pulumi-vault 7.2.0a1755297899__py3-none-any.whl → 7.3.0a1755586140__py3-none-any.whl

pulumi_vault/outputs.py

@@ -17,6 +17,7 @@ from . import outputs
 
 __all__ = [
     'AuthBackendTune',
+    'OciAuthBackendTune',
     'GetPolicyDocumentRuleResult',
     'GetPolicyDocumentRuleAllowedParameterResult',
     'GetPolicyDocumentRuleDeniedParameterResult',
@@ -176,6 +177,158 @@ class AuthBackendTune(dict):
         return pulumi.get(self, "token_type")
 
 
+@pulumi.output_type
+class OciAuthBackendTune(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "allowedResponseHeaders":
+            suggest = "allowed_response_headers"
+        elif key == "auditNonHmacRequestKeys":
+            suggest = "audit_non_hmac_request_keys"
+        elif key == "auditNonHmacResponseKeys":
+            suggest = "audit_non_hmac_response_keys"
+        elif key == "defaultLeaseTtl":
+            suggest = "default_lease_ttl"
+        elif key == "listingVisibility":
+            suggest = "listing_visibility"
+        elif key == "maxLeaseTtl":
+            suggest = "max_lease_ttl"
+        elif key == "passthroughRequestHeaders":
+            suggest = "passthrough_request_headers"
+        elif key == "tokenType":
+            suggest = "token_type"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in OciAuthBackendTune. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        OciAuthBackendTune.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        OciAuthBackendTune.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 allowed_response_headers: Optional[Sequence[_builtins.str]] = None,
+                 audit_non_hmac_request_keys: Optional[Sequence[_builtins.str]] = None,
+                 audit_non_hmac_response_keys: Optional[Sequence[_builtins.str]] = None,
+                 default_lease_ttl: Optional[_builtins.str] = None,
+                 listing_visibility: Optional[_builtins.str] = None,
+                 max_lease_ttl: Optional[_builtins.str] = None,
+                 passthrough_request_headers: Optional[Sequence[_builtins.str]] = None,
+                 token_type: Optional[_builtins.str] = None):
+        """
+        :param Sequence[_builtins.str] allowed_response_headers: List of headers to whitelist and allowing
+               a plugin to include them in the response.
+        :param Sequence[_builtins.str] audit_non_hmac_request_keys: Specifies the list of keys that will
+               not be HMAC'd by audit devices in the request data object.
+        :param Sequence[_builtins.str] audit_non_hmac_response_keys: Specifies the list of keys that will
+               not be HMAC'd by audit devices in the response data object.
+        :param _builtins.str default_lease_ttl: Specifies the default time-to-live.
+               If set, this overrides the global default.
+               Must be a valid [duration string](https://golang.org/pkg/time/#ParseDuration)
+        :param _builtins.str listing_visibility: Specifies whether to show this mount in
+               the UI-specific listing endpoint. Valid values are "unauth" or "hidden".
+        :param _builtins.str max_lease_ttl: Specifies the maximum time-to-live.
+               If set, this overrides the global default.
+               Must be a valid [duration string](https://golang.org/pkg/time/#ParseDuration)
+        :param Sequence[_builtins.str] passthrough_request_headers: List of headers to whitelist and
+               pass from the request to the backend.
+        :param _builtins.str token_type: Specifies the type of tokens that should be returned by the mount.
+        """
+        if allowed_response_headers is not None:
+            pulumi.set(__self__, "allowed_response_headers", allowed_response_headers)
+        if audit_non_hmac_request_keys is not None:
+            pulumi.set(__self__, "audit_non_hmac_request_keys", audit_non_hmac_request_keys)
+        if audit_non_hmac_response_keys is not None:
+            pulumi.set(__self__, "audit_non_hmac_response_keys", audit_non_hmac_response_keys)
+        if default_lease_ttl is not None:
+            pulumi.set(__self__, "default_lease_ttl", default_lease_ttl)
+        if listing_visibility is not None:
+            pulumi.set(__self__, "listing_visibility", listing_visibility)
+        if max_lease_ttl is not None:
+            pulumi.set(__self__, "max_lease_ttl", max_lease_ttl)
+        if passthrough_request_headers is not None:
+            pulumi.set(__self__, "passthrough_request_headers", passthrough_request_headers)
+        if token_type is not None:
+            pulumi.set(__self__, "token_type", token_type)
+
+    @_builtins.property
+    @pulumi.getter(name="allowedResponseHeaders")
+    def allowed_response_headers(self) -> Optional[Sequence[_builtins.str]]:
+        """
+        List of headers to whitelist and allowing
+        a plugin to include them in the response.
+        """
+        return pulumi.get(self, "allowed_response_headers")
+
+    @_builtins.property
+    @pulumi.getter(name="auditNonHmacRequestKeys")
+    def audit_non_hmac_request_keys(self) -> Optional[Sequence[_builtins.str]]:
+        """
+        Specifies the list of keys that will
+        not be HMAC'd by audit devices in the request data object.
+        """
+        return pulumi.get(self, "audit_non_hmac_request_keys")
+
+    @_builtins.property
+    @pulumi.getter(name="auditNonHmacResponseKeys")
+    def audit_non_hmac_response_keys(self) -> Optional[Sequence[_builtins.str]]:
+        """
+        Specifies the list of keys that will
+        not be HMAC'd by audit devices in the response data object.
+        """
+        return pulumi.get(self, "audit_non_hmac_response_keys")
+
+    @_builtins.property
+    @pulumi.getter(name="defaultLeaseTtl")
+    def default_lease_ttl(self) -> Optional[_builtins.str]:
+        """
+        Specifies the default time-to-live.
+        If set, this overrides the global default.
+        Must be a valid [duration string](https://golang.org/pkg/time/#ParseDuration)
+        """
+        return pulumi.get(self, "default_lease_ttl")
+
+    @_builtins.property
+    @pulumi.getter(name="listingVisibility")
+    def listing_visibility(self) -> Optional[_builtins.str]:
+        """
+        Specifies whether to show this mount in
+        the UI-specific listing endpoint. Valid values are "unauth" or "hidden".
+        """
+        return pulumi.get(self, "listing_visibility")
+
+    @_builtins.property
+    @pulumi.getter(name="maxLeaseTtl")
+    def max_lease_ttl(self) -> Optional[_builtins.str]:
+        """
+        Specifies the maximum time-to-live.
+        If set, this overrides the global default.
+        Must be a valid [duration string](https://golang.org/pkg/time/#ParseDuration)
+        """
+        return pulumi.get(self, "max_lease_ttl")
+
+    @_builtins.property
+    @pulumi.getter(name="passthroughRequestHeaders")
+    def passthrough_request_headers(self) -> Optional[Sequence[_builtins.str]]:
+        """
+        List of headers to whitelist and
+        pass from the request to the backend.
+        """
+        return pulumi.get(self, "passthrough_request_headers")
+
+    @_builtins.property
+    @pulumi.getter(name="tokenType")
+    def token_type(self) -> Optional[_builtins.str]:
+        """
+        Specifies the type of tokens that should be returned by the mount.
+        """
+        return pulumi.get(self, "token_type")
+
+
 @pulumi.output_type
 class GetPolicyDocumentRuleResult(dict):
     def __init__(__self__, *,

pulumi_vault/pkisecret/backend_config_scep.py

@@ -28,6 +28,7 @@ class BackendConfigScepArgs:
                  default_path_policy: Optional[pulumi.Input[_builtins.str]] = None,
                  enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  external_validations: Optional[pulumi.Input[Sequence[pulumi.Input['BackendConfigScepExternalValidationArgs']]]] = None,
+                 log_level: Optional[pulumi.Input[_builtins.str]] = None,
                  namespace: Optional[pulumi.Input[_builtins.str]] = None,
                  restrict_ca_chain_to_issuer: Optional[pulumi.Input[_builtins.bool]] = None):
         """
@@ -40,14 +41,15 @@ class BackendConfigScepArgs:
         :param pulumi.Input[_builtins.str] default_path_policy: Specifies the policy to be used for non-role-qualified SCEP requests; valid values are 'sign-verbatim', or "role:<role_name>" to specify a role to use as this policy.
         :param pulumi.Input[_builtins.bool] enabled: Specifies whether SCEP is enabled.
         :param pulumi.Input[Sequence[pulumi.Input['BackendConfigScepExternalValidationArgs']]] external_validations: Lists the 3rd party validation of SCEP requests (see below for nested schema).
+        :param pulumi.Input[_builtins.str] log_level: The level of logging verbosity, affects only SCEP logs on this mount.
+               
+               
+               <a id="nestedatt--authenticators"></a>
         :param pulumi.Input[_builtins.str] namespace: The namespace of the target resource.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[_builtins.bool] restrict_ca_chain_to_issuer: If true, only return the issuer CA, otherwise the entire CA certificate chain will be returned if available from the PKI mount.
-               
-               
-               <a id="nestedatt--authenticators"></a>
         """
         pulumi.set(__self__, "backend", backend)
         if allowed_digest_algorithms is not None:
@@ -62,6 +64,8 @@ class BackendConfigScepArgs:
             pulumi.set(__self__, "enabled", enabled)
         if external_validations is not None:
             pulumi.set(__self__, "external_validations", external_validations)
+        if log_level is not None:
+            pulumi.set(__self__, "log_level", log_level)
         if namespace is not None:
             pulumi.set(__self__, "namespace", namespace)
         if restrict_ca_chain_to_issuer is not None:
@@ -152,6 +156,21 @@ class BackendConfigScepArgs:
     def external_validations(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['BackendConfigScepExternalValidationArgs']]]]):
         pulumi.set(self, "external_validations", value)
 
+    @_builtins.property
+    @pulumi.getter(name="logLevel")
+    def log_level(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The level of logging verbosity, affects only SCEP logs on this mount.
+
+
+        <a id="nestedatt--authenticators"></a>
+        """
+        return pulumi.get(self, "log_level")
+
+    @log_level.setter
+    def log_level(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "log_level", value)
+
     @_builtins.property
     @pulumi.getter
     def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -172,9 +191,6 @@ class BackendConfigScepArgs:
     def restrict_ca_chain_to_issuer(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
         If true, only return the issuer CA, otherwise the entire CA certificate chain will be returned if available from the PKI mount.
-
-
-        <a id="nestedatt--authenticators"></a>
         """
         return pulumi.get(self, "restrict_ca_chain_to_issuer")
 
@@ -194,6 +210,7 @@ class _BackendConfigScepState:
                  enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  external_validations: Optional[pulumi.Input[Sequence[pulumi.Input['BackendConfigScepExternalValidationArgs']]]] = None,
                  last_updated: Optional[pulumi.Input[_builtins.str]] = None,
+                 log_level: Optional[pulumi.Input[_builtins.str]] = None,
                  namespace: Optional[pulumi.Input[_builtins.str]] = None,
                  restrict_ca_chain_to_issuer: Optional[pulumi.Input[_builtins.bool]] = None):
         """
@@ -207,14 +224,15 @@ class _BackendConfigScepState:
         :param pulumi.Input[_builtins.bool] enabled: Specifies whether SCEP is enabled.
         :param pulumi.Input[Sequence[pulumi.Input['BackendConfigScepExternalValidationArgs']]] external_validations: Lists the 3rd party validation of SCEP requests (see below for nested schema).
         :param pulumi.Input[_builtins.str] last_updated: A read-only timestamp representing the last time the configuration was updated.
+        :param pulumi.Input[_builtins.str] log_level: The level of logging verbosity, affects only SCEP logs on this mount.
+               
+               
+               <a id="nestedatt--authenticators"></a>
         :param pulumi.Input[_builtins.str] namespace: The namespace of the target resource.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[_builtins.bool] restrict_ca_chain_to_issuer: If true, only return the issuer CA, otherwise the entire CA certificate chain will be returned if available from the PKI mount.
-               
-               
-               <a id="nestedatt--authenticators"></a>
         """
         if allowed_digest_algorithms is not None:
             pulumi.set(__self__, "allowed_digest_algorithms", allowed_digest_algorithms)
@@ -232,6 +250,8 @@ class _BackendConfigScepState:
             pulumi.set(__self__, "external_validations", external_validations)
         if last_updated is not None:
             pulumi.set(__self__, "last_updated", last_updated)
+        if log_level is not None:
+            pulumi.set(__self__, "log_level", log_level)
         if namespace is not None:
             pulumi.set(__self__, "namespace", namespace)
         if restrict_ca_chain_to_issuer is not None:
@@ -334,6 +354,21 @@ class _BackendConfigScepState:
     def last_updated(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "last_updated", value)
 
+    @_builtins.property
+    @pulumi.getter(name="logLevel")
+    def log_level(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The level of logging verbosity, affects only SCEP logs on this mount.
+
+
+        <a id="nestedatt--authenticators"></a>
+        """
+        return pulumi.get(self, "log_level")
+
+    @log_level.setter
+    def log_level(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "log_level", value)
+
     @_builtins.property
     @pulumi.getter
     def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -354,9 +389,6 @@ class _BackendConfigScepState:
     def restrict_ca_chain_to_issuer(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
         If true, only return the issuer CA, otherwise the entire CA certificate chain will be returned if available from the PKI mount.
-
-
-        <a id="nestedatt--authenticators"></a>
         """
         return pulumi.get(self, "restrict_ca_chain_to_issuer")
 
@@ -378,6 +410,7 @@ class BackendConfigScep(pulumi.CustomResource):
                  default_path_policy: Optional[pulumi.Input[_builtins.str]] = None,
                  enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  external_validations: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendConfigScepExternalValidationArgs', 'BackendConfigScepExternalValidationArgsDict']]]]] = None,
+                 log_level: Optional[pulumi.Input[_builtins.str]] = None,
                  namespace: Optional[pulumi.Input[_builtins.str]] = None,
                  restrict_ca_chain_to_issuer: Optional[pulumi.Input[_builtins.bool]] = None,
                  __props__=None):
@@ -436,14 +469,15 @@ class BackendConfigScep(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] default_path_policy: Specifies the policy to be used for non-role-qualified SCEP requests; valid values are 'sign-verbatim', or "role:<role_name>" to specify a role to use as this policy.
         :param pulumi.Input[_builtins.bool] enabled: Specifies whether SCEP is enabled.
         :param pulumi.Input[Sequence[pulumi.Input[Union['BackendConfigScepExternalValidationArgs', 'BackendConfigScepExternalValidationArgsDict']]]] external_validations: Lists the 3rd party validation of SCEP requests (see below for nested schema).
+        :param pulumi.Input[_builtins.str] log_level: The level of logging verbosity, affects only SCEP logs on this mount.
+               
+               
+               <a id="nestedatt--authenticators"></a>
         :param pulumi.Input[_builtins.str] namespace: The namespace of the target resource.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[_builtins.bool] restrict_ca_chain_to_issuer: If true, only return the issuer CA, otherwise the entire CA certificate chain will be returned if available from the PKI mount.
-               
-               
-               <a id="nestedatt--authenticators"></a>
         """
         ...
     @overload
@@ -518,6 +552,7 @@ class BackendConfigScep(pulumi.CustomResource):
                  default_path_policy: Optional[pulumi.Input[_builtins.str]] = None,
                  enabled: Optional[pulumi.Input[_builtins.bool]] = None,
                  external_validations: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendConfigScepExternalValidationArgs', 'BackendConfigScepExternalValidationArgsDict']]]]] = None,
+                 log_level: Optional[pulumi.Input[_builtins.str]] = None,
                  namespace: Optional[pulumi.Input[_builtins.str]] = None,
                  restrict_ca_chain_to_issuer: Optional[pulumi.Input[_builtins.bool]] = None,
                  __props__=None):
@@ -538,6 +573,7 @@ class BackendConfigScep(pulumi.CustomResource):
             __props__.__dict__["default_path_policy"] = default_path_policy
             __props__.__dict__["enabled"] = enabled
             __props__.__dict__["external_validations"] = external_validations
+            __props__.__dict__["log_level"] = log_level
             __props__.__dict__["namespace"] = namespace
             __props__.__dict__["restrict_ca_chain_to_issuer"] = restrict_ca_chain_to_issuer
             __props__.__dict__["last_updated"] = None
@@ -559,6 +595,7 @@ class BackendConfigScep(pulumi.CustomResource):
             enabled: Optional[pulumi.Input[_builtins.bool]] = None,
             external_validations: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendConfigScepExternalValidationArgs', 'BackendConfigScepExternalValidationArgsDict']]]]] = None,
             last_updated: Optional[pulumi.Input[_builtins.str]] = None,
+            log_level: Optional[pulumi.Input[_builtins.str]] = None,
             namespace: Optional[pulumi.Input[_builtins.str]] = None,
             restrict_ca_chain_to_issuer: Optional[pulumi.Input[_builtins.bool]] = None) -> 'BackendConfigScep':
         """
@@ -577,14 +614,15 @@ class BackendConfigScep(pulumi.CustomResource):
         :param pulumi.Input[_builtins.bool] enabled: Specifies whether SCEP is enabled.
         :param pulumi.Input[Sequence[pulumi.Input[Union['BackendConfigScepExternalValidationArgs', 'BackendConfigScepExternalValidationArgsDict']]]] external_validations: Lists the 3rd party validation of SCEP requests (see below for nested schema).
         :param pulumi.Input[_builtins.str] last_updated: A read-only timestamp representing the last time the configuration was updated.
+        :param pulumi.Input[_builtins.str] log_level: The level of logging verbosity, affects only SCEP logs on this mount.
+               
+               
+               <a id="nestedatt--authenticators"></a>
         :param pulumi.Input[_builtins.str] namespace: The namespace of the target resource.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[_builtins.bool] restrict_ca_chain_to_issuer: If true, only return the issuer CA, otherwise the entire CA certificate chain will be returned if available from the PKI mount.
-               
-               
-               <a id="nestedatt--authenticators"></a>
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -598,6 +636,7 @@ class BackendConfigScep(pulumi.CustomResource):
         __props__.__dict__["enabled"] = enabled
         __props__.__dict__["external_validations"] = external_validations
         __props__.__dict__["last_updated"] = last_updated
+        __props__.__dict__["log_level"] = log_level
         __props__.__dict__["namespace"] = namespace
         __props__.__dict__["restrict_ca_chain_to_issuer"] = restrict_ca_chain_to_issuer
         return BackendConfigScep(resource_name, opts=opts, __props__=__props__)
@@ -667,6 +706,17 @@ class BackendConfigScep(pulumi.CustomResource):
         """
         return pulumi.get(self, "last_updated")
 
+    @_builtins.property
+    @pulumi.getter(name="logLevel")
+    def log_level(self) -> pulumi.Output[_builtins.str]:
+        """
+        The level of logging verbosity, affects only SCEP logs on this mount.
+
+
+        <a id="nestedatt--authenticators"></a>
+        """
+        return pulumi.get(self, "log_level")
+
     @_builtins.property
     @pulumi.getter
     def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
@@ -683,9 +733,6 @@ class BackendConfigScep(pulumi.CustomResource):
     def restrict_ca_chain_to_issuer(self) -> pulumi.Output[Optional[_builtins.bool]]:
         """
         If true, only return the issuer CA, otherwise the entire CA certificate chain will be returned if available from the PKI mount.
-
-
-        <a id="nestedatt--authenticators"></a>
         """
         return pulumi.get(self, "restrict_ca_chain_to_issuer")
 

pulumi_vault/pkisecret/get_backend_config_scep.py

@@ -27,7 +27,7 @@ class GetBackendConfigScepResult:
     """
     A collection of values returned by getBackendConfigScep.
     """
-    def __init__(__self__, allowed_digest_algorithms=None, allowed_encryption_algorithms=None, authenticators=None, backend=None, default_path_policy=None, enabled=None, external_validations=None, id=None, last_updated=None, namespace=None, restrict_ca_chain_to_issuer=None):
+    def __init__(__self__, allowed_digest_algorithms=None, allowed_encryption_algorithms=None, authenticators=None, backend=None, default_path_policy=None, enabled=None, external_validations=None, id=None, last_updated=None, log_level=None, namespace=None, restrict_ca_chain_to_issuer=None):
         if allowed_digest_algorithms and not isinstance(allowed_digest_algorithms, list):
             raise TypeError("Expected argument 'allowed_digest_algorithms' to be a list")
         pulumi.set(__self__, "allowed_digest_algorithms", allowed_digest_algorithms)
@@ -55,6 +55,9 @@ class GetBackendConfigScepResult:
         if last_updated and not isinstance(last_updated, str):
             raise TypeError("Expected argument 'last_updated' to be a str")
         pulumi.set(__self__, "last_updated", last_updated)
+        if log_level and not isinstance(log_level, str):
+            raise TypeError("Expected argument 'log_level' to be a str")
+        pulumi.set(__self__, "log_level", log_level)
         if namespace and not isinstance(namespace, str):
             raise TypeError("Expected argument 'namespace' to be a str")
         pulumi.set(__self__, "namespace", namespace)
@@ -131,6 +134,14 @@ class GetBackendConfigScepResult:
         """
         return pulumi.get(self, "last_updated")
 
+    @_builtins.property
+    @pulumi.getter(name="logLevel")
+    def log_level(self) -> Optional[_builtins.str]:
+        """
+        The level of logging verbosity, affects only SCEP logs on this mount.
+        """
+        return pulumi.get(self, "log_level")
+
     @_builtins.property
     @pulumi.getter
     def namespace(self) -> Optional[_builtins.str]:
@@ -160,11 +171,13 @@ class AwaitableGetBackendConfigScepResult(GetBackendConfigScepResult):
             external_validations=self.external_validations,
             id=self.id,
             last_updated=self.last_updated,
+            log_level=self.log_level,
             namespace=self.namespace,
             restrict_ca_chain_to_issuer=self.restrict_ca_chain_to_issuer)
 
 
 def get_backend_config_scep(backend: Optional[_builtins.str] = None,
+                            log_level: Optional[_builtins.str] = None,
                             namespace: Optional[_builtins.str] = None,
                             opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetBackendConfigScepResult:
     """
@@ -184,6 +197,7 @@ def get_backend_config_scep(backend: Optional[_builtins.str] = None,
 
     :param _builtins.str backend: The path to the PKI secret backend to
            read the SCEP configuration from, with no leading or trailing `/`s.
+    :param _builtins.str log_level: The level of logging verbosity, affects only SCEP logs on this mount.
     :param _builtins.str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
            The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
@@ -191,6 +205,7 @@ def get_backend_config_scep(backend: Optional[_builtins.str] = None,
     """
     __args__ = dict()
     __args__['backend'] = backend
+    __args__['logLevel'] = log_level
     __args__['namespace'] = namespace
     opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke('vault:pkiSecret/getBackendConfigScep:getBackendConfigScep', __args__, opts=opts, typ=GetBackendConfigScepResult).value
@@ -205,9 +220,11 @@ def get_backend_config_scep(backend: Optional[_builtins.str] = None,
         external_validations=pulumi.get(__ret__, 'external_validations'),
         id=pulumi.get(__ret__, 'id'),
         last_updated=pulumi.get(__ret__, 'last_updated'),
+        log_level=pulumi.get(__ret__, 'log_level'),
         namespace=pulumi.get(__ret__, 'namespace'),
         restrict_ca_chain_to_issuer=pulumi.get(__ret__, 'restrict_ca_chain_to_issuer'))
 def get_backend_config_scep_output(backend: Optional[pulumi.Input[_builtins.str]] = None,
+                                   log_level: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
                                    namespace: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
                                    opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetBackendConfigScepResult]:
     """
@@ -227,6 +244,7 @@ def get_backend_config_scep_output(backend: Optional[pulumi.Input[_builtins.str]
 
     :param _builtins.str backend: The path to the PKI secret backend to
            read the SCEP configuration from, with no leading or trailing `/`s.
+    :param _builtins.str log_level: The level of logging verbosity, affects only SCEP logs on this mount.
     :param _builtins.str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
            The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
@@ -234,6 +252,7 @@ def get_backend_config_scep_output(backend: Optional[pulumi.Input[_builtins.str]
     """
     __args__ = dict()
     __args__['backend'] = backend
+    __args__['logLevel'] = log_level
     __args__['namespace'] = namespace
     opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke_output('vault:pkiSecret/getBackendConfigScep:getBackendConfigScep', __args__, opts=opts, typ=GetBackendConfigScepResult)
@@ -247,5 +266,6 @@ def get_backend_config_scep_output(backend: Optional[pulumi.Input[_builtins.str]
         external_validations=pulumi.get(__response__, 'external_validations'),
         id=pulumi.get(__response__, 'id'),
         last_updated=pulumi.get(__response__, 'last_updated'),
+        log_level=pulumi.get(__response__, 'log_level'),
         namespace=pulumi.get(__response__, 'namespace'),
         restrict_ca_chain_to_issuer=pulumi.get(__response__, 'restrict_ca_chain_to_issuer')))

pulumi_vault/pulumi-plugin.json

@@ -1,5 +1,5 @@
 {
   "resource": true,
   "name": "vault",
-  "version": "7.2.0-alpha.1755297899"
+  "version": "7.3.0-alpha.1755586140"
 }