulumi_vault/saml/__init__.py +1 -1
- pulumi_vault/saml/auth_backend.py +188 -189
- pulumi_vault/saml/auth_backend_role.py +290 -291
- pulumi_vault/scep_auth_backend_role.py +252 -253
- pulumi_vault/secrets/__init__.py +1 -1
- pulumi_vault/secrets/_inputs.py +19 -20
- pulumi_vault/secrets/outputs.py +13 -14
- pulumi_vault/secrets/sync_association.py +88 -89
- pulumi_vault/secrets/sync_aws_destination.py +180 -181
- pulumi_vault/secrets/sync_azure_destination.py +180 -181
- pulumi_vault/secrets/sync_config.py +52 -53
- pulumi_vault/secrets/sync_gcp_destination.py +129 -130
- pulumi_vault/secrets/sync_gh_destination.py +163 -164
- pulumi_vault/secrets/sync_github_apps.py +78 -79
- pulumi_vault/secrets/sync_vercel_destination.py +146 -147
- pulumi_vault/ssh/__init__.py +1 -1
- pulumi_vault/ssh/_inputs.py +13 -14
- pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
- pulumi_vault/ssh/outputs.py +9 -10
- pulumi_vault/ssh/secret_backend_ca.py +120 -121
- pulumi_vault/ssh/secret_backend_role.py +446 -447
- pulumi_vault/terraformcloud/__init__.py +1 -1
- pulumi_vault/terraformcloud/secret_backend.py +138 -139
- pulumi_vault/terraformcloud/secret_creds.py +93 -94
- pulumi_vault/terraformcloud/secret_role.py +117 -118
- pulumi_vault/token.py +301 -302
- pulumi_vault/tokenauth/__init__.py +1 -1
- pulumi_vault/tokenauth/auth_backend_role.py +324 -325
- pulumi_vault/transform/__init__.py +1 -1
- pulumi_vault/transform/alphabet.py +69 -70
- pulumi_vault/transform/get_decode.py +57 -58
- pulumi_vault/transform/get_encode.py +57 -58
- pulumi_vault/transform/role.py +69 -70
- pulumi_vault/transform/template.py +137 -138
- pulumi_vault/transform/transformation.py +171 -172
- pulumi_vault/transit/__init__.py +1 -1
- pulumi_vault/transit/get_cmac.py +47 -48
- pulumi_vault/transit/get_decrypt.py +25 -26
- pulumi_vault/transit/get_encrypt.py +29 -30
- pulumi_vault/transit/get_sign.py +71 -72
- pulumi_vault/transit/get_verify.py +83 -84
- pulumi_vault/transit/secret_backend_key.py +336 -337
- pulumi_vault/transit/secret_cache_config.py +52 -53
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753512474.dist-info}/METADATA +1 -1
- pulumi_vault-7.2.0a1753512474.dist-info/RECORD +268 -0
- pulumi_vault-7.2.0a1753339763.dist-info/RECORD +0 -268
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753512474.dist-info}/WHEEL +0 -0
- {pulumi_vault-7.2.0a1753339763.dist-info → pulumi_vault-7.2.0a1753512474.dist-info}/top_level.txt +0 -0
@@ -2,8 +2,7 @@
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
4
4
|
|
5
|
-
import builtins
|
6
|
-
import copy
|
5
|
+
import builtins as _builtins
|
7
6
|
import warnings
|
8
7
|
import sys
|
9
8
|
import pulumi
|
@@ -22,41 +21,41 @@ __all__ = ['BackendRoleArgs', 'BackendRole']
|
|
22
21
|
@pulumi.input_type
|
23
22
|
class BackendRoleArgs:
|
24
23
|
def __init__(__self__, *,
|
25
|
-
role: pulumi.Input[
|
26
|
-
application_object_id: Optional[pulumi.Input[
|
24
|
+
role: pulumi.Input[_builtins.str],
|
25
|
+
application_object_id: Optional[pulumi.Input[_builtins.str]] = None,
|
27
26
|
azure_groups: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureGroupArgs']]]] = None,
|
28
27
|
azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]]] = None,
|
29
|
-
backend: Optional[pulumi.Input[
|
30
|
-
description: Optional[pulumi.Input[
|
31
|
-
explicit_max_ttl: Optional[pulumi.Input[
|
32
|
-
max_ttl: Optional[pulumi.Input[
|
33
|
-
namespace: Optional[pulumi.Input[
|
34
|
-
permanently_delete: Optional[pulumi.Input[
|
35
|
-
sign_in_audience: Optional[pulumi.Input[
|
36
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[
|
37
|
-
ttl: Optional[pulumi.Input[
|
28
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
29
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
30
|
+
explicit_max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
31
|
+
max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
32
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
33
|
+
permanently_delete: Optional[pulumi.Input[_builtins.bool]] = None,
|
34
|
+
sign_in_audience: Optional[pulumi.Input[_builtins.str]] = None,
|
35
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
36
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None):
|
38
37
|
"""
|
39
38
|
The set of arguments for constructing a BackendRole resource.
|
40
|
-
:param pulumi.Input[
|
41
|
-
:param pulumi.Input[
|
39
|
+
:param pulumi.Input[_builtins.str] role: Name of the Azure role
|
40
|
+
:param pulumi.Input[_builtins.str] application_object_id: Application Object ID for an existing service principal that will
|
42
41
|
be used instead of creating dynamic service principals. If present, `azure_roles` and `permanently_delete` will be ignored.
|
43
42
|
:param pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureGroupArgs']]] azure_groups: List of Azure groups to be assigned to the generated service principal.
|
44
43
|
:param pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]] azure_roles: List of Azure roles to be assigned to the generated service principal.
|
45
|
-
:param pulumi.Input[
|
46
|
-
:param pulumi.Input[
|
47
|
-
:param pulumi.Input[
|
48
|
-
:param pulumi.Input[
|
44
|
+
:param pulumi.Input[_builtins.str] backend: Path to the mounted Azure auth backend
|
45
|
+
:param pulumi.Input[_builtins.str] description: Human-friendly description of the mount for the backend.
|
46
|
+
:param pulumi.Input[_builtins.str] explicit_max_ttl: Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
|
47
|
+
:param pulumi.Input[_builtins.str] max_ttl: Specifies the maximum TTL for service principals generated using this role. Accepts time
|
49
48
|
suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
|
50
|
-
:param pulumi.Input[
|
49
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
51
50
|
The value should not contain leading or trailing forward slashes.
|
52
51
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
53
52
|
*Available only for Vault Enterprise*.
|
54
|
-
:param pulumi.Input[
|
53
|
+
:param pulumi.Input[_builtins.bool] permanently_delete: Indicates whether the applications and service principals created by Vault will be permanently
|
55
54
|
deleted when the corresponding leases expire. Defaults to `false`. For Vault v1.12+.
|
56
|
-
:param pulumi.Input[
|
55
|
+
:param pulumi.Input[_builtins.str] sign_in_audience: Specifies the security principal types that are allowed to sign in to the application.
|
57
56
|
Valid values are: AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount, PersonalMicrosoftAccount. Requires Vault 1.16+.
|
58
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
59
|
-
:param pulumi.Input[
|
57
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] tags: A list of Azure tags to attach to an application. Requires Vault 1.16+.
|
58
|
+
:param pulumi.Input[_builtins.str] ttl: Specifies the default TTL for service principals generated using this role.
|
60
59
|
Accepts time suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine default TTL time.
|
61
60
|
"""
|
62
61
|
pulumi.set(__self__, "role", role)
|
@@ -85,21 +84,21 @@ class BackendRoleArgs:
|
|
85
84
|
if ttl is not None:
|
86
85
|
pulumi.set(__self__, "ttl", ttl)
|
87
86
|
|
88
|
-
@property
|
87
|
+
@_builtins.property
|
89
88
|
@pulumi.getter
|
90
|
-
def role(self) -> pulumi.Input[
|
89
|
+
def role(self) -> pulumi.Input[_builtins.str]:
|
91
90
|
"""
|
92
91
|
Name of the Azure role
|
93
92
|
"""
|
94
93
|
return pulumi.get(self, "role")
|
95
94
|
|
96
95
|
@role.setter
|
97
|
-
def role(self, value: pulumi.Input[
|
96
|
+
def role(self, value: pulumi.Input[_builtins.str]):
|
98
97
|
pulumi.set(self, "role", value)
|
99
98
|
|
100
|
-
@property
|
99
|
+
@_builtins.property
|
101
100
|
@pulumi.getter(name="applicationObjectId")
|
102
|
-
def application_object_id(self) -> Optional[pulumi.Input[
|
101
|
+
def application_object_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
103
102
|
"""
|
104
103
|
Application Object ID for an existing service principal that will
|
105
104
|
be used instead of creating dynamic service principals. If present, `azure_roles` and `permanently_delete` will be ignored.
|
@@ -107,10 +106,10 @@ class BackendRoleArgs:
|
|
107
106
|
return pulumi.get(self, "application_object_id")
|
108
107
|
|
109
108
|
@application_object_id.setter
|
110
|
-
def application_object_id(self, value: Optional[pulumi.Input[
|
109
|
+
def application_object_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
111
110
|
pulumi.set(self, "application_object_id", value)
|
112
111
|
|
113
|
-
@property
|
112
|
+
@_builtins.property
|
114
113
|
@pulumi.getter(name="azureGroups")
|
115
114
|
def azure_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureGroupArgs']]]]:
|
116
115
|
"""
|
@@ -122,7 +121,7 @@ class BackendRoleArgs:
|
|
122
121
|
def azure_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureGroupArgs']]]]):
|
123
122
|
pulumi.set(self, "azure_groups", value)
|
124
123
|
|
125
|
-
@property
|
124
|
+
@_builtins.property
|
126
125
|
@pulumi.getter(name="azureRoles")
|
127
126
|
def azure_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]]]:
|
128
127
|
"""
|
@@ -134,45 +133,45 @@ class BackendRoleArgs:
|
|
134
133
|
def azure_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]]]):
|
135
134
|
pulumi.set(self, "azure_roles", value)
|
136
135
|
|
137
|
-
@property
|
136
|
+
@_builtins.property
|
138
137
|
@pulumi.getter
|
139
|
-
def backend(self) -> Optional[pulumi.Input[
|
138
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
140
139
|
"""
|
141
140
|
Path to the mounted Azure auth backend
|
142
141
|
"""
|
143
142
|
return pulumi.get(self, "backend")
|
144
143
|
|
145
144
|
@backend.setter
|
146
|
-
def backend(self, value: Optional[pulumi.Input[
|
145
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
147
146
|
pulumi.set(self, "backend", value)
|
148
147
|
|
149
|
-
@property
|
148
|
+
@_builtins.property
|
150
149
|
@pulumi.getter
|
151
|
-
def description(self) -> Optional[pulumi.Input[
|
150
|
+
def description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
152
151
|
"""
|
153
152
|
Human-friendly description of the mount for the backend.
|
154
153
|
"""
|
155
154
|
return pulumi.get(self, "description")
|
156
155
|
|
157
156
|
@description.setter
|
158
|
-
def description(self, value: Optional[pulumi.Input[
|
157
|
+
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
159
158
|
pulumi.set(self, "description", value)
|
160
159
|
|
161
|
-
@property
|
160
|
+
@_builtins.property
|
162
161
|
@pulumi.getter(name="explicitMaxTtl")
|
163
|
-
def explicit_max_ttl(self) -> Optional[pulumi.Input[
|
162
|
+
def explicit_max_ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
164
163
|
"""
|
165
164
|
Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
|
166
165
|
"""
|
167
166
|
return pulumi.get(self, "explicit_max_ttl")
|
168
167
|
|
169
168
|
@explicit_max_ttl.setter
|
170
|
-
def explicit_max_ttl(self, value: Optional[pulumi.Input[
|
169
|
+
def explicit_max_ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
171
170
|
pulumi.set(self, "explicit_max_ttl", value)
|
172
171
|
|
173
|
-
@property
|
172
|
+
@_builtins.property
|
174
173
|
@pulumi.getter(name="maxTtl")
|
175
|
-
def max_ttl(self) -> Optional[pulumi.Input[
|
174
|
+
def max_ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
176
175
|
"""
|
177
176
|
Specifies the maximum TTL for service principals generated using this role. Accepts time
|
178
177
|
suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
|
@@ -180,12 +179,12 @@ class BackendRoleArgs:
|
|
180
179
|
return pulumi.get(self, "max_ttl")
|
181
180
|
|
182
181
|
@max_ttl.setter
|
183
|
-
def max_ttl(self, value: Optional[pulumi.Input[
|
182
|
+
def max_ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
184
183
|
pulumi.set(self, "max_ttl", value)
|
185
184
|
|
186
|
-
@property
|
185
|
+
@_builtins.property
|
187
186
|
@pulumi.getter
|
188
|
-
def namespace(self) -> Optional[pulumi.Input[
|
187
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
189
188
|
"""
|
190
189
|
The namespace to provision the resource in.
|
191
190
|
The value should not contain leading or trailing forward slashes.
|
@@ -195,12 +194,12 @@ class BackendRoleArgs:
|
|
195
194
|
return pulumi.get(self, "namespace")
|
196
195
|
|
197
196
|
@namespace.setter
|
198
|
-
def namespace(self, value: Optional[pulumi.Input[
|
197
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
199
198
|
pulumi.set(self, "namespace", value)
|
200
199
|
|
201
|
-
@property
|
200
|
+
@_builtins.property
|
202
201
|
@pulumi.getter(name="permanentlyDelete")
|
203
|
-
def permanently_delete(self) -> Optional[pulumi.Input[
|
202
|
+
def permanently_delete(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
204
203
|
"""
|
205
204
|
Indicates whether the applications and service principals created by Vault will be permanently
|
206
205
|
deleted when the corresponding leases expire. Defaults to `false`. For Vault v1.12+.
|
@@ -208,12 +207,12 @@ class BackendRoleArgs:
|
|
208
207
|
return pulumi.get(self, "permanently_delete")
|
209
208
|
|
210
209
|
@permanently_delete.setter
|
211
|
-
def permanently_delete(self, value: Optional[pulumi.Input[
|
210
|
+
def permanently_delete(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
212
211
|
pulumi.set(self, "permanently_delete", value)
|
213
212
|
|
214
|
-
@property
|
213
|
+
@_builtins.property
|
215
214
|
@pulumi.getter(name="signInAudience")
|
216
|
-
def sign_in_audience(self) -> Optional[pulumi.Input[
|
215
|
+
def sign_in_audience(self) -> Optional[pulumi.Input[_builtins.str]]:
|
217
216
|
"""
|
218
217
|
Specifies the security principal types that are allowed to sign in to the application.
|
219
218
|
Valid values are: AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount, PersonalMicrosoftAccount. Requires Vault 1.16+.
|
@@ -221,24 +220,24 @@ class BackendRoleArgs:
|
|
221
220
|
return pulumi.get(self, "sign_in_audience")
|
222
221
|
|
223
222
|
@sign_in_audience.setter
|
224
|
-
def sign_in_audience(self, value: Optional[pulumi.Input[
|
223
|
+
def sign_in_audience(self, value: Optional[pulumi.Input[_builtins.str]]):
|
225
224
|
pulumi.set(self, "sign_in_audience", value)
|
226
225
|
|
227
|
-
@property
|
226
|
+
@_builtins.property
|
228
227
|
@pulumi.getter
|
229
|
-
def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
228
|
+
def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
230
229
|
"""
|
231
230
|
A list of Azure tags to attach to an application. Requires Vault 1.16+.
|
232
231
|
"""
|
233
232
|
return pulumi.get(self, "tags")
|
234
233
|
|
235
234
|
@tags.setter
|
236
|
-
def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
235
|
+
def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
237
236
|
pulumi.set(self, "tags", value)
|
238
237
|
|
239
|
-
@property
|
238
|
+
@_builtins.property
|
240
239
|
@pulumi.getter
|
241
|
-
def ttl(self) -> Optional[pulumi.Input[
|
240
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
242
241
|
"""
|
243
242
|
Specifies the default TTL for service principals generated using this role.
|
244
243
|
Accepts time suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine default TTL time.
|
@@ -246,48 +245,48 @@ class BackendRoleArgs:
|
|
246
245
|
return pulumi.get(self, "ttl")
|
247
246
|
|
248
247
|
@ttl.setter
|
249
|
-
def ttl(self, value: Optional[pulumi.Input[
|
248
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
250
249
|
pulumi.set(self, "ttl", value)
|
251
250
|
|
252
251
|
|
253
252
|
@pulumi.input_type
|
254
253
|
class _BackendRoleState:
|
255
254
|
def __init__(__self__, *,
|
256
|
-
application_object_id: Optional[pulumi.Input[
|
255
|
+
application_object_id: Optional[pulumi.Input[_builtins.str]] = None,
|
257
256
|
azure_groups: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureGroupArgs']]]] = None,
|
258
257
|
azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]]] = None,
|
259
|
-
backend: Optional[pulumi.Input[
|
260
|
-
description: Optional[pulumi.Input[
|
261
|
-
explicit_max_ttl: Optional[pulumi.Input[
|
262
|
-
max_ttl: Optional[pulumi.Input[
|
263
|
-
namespace: Optional[pulumi.Input[
|
264
|
-
permanently_delete: Optional[pulumi.Input[
|
265
|
-
role: Optional[pulumi.Input[
|
266
|
-
sign_in_audience: Optional[pulumi.Input[
|
267
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[
|
268
|
-
ttl: Optional[pulumi.Input[
|
258
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
259
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
260
|
+
explicit_max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
261
|
+
max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
262
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
263
|
+
permanently_delete: Optional[pulumi.Input[_builtins.bool]] = None,
|
264
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
265
|
+
sign_in_audience: Optional[pulumi.Input[_builtins.str]] = None,
|
266
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
267
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None):
|
269
268
|
"""
|
270
269
|
Input properties used for looking up and filtering BackendRole resources.
|
271
|
-
:param pulumi.Input[
|
270
|
+
:param pulumi.Input[_builtins.str] application_object_id: Application Object ID for an existing service principal that will
|
272
271
|
be used instead of creating dynamic service principals. If present, `azure_roles` and `permanently_delete` will be ignored.
|
273
272
|
:param pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureGroupArgs']]] azure_groups: List of Azure groups to be assigned to the generated service principal.
|
274
273
|
:param pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]] azure_roles: List of Azure roles to be assigned to the generated service principal.
|
275
|
-
:param pulumi.Input[
|
276
|
-
:param pulumi.Input[
|
277
|
-
:param pulumi.Input[
|
278
|
-
:param pulumi.Input[
|
274
|
+
:param pulumi.Input[_builtins.str] backend: Path to the mounted Azure auth backend
|
275
|
+
:param pulumi.Input[_builtins.str] description: Human-friendly description of the mount for the backend.
|
276
|
+
:param pulumi.Input[_builtins.str] explicit_max_ttl: Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
|
277
|
+
:param pulumi.Input[_builtins.str] max_ttl: Specifies the maximum TTL for service principals generated using this role. Accepts time
|
279
278
|
suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
|
280
|
-
:param pulumi.Input[
|
279
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
281
280
|
The value should not contain leading or trailing forward slashes.
|
282
281
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
283
282
|
*Available only for Vault Enterprise*.
|
284
|
-
:param pulumi.Input[
|
283
|
+
:param pulumi.Input[_builtins.bool] permanently_delete: Indicates whether the applications and service principals created by Vault will be permanently
|
285
284
|
deleted when the corresponding leases expire. Defaults to `false`. For Vault v1.12+.
|
286
|
-
:param pulumi.Input[
|
287
|
-
:param pulumi.Input[
|
285
|
+
:param pulumi.Input[_builtins.str] role: Name of the Azure role
|
286
|
+
:param pulumi.Input[_builtins.str] sign_in_audience: Specifies the security principal types that are allowed to sign in to the application.
|
288
287
|
Valid values are: AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount, PersonalMicrosoftAccount. Requires Vault 1.16+.
|
289
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
290
|
-
:param pulumi.Input[
|
288
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] tags: A list of Azure tags to attach to an application. Requires Vault 1.16+.
|
289
|
+
:param pulumi.Input[_builtins.str] ttl: Specifies the default TTL for service principals generated using this role.
|
291
290
|
Accepts time suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine default TTL time.
|
292
291
|
"""
|
293
292
|
if application_object_id is not None:
|
@@ -317,9 +316,9 @@ class _BackendRoleState:
|
|
317
316
|
if ttl is not None:
|
318
317
|
pulumi.set(__self__, "ttl", ttl)
|
319
318
|
|
320
|
-
@property
|
319
|
+
@_builtins.property
|
321
320
|
@pulumi.getter(name="applicationObjectId")
|
322
|
-
def application_object_id(self) -> Optional[pulumi.Input[
|
321
|
+
def application_object_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
323
322
|
"""
|
324
323
|
Application Object ID for an existing service principal that will
|
325
324
|
be used instead of creating dynamic service principals. If present, `azure_roles` and `permanently_delete` will be ignored.
|
@@ -327,10 +326,10 @@ class _BackendRoleState:
|
|
327
326
|
return pulumi.get(self, "application_object_id")
|
328
327
|
|
329
328
|
@application_object_id.setter
|
330
|
-
def application_object_id(self, value: Optional[pulumi.Input[
|
329
|
+
def application_object_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
331
330
|
pulumi.set(self, "application_object_id", value)
|
332
331
|
|
333
|
-
@property
|
332
|
+
@_builtins.property
|
334
333
|
@pulumi.getter(name="azureGroups")
|
335
334
|
def azure_groups(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureGroupArgs']]]]:
|
336
335
|
"""
|
@@ -342,7 +341,7 @@ class _BackendRoleState:
|
|
342
341
|
def azure_groups(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureGroupArgs']]]]):
|
343
342
|
pulumi.set(self, "azure_groups", value)
|
344
343
|
|
345
|
-
@property
|
344
|
+
@_builtins.property
|
346
345
|
@pulumi.getter(name="azureRoles")
|
347
346
|
def azure_roles(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]]]:
|
348
347
|
"""
|
@@ -354,45 +353,45 @@ class _BackendRoleState:
|
|
354
353
|
def azure_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]]]):
|
355
354
|
pulumi.set(self, "azure_roles", value)
|
356
355
|
|
357
|
-
@property
|
356
|
+
@_builtins.property
|
358
357
|
@pulumi.getter
|
359
|
-
def backend(self) -> Optional[pulumi.Input[
|
358
|
+
def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
|
360
359
|
"""
|
361
360
|
Path to the mounted Azure auth backend
|
362
361
|
"""
|
363
362
|
return pulumi.get(self, "backend")
|
364
363
|
|
365
364
|
@backend.setter
|
366
|
-
def backend(self, value: Optional[pulumi.Input[
|
365
|
+
def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
|
367
366
|
pulumi.set(self, "backend", value)
|
368
367
|
|
369
|
-
@property
|
368
|
+
@_builtins.property
|
370
369
|
@pulumi.getter
|
371
|
-
def description(self) -> Optional[pulumi.Input[
|
370
|
+
def description(self) -> Optional[pulumi.Input[_builtins.str]]:
|
372
371
|
"""
|
373
372
|
Human-friendly description of the mount for the backend.
|
374
373
|
"""
|
375
374
|
return pulumi.get(self, "description")
|
376
375
|
|
377
376
|
@description.setter
|
378
|
-
def description(self, value: Optional[pulumi.Input[
|
377
|
+
def description(self, value: Optional[pulumi.Input[_builtins.str]]):
|
379
378
|
pulumi.set(self, "description", value)
|
380
379
|
|
381
|
-
@property
|
380
|
+
@_builtins.property
|
382
381
|
@pulumi.getter(name="explicitMaxTtl")
|
383
|
-
def explicit_max_ttl(self) -> Optional[pulumi.Input[
|
382
|
+
def explicit_max_ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
384
383
|
"""
|
385
384
|
Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
|
386
385
|
"""
|
387
386
|
return pulumi.get(self, "explicit_max_ttl")
|
388
387
|
|
389
388
|
@explicit_max_ttl.setter
|
390
|
-
def explicit_max_ttl(self, value: Optional[pulumi.Input[
|
389
|
+
def explicit_max_ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
391
390
|
pulumi.set(self, "explicit_max_ttl", value)
|
392
391
|
|
393
|
-
@property
|
392
|
+
@_builtins.property
|
394
393
|
@pulumi.getter(name="maxTtl")
|
395
|
-
def max_ttl(self) -> Optional[pulumi.Input[
|
394
|
+
def max_ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
396
395
|
"""
|
397
396
|
Specifies the maximum TTL for service principals generated using this role. Accepts time
|
398
397
|
suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
|
@@ -400,12 +399,12 @@ class _BackendRoleState:
|
|
400
399
|
return pulumi.get(self, "max_ttl")
|
401
400
|
|
402
401
|
@max_ttl.setter
|
403
|
-
def max_ttl(self, value: Optional[pulumi.Input[
|
402
|
+
def max_ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
404
403
|
pulumi.set(self, "max_ttl", value)
|
405
404
|
|
406
|
-
@property
|
405
|
+
@_builtins.property
|
407
406
|
@pulumi.getter
|
408
|
-
def namespace(self) -> Optional[pulumi.Input[
|
407
|
+
def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
|
409
408
|
"""
|
410
409
|
The namespace to provision the resource in.
|
411
410
|
The value should not contain leading or trailing forward slashes.
|
@@ -415,12 +414,12 @@ class _BackendRoleState:
|
|
415
414
|
return pulumi.get(self, "namespace")
|
416
415
|
|
417
416
|
@namespace.setter
|
418
|
-
def namespace(self, value: Optional[pulumi.Input[
|
417
|
+
def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
|
419
418
|
pulumi.set(self, "namespace", value)
|
420
419
|
|
421
|
-
@property
|
420
|
+
@_builtins.property
|
422
421
|
@pulumi.getter(name="permanentlyDelete")
|
423
|
-
def permanently_delete(self) -> Optional[pulumi.Input[
|
422
|
+
def permanently_delete(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
424
423
|
"""
|
425
424
|
Indicates whether the applications and service principals created by Vault will be permanently
|
426
425
|
deleted when the corresponding leases expire. Defaults to `false`. For Vault v1.12+.
|
@@ -428,24 +427,24 @@ class _BackendRoleState:
|
|
428
427
|
return pulumi.get(self, "permanently_delete")
|
429
428
|
|
430
429
|
@permanently_delete.setter
|
431
|
-
def permanently_delete(self, value: Optional[pulumi.Input[
|
430
|
+
def permanently_delete(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
432
431
|
pulumi.set(self, "permanently_delete", value)
|
433
432
|
|
434
|
-
@property
|
433
|
+
@_builtins.property
|
435
434
|
@pulumi.getter
|
436
|
-
def role(self) -> Optional[pulumi.Input[
|
435
|
+
def role(self) -> Optional[pulumi.Input[_builtins.str]]:
|
437
436
|
"""
|
438
437
|
Name of the Azure role
|
439
438
|
"""
|
440
439
|
return pulumi.get(self, "role")
|
441
440
|
|
442
441
|
@role.setter
|
443
|
-
def role(self, value: Optional[pulumi.Input[
|
442
|
+
def role(self, value: Optional[pulumi.Input[_builtins.str]]):
|
444
443
|
pulumi.set(self, "role", value)
|
445
444
|
|
446
|
-
@property
|
445
|
+
@_builtins.property
|
447
446
|
@pulumi.getter(name="signInAudience")
|
448
|
-
def sign_in_audience(self) -> Optional[pulumi.Input[
|
447
|
+
def sign_in_audience(self) -> Optional[pulumi.Input[_builtins.str]]:
|
449
448
|
"""
|
450
449
|
Specifies the security principal types that are allowed to sign in to the application.
|
451
450
|
Valid values are: AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount, PersonalMicrosoftAccount. Requires Vault 1.16+.
|
@@ -453,24 +452,24 @@ class _BackendRoleState:
|
|
453
452
|
return pulumi.get(self, "sign_in_audience")
|
454
453
|
|
455
454
|
@sign_in_audience.setter
|
456
|
-
def sign_in_audience(self, value: Optional[pulumi.Input[
|
455
|
+
def sign_in_audience(self, value: Optional[pulumi.Input[_builtins.str]]):
|
457
456
|
pulumi.set(self, "sign_in_audience", value)
|
458
457
|
|
459
|
-
@property
|
458
|
+
@_builtins.property
|
460
459
|
@pulumi.getter
|
461
|
-
def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[
|
460
|
+
def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
|
462
461
|
"""
|
463
462
|
A list of Azure tags to attach to an application. Requires Vault 1.16+.
|
464
463
|
"""
|
465
464
|
return pulumi.get(self, "tags")
|
466
465
|
|
467
466
|
@tags.setter
|
468
|
-
def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[
|
467
|
+
def tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
|
469
468
|
pulumi.set(self, "tags", value)
|
470
469
|
|
471
|
-
@property
|
470
|
+
@_builtins.property
|
472
471
|
@pulumi.getter
|
473
|
-
def ttl(self) -> Optional[pulumi.Input[
|
472
|
+
def ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
|
474
473
|
"""
|
475
474
|
Specifies the default TTL for service principals generated using this role.
|
476
475
|
Accepts time suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine default TTL time.
|
@@ -478,7 +477,7 @@ class _BackendRoleState:
|
|
478
477
|
return pulumi.get(self, "ttl")
|
479
478
|
|
480
479
|
@ttl.setter
|
481
|
-
def ttl(self, value: Optional[pulumi.Input[
|
480
|
+
def ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
|
482
481
|
pulumi.set(self, "ttl", value)
|
483
482
|
|
484
483
|
|
@@ -488,19 +487,19 @@ class BackendRole(pulumi.CustomResource):
|
|
488
487
|
def __init__(__self__,
|
489
488
|
resource_name: str,
|
490
489
|
opts: Optional[pulumi.ResourceOptions] = None,
|
491
|
-
application_object_id: Optional[pulumi.Input[
|
490
|
+
application_object_id: Optional[pulumi.Input[_builtins.str]] = None,
|
492
491
|
azure_groups: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureGroupArgs', 'BackendRoleAzureGroupArgsDict']]]]] = None,
|
493
492
|
azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]]] = None,
|
494
|
-
backend: Optional[pulumi.Input[
|
495
|
-
description: Optional[pulumi.Input[
|
496
|
-
explicit_max_ttl: Optional[pulumi.Input[
|
497
|
-
max_ttl: Optional[pulumi.Input[
|
498
|
-
namespace: Optional[pulumi.Input[
|
499
|
-
permanently_delete: Optional[pulumi.Input[
|
500
|
-
role: Optional[pulumi.Input[
|
501
|
-
sign_in_audience: Optional[pulumi.Input[
|
502
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[
|
503
|
-
ttl: Optional[pulumi.Input[
|
493
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
494
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
495
|
+
explicit_max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
496
|
+
max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
497
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
498
|
+
permanently_delete: Optional[pulumi.Input[_builtins.bool]] = None,
|
499
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
500
|
+
sign_in_audience: Optional[pulumi.Input[_builtins.str]] = None,
|
501
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
502
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
504
503
|
__props__=None):
|
505
504
|
"""
|
506
505
|
## Example Usage
|
@@ -538,26 +537,26 @@ class BackendRole(pulumi.CustomResource):
|
|
538
537
|
|
539
538
|
:param str resource_name: The name of the resource.
|
540
539
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
541
|
-
:param pulumi.Input[
|
540
|
+
:param pulumi.Input[_builtins.str] application_object_id: Application Object ID for an existing service principal that will
|
542
541
|
be used instead of creating dynamic service principals. If present, `azure_roles` and `permanently_delete` will be ignored.
|
543
542
|
:param pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureGroupArgs', 'BackendRoleAzureGroupArgsDict']]]] azure_groups: List of Azure groups to be assigned to the generated service principal.
|
544
543
|
:param pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]] azure_roles: List of Azure roles to be assigned to the generated service principal.
|
545
|
-
:param pulumi.Input[
|
546
|
-
:param pulumi.Input[
|
547
|
-
:param pulumi.Input[
|
548
|
-
:param pulumi.Input[
|
544
|
+
:param pulumi.Input[_builtins.str] backend: Path to the mounted Azure auth backend
|
545
|
+
:param pulumi.Input[_builtins.str] description: Human-friendly description of the mount for the backend.
|
546
|
+
:param pulumi.Input[_builtins.str] explicit_max_ttl: Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
|
547
|
+
:param pulumi.Input[_builtins.str] max_ttl: Specifies the maximum TTL for service principals generated using this role. Accepts time
|
549
548
|
suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
|
550
|
-
:param pulumi.Input[
|
549
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
551
550
|
The value should not contain leading or trailing forward slashes.
|
552
551
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
553
552
|
*Available only for Vault Enterprise*.
|
554
|
-
:param pulumi.Input[
|
553
|
+
:param pulumi.Input[_builtins.bool] permanently_delete: Indicates whether the applications and service principals created by Vault will be permanently
|
555
554
|
deleted when the corresponding leases expire. Defaults to `false`. For Vault v1.12+.
|
556
|
-
:param pulumi.Input[
|
557
|
-
:param pulumi.Input[
|
555
|
+
:param pulumi.Input[_builtins.str] role: Name of the Azure role
|
556
|
+
:param pulumi.Input[_builtins.str] sign_in_audience: Specifies the security principal types that are allowed to sign in to the application.
|
558
557
|
Valid values are: AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount, PersonalMicrosoftAccount. Requires Vault 1.16+.
|
559
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
560
|
-
:param pulumi.Input[
|
558
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] tags: A list of Azure tags to attach to an application. Requires Vault 1.16+.
|
559
|
+
:param pulumi.Input[_builtins.str] ttl: Specifies the default TTL for service principals generated using this role.
|
561
560
|
Accepts time suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine default TTL time.
|
562
561
|
"""
|
563
562
|
...
|
@@ -615,19 +614,19 @@ class BackendRole(pulumi.CustomResource):
|
|
615
614
|
def _internal_init(__self__,
|
616
615
|
resource_name: str,
|
617
616
|
opts: Optional[pulumi.ResourceOptions] = None,
|
618
|
-
application_object_id: Optional[pulumi.Input[
|
617
|
+
application_object_id: Optional[pulumi.Input[_builtins.str]] = None,
|
619
618
|
azure_groups: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureGroupArgs', 'BackendRoleAzureGroupArgsDict']]]]] = None,
|
620
619
|
azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]]] = None,
|
621
|
-
backend: Optional[pulumi.Input[
|
622
|
-
description: Optional[pulumi.Input[
|
623
|
-
explicit_max_ttl: Optional[pulumi.Input[
|
624
|
-
max_ttl: Optional[pulumi.Input[
|
625
|
-
namespace: Optional[pulumi.Input[
|
626
|
-
permanently_delete: Optional[pulumi.Input[
|
627
|
-
role: Optional[pulumi.Input[
|
628
|
-
sign_in_audience: Optional[pulumi.Input[
|
629
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[
|
630
|
-
ttl: Optional[pulumi.Input[
|
620
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
621
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
622
|
+
explicit_max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
623
|
+
max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
624
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
625
|
+
permanently_delete: Optional[pulumi.Input[_builtins.bool]] = None,
|
626
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
627
|
+
sign_in_audience: Optional[pulumi.Input[_builtins.str]] = None,
|
628
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
629
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
631
630
|
__props__=None):
|
632
631
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
633
632
|
if not isinstance(opts, pulumi.ResourceOptions):
|
@@ -662,19 +661,19 @@ class BackendRole(pulumi.CustomResource):
|
|
662
661
|
def get(resource_name: str,
|
663
662
|
id: pulumi.Input[str],
|
664
663
|
opts: Optional[pulumi.ResourceOptions] = None,
|
665
|
-
application_object_id: Optional[pulumi.Input[
|
664
|
+
application_object_id: Optional[pulumi.Input[_builtins.str]] = None,
|
666
665
|
azure_groups: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureGroupArgs', 'BackendRoleAzureGroupArgsDict']]]]] = None,
|
667
666
|
azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]]] = None,
|
668
|
-
backend: Optional[pulumi.Input[
|
669
|
-
description: Optional[pulumi.Input[
|
670
|
-
explicit_max_ttl: Optional[pulumi.Input[
|
671
|
-
max_ttl: Optional[pulumi.Input[
|
672
|
-
namespace: Optional[pulumi.Input[
|
673
|
-
permanently_delete: Optional[pulumi.Input[
|
674
|
-
role: Optional[pulumi.Input[
|
675
|
-
sign_in_audience: Optional[pulumi.Input[
|
676
|
-
tags: Optional[pulumi.Input[Sequence[pulumi.Input[
|
677
|
-
ttl: Optional[pulumi.Input[
|
667
|
+
backend: Optional[pulumi.Input[_builtins.str]] = None,
|
668
|
+
description: Optional[pulumi.Input[_builtins.str]] = None,
|
669
|
+
explicit_max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
670
|
+
max_ttl: Optional[pulumi.Input[_builtins.str]] = None,
|
671
|
+
namespace: Optional[pulumi.Input[_builtins.str]] = None,
|
672
|
+
permanently_delete: Optional[pulumi.Input[_builtins.bool]] = None,
|
673
|
+
role: Optional[pulumi.Input[_builtins.str]] = None,
|
674
|
+
sign_in_audience: Optional[pulumi.Input[_builtins.str]] = None,
|
675
|
+
tags: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
|
676
|
+
ttl: Optional[pulumi.Input[_builtins.str]] = None) -> 'BackendRole':
|
678
677
|
"""
|
679
678
|
Get an existing BackendRole resource's state with the given name, id, and optional extra
|
680
679
|
properties used to qualify the lookup.
|
@@ -682,26 +681,26 @@ class BackendRole(pulumi.CustomResource):
|
|
682
681
|
:param str resource_name: The unique name of the resulting resource.
|
683
682
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
684
683
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
685
|
-
:param pulumi.Input[
|
684
|
+
:param pulumi.Input[_builtins.str] application_object_id: Application Object ID for an existing service principal that will
|
686
685
|
be used instead of creating dynamic service principals. If present, `azure_roles` and `permanently_delete` will be ignored.
|
687
686
|
:param pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureGroupArgs', 'BackendRoleAzureGroupArgsDict']]]] azure_groups: List of Azure groups to be assigned to the generated service principal.
|
688
687
|
:param pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]] azure_roles: List of Azure roles to be assigned to the generated service principal.
|
689
|
-
:param pulumi.Input[
|
690
|
-
:param pulumi.Input[
|
691
|
-
:param pulumi.Input[
|
692
|
-
:param pulumi.Input[
|
688
|
+
:param pulumi.Input[_builtins.str] backend: Path to the mounted Azure auth backend
|
689
|
+
:param pulumi.Input[_builtins.str] description: Human-friendly description of the mount for the backend.
|
690
|
+
:param pulumi.Input[_builtins.str] explicit_max_ttl: Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
|
691
|
+
:param pulumi.Input[_builtins.str] max_ttl: Specifies the maximum TTL for service principals generated using this role. Accepts time
|
693
692
|
suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
|
694
|
-
:param pulumi.Input[
|
693
|
+
:param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
|
695
694
|
The value should not contain leading or trailing forward slashes.
|
696
695
|
The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
|
697
696
|
*Available only for Vault Enterprise*.
|
698
|
-
:param pulumi.Input[
|
697
|
+
:param pulumi.Input[_builtins.bool] permanently_delete: Indicates whether the applications and service principals created by Vault will be permanently
|
699
698
|
deleted when the corresponding leases expire. Defaults to `false`. For Vault v1.12+.
|
700
|
-
:param pulumi.Input[
|
701
|
-
:param pulumi.Input[
|
699
|
+
:param pulumi.Input[_builtins.str] role: Name of the Azure role
|
700
|
+
:param pulumi.Input[_builtins.str] sign_in_audience: Specifies the security principal types that are allowed to sign in to the application.
|
702
701
|
Valid values are: AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount, PersonalMicrosoftAccount. Requires Vault 1.16+.
|
703
|
-
:param pulumi.Input[Sequence[pulumi.Input[
|
704
|
-
:param pulumi.Input[
|
702
|
+
:param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] tags: A list of Azure tags to attach to an application. Requires Vault 1.16+.
|
703
|
+
:param pulumi.Input[_builtins.str] ttl: Specifies the default TTL for service principals generated using this role.
|
705
704
|
Accepts time suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine default TTL time.
|
706
705
|
"""
|
707
706
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
@@ -723,16 +722,16 @@ class BackendRole(pulumi.CustomResource):
|
|
723
722
|
__props__.__dict__["ttl"] = ttl
|
724
723
|
return BackendRole(resource_name, opts=opts, __props__=__props__)
|
725
724
|
|
726
|
-
@property
|
725
|
+
@_builtins.property
|
727
726
|
@pulumi.getter(name="applicationObjectId")
|
728
|
-
def application_object_id(self) -> pulumi.Output[Optional[
|
727
|
+
def application_object_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
729
728
|
"""
|
730
729
|
Application Object ID for an existing service principal that will
|
731
730
|
be used instead of creating dynamic service principals. If present, `azure_roles` and `permanently_delete` will be ignored.
|
732
731
|
"""
|
733
732
|
return pulumi.get(self, "application_object_id")
|
734
733
|
|
735
|
-
@property
|
734
|
+
@_builtins.property
|
736
735
|
@pulumi.getter(name="azureGroups")
|
737
736
|
def azure_groups(self) -> pulumi.Output[Optional[Sequence['outputs.BackendRoleAzureGroup']]]:
|
738
737
|
"""
|
@@ -740,7 +739,7 @@ class BackendRole(pulumi.CustomResource):
|
|
740
739
|
"""
|
741
740
|
return pulumi.get(self, "azure_groups")
|
742
741
|
|
743
|
-
@property
|
742
|
+
@_builtins.property
|
744
743
|
@pulumi.getter(name="azureRoles")
|
745
744
|
def azure_roles(self) -> pulumi.Output[Optional[Sequence['outputs.BackendRoleAzureRole']]]:
|
746
745
|
"""
|
@@ -748,42 +747,42 @@ class BackendRole(pulumi.CustomResource):
|
|
748
747
|
"""
|
749
748
|
return pulumi.get(self, "azure_roles")
|
750
749
|
|
751
|
-
@property
|
750
|
+
@_builtins.property
|
752
751
|
@pulumi.getter
|
753
|
-
def backend(self) -> pulumi.Output[Optional[
|
752
|
+
def backend(self) -> pulumi.Output[Optional[_builtins.str]]:
|
754
753
|
"""
|
755
754
|
Path to the mounted Azure auth backend
|
756
755
|
"""
|
757
756
|
return pulumi.get(self, "backend")
|
758
757
|
|
759
|
-
@property
|
758
|
+
@_builtins.property
|
760
759
|
@pulumi.getter
|
761
|
-
def description(self) -> pulumi.Output[Optional[
|
760
|
+
def description(self) -> pulumi.Output[Optional[_builtins.str]]:
|
762
761
|
"""
|
763
762
|
Human-friendly description of the mount for the backend.
|
764
763
|
"""
|
765
764
|
return pulumi.get(self, "description")
|
766
765
|
|
767
|
-
@property
|
766
|
+
@_builtins.property
|
768
767
|
@pulumi.getter(name="explicitMaxTtl")
|
769
|
-
def explicit_max_ttl(self) -> pulumi.Output[Optional[
|
768
|
+
def explicit_max_ttl(self) -> pulumi.Output[Optional[_builtins.str]]:
|
770
769
|
"""
|
771
770
|
Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
|
772
771
|
"""
|
773
772
|
return pulumi.get(self, "explicit_max_ttl")
|
774
773
|
|
775
|
-
@property
|
774
|
+
@_builtins.property
|
776
775
|
@pulumi.getter(name="maxTtl")
|
777
|
-
def max_ttl(self) -> pulumi.Output[Optional[
|
776
|
+
def max_ttl(self) -> pulumi.Output[Optional[_builtins.str]]:
|
778
777
|
"""
|
779
778
|
Specifies the maximum TTL for service principals generated using this role. Accepts time
|
780
779
|
suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
|
781
780
|
"""
|
782
781
|
return pulumi.get(self, "max_ttl")
|
783
782
|
|
784
|
-
@property
|
783
|
+
@_builtins.property
|
785
784
|
@pulumi.getter
|
786
|
-
def namespace(self) -> pulumi.Output[Optional[
|
785
|
+
def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
|
787
786
|
"""
|
788
787
|
The namespace to provision the resource in.
|
789
788
|
The value should not contain leading or trailing forward slashes.
|
@@ -792,43 +791,43 @@ class BackendRole(pulumi.CustomResource):
|
|
792
791
|
"""
|
793
792
|
return pulumi.get(self, "namespace")
|
794
793
|
|
795
|
-
@property
|
794
|
+
@_builtins.property
|
796
795
|
@pulumi.getter(name="permanentlyDelete")
|
797
|
-
def permanently_delete(self) -> pulumi.Output[
|
796
|
+
def permanently_delete(self) -> pulumi.Output[_builtins.bool]:
|
798
797
|
"""
|
799
798
|
Indicates whether the applications and service principals created by Vault will be permanently
|
800
799
|
deleted when the corresponding leases expire. Defaults to `false`. For Vault v1.12+.
|
801
800
|
"""
|
802
801
|
return pulumi.get(self, "permanently_delete")
|
803
802
|
|
804
|
-
@property
|
803
|
+
@_builtins.property
|
805
804
|
@pulumi.getter
|
806
|
-
def role(self) -> pulumi.Output[
|
805
|
+
def role(self) -> pulumi.Output[_builtins.str]:
|
807
806
|
"""
|
808
807
|
Name of the Azure role
|
809
808
|
"""
|
810
809
|
return pulumi.get(self, "role")
|
811
810
|
|
812
|
-
@property
|
811
|
+
@_builtins.property
|
813
812
|
@pulumi.getter(name="signInAudience")
|
814
|
-
def sign_in_audience(self) -> pulumi.Output[Optional[
|
813
|
+
def sign_in_audience(self) -> pulumi.Output[Optional[_builtins.str]]:
|
815
814
|
"""
|
816
815
|
Specifies the security principal types that are allowed to sign in to the application.
|
817
816
|
Valid values are: AzureADMyOrg, AzureADMultipleOrgs, AzureADandPersonalMicrosoftAccount, PersonalMicrosoftAccount. Requires Vault 1.16+.
|
818
817
|
"""
|
819
818
|
return pulumi.get(self, "sign_in_audience")
|
820
819
|
|
821
|
-
@property
|
820
|
+
@_builtins.property
|
822
821
|
@pulumi.getter
|
823
|
-
def tags(self) -> pulumi.Output[Optional[Sequence[
|
822
|
+
def tags(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
|
824
823
|
"""
|
825
824
|
A list of Azure tags to attach to an application. Requires Vault 1.16+.
|
826
825
|
"""
|
827
826
|
return pulumi.get(self, "tags")
|
828
827
|
|
829
|
-
@property
|
828
|
+
@_builtins.property
|
830
829
|
@pulumi.getter
|
831
|
-
def ttl(self) -> pulumi.Output[Optional[
|
830
|
+
def ttl(self) -> pulumi.Output[Optional[_builtins.str]]:
|
832
831
|
"""
|
833
832
|
Specifies the default TTL for service principals generated using this role.
|
834
833
|
Accepts time suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine default TTL time.
|